last executing test programs: 37.121836028s ago: executing program 3 (id=995): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x38, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT={0x8}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x38}}, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000200)="233b1ce65c3f6e0f24e0d828cc87702db59b51497be41a9cabf6a3ed9cccbf9f4adb4f5868cfc36cbe17b38625cf438cb89b3bdcba77958ff25c34e8768ea63fc5ecb5f4a926585e0f4919647f100dc6505c9e5d54e88aac33d80aaad6404e2886", 0x61}], 0x1, &(0x7f00000005c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x108, 0x800}}, {{&(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000780)="b8ef35018582e4337a4e8980069416d18697d3179a41a5e2566fdeb2ae4bd1ecf62697fa2d0f539e9402d4eb78c33340e29b9f63466f1725a6301ab3c7d33ccc0f84c7b89ab29bd1a0c357274c4bd633cb3ef6664a8039367f87bbd21d862a416e1b82dadd29d99560e1bce8d25019cf7e09c309048d7816f0e0c3d1c290c5e6ff0e643a13", 0x85}, {&(0x7f0000000840)="e2472360215ce35ea8f268451bcc1645f6b20bfc90918cadcf52f7a252441ff69eb682ce722d0e2f7f9910a1f7db323b354e5b95bc908a885cbae317ff31800b91d9cd5612571d3225eaf16dad17f7f39a1cbf7ac44e79de49bd3a2196240efcecaafea77ed8e3a98cde82f0832b64713a12e4345eb0545698229e58b6434b24dd6c60a4c95116649e88815ab0db1156728ef22c63231095d2bd16bc6e95435f83de697b828c93f979859c5dd82fa4d7866380ec979bab07a776b8dc8d306a03a4e084638543e2f960fb40f0151a559cc67457d91a7b9c7c0c7397091901f9590299b5a0", 0xe4}, {&(0x7f0000000940)="e4db584f91fcc5d05977527302499c4e7f454e74704678858e6f2b32f6dc513046273413a11d3d4c960b17e165e0b61425e7cf976d3ca2c53ec2503826b49bdc8eaae00efdbdf6186d955e53cef7b07ea37bc1bf4f702d75b99763dcd8d904d6791acdc98610b17c43", 0x69}], 0x3, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90, 0x40000}}], 0x2, 0x24008050) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@remote, @in6=@private1, 0x4e24, 0x3, 0x4e20, 0x3, 0x2, 0x90, 0x60, 0x5c}, {0x8, 0x5, 0x7, 0x99, 0x7f, 0x4, 0x6, 0x6}, {0x80000000}, 0x8000, 0x6e6bbc, 0x0, 0x1, 0x2, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x0, 0x1, 0xff, 0x7, 0x0, 0x5}}, 0xe8) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1001) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x4, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$key(0xf, 0x3, 0x2) getuid() getgid() splice(r3, &(0x7f00000000c0)=0x7ff, r3, &(0x7f0000000140)=0x652eff1c, 0x3, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x2, 0x1e6, [0x0, 0x80000, 0x0, 0x0, 0x1, 0x9], 0x0, 0x0, &(0x7f0000000300)=ANY=[]}, 0x78) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a000000000000d74619edc700000000000000004cbd302b0000000000fa000000000022", @ANYBLOB="1101"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x3ef, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[@ANYBLOB='-7'], 0x9) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000800010000000000340004800500030000000000050003000000000005000300000000000500030000000000050003000000000005080300000000000800020002000000"], 0x58}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x2000) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYRES64=r2], 0x80}, 0x0) 36.319924979s ago: executing program 3 (id=1000): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x508, 0x0, 0x18c, 0x203, 0x4d000000, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@getstats={0x1b, 0x5e, 0xdc8eb964e0543ae5}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x1, 0x13, &(0x7f0000000000)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000000}, {0x85, 0x0, 0x0, 0x70}}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x8}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000007c0)=ANY=[@ANYBLOB=';\x00\x00\x00\x00\x00\x00\x00:']) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r5, 0x29, 0xc9, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000c3c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x41, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket(0x40000000015, 0x5, 0x0) connect$inet(r9, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r9, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x0, 0x0, 0x0) 35.53687165s ago: executing program 3 (id=1004): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x45, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101201, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x9, 0x400, 0xd0a6}, 0x10) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000120009092abd70000000000000000001"], 0x4c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f0000000340)={&(0x7f0000000300), 0x0}) r6 = dup3(r4, r5, 0x0) ioctl$MON_IOCX_GETX(r6, 0x4018920a, &(0x7f0000000280)={&(0x7f0000000000), &(0x7f0000002e40)=""/4086, 0xff6}) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$igmp6(0xa, 0x3, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x780348a1b160dfdb, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x47fa, 0x0, 0x0, 0x0, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r9 = socket$inet(0x2, 0x3, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r7, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002780)={0x1c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0) 32.259938422s ago: executing program 3 (id=1014): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x7, &(0x7f0000000200)=0x2, 0x4) r3 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10) setsockopt$inet_int(r3, 0x0, 0x4, &(0x7f0000000080), 0x4) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r5, 0x1000000) syz_emit_ethernet(0xa2, &(0x7f0000000300)={@local, @link_local={0x1, 0x80, 0xc2, 0x10}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x6c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x1b, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0xa, 0xf989, "9a39e50f04a0"}, @window={0x3, 0x3}, @generic={0x10, 0x10, "00f2daa800000000000000080000"}, @sack={0x5, 0x12, [0x0, 0x0, 0x0, 0x0]}, @mptcp=@mp_fclose={0x1e, 0xc}, @mptcp=@synack={0x1e, 0x10}]}}}}}}}}, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x1, &(0x7f00000005c0), 0x4) 30.879903948s ago: executing program 3 (id=1015): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_MCE_KILL_GET(0x22) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x80}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r6, 0x402c542c, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x19, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x6456}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x7, 0x0, 0x7, 0x0, 0xa, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x7fff}, @map_fd={0x18, 0x3}, @call={0x85, 0x0, 0x0, 0x61}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffff74}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r9, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x1, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"272be5806cd46d7b9ff797a0"}}, {0x0, 0x0, 0x0, 0x0, @time={0x8000, 0x1}, {}, {}, @result={0xbac, 0x28}}], 0x70) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 26.722500507s ago: executing program 3 (id=1023): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{}, {}]}, 0x10) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x0, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x40, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0x0, 0x0, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000098c0), 0x0, 0x0) setpriority(0x0, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}}, 0x0) listen(r1, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004c0000440000000000069078ac1414bbac1414aa441c0a010000000000000000ac14140000000000ac1414000000000000004e2231a4e4f220aab431e93386bdfbcc88c3ca9c6eb461ea191c32dccb058b1c657e56cd7169a62ef2a04be99818ab088651a193c14b2ea4b7a19adf86ecbba7", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780000"], 0x0) 14.980006499s ago: executing program 0 (id=1051): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x3b, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x88H'}]}]}, 0x24}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0x2, 0x103, 0x63, 0xffffffffffffffff, 0x1f, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x0, 0x6, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='jbd2_handle_stats\x00', r3}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x118) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x1, 0x1}]}]}, {0x0, [0x2e, 0x30, 0x2e]}}, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getsockopt$inet_mptcp_buf(r4, 0x11c, 0x3, &(0x7f0000000ec0), &(0x7f0000000f00)) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r9 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r9, &(0x7f0000000380)=[{{&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000580)="a905000000000000000100338bb335529f56ed5c0e5d4da8efbebde700000000e5c064c6", 0x24}], 0x1}}], 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@ipv4_newaddr={0x48, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_CACHEINFO={0x14, 0x6, {0x6, 0xfffff918, 0x1000, 0xfffffffe}}, @IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_CACHEINFO={0x14}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x9b}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x2, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8}]}}]}, 0x38}}, 0x0) socket(0x10, 0x803, 0x0) 13.948534028s ago: executing program 0 (id=1056): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000010000000000", @ANYRES32], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000000040)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r7, 0x40086610, &(0x7f0000000180)={@id={0x40000, 0x0, @b}}) 11.094989258s ago: executing program 0 (id=1057): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, 0x0, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000700)=ANY=[], 0x31) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000300), 0x12) timerfd_create(0x6, 0xbec95532d4019682) io_setup(0x3, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000280)={0x0, 0x2}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000500)) sched_setscheduler(0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000580)={[{@fat=@dos1xfloppy}, {@nodots}, {@dots}, {@nodots}, {@dots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@fat=@showexec}, {@nodots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x7fff}}, {}, {@dots}, {@fat=@nfs}, {@nodots}, {@dots}, {@fat=@nocase}, {@fat=@gid}, {@dots}]}, 0xfd, 0x1bf, &(0x7f0000000680)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$NBD_SET_SOCK(r7, 0x80047213, 0xffffffffffffffff) pwritev(r6, &(0x7f00000002c0)=[{&(0x7f00000010c0)="aabf75aa76c3ada74bf44ac8955581057e1778604df77693559ffad6cc78741642e0f21c507a79c29daba641a268ce55abe36b0fa2268a6fffbb8016b62549418cd3f951d1850854ec210ea8034faf1626e616a36c6bc0c9b4372b0e28213019e3db182fd0858a17e87ff7a5dddc89594225d78441a533082ed3e8047f12269778c40721cacf71f32543874a345938224419dce2fd44b7a62c1d0d98a0cf23c2fc16894ba549a2edfb7e300f14c30f64429d25ea9b26b9fbf839fb039e46bc8dcf12d7ce62c8cbc9f0d5ffff56a577edd86949d10e6e37e31297ce4e5585bc3d3ac00acbeec51d81", 0xe8}], 0x1, 0x8, 0x5) 8.713017511s ago: executing program 2 (id=1060): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket(0xa, 0x3, 0xff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x1d, 0x0, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x20000004) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000100), 0x18) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xb8}}, 0x0) socket$igmp(0x2, 0x3, 0x2) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) connect$can_j1939(r4, &(0x7f0000000140), 0x18) writev(r4, &(0x7f0000000240)=[{&(0x7f00000001c0), 0xfffffef1}], 0x1) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x2000010, &(0x7f0000000f40)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB=',uid=ignore,utf8,anchor=00000000000000000001,novrs,shortad,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c756d61736b3d30300000000030303030303030303030303030303030302c6769643d69676710b01c1f9d6e6f72652c6e6f6164696e6963622c756e64656c6574652c6e6f7672732c6c617374626c6f636b3d30303030303030303030303030303030303030312c7569643d69676e6f72652c6e6f7374726963742c616e63686f723d30303030303030303030303030303030303030352c766f6c756d653d303030303030386ee5eef62188e3303030303030303030308930302c756e1202682e87dc70c6e7ea5ddae3187388c671a93c7e"], 0x1, 0xc43, &(0x7f0000000200)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) pwritev2(r8, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) 8.532350215s ago: executing program 0 (id=1063): sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb8100140086dd6000104000140600fe88000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="3e80d0ff907878df"], 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x0, 0x3}, 0x6) recvmmsg(0xffffffffffffffff, &(0x7f0000004500)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000580)=""/46, 0x2e}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r9, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x1}, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0}}) ioctl$AUTOFS_IOC_ASKUMOUNT(r7, 0x80049370, &(0x7f00000001c0)) sendmmsg$sock(r7, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r8, &(0x7f0000000040)=""/60, 0x3c, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000000c0), 0x2c8, 0x0) 6.470600054s ago: executing program 2 (id=1066): r0 = socket(0x40000000015, 0x5, 0x40000) r1 = memfd_create(&(0x7f0000001440)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\xff\xff\x10\x04\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5U\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:Z>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262-\x00\x00\x00\x00\xc8X\xdaNz\x0eu\x8f\x01\x00\x00\x00\x80\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x00\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\xf1\x0e\xccq*\xabM\x97}\x18\x8c5\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[R\xc36b\xa2]\xed\xe8\xb0\xfa\"\xa2\xd27)\xd5yQ\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\x00\x00\x00\x00\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*\x7f]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9bW\x02\xd2K\xba8~\x83\x19\xfa\xf7\x9b\f\xfa\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x00P\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XIkh\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\x05\x00\x00\x00\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\xf6]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1l 1\x8d \xc1\xab\x19\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00KT2\x1b\x16=\x10\xd3\x9a\xf0\xb7;\xc0-\x9c\xac\xb9~\x9a\xdc\x15\x8d\xee*\x17\x82\x1e\xd2m+$\xb4\x8cOJ0\x85\x7f\xa0\x7f\xa8\xcc#\x0e\xa4\x86\x0fmO\xca\xa4\xd2\x9a\x16\xbb\x16\xb1\xd46l2ak[\xec\xe33\xae=\xaf\xffU)\x1fQ`\x81\xa2:\xf61\xafQ\xa6V-K;\xc50\n,\xb1j\x9b\x8f\xd0\xbd|\xbd\xb1+\x06\x98\xd4\x04\r!2\xe8\x16?H\x96\x182(\xcf\xf2\"\xf7.\x85\xc1-\xa3)|\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x5) fcntl$addseals(r1, 0x40a, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x8202, &(0x7f0000000080)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@grpid}, {@errors_remount}, {@noblock_validity}, {@block_validity}, {@minixdf}, {@noauto_da_alloc}]}, 0x0, 0x5fe, &(0x7f0000001040)="$eJzs3c9rHNcdAPDvzEqqZKuVXYqpTUsFPdhQrB+uqduebF/qg6GG+lBCDhaW5AivbGHJEDuGyJBDAgmEkGsIvuQfyD2YXHMLgSS3nANOCA45JMEbZnbHXla78kbWaiTP5wO7eu/NaN/76ulp3uzo7QRQWZPZUxpxOCIuJRETbdvGo7lxsrXfw+/uXM4eSTQa//s2iaRVVuz/qPV1f/aURIxGxKdnI35f21jv6q3bV+fqjaZXI6bXllemV2/dPr60PHdl4crCtdkT/zx5auZfsydntyXOIq5z5//7p7dee+kfi5/VjydxOi4OvzIfHXFsl8mYjEetENvLhyLiVJbo8nPZa4oQkpLbwdbUWr+PwxFxKCailueaJmLpzVIbBwxUoxbRACoqMf6hoop5QHFuP4jz4N3swZnmCdDG+Iea743EaH5utO9h0nZm1DzfPbAN9Wd1/HznyHvZI3q8DzG0DfX0sn43Iv7YLf4kb9uB/F2cLP400rbvy9IzETHS+lmkW6x/siO/079/vyb+9n7I4j3d+pqVn91i/WXHD0A13T/TOpCvZ7knx79sZljMf6LL/Ge8y7FrK8o+/vWe/xXH+9H8PfK0Yx6WzXkudH/J4c6Cr944906v+tvnf9kjq7+YC+6EB3cjjnTE/3o+mUse93/Spf+zXS71Wcd/Pv/mXK9tZcffuBdxtOv5z5MrWllqem15pSjruD45vbhUX5hpPnet46NPXvygV/1lx5/1f/SIf7P+z8pW+qzjwwv3lnttG39q/OnXI8nFPDXSKnl5bm3txmzESHK+tUtb+YnN21LsU7xGFv+xv3Yf/5vEn3f0ep/xr/z/6sNe2/ru/w1/VXKPGn22oZcs/vkt9v/bfdbxwws3/9xRNFYkNot/7BljAwAAAAAAgKpJ82uwSTr1OJ2mU1PNNbx/iH1p/frq2t8Wr9+8Nh9xLP9/yOG0uNI90cwnWX629f+wRf5ER/7vEXEwIt6tjeX5qcvX6/NlBw8AAAAAAAAAAAAAAAAAAAC7xP7W+v/iPtXf15rr//uydmjArQMGbpA3mAN2N+Mfqisf/1u9gyuwpzn+Q3UZ/1Bdxj9Ul/EP1WX8Q3UZ/1Bdxj9Ul/EPAAAAAM+lg3+5/2USEev/HssfmZHWtuFSWwYMmjEO1VUruwFAaR5f+rf8Hyqnr/n/j60PBxx8c4ASJN0K88lBY/PBf7/rdwIAAAAAAAAAAAAAA3D0sPX/UFVpfFx2E4CSPMP6fx8dAHucj/6H6nKODzxtFf9orw3W/wMAAAAAAAAAAADAjhnPH0k61boF6Hik6dRUxG8j4kAMJ4tL9YWZiPhdRHxRG/5Nlp8tu9EAAAAAAAAAAAAAAAAAAADwnFm9dfvqXL2+cKM98dOGkuc7UdwFdbe0pz0Ryc5XOhYRuyH2wSSG2kqSiPWs53dFw26sxq5oRpo3o+Q/TAAAAAAAAAAAAAAAAAAAUEFta4+7O/L+DrcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHbek/v/bz2RPOV1yo4RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANibfgkAAP//4DE4gw==") ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000300)={0x0, r1, 0xf, 0x80000001, 0x6, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000791207000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socket$inet(0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r6 = dup3(r5, r4, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x71, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x17) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000100)={r7}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000080)={r8, 0x0, 0x0, 0xfffffffa}, 0x10) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000440)={0x0, 0x1, 0x6, @remote}, 0x10) syz_io_uring_setup(0x640a, &(0x7f00000035c0)={0x0, 0x0, 0x40}, &(0x7f0000000380), &(0x7f0000003580)) socket$nl_netfilter(0x10, 0x3, 0xc) 6.469639113s ago: executing program 0 (id=1067): syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="04060300c900d132a83eeda591fcf6bde62616bb646d54ab0d839493fd3f3adba21d8f897363e614c7b5cc471216f6b3aa60240a3a379f6e67f8d19693d03d7fc185ab695a802840a87820a3d4211d94d4fffbe7cf30ed67935dd777877b13a21f078719c4f44c23e6f0c3b83dbca164e4c659387af2d1ed7be735faf9f4c626de7bcee7a740bc785d74d3655923019202766fe09ca3a3576af2eee15577935bdecf69"], 0x6) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d3"], 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4008af03, &(0x7f0000000300)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x9, 0x9}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r2}, {}, {0x46, 0x0, 0x2, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = epoll_create1(0x0) r6 = getpid() kcmp$KCMP_EPOLL_TFD(r6, r6, 0x7, r5, &(0x7f00000000c0)) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xff79c6dd88e44bbb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0xfffffff8}}}}]}, 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$ttys(0xc, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r9, 0x0, 0x10, &(0x7f0000000140)="170000000000020000ffbe8c2ee1768814002b000203000afdff020657fc5ad90200bb6a880000d6c9db0000db0000eb00df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd30500000000", 0xb8) sendmsg$inet(r9, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000240)="0400", 0x2}], 0x1}, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) 6.469082463s ago: executing program 1 (id=1068): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000010000000000", @ANYRES32], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000040)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r6, 0x40086610, &(0x7f0000000180)={@id={0x40000, 0x0, @b}}) 6.127901539s ago: executing program 4 (id=1069): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020202000900030073797a32000000000900010073797a30000000001400020032"], 0x40}, 0x1, 0x40030000000000}, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r7 = openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r1) socket$inet6(0xa, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000017000000080001007063690011000200303030303a30303a31302e300000000008000300000000fd07000b"], 0x50}}, 0x0) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES16=r6, @ANYRES64=r5, @ANYRESDEC=r8], 0x150}}, 0x0) sendfile(r6, r7, 0x0, 0x7ffff000) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r11, 0x89f9, &(0x7f0000000080)={'sit0\x00', 0x0}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r12) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="200000005e00250e000000000000000008000000", @ANYRES32, @ANYBLOB="080045f664f5"], 0x20}], 0x1}, 0x0) 5.774383197s ago: executing program 4 (id=1070): r0 = socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000840)={'#! ', './file0', [{}, {0x20, 'cgroup.controllers\x00'}]}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6802000000050104000000000000000000000000540201000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000170cd769fb72887e87d85ffa0700a8c7636e950a2a83dbdd1a0000000000000013f6321d3ac4d2e71527562bfa9aab000b42729c1910dfe20ee7557ea577902600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004a25ada69300"/583], 0x268}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r6 = syz_io_uring_setup(0xf02, 0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, {0x0, r9}}) io_uring_enter(r6, 0x47fa, 0x0, 0x0, 0x0, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0xc008, &(0x7f0000000e40)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRESOCT, @ANYBLOB="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"], 0x41, 0x2f5, &(0x7f0000000380)="$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") unshare(0x2040400) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r10, 0x0, 0xeffdffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) 5.772141477s ago: executing program 0 (id=1071): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080)=@int=0x1, 0x4) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x4) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xb989) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup(r3, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x2c, 0x0, 0x8}, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r5}}, 0x18) 5.20762339s ago: executing program 1 (id=1072): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) dup(r0) syz_io_uring_setup(0x4072, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = syz_io_uring_setup(0x12d, &(0x7f000001ddc0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000007c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x3e30c78e1247951c, @fd_index}) io_uring_enter(r3, 0x6957, 0x0, 0x0, 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r9 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r9, 0xc0045009, &(0x7f0000000080)=0x8) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r10, &(0x7f0000000080)={0x2020}, 0x2020) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r13, r14, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r11, 0x0, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=ANY=[], 0x20}}) io_uring_enter(r12, 0x47f6, 0x0, 0x0, 0x0, 0x0) 4.852214907s ago: executing program 2 (id=1073): socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x17, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/18}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000140), &(0x7f0000000180)='%-010d \x00'}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200), 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@ifindex, 0x2f, 0x0, 0x8, 0x0, 0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0]}, 0x40) ioctl$TCSETSW(0xffffffffffffffff, 0x5412, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "07c100000000010800"}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) landlock_create_ruleset(&(0x7f0000002f80)={0x800}, 0x10, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2a0, 0x0, 0x0, 0x148, 0x168, 0x148, 0x208, 0x240, 0x240, 0x208, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x0, 0x0, 0x41}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@statistic={{0x38}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) ptrace$ARCH_SHSTK_LOCK(0x1e, r1, 0x3, 0x5003) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 4.679715661s ago: executing program 4 (id=1074): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x40c040, &(0x7f0000000740), 0x3e, 0x507, &(0x7f0000000080)="$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") r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000680)={{}, {0xe}}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) mkdir(&(0x7f0000000100)='./file0\x00', 0x175) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x2}}, './file0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x5, 0x40, 0xfa00, {{0xa, 0x0, 0x8001, @empty}, {0xa, 0x0, 0x0, @empty}}}, 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000024c0)=ANY=[@ANYBLOB="050000000000000069113200000000008510000002000000850000000500000095000000000000009500c4050000000077d8f3b423cdac8d80000000000000102be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d753507866907dc6751dfb265a0e3ccae669e173a649c1cfd6587d452d6453559c3421eed73d5661cfe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff050011bbecc2f4e6779af2551ce935b0f327cb3f011a7d0660d1a13ed38ae89d24e1cebfba2f87925bfacba83109751fe6c0541cd027edd68149ee99eebc677d6dd4aed4af7500d7900a820b63278f4e92895614cd50cbe43a1ed2526814bcf11887d8dc91dd6f469f9740bf3a73b100000000000009d27d753a3066a096e9e086cea20e0000b6670c3df2660900000000000000447c106a08893ed20fa7a050fbbef9e326e827e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada127414d0b2877ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000000000000000000000000000000000000000000000000000000000000000000005233226ee7b4de17ff24000c52f4ebf1c893bb97734a83584898eccb26f3b789cfc4cd985fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4e48f35530a0af4aac9d07713f05de969c38331973d55a17690b6f7f9ccbe44b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cfde6c25a3836978d2efa286a87f7a32417f1b825a16857aa54a859989d893ad4bf9180ca85ed3ee19843e13f642af0c90f8fca010812ccb3758ec9afe9f8db501b4061f60f06e8410c96edd9701a64657d500744a7184bc5828b2f978f2f9eeb3983c4ac41b154eebfe64d2c2ef1816cb11565679eb6640b32a49fd991811dfb258713624a757a6cc4fff48a27dab16ebbd8405a1abd85e0e946b9fe8e1dfa80eddb3ed496aa46b5eea7c7119f09e2d9d48a1d7367611d7c68cd1cd02074d6e38074230517d2d4424de5897bd110e6294bcfe98000bfa6e9919b956fa369d5e652e6cbe58d52990e65c6b7aac9553ca7d273d7a43e536be2f212f8788c2d1b3929f466c1ef408b2a8e71029a65f2a2f21f710acfd1b9f9ce56114a69e6f9e2861a8a56d9d604a56e2dbcd2fbe9cb4db180a145785f94b27a380dffa612eee33056cd0824374f1bf2f89de1bb4fa70d6c8000000001342faa8040807c0276b5ac9647e7491c1e21cd5bfdce4ddcc1b7f50a4a51d87fb0000000000000000000000000050b5d4375adcef4b0365e0a910a1d3ff536f18efaa6d163fbeb8c92072153d8d10f30884b8b15bf441a42935eaaef2d9a277a83fb74c00a041d97fb2f23223cc784be3f11f9992225ab0edbe92b25c5c41905583108a4b68984338a916d3ea05ecca45f99beecf56341075ed4387159b563501166f7a8abcbcd38c5852ef7f624ca8a2f91a17304a92919f66bc72534c0e197679796a667d987abea7a09d263988539b0d89bef76cac0f3d3ea4a139e108a4bdc148695a7518e425dba2b8acaa1ef7c736c88cea7c93bbc366ec3d8a5897a5e40442772784ffe1808e6335edb6fe1125c548698fcd02c74945ab7dffa618ff39fb89b633b74b5572d41dbac30051f5b263ed9a5a590d45c6eb37a059f9117a9923b4f8e78bba39b6801d2a57bea49bfe546c765d8a52a6bec46a26c022f7508ddd6c7e6161ba51408ba085fb506fd53173d1bf33d3a633568888bfc657f524a156dd54bcb16355c9a4200a7afcadff35f7e97ce8f63aa4f5686dbfab1d13128cde60a40a5721b281ee2d8f4e81c2673e159dd4d8cc11211865a9063b85dab4dc66898ff30b1116aed68403133e79abfbb29cdda78328755c282ff47ce9cbbae753da77a38a5b931cee09c8ebf7974862266f6ee2c3e19833869ba4ef05a99d851aa52d721ee9166e11e50da5ca162823d0c8f89cadac1b1d8bf9134408383104f4a20279fc249b1bfdab79878013773945056304a93179d0d3d6425eede4762b417c1ee8029af2d0b81f6aa2df229dcdaca1e97b184e267690ddd5b90999ef19b5b41d72afdd704c926d9c4a72f2886f73a9e71e5df7403ef6d965e60c938b856edfab81af093f650341de767e3b53fd000000002f764fd240d9fb6eaf864db2b58069eded19fcc4a229c72ee14d424f3d388e3c9d5af2e49f374f7915ee31a3e6c5a0ecfc4e8468d0f2955726d30eedaafc0a251335961796c1e9c2d674509c9eb1062cbe6f68a0323330edbd5224ad7b003e91d8b89e2552cb35c39d2b81addf19be15f455d592dc67f8eb0c631ca7b24d972f5fbb462367738832b7b19663f8cc2ca56e49bad4bd791a8277dfe2261265679b383ab4455fcd02d4686c4fa30d05a53b8e3a228947a16e9329bc9ce25659ad305b1f849128a573aa6fc639de8245067893278df9e1e60a5acdfea4d60415a1beafc4476bd5eaf3d55f05279b63fff168419ad0415bcc3c94f36a9ad19c8bad110eae5dac5bbd9ff33a2e0fb32b9ed37f6193fccb131d45e244479cb123140e0a3ddc39b5546f1e9534133894d95b5de60dbbbcd2936a56a8d42c275385319d11ad49ffd786d187c63a1b2f32d216655ab774d07092044fa526bbd9e7d810421d186e985edcdcd39ec406fb21f94abe57fbdd63d223778a0fd81c17ac2249eb17f1b6e81688e205b657140a77519bcc5f5e7934b724b6f80d065eaa55d017f5b4900c038cd9adbf0ed8e2b05ee372be51147728438c9f980f38293cbb470f722a2b303f9f5ca59ec778733b77a07c97f7faa345d1ac0a37da7649cc4b6ab82e9d1cd2e0834b05b51679d5081504038ca0ef0ff01dc554548f86cd1e3eeaee4564f9345d1112ae364ed7ad4511a82fb82b0e9569ca901337058c534f891bcdc81f8756306f9223f556"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x468, &(0x7f00000004c0)="$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") chdir(&(0x7f0000000080)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) bpf$PROG_LOAD(0x5, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)) 4.144538152s ago: executing program 1 (id=1075): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000007c0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) getpid() sendmmsg$unix(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@abs={0x1}, 0x6e, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}}], 0x2, 0x0) fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000005b00)) r5 = open(&(0x7f0000000000)='./bus\x00', 0x60342, 0x0) r6 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r5, 0x2007ffd) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = dup(r7) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f00000000c0)={0x2, 0x0, [{0x491}, {}]}) sendfile(r5, r6, 0x0, 0x1000000201005) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080), 0x208e24b) r9 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r9, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) 2.807496275s ago: executing program 1 (id=1076): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000200)={0x0, 0x3, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f905ecc2"}}) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000019640)=""/102400, 0x19000}, {0x0}, {&(0x7f0000032640)=""/208, 0xd0}], 0x3, 0xfffffffd, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x50, 0x0, &(0x7f0000000080)) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x88, 0x0, &(0x7f0000000140)="2b7393b7c6347cd49978d5023a81022d1e7baeea09c5d463b04397f7a66a0f0b769bc097d48d09754d7e15e59224486b3df2c3fc8b3379a1a30fee142bb1a32d4c3b32006571f5de9d846e7e8b8e64c79a66e2ba19f7eca5d0e0517dcd4eba1ab882af481e477e362ceb1fd11c9d50b5e3afd7f60aa6881b2681c53ee87badeeba28eba948324721"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket$inet(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000), 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="40e47dcb003e4932a1", 0x9}, {0x0}], 0x2}}], 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000104050000000000ef0000ff7f0000000000000002000000d5381253b65054649383407182a65bb03cf023d562572ff6e4f05bee4312183d2d8c550ee2a15a768a23d6e30e2ef0e61812db17edf87b2aa5b240cf48a9e52a0b8f37431d4949a051516555280386efc24f5e86cdf675b89ce54e7a580b7ac283e92b63cb0eab9f6643a19ec192ca0f4b5212e58581c13582d98f9b682f9f65e509fab695eee3e87fe6d4f0049a643d40362b65c4c83c196cf2c9c44071e00eb200abba5b5e922d2ad800bca4ba6ff08407a2cbb014fea0cddd2b5b01c5664659d2860995828138ad168147aa951ee25ef6f975af9cf45aaa59488b083a4c4bd599c3f5cc5f8b9d8a35abd6edff01e3014933c1c0221b21a85eb4e303aa9693ffffa38d0530023ac1ee9f82b100b87ba38345efa9d901aaa63d0328ba40fd5520b4e68e7f2ac61309b070b9876c991ebff28156062e2bdd1970bbaae0a38ef6554330cb836661a828b7a004f9df6eda45202ca5b97345c4a9c1a9f5d8c11a84"], 0x1c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6800000000010000000000000000000000000004300001802c0001801f000300fc0200000000000000000000000000000000040000000000000000000000000000000000180002800600034000030000b00de0c06b528f6287daf1230c0002800500010000000000983a3aeef3f36818ee4d14bf131c998c0c15e6a6f7c11889d1a0ffee414e9459b2ed788cbeada144743505067dc1250577eb33eeb128cd5c319a691d7468df4de30e7a79034e4f1eb077772419806a882bdcaee0b2ab7e799a1d07b8998a286e097384e5a767516321a7ed56"], 0x2d}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x64, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88ad9925}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}, @IFLA_GENEVE_TTL={0xfffffffffffffcfd}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x64}}, 0x0) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r10 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) sendmmsg(r10, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmmsg(r9, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2.806981355s ago: executing program 4 (id=1077): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = epoll_create1(0x0) r1 = eventfd2(0x0, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000000600)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r2, &(0x7f00000004c0)=ANY=[], 0x10) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) fstatfs(r0, &(0x7f00000002c0)=""/133) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000240)={0x50, 0x0, r5, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000041c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000170000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$lock(r6, 0x24, &(0x7f0000000200)) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="0f060f20e06635000004000f22e064660fc7730c0f0f139066b98b03000066b83d32000066ba000000000f30ba4000ed0f0ff1a0b8ae008ee8660f38800f3e640f01cb", 0x43}], 0x1, 0x0, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r11, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {0x2, 0x3000}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, 0x0, 0x24040000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) sendmsg(r2, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, &(0x7f00000027c0)=[{0x28, 0x10d, 0x6, "651e1aae026eab158098f153eda3b3df9deb"}], 0x28}, 0x8000) 2.363856299s ago: executing program 2 (id=1078): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x18, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0xe00410, &(0x7f0000000700)=ANY=[@ANYBLOB='nodecomp\a\x00e,decompnsd=\x00'/36, @ANYRESHEX, @ANYBLOB="2c6e6c733d69736f383835392d310000000072726965722c00bcd0f0b5c4e2957974ff5d7ea3c3dcee087e4983684e8a4c4e4e87b134e30ce77162b12885b964b3506ff3eae0f3599447b17861d19be78079e5dd7bdc7f1eb36e31ac14de48349767164f5f6431bbdeaef96a4f2bce64b5cfa76ce3a2c4302374bc5535d7e2eb8dfb2e5d58a37b7e37836597c21f51bcdf6df4cad825cfd9ef5ee9e89e04b15cd3cea9e152d67b9a7eedc5dfe6d85a3ce7c342da8cc969b552197cb8bcc4a1009f38f4a85b7c742101ba5bc03115feca2b994c699812"], 0x6, 0x635, &(0x7f0000000c80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000080018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001800000000000000000000000000000018000000000000000000000000000000bf91000000000000b7020000010000008500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x8a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r5, &(0x7f00000001c0)=""/4068, 0xfe4) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0x21, &(0x7f00000000c0)=0xfffffffd, 0x4) recvmmsg(r6, &(0x7f00000032c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/144, 0x90}}, {{&(0x7f0000000840)=@un=@abs, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/166, 0xa6}], 0x1, &(0x7f0000001340)=""/220, 0xdc}, 0x6}, {{&(0x7f0000001440)=@nfc, 0x80, &(0x7f0000000680)=[{&(0x7f0000005800)=""/4084, 0xff4}, {&(0x7f00000008c0)=""/165, 0xa5}, {&(0x7f0000000280)=""/43, 0x2b}], 0x3, &(0x7f0000006800)=""/4106, 0x100a}, 0xfff}], 0x3, 0x31, 0x0) syz_open_procfs(0x0, &(0x7f0000000400)='net/mcfilter6\x00') syz_open_dev$tty20(0xc, 0x4, 0x0) 1.552980691s ago: executing program 2 (id=1079): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r0, 0x400448c9, &(0x7f0000000000)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1c22050000000bd32052f2"], 0x0}, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r2, 0xc0404809, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000003c0)=0x3) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='wlan1\x00', 0x10) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x78, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x78}}, 0x0) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002}, 0x0, 0x0) getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x3, 0x0, &(0x7f0000000140)) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0x4) connect(r3, &(0x7f0000000200)=@nl=@unspec, 0x80) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r1, 0x0, 0x36, 0x200007fd, &(0x7f0000000380)={0x2, 0x4e23, @empty}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x1, 'sh\x00', 0x12, 0x2740, 0x14}, 0x2c) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="020200030d0000000000000000000000030006000000000002000000ac1e0001000000000000000002000100000000000000000b0000000003000500000000000200000000000000000099000000a953ebf5d298478f5f040000000200090000000004000000000000"], 0x68}}, 0x0) sendto$inet(r1, &(0x7f00000001c0)="8e77ca3389787867582dd0b9999e5e7ce579fc6b2977bf71ab517f68a8ddb58b93c91675a4b5dde502242a66491162f75f9b28f59cd9746ff7140fde3923b99bcc4c2cc72443169b2ab2f90a0f03dd842adba400500327de779dc66f3ebd32a81ebea8b89c9cc7e0f46e28fc1ff127a0", 0x70, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) 1.468317077s ago: executing program 4 (id=1080): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x28084d1, &(0x7f00000002c0)={[{@grpquota}, {@resgid={'resgid', 0x3d, 0xee01}}, {@errors_continue}, {@noauto_da_alloc}, {@init_itable}, {@noblock_validity}]}, 0x0, 0x454, &(0x7f0000000d40)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000001800)={0x0, 0x0, 0x0}, 0x0) r2 = getpid() socket$inet_udplite(0x2, 0x2, 0x88) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = dup(r5) getsockopt$bt_l2cap_L2CAP_LM(r8, 0x6, 0x3, 0x0, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='9p_protocol_dump\x00', r7}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r11, 0x0, 0x0) r12 = dup(r10) mount$9p_fd(0x20000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r12}}) 1.345887757s ago: executing program 1 (id=1081): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000010000000000", @ANYRES32], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000040)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r6, 0x40086610, &(0x7f0000000180)={@id={0x40000, 0x0, @b}}) 224.262193ms ago: executing program 1 (id=1082): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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") syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0xd8f3dccb89506ebe, 0x0, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) socket$packet(0x11, 0xa, 0x300) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = dup3(r7, r6, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x1c, 0x3, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4048040) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, 0x0) write$vhost_msg_v2(r1, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x48) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, @in6={0xa, 0x4e20, 0x6, @mcast1}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x7c, &(0x7f0000000500)={r9, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0xc, &(0x7f0000000140)={[], [{@flag='rw'}, {@dont_measure}]}, 0x3, 0x1b1, &(0x7f0000000380)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) symlink(&(0x7f0000000880)='.\x00', &(0x7f00000008c0)='./file0\x00') 56.090216ms ago: executing program 4 (id=1083): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24) ioctl$USBDEVFS_SUBMITURB(r0, 0xc0185502, &(0x7f0000000280)=@urb_type_interrupt={0x1, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r1}, 0x38) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r2) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000000000000000000000056a8850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, r4, 0x25, 0x2, @val=@tracing}, 0x40) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x2000094, 0x8, 0x0, 0x0}}, 0x10) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r7}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x8}, @IFLA_MACSEC_ENCRYPT={0x5}]}}}]}, 0x44}}, 0x0) socket$packet(0x11, 0x2, 0x300) r13 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f0000002780)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x50}}], 0x1, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, 0x0, 0x4c00) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xbd}, [@ldst]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8}, @NFTA_META_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) 0s ago: executing program 2 (id=1084): socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x8042, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0x64a) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000080)) r3 = fcntl$getown(r0, 0x9) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r3, 0x6, 0x4002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x36aa9000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r6, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x3b9a1248, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, 0x24) listen(r6, 0x0) listen(r6, 0x0) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$SO_TIMESTAMP(r7, 0x1, 0x23, &(0x7f0000000040), &(0x7f0000000180)=0x4) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1000005, 0x6031, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000080)={0x1, 0x4, 0x0, 0x1}) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socket(0x10, 0x80002, 0x0) socket$kcm(0x10, 0x2, 0x0) kernel console output (not intermixed with test programs): link becomes ready [ 496.611227][ T7202] device veth1_vlan entered promiscuous mode [ 497.521065][ T7349] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 497.622905][ T7348] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,nombcache,journal_dev=0x0000000000000001,usrjquota=,orlov,lazytime,init_itable=0x0000000000000045,jqfmt=vfsold,grpjquota=,,errors=continue. Quota mode: none. [ 497.966522][ T7349] File: /3/file1/bus PID: 7349 Comm: syz.1.692 [ 497.977426][ T7349] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 497.989581][ T7349] File: /3/file1/bus PID: 7349 Comm: syz.1.692 [ 498.049366][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 498.084881][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 498.118525][ T7202] device veth0_macvtap entered promiscuous mode [ 498.146287][ T7363] loop2: detected capacity change from 0 to 2048 [ 498.175395][ T7202] device veth1_macvtap entered promiscuous mode [ 498.192333][ T7348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.695'. [ 498.227367][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.248247][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.259953][ T7363] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 498.294271][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.307724][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.321096][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.334025][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.344852][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.356275][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.367831][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.379786][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.392590][ T7202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.404577][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.417928][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.429718][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.441154][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.453076][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.465560][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.476283][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.487374][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.499393][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.510739][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.523655][ T7202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.536268][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 498.552830][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 498.561999][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 498.579506][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 498.589949][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 498.607462][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 498.628828][ T7202] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.663238][ T7202] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.706212][ T7202] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.715408][ T7202] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.238753][ T7380] loop0: detected capacity change from 0 to 256 [ 500.510125][ T7380] FAT-fs (loop0): Unrecognized mount option "iocha)Sù‡=iso8859-2" or missing value [ 501.448720][ T1387] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.455108][ T1387] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.925712][ T7380] loop0: detected capacity change from 0 to 40427 [ 501.937405][ T7391] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 502.741538][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.758082][ T7380] F2FS-fs (loop0): invalid crc value [ 502.780142][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.822286][ T7380] F2FS-fs (loop0): Found nat_bits in checkpoint [ 502.857261][ T7380] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 502.871671][ T7380] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 502.923382][ T7397] loop1: detected capacity change from 0 to 512 [ 502.965396][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 503.025072][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.204447][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.034496][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 504.085713][ T7397] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 504.130406][ T7397] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038 (0x7fffffff) [ 504.341221][ T7416] netlink: 'syz.1.705': attribute type 3 has an invalid length. [ 504.647788][ T3582] Bluetooth: hci5: ACL packet for unknown connection handle 212 [ 505.055276][ T7397] EXT4-fs (loop1): Unrecognized mount option "9p" or missing value [ 505.223752][ T3655] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.291248][ T7417] 9pnet: p9_errstr2errno: server reported unknown error Í [ 505.413459][ T3655] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.451772][ T7420] delete_channel: no stack [ 505.814223][ T7427] netlink: 'syz.2.713': attribute type 16 has an invalid length. [ 505.843243][ T3655] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.304034][ T7427] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.713'. [ 506.497246][ T3613] Bluetooth: hci1: command 0x0409 tx timeout [ 506.543786][ T7437] loop1: detected capacity change from 0 to 512 [ 506.770626][ T7440] program syz.0.716 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 508.374347][ T7437] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 508.658278][ T7437] ext4 filesystem being mounted at /8/bus supports timestamps until 2038 (0x7fffffff) [ 508.785913][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 509.348298][ T7437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.715'. [ 509.383663][ T7453] QAT: Invalid ioctl 1076925456 [ 509.475607][ T7437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.715'. [ 509.812608][ T3655] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.204196][ T3617] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 510.385761][ T7412] chnl_net:caif_netlink_parms(): no params data found [ 510.894607][ T4231] Bluetooth: hci1: command 0x040f tx timeout [ 510.902206][ T7473] hub 6-0:1.0: USB hub found [ 510.907906][ T7473] hub 6-0:1.0: 1 port detected [ 510.924502][ T3617] usb 3-1: Using ep0 maxpacket: 16 [ 511.072817][ T3617] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.334352][ T3617] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 511.356872][ T3617] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.404697][ T3617] usb 3-1: Product: syz [ 511.429824][ T3617] usb 3-1: Manufacturer: syz [ 511.462764][ T3617] usb 3-1: SerialNumber: syz [ 511.495333][ T3617] usb 3-1: config 0 descriptor?? [ 512.274726][ T7483] openvswitch: netlink: Flow key attr not present in new flow. [ 512.625722][ T3617] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 512.974130][ T3617] Bluetooth: hci1: command 0x0419 tx timeout [ 513.345966][ T7493] trusted_key: encrypted_key: insufficient parameters specified [ 513.704143][ T3702] usb 3-1: Failed to submit usb control message: -110 [ 513.711906][ T3702] usb 3-1: unable to send the bmi data to the device: -110 [ 513.960322][ T3702] usb 3-1: unable to get target info from device [ 513.997859][ T3702] usb 3-1: could not get target info (-110) [ 514.004511][ T3702] usb 3-1: could not probe fw (-110) [ 514.878503][ T7512] loop3: detected capacity change from 0 to 40427 [ 515.068432][ T7512] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 515.076393][ T7512] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 515.345450][ T7512] F2FS-fs (loop3): invalid crc value [ 515.559876][ T7512] F2FS-fs (loop3): Found nat_bits in checkpoint [ 516.218428][ T7512] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 516.225823][ T7512] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 516.357062][ T7412] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.373568][ T7412] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.405333][ T7412] device bridge_slave_0 entered promiscuous mode [ 516.430709][ T7412] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.448362][ T7412] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.462894][ T7412] device bridge_slave_1 entered promiscuous mode [ 517.098450][ T3613] usb 3-1: USB disconnect, device number 14 [ 519.391579][ T7555] xt_NFQUEUE: number of total queues is 0 [ 519.418945][ T7555] loop1: detected capacity change from 0 to 1024 [ 519.471545][ T7412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.485247][ T7412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.535373][ T7555] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 519.683257][ T7555] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,quota,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 519.736604][ T7412] team0: Port device team_slave_0 added [ 520.103757][ T7412] team0: Port device team_slave_1 added [ 520.777906][ T7574] loop2: detected capacity change from 0 to 128 [ 524.546541][ T7595] loop2: detected capacity change from 0 to 512 [ 524.555755][ T7412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.562736][ T7412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.740565][ T7412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.935969][ T7412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.997101][ T7412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.038087][ T7412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.184889][ T7595] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.745: inode #1: comm syz.2.745: iget: illegal inode # [ 525.433890][ T7595] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.745: error while reading EA inode 1 err=-117 [ 525.454924][ T7595] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 525.474293][ T7608] loop0: detected capacity change from 0 to 256 [ 525.511504][ T7595] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.745: inode #1: comm syz.2.745: iget: illegal inode # [ 525.555986][ T7595] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.745: error while reading EA inode 1 err=-117 [ 525.599561][ T7595] EXT4-fs (loop2): 1 orphan inode deleted [ 525.625364][ T7595] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000004c,minixdf,abort,delalloc,usrjquota=,,errors=continue. Quota mode: none. [ 525.686820][ T7412] device hsr_slave_0 entered promiscuous mode [ 526.017367][ T7412] device hsr_slave_1 entered promiscuous mode [ 526.047593][ T7615] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 526.254420][ T7412] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 526.262941][ T7412] Cannot create hsr debugfs directory [ 527.249617][ T7623] netlink: 'syz.1.747': attribute type 32 has an invalid length. [ 527.438240][ T7627] loop2: detected capacity change from 0 to 1024 [ 527.483099][ T7629] loop0: detected capacity change from 0 to 128 [ 527.536481][ T7633] loop1: detected capacity change from 0 to 64 [ 527.611277][ T7629] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 527.696404][ T7629] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038 (0x7fffffff) [ 527.800271][ T7626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.749'. [ 527.863898][ T7626] netlink: 'syz.0.749': attribute type 1 has an invalid length. [ 527.872389][ T7626] netlink: 'syz.0.749': attribute type 2 has an invalid length. [ 527.918712][ T7626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.749'. [ 527.938304][ T3627] hfsplus: b-tree write err: -5, ino 4 [ 528.017654][ T7640] loop1: detected capacity change from 0 to 256 [ 528.113460][ T7643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.753'. [ 528.142410][ T7640] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 528.241803][ T7640] Process accounting resumed [ 528.293133][ T7647] loop2: detected capacity change from 0 to 1024 [ 528.302683][ T7652] loop0: detected capacity change from 0 to 256 [ 528.399797][ T7652] FAT-fs (loop0): Directory bread(block 64) failed [ 528.430354][ T7652] FAT-fs (loop0): Directory bread(block 65) failed [ 528.456814][ T7652] FAT-fs (loop0): Directory bread(block 66) failed [ 528.486555][ T7652] FAT-fs (loop0): Directory bread(block 67) failed [ 528.515281][ T7652] FAT-fs (loop0): Directory bread(block 68) failed [ 528.521834][ T7652] FAT-fs (loop0): Directory bread(block 69) failed [ 528.585582][ T7652] FAT-fs (loop0): Directory bread(block 70) failed [ 528.623948][ T7652] FAT-fs (loop0): Directory bread(block 71) failed [ 528.630806][ T7652] FAT-fs (loop0): Directory bread(block 72) failed [ 528.663586][ T7652] FAT-fs (loop0): Directory bread(block 73) failed [ 528.685690][ T7639] Process accounting resumed [ 528.694393][ T7412] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 528.774852][ T3655] device hsr_slave_0 left promiscuous mode [ 528.796735][ T3655] device hsr_slave_1 left promiscuous mode [ 528.812464][ T3655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 528.840784][ T3655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.024418][ T3655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.040764][ T3655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.056679][ T3655] device bridge_slave_1 left promiscuous mode [ 530.388052][ T7668] loop3: detected capacity change from 0 to 512 [ 530.534452][ T3655] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.680934][ T3655] device bridge_slave_0 left promiscuous mode [ 530.712989][ T3655] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.792251][ T7668] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 530.811978][ T7668] EXT4-fs error (device loop3): ext4_init_orphan_info:586: comm syz.3.756: inode #0: comm syz.3.756: iget: illegal inode # [ 530.829456][ T7668] EXT4-fs (loop3): Remounting filesystem read-only [ 530.836064][ T7668] EXT4-fs (loop3): get orphan inode failed [ 530.842708][ T7668] EXT4-fs (loop3): mount failed [ 530.871917][ T3655] device hsr_slave_0 left promiscuous mode [ 530.878418][ T3655] device hsr_slave_1 left promiscuous mode [ 530.891698][ T3655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.942322][ T3655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.980843][ T3655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.995498][ T3655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.011419][ T3655] device bridge_slave_1 left promiscuous mode [ 531.020911][ T3655] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.051042][ T3655] device bridge_slave_0 left promiscuous mode [ 531.058924][ T3655] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.083140][ T3655] device veth1_macvtap left promiscuous mode [ 531.096688][ T3655] device veth0_macvtap left promiscuous mode [ 531.102883][ T3655] device veth1_vlan left promiscuous mode [ 531.114435][ T3655] device veth0_vlan left promiscuous mode [ 531.121650][ T3655] device veth1_macvtap left promiscuous mode [ 531.136171][ T3655] device veth0_macvtap left promiscuous mode [ 531.142232][ T3655] device veth1_vlan left promiscuous mode [ 531.156209][ T3655] device veth0_vlan left promiscuous mode [ 531.340579][ T7677] binder: 7674:7677 ioctl c0306201 20000680 returned -14 [ 532.055340][ T7680] loop2: detected capacity change from 0 to 512 [ 532.124792][ T7680] EXT4-fs (loop2): Unrecognized mount option "appraise_type=imasig" or missing value [ 532.236695][ T3655] team0 (unregistering): Port device team_slave_1 removed [ 532.265778][ T3655] team0 (unregistering): Port device team_slave_0 removed [ 532.304175][ T3655] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 532.325548][ T3655] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 532.702048][ T3655] bond0 (unregistering): Released all slaves [ 533.005225][ T3655] team0 (unregistering): Port device team_slave_1 removed [ 533.020340][ T3655] team0 (unregistering): Port device team_slave_0 removed [ 533.042680][ T3655] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.111260][ T3655] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 533.123534][ T7686] loop2: detected capacity change from 0 to 256 [ 533.394231][ T3655] bond0 (unregistering): Released all slaves [ 533.598711][ T7412] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 533.628092][ T7667] bridge: RTM_NEWNEIGH with invalid ether address [ 533.762966][ T7412] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 533.786102][ T7412] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 534.113078][ T7412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.866371][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 535.933595][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 536.001554][ T7412] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.084844][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 536.128828][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 536.139393][ T7716] loop0: detected capacity change from 0 to 512 [ 536.182152][ T3689] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.189280][ T3689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.266481][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 536.302967][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 536.342025][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 536.389455][ T7716] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 536.458313][ T3651] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.465445][ T3651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.520748][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 536.553172][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 536.696160][ T7412] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 536.707180][ T7412] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 536.778513][ T7731] loop1: detected capacity change from 0 to 164 [ 536.818892][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 536.875545][ T7716] EXT4-fs (loop0): 1 orphan inode deleted [ 536.889003][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 536.910303][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 536.926554][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 536.935113][ T7716] EXT4-fs (loop0): 1 truncate cleaned up [ 536.940792][ T7716] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 536.998878][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 537.026018][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 537.043438][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 537.063158][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 537.090043][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 537.102596][ T7734] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 537.156197][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 537.216299][ T7733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.767'. [ 537.244022][ T7716] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1439: inode #12: block 7: comm syz.0.765: path /26/bus/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 537.342344][ T7716] EXT4-fs (loop0): Remounting filesystem read-only [ 537.683325][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 537.707952][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 537.740449][ T7412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.243596][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 538.268949][ T7757] loop2: detected capacity change from 0 to 128 [ 538.282687][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 538.380019][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 538.388552][ T7757] FAT-fs (loop2): Unrecognized mount option "ÿÿÿÿ01777777777777777777777" or missing value [ 538.413670][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 538.468931][ T7412] device veth0_vlan entered promiscuous mode [ 538.493076][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 538.576858][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 538.624780][ T7412] device veth1_vlan entered promiscuous mode [ 538.743519][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 538.773658][ T7766] loop2: detected capacity change from 0 to 256 [ 538.782259][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 538.865494][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 539.385834][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 539.427418][ T7412] device veth0_macvtap entered promiscuous mode [ 539.480395][ T7767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.768'. [ 540.319319][ T7412] device veth1_macvtap entered promiscuous mode [ 540.411714][ T7412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.492530][ T7412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.548791][ T7412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.571950][ T7412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.611355][ T7412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.941004][ T7412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.095233][ T7412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.326185][ T7412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.424452][ T7412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.474386][ T7412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.515640][ T7412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.561151][ T7412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.577110][ T7412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.588173][ T7412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.602920][ T7412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.634091][ T7412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.671589][ T7798] fuse: Bad value for 'fd' [ 541.841576][ T7412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.025304][ T7412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 542.066536][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 542.102219][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 542.123176][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 542.147298][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 542.255258][ T7412] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.507329][ T7412] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.732925][ T7412] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.094188][ T7818] loop1: detected capacity change from 0 to 8 [ 544.811875][ T7815] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 544.937182][ T7815] xt_SECMARK: invalid mode: 0 [ 545.875498][ T7412] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.912294][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.964476][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.016363][ T7834] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎsÅ‚Ï£žßä“X\x§ÃãEµ [ 548.026933][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 548.029347][ T3651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.060256][ T7836] loop3: detected capacity change from 0 to 1024 [ 548.097549][ T3651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.149666][ T7836] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 548.183666][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 548.203084][ T7836] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 548.253585][ T7836] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 548.263322][ T7837] loop2: detected capacity change from 0 to 4096 [ 548.273198][ T7836] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 548.276559][ T7845] loop1: detected capacity change from 0 to 1024 [ 548.283352][ T7836] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 548.365755][ T7837] ntfs3: Unknown parameter '' [ 548.374219][ T7848] xt_NFQUEUE: number of total queues is 0 [ 548.380273][ T7845] EXT4-fs (loop1): Test dummy encryption mode enabled [ 548.404272][ T7845] EXT4-fs (loop1): Ignoring removed orlov option [ 548.488866][ T7845] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 548.873891][ T3558] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 548.943160][ T7867] loop3: detected capacity change from 0 to 8192 [ 548.991395][ T7874] netlink: 'syz.2.789': attribute type 4 has an invalid length. [ 549.030315][ T7867] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 549.076539][ T7875] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 549.169592][ T7867] REISERFS (device loop3): using ordered data mode [ 549.177083][ T7867] reiserfs: using flush barriers [ 549.183321][ T7867] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 549.200465][ T7881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.789'. [ 549.203904][ T7867] REISERFS (device loop3): checking transaction log (loop3) [ 549.327215][ T3558] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 549.347672][ T3558] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.584804][ T3558] usb 1-1: config 0 descriptor?? [ 549.700937][ T7894] mip6: mip6_destopt_init_state: state's mode is not 2: 0 [ 549.866586][ T7867] REISERFS (device loop3): Using tea hash to sort names [ 549.977228][ T7892] netlink: 24 bytes leftover after parsing attributes in process `syz.2.792'. [ 550.052312][ T7867] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 550.389565][ T7898] netlink: 12 bytes leftover after parsing attributes in process `syz.4.793'. [ 550.532061][ T7901] loop1: detected capacity change from 0 to 512 [ 550.823702][ T7901] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 551.014036][ T7901] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.794: iget: bad i_size value: -67835469387268086 [ 551.096986][ T7901] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.794: couldn't read orphan inode 15 (err -117) [ 551.193106][ T7901] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 551.234919][ T7901] ext2 filesystem being mounted at /27/file0 supports timestamps until 2038 (0x7fffffff) [ 551.333556][ T7901] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.794: Directory hole found for htree leaf block 0 [ 551.422499][ T7920] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.794: Directory hole found for htree leaf block 0 [ 551.498881][ T7901] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.794: Directory hole found for htree leaf block 0 [ 551.536498][ T7924] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.794: Directory hole found for htree leaf block 0 [ 551.613969][ T3558] ath6kl: Failed to submit usb control message: -110 [ 551.621792][ T3558] ath6kl: unable to send the bmi data to the device: -110 [ 551.636480][ T3558] ath6kl: Unable to send get target info: -110 [ 552.086107][ T7929] netlink: 'syz.4.796': attribute type 16 has an invalid length. [ 552.159223][ T7929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.796'. [ 552.996065][ T3558] ath6kl: Failed to init ath6kl core: -110 [ 553.153529][ T7942] loop4: detected capacity change from 0 to 512 [ 553.157044][ T7949] loop2: detected capacity change from 0 to 256 [ 553.181379][ T3558] ath6kl_usb: probe of 1-1:0.0 failed with error -110 [ 553.201509][ T3558] usb 1-1: USB disconnect, device number 4 [ 553.229513][ T7950] loop1: detected capacity change from 0 to 512 [ 553.248849][ T7942] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 553.302488][ T7942] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 553.371904][ T7942] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 553.390749][ T7942] System zones: 1-12 [ 553.419892][ T7942] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.800: corrupted in-inode xattr [ 553.501972][ T7950] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 554.004815][ T7942] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.800: couldn't read orphan inode 15 (err -117) [ 554.215911][ T7950] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 554.286048][ T7942] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 554.332576][ T7950] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 554.898635][ T7950] EXT4-fs (loop1): orphan cleanup on readonly fs [ 554.941181][ T7950] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.799: Invalid block bitmap block 0 in block_group 0 [ 555.085924][ T7970] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.800: Unrecognised inode hash code 4 [ 555.097856][ T7970] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.800: Corrupt directory, running e2fsck is recommended [ 555.154637][ T7970] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.800: Unrecognised inode hash code 4 [ 555.165950][ T7970] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.800: Corrupt directory, running e2fsck is recommended [ 555.181318][ T7970] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.800: Unrecognised inode hash code 4 [ 555.192605][ T7970] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.800: Corrupt directory, running e2fsck is recommended [ 555.249445][ T7950] Quota error (device loop1): write_blk: dquota write failed [ 555.274758][ T7950] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 555.379938][ T7950] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz.1.799: Failed to acquire dquot type 1 [ 555.688248][ T7950] EXT4-fs (loop1): 1 orphan inode deleted [ 555.733027][ T4446] Quota error (device loop1): remove_tree: Getting block too big (0 >= 6) [ 555.830083][ T4446] EXT4-fs error (device loop1): ext4_release_dquot:6219: comm kworker/u4:14: Failed to release dquot type 1 [ 555.889499][ T7976] device syz_tun entered promiscuous mode [ 555.916690][ T7950] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,nodiscard,noblock_validity,noquota,resuid=0x0000000000000000,mblk_io_submit,abort,auto_da_alloc=0x0000000000000001,noload,grpjquota=,,errors=continue. Quota mode: writeback. [ 555.976939][ T7976] device macsec1 entered promiscuous mode [ 556.020690][ T7976] device syz_tun left promiscuous mode [ 556.045890][ T7980] loop2: detected capacity change from 0 to 512 [ 556.951714][ T7980] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 556.976729][ T7996] loop4: detected capacity change from 0 to 2048 [ 557.090769][ T7996] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 557.130851][ T7980] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.803: invalid indirect mapped block 1 (level 1) [ 557.155625][ T7996] UDF-fs: error (device loop4): udf_read_inode: (ino 1376) failed !bh [ 557.178734][ T7980] EXT4-fs (loop2): 1 truncate cleaned up [ 557.213071][ T7980] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 557.224345][ T7996] UDF-fs: error (device loop4): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 557.423909][ T3613] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 557.513992][ T21] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 557.713863][ T21] usb 1-1: device descriptor read/64, error -71 [ 557.793841][ T2986] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 557.858256][ T3613] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 557.902859][ T3613] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 557.942208][ T3613] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 557.963894][ T3613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.983933][ T21] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 558.002090][ T3613] usb 4-1: config 0 descriptor?? [ 558.033935][ T2986] usb 5-1: Using ep0 maxpacket: 8 [ 558.044190][ T8002] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 558.065670][ T3613] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 558.183104][ T21] usb 1-1: device descriptor read/64, error -71 [ 558.304076][ T21] usb usb1-port1: attempt power cycle [ 558.314175][ T2986] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=e2.d0 [ 558.323338][ T2986] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.437560][ T2986] usb 5-1: Product: syz [ 558.441837][ T2986] usb 5-1: Manufacturer: syz [ 558.453336][ T2986] usb 5-1: SerialNumber: syz [ 559.322669][ T2986] usb 5-1: config 0 descriptor?? [ 559.623980][ T21] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 559.729571][ T2986] usb 5-1: probing VID:PID(0424:012C) [ 559.744269][ T21] usb 1-1: device descriptor read/8, error -71 [ 559.757213][ T8014] loop1: detected capacity change from 0 to 2048 [ 559.774019][ T2986] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 559.837640][ T2986] vub300: probe of 5-1:0.0 failed with error -22 [ 559.866450][ T8014] UDF-fs: bad mount option "u" or missing value [ 559.881280][ T2986] usb 5-1: USB disconnect, device number 7 [ 560.014028][ T21] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 560.189028][ T8016] netlink: 24 bytes leftover after parsing attributes in process `syz.2.813'. [ 560.221233][ T8016] loop2: detected capacity change from 0 to 512 [ 560.274560][ T21] usb 1-1: device not accepting address 8, error -71 [ 560.296985][ T8025] loop4: detected capacity change from 0 to 256 [ 560.309988][ T21] usb usb1-port1: unable to enumerate USB device [ 560.377914][ T3613] usb 4-1: USB disconnect, device number 6 [ 561.185034][ T8016] EXT4-fs (loop2): 1 truncate cleaned up [ 561.220079][ T8016] EXT4-fs (loop2): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,errors=continue,grpjquota=,,errors=continue. Quota mode: writeback. [ 561.498465][ T8046] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 562.144743][ T8027] loop0: detected capacity change from 0 to 8 [ 562.495143][ T8047] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 562.505671][ T8047] device syzkaller0 entered promiscuous mode [ 562.659860][ T1387] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.666346][ T1387] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.972858][ T8052] loop3: detected capacity change from 0 to 40427 [ 563.003919][ T8055] loop2: detected capacity change from 0 to 164 [ 563.011455][ T8052] F2FS-fs (loop3): invalid crc value [ 563.175246][ T8027] SQUASHFS error: Unable to read directory block [631:26] [ 563.189716][ T8037] SQUASHFS error: Unable to read directory block [631:26] [ 563.199614][ T8052] F2FS-fs (loop3): Found nat_bits in checkpoint [ 563.959758][ T8052] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 564.143411][ T8054] netlink: 'syz.2.823': attribute type 10 has an invalid length. [ 564.900581][ T7202] attempt to access beyond end of device [ 564.900581][ T7202] loop3: rw=2049, want=45104, limit=40427 [ 564.958904][ T8070] loop1: detected capacity change from 0 to 256 [ 567.237577][ T8088] loop0: detected capacity change from 0 to 256 [ 568.225288][ T2987] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 568.234658][ T2987] Bluetooth: hci5: Injecting HCI hardware error event [ 568.245035][ T3582] Bluetooth: hci5: hardware error 0x00 [ 568.561856][ T8098] loop1: detected capacity change from 0 to 4096 [ 568.709334][ T8101] netlink: 165 bytes leftover after parsing attributes in process `syz.4.835'. [ 569.393530][ T8098] NILFS (loop1): invalid segment: Checksum error in segment payload [ 569.483992][ T8098] NILFS (loop1): trying rollback from an earlier position [ 569.528607][ T8098] NILFS (loop1): recovery complete [ 569.574909][ T8107] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 569.853702][ T8110] loop4: detected capacity change from 0 to 512 [ 569.864217][ T8113] loop0: detected capacity change from 0 to 1024 [ 569.960940][ T8114] overlayfs: missing 'lowerdir' [ 569.986811][ T8114] overlayfs: missing 'lowerdir' [ 570.645583][ T8110] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 570.645583][ T8110] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 570.645583][ T8110] [ 570.673947][ T8110] EXT4-fs (loop4): old and new quota format mixing [ 570.687451][ T26] audit: type=1804 audit(1729018294.232:103): pid=8113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.837" name="/newroot/37/file0/bus" dev="loop0" ino=26 res=1 errno=0 [ 571.817612][ T3689] hfsplus: b-tree write err: -5, ino 4 [ 572.126092][ T8116] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 572.421507][ T8125] binder: 8124:8125 ioctl 4018620d 0 returned -22 [ 573.797964][ T8138] loop1: detected capacity change from 0 to 128 [ 573.823481][ T8136] loop0: detected capacity change from 0 to 256 [ 576.046558][ T2987] Bluetooth: hci4: command 0x0406 tx timeout [ 576.132416][ T8148] loop2: detected capacity change from 0 to 128 [ 576.249372][ T8148] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 576.351388][ T8148] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 576.705650][ T8152] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 577.893973][ T8152] CIFS: Unable to determine destination address [ 578.444021][ T5109] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 579.113809][ C1] raw-gadget.0 gadget: ignoring, device is not running [ 579.283874][ T5109] usb 5-1: device descriptor read/64, error -32 [ 579.387463][ T8177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.855'. [ 579.637056][ T5109] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 580.284031][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 580.640017][ T8189] loop4: detected capacity change from 0 to 256 [ 580.662108][ T8185] netem: incorrect ge model size [ 581.393663][ T8185] netem: change failed [ 582.333979][ T4550] Bluetooth: hci2: command 0x041b tx timeout [ 582.738457][ T8210] netlink: 'syz.1.862': attribute type 10 has an invalid length. [ 582.886115][ T8213] futex_wake_op: syz.0.861 tries to shift op by 36; fix this program [ 583.166677][ T8210] 8021q: adding VLAN 0 to HW filter on device team0 [ 583.417251][ T8210] bond0: (slave team0): Enslaving as an active interface with an up link [ 584.414859][ T8166] chnl_net:caif_netlink_parms(): no params data found [ 584.553256][ T8219] loop4: detected capacity change from 0 to 4096 [ 584.658053][ T8226] loop1: detected capacity change from 0 to 8192 [ 584.717619][ T8166] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.749539][ T8219] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 584.763970][ T8166] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.823969][ T5109] Bluetooth: hci2: command 0x040f tx timeout [ 585.268451][ T8208] loop2: detected capacity change from 0 to 32768 [ 585.468803][ T8166] device bridge_slave_0 entered promiscuous mode [ 585.477840][ T8166] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.485007][ T8166] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.493018][ T8166] device bridge_slave_1 entered promiscuous mode [ 585.521283][ T8219] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 585.597967][ T8238] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 585.799359][ T8166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.868893][ T8166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.887695][ T8238] netlink: 40 bytes leftover after parsing attributes in process `syz.0.869'. [ 586.059962][ T8166] team0: Port device team_slave_0 added [ 586.082450][ T8244] loop1: detected capacity change from 0 to 256 [ 586.119116][ T8166] team0: Port device team_slave_1 added [ 586.695106][ T8166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.723895][ T8166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.785983][ T8166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.960045][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 587.294624][ T8166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.329045][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.874'. [ 587.345534][ T8166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.384743][ T8166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.442763][ T8166] device hsr_slave_0 entered promiscuous mode [ 588.712737][ T8274] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 589.743166][ T8166] device hsr_slave_1 entered promiscuous mode [ 589.824674][ T8166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 589.842479][ T8166] Cannot create hsr debugfs directory [ 589.858913][ T8271] netlink: 44 bytes leftover after parsing attributes in process `syz.0.878'. [ 590.052388][ T8289] loop0: detected capacity change from 0 to 512 [ 590.064997][ T8288] loop1: detected capacity change from 0 to 512 [ 590.163136][ T8288] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 590.165382][ T8166] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.221841][ T8289] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 590.249768][ T8289] EXT4-fs (loop0): mount failed [ 590.340244][ T8288] EXT4-fs (loop1): failed to open journal device unknown-block(4,137) -6 [ 590.506606][ T8166] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.119945][ T8166] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.501675][ T8166] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.527750][ T8303] loop1: detected capacity change from 0 to 512 [ 591.575899][ T26] audit: type=1326 audit(1729018315.122:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8304 comm="syz.0.885" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f344c0aeff9 code=0x0 [ 591.608948][ T3613] libceph: connect (1)[c::]:6789 error -101 [ 591.625815][ T3613] libceph: mon0 (1)[c::]:6789 connect error [ 591.651061][ T8303] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 591.800712][ T8303] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.882: casefold flag without casefold feature [ 591.816170][ T8300] loop2: detected capacity change from 0 to 32768 [ 591.843451][ T8303] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.882: couldn't read orphan inode 15 (err -117) [ 591.866001][ T8303] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,lazytime,quota,sb=0x0000000000000004,errors=continue,sb=0x0000000000000003,errors=remount-ro,delalloc,auto_da_alloc,norecovery,errors=continue,journal_ioprio=0x0000000000000001,. Quota mode: writeback. [ 591.892341][ C0] vkms_vblank_simulate: vblank timer overrun [ 591.934312][ T3616] libceph: connect (1)[c::]:6789 error -101 [ 591.940729][ T3616] libceph: mon0 (1)[c::]:6789 connect error [ 592.015824][ T8166] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 592.070791][ T8166] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 592.131154][ T8166] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 592.169918][ T8166] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 592.456328][ T3616] libceph: connect (1)[c::]:6789 error -101 [ 592.607523][ T8307] ceph: No mds server is up or the cluster is laggy [ 592.627614][ T3616] libceph: mon0 (1)[c::]:6789 connect error [ 593.330811][ T8325] qrtr: Invalid version 47 [ 594.121396][ T8166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 594.295636][ T8331] loop1: detected capacity change from 0 to 1024 [ 594.992757][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 595.010863][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 595.054078][ T8331] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 595.148798][ T8331] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 595.548270][ T8166] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.552113][ T8331] jbd2_journal_init_inode: Cannot locate journal superblock [ 595.683996][ T8331] EXT4-fs (loop1): Could not load journal inode [ 595.832479][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 595.857683][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 595.872278][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.879401][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 595.900918][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 595.910092][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 596.625917][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.625958][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 596.954437][ T4550] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 597.014628][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 597.022703][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 597.084234][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 597.113563][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 597.155932][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 597.204361][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 597.223459][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 597.232540][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 597.240920][ T4550] usb 1-1: Using ep0 maxpacket: 8 [ 597.241312][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 597.257090][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 597.265525][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 597.277776][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 597.295026][ T8354] loop2: detected capacity change from 0 to 8 [ 597.303414][ T3655] device hsr_slave_0 left promiscuous mode [ 597.311080][ T3655] device hsr_slave_1 left promiscuous mode [ 597.318051][ T3655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.326032][ T3655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.334549][ T3655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 597.341964][ T3655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.365622][ T3655] device bridge_slave_1 left promiscuous mode [ 597.368692][ T8354] SQUASHFS error: Unable to read directory block [629:26] [ 597.371921][ T3655] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.386979][ T4550] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.399014][ T4550] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.409123][ T4550] usb 1-1: New USB device found, idVendor=056a, idProduct=4135, bcdDevice= 0.cc [ 597.540788][ T4550] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.551197][ T4550] usb 1-1: config 0 descriptor?? [ 597.559188][ T3655] device bridge_slave_0 left promiscuous mode [ 597.565557][ T3655] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.578754][ T3655] device veth1_macvtap left promiscuous mode [ 597.585281][ T3655] device veth0_macvtap left promiscuous mode [ 597.591427][ T3655] device veth1_vlan left promiscuous mode [ 597.621134][ T3655] device veth0_vlan left promiscuous mode [ 599.921759][ T4550] wacom 0003:056A:4135.0004: unknown main item tag 0x0 [ 599.944816][ T4550] wacom 0003:056A:4135.0004: Unknown device_type for 'HID 056a:4135'. Ignoring. [ 600.195209][ T8338] loop0: detected capacity change from 0 to 1764 [ 600.234447][ T8338] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 600.243559][ T8338] ISOFS: unable to read i-node block [ 600.249103][ T8338] isofs_fill_super: get root inode failed [ 600.256392][ T3655] team0 (unregistering): Port device team_slave_1 removed [ 600.274536][ T3655] team0 (unregistering): Port device team_slave_0 removed [ 600.287433][ T3655] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.301819][ T3655] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 600.500001][ T3655] bond0 (unregistering): Released all slaves [ 600.799550][ T8166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 600.807638][ T8346] netlink: 96 bytes leftover after parsing attributes in process `syz.4.894'. [ 600.959539][ T7546] usb 1-1: USB disconnect, device number 9 [ 601.195294][ T8377] ptrace attach of "./syz-executor exec"[8368] was attempted by "./syz-executor exec"[8377] [ 601.249160][ T8370] loop0: detected capacity change from 0 to 512 [ 601.578661][ T8370] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e028, mo2=0002] [ 601.923927][ T8370] System zones: 1-12 [ 601.942503][ T8370] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.898: invalid indirect mapped block 8 (level 2) [ 602.072670][ T8370] EXT4-fs (loop0): Remounting filesystem read-only [ 602.084169][ T8370] EXT4-fs (loop0): 1 truncate cleaned up [ 602.089888][ T8370] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000008,data_err=ignore,noinit_itable,sysvgroups,errors=remount-ro,. Quota mode: none. [ 602.269747][ T8389] loop2: detected capacity change from 0 to 512 [ 603.174734][ T8389] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 603.271876][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 603.281583][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 603.307427][ T8382] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 361: padding at end of block bitmap is not set [ 603.534131][ T8389] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.902: bad orphan inode 16 [ 603.548945][ T8166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 603.621459][ T8398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.903'. [ 603.683751][ T8398] loop1: detected capacity change from 0 to 256 [ 604.357433][ T8382] EXT4-fs (loop0): Remounting filesystem read-only [ 604.357439][ T8389] ext4_test_bit(bit=15, block=4) = 0 [ 604.357459][ T8389] EXT4-fs (loop2): 1 orphan inode deleted [ 604.375589][ T8389] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=ignore,nodelalloc,bsdgroups,inode_readahead_blks=0x0000000002000000,block_validity,quota,,errors=continue. Quota mode: writeback. [ 604.489541][ T26] audit: type=1804 audit(1729018328.032:105): pid=8397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.903" name="/newroot/53/file1/file0" dev="loop1" ino=1048707 res=1 errno=0 [ 604.553966][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 604.674875][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 604.791827][ T8166] device veth0_vlan entered promiscuous mode [ 604.889049][ T8166] device veth1_vlan entered promiscuous mode [ 604.897695][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 604.911495][ T8400] 9pnet: p9_fd_create_tcp (8400): problem binding to privport [ 604.919979][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 604.929486][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 604.955013][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 604.993064][ T26] audit: type=1326 audit(1729018328.532:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8388 comm="syz.2.902" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fadd0346ff9 code=0x0 [ 605.028648][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 605.059405][ T8400] EXT4-fs error (device loop2): __ext4_new_inode:1072: comm syz.2.902: reserved inode found cleared - inode=1 [ 605.192676][ T8409] loop1: detected capacity change from 0 to 512 [ 605.265954][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 605.284453][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 605.319378][ T8409] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 605.350856][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 605.370075][ T8409] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (28729!=33349) [ 605.406755][ T8166] device veth0_macvtap entered promiscuous mode [ 605.432393][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 605.575184][ T8409] EXT4-fs (loop1): orphan cleanup on readonly fs [ 605.624808][ T8166] device veth1_macvtap entered promiscuous mode [ 605.632408][ T8409] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.906: bad orphan inode 15 [ 605.652880][ T8166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 606.006340][ T8409] ext4_test_bit(bit=14, block=20) = 0 [ 606.108421][ T8409] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,resgid=0x000000000000ee01,errors=continue,noauto_da_alloc,init_itable,noblock_validity,,errors=continue. Quota mode: writeback. [ 606.343892][ T8166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.519251][ T8166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 606.530795][ T8166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.540926][ T8166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 606.551944][ T8166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.562026][ T8166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 606.699045][ T8429] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 606.846248][ T8166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.915277][ T8166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 607.005547][ T8166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.067162][ T8166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.123824][ T8166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.163829][ T8166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.193189][ T8166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.213840][ T8166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.223703][ T8166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.253845][ T8166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.275103][ T8166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 607.310124][ T8166] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.333872][ T8166] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.342601][ T8166] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.357189][ T8166] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.409523][ T8429] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.417168][ T8429] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.528041][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 607.544973][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 607.561542][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 607.579601][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 607.635164][ T8440] netlink: 'syz.0.912': attribute type 5 has an invalid length. [ 607.642847][ T8440] netlink: 'syz.0.912': attribute type 5 has an invalid length. [ 607.829190][ T8440] netlink: 'syz.0.912': attribute type 5 has an invalid length. [ 607.864338][ T8440] netlink: 'syz.0.912': attribute type 4 has an invalid length. [ 607.875086][ T8440] netlink: 'syz.0.912': attribute type 4 has an invalid length. [ 607.888531][ T8440] netlink: 40 bytes leftover after parsing attributes in process `syz.0.912'. [ 607.908509][ T8440] netlink: 'syz.0.912': attribute type 2 has an invalid length. [ 608.183467][ T8452] loop1: detected capacity change from 0 to 512 [ 608.959599][ T8446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.912'. [ 609.003991][ T8440] netlink: 20 bytes leftover after parsing attributes in process `syz.0.912'. [ 609.182123][ T3651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.204014][ T3651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.284651][ T3651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.292914][ T3651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.133995][ T5109] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 610.335807][ T8452] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.911: inode #1: comm syz.1.911: iget: illegal inode # [ 610.351455][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 610.373142][ T8452] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.911: error while reading EA inode 1 err=-117 [ 610.386324][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 610.393625][ T8452] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.911: inode #1: comm syz.1.911: iget: illegal inode # [ 610.408728][ T8452] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.911: error while reading EA inode 1 err=-117 [ 610.421483][ T8452] EXT4-fs (loop1): 1 orphan inode deleted [ 610.427354][ T8452] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 610.524440][ T5109] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 610.565107][ T5109] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.593575][ T8459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 610.632801][ T5109] usb 3-1: config 0 descriptor?? [ 610.694051][ T5109] usb 3-1: can't set config #0, error -71 [ 611.294490][ T8474] loop0: detected capacity change from 0 to 512 [ 611.311368][ T5109] usb 3-1: USB disconnect, device number 15 [ 612.008001][ T8474] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 612.022637][ T8474] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.916: invalid indirect mapped block 1 (level 1) [ 612.036970][ T8474] EXT4-fs (loop0): 1 truncate cleaned up [ 612.042636][ T8474] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 612.066125][ T8459] syz.4.915 (8459) used greatest stack depth: 18616 bytes left [ 612.123348][ T8480] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 612.330570][ T8481] loop2: detected capacity change from 0 to 4096 [ 612.399322][ T8481] NILFS (loop2): invalid segment: Checksum error in segment payload [ 612.456229][ T8481] NILFS (loop2): trying rollback from an earlier position [ 612.679918][ T8481] NILFS (loop2): recovery complete [ 612.704539][ T8495] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 613.565145][ T26] audit: type=1326 audit(1729018337.112:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8499 comm="syz.0.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344c0aeff9 code=0x7ffc0000 [ 613.795291][ T26] audit: type=1326 audit(1729018337.132:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8499 comm="syz.0.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f344c0ad990 code=0x7ffc0000 [ 614.663058][ T26] audit: type=1326 audit(1729018337.132:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8499 comm="syz.0.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f344c0ad990 code=0x7ffc0000 [ 614.799615][ T26] audit: type=1326 audit(1729018337.132:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8499 comm="syz.0.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344c0aeff9 code=0x7ffc0000 [ 614.799659][ T26] audit: type=1326 audit(1729018337.132:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8499 comm="syz.0.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344c0aeff9 code=0x7ffc0000 [ 614.799696][ T26] audit: type=1326 audit(1729018337.132:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8499 comm="syz.0.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f344c0aeff9 code=0x7ffc0000 [ 614.799731][ T26] audit: type=1326 audit(1729018337.132:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8499 comm="syz.0.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344c0aeff9 code=0x7ffc0000 [ 614.799767][ T26] audit: type=1326 audit(1729018337.132:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8499 comm="syz.0.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344c0aeff9 code=0x7ffc0000 [ 614.799803][ T26] audit: type=1326 audit(1729018337.142:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8499 comm="syz.0.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f344c0aeff9 code=0x7ffc0000 [ 614.799838][ T26] audit: type=1326 audit(1729018337.142:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8499 comm="syz.0.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344c0aeff9 code=0x7ffc0000 [ 614.824461][ T8506] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 615.509932][ T13] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 615.793124][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 615.899786][ T8517] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 615.945495][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 56492, setting to 1024 [ 616.000344][ T13] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 616.011284][ T13] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 616.022238][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.058781][ T13] usb 1-1: config 0 descriptor?? [ 616.085320][ T8500] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 616.116316][ T13] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 616.779590][ T3613] usb 1-1: USB disconnect, device number 10 [ 616.900981][ T144] ntfs3: loop4: ntfs3_write_inode r=5 failed, -22. [ 617.276907][ T8529] overlayfs: missing 'workdir' [ 618.200143][ T8532] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 618.301739][ T8539] fuse: blksize only supported for fuseblk [ 618.341075][ T8539] loop0: detected capacity change from 0 to 512 [ 619.017427][ T8532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.932'. [ 619.121975][ T8539] EXT4-fs (loop0): Test dummy encryption mode enabled [ 619.128891][ T8539] EXT4-fs (loop0): Ignoring removed oldalloc option [ 619.135890][ T8539] EXT4-fs (loop0): Test dummy encryption mode enabled [ 619.350193][ T8539] EXT4-fs error (device loop0): __ext4_iget:4872: inode #11: block 1: comm syz.0.933: invalid block [ 619.381598][ T8539] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.933: couldn't read orphan inode 11 (err -117) [ 619.400033][ T8539] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,acl,test_dummy_encryption,resgid=0x0000000000000000,jqfmt=vfsv0,oldalloc,resuid=0x0000000000000aff,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 620.005852][ T8557] loop1: detected capacity change from 0 to 1024 [ 620.025246][ T8557] hfsplus: unable to parse mount options [ 620.261142][ T2987] Bluetooth: hci2: command 0x0409 tx timeout [ 620.848540][ T8530] chnl_net:caif_netlink_parms(): no params data found [ 622.874141][ T8570] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 624.176291][ T7546] Bluetooth: hci2: command 0x041b tx timeout [ 624.875920][ T1387] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.882291][ T1387] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.512479][ T8530] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.525590][ T8530] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.534874][ T8530] device bridge_slave_0 entered promiscuous mode [ 625.550134][ T8530] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.565798][ T8530] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.588090][ T8530] device bridge_slave_1 entered promiscuous mode [ 625.747264][ T8530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.818932][ T8530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.425167][ T3613] Bluetooth: hci2: command 0x040f tx timeout [ 626.772831][ T8530] team0: Port device team_slave_0 added [ 626.816857][ T8530] team0: Port device team_slave_1 added [ 627.693862][ T7546] Bluetooth: hci3: command 0x0409 tx timeout [ 627.706027][ T8608] loop1: detected capacity change from 0 to 128 [ 627.725403][ T8606] loop0: detected capacity change from 0 to 1024 [ 627.765305][ T8530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.772489][ T8530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.778615][ T8608] EXT4-fs (loop1): Test dummy encryption mode enabled [ 627.824008][ T8606] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 627.845273][ T8606] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 627.869488][ T8530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.869577][ T8606] jbd2_journal_init_inode: Cannot locate journal superblock [ 627.893990][ T8608] EXT4-fs (loop1): Unrecognized mount option "hash" or missing value [ 627.903154][ T8606] EXT4-fs (loop0): Could not load journal inode [ 627.917596][ T8530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.943825][ T8530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 628.011439][ T8530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 628.032579][ T8588] chnl_net:caif_netlink_parms(): no params data found [ 628.507533][ T8613] xt_l2tp: wrong L2TP version: 0 [ 628.957244][ T8530] device hsr_slave_0 entered promiscuous mode [ 629.006990][ T8530] device hsr_slave_1 entered promiscuous mode [ 629.085521][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 629.441220][ T8588] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.453230][ T8588] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.487870][ T8588] device bridge_slave_0 entered promiscuous mode [ 629.563196][ T8530] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.626045][ T8588] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.638231][ T8588] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.665117][ T8588] device bridge_slave_1 entered promiscuous mode [ 629.703361][ T8530] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.793885][ T2987] Bluetooth: hci3: command 0x041b tx timeout [ 629.857383][ T8530] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.896949][ T8588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.932692][ T8588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.987496][ T8530] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.407082][ T8588] team0: Port device team_slave_0 added [ 630.441632][ T8588] team0: Port device team_slave_1 added [ 631.272718][ T8588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.297056][ T8588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.401402][ T8636] raw_sendmsg: syz.4.952 forgot to set AF_INET. Fix it! [ 631.418601][ T8588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.440530][ T8588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.450542][ T8588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.477603][ T8588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.500238][ T8633] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 631.594647][ T8588] device hsr_slave_0 entered promiscuous mode [ 631.647508][ T8588] device hsr_slave_1 entered promiscuous mode [ 631.672669][ T8588] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 631.694515][ T8588] Cannot create hsr debugfs directory [ 631.750716][ T8530] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 631.800215][ T8530] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 631.824576][ T8530] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 631.848983][ T8530] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 631.864163][ T7546] Bluetooth: hci3: command 0x040f tx timeout [ 632.052373][ T8588] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.131618][ T8530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.285357][ T8588] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.418207][ T8530] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.442027][ T8647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.956'. [ 632.525628][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 632.533579][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 632.562137][ T8588] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.616170][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 632.636231][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 632.652054][ T3651] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.659295][ T3651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.699943][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 632.725036][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 632.772530][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 632.832210][ T3651] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.839370][ T3651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.899251][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 633.747222][ T8662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.959'. [ 633.757301][ T8662] netlink: 20 bytes leftover after parsing attributes in process `syz.4.959'. [ 633.771061][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 633.800540][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 633.822426][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 633.831641][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 633.862843][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 633.874251][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 633.883266][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 633.936121][ T8588] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.958545][ T3613] Bluetooth: hci3: command 0x0419 tx timeout [ 634.101923][ T8530] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 634.188907][ T8666] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 634.341205][ T8530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 634.402683][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 634.435279][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 634.487857][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 635.824064][ T8673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.962'. [ 635.931210][ T3655] device hsr_slave_0 left promiscuous mode [ 635.961306][ T3655] device hsr_slave_1 left promiscuous mode [ 635.969020][ T8682] netlink: 104 bytes leftover after parsing attributes in process `syz.4.964'. [ 636.004609][ T3655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 636.012002][ T3655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.040598][ T3655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 636.063442][ T3655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 636.088746][ T3655] device bridge_slave_1 left promiscuous mode [ 636.103943][ T3655] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.126940][ T3655] device bridge_slave_0 left promiscuous mode [ 636.133640][ T3655] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.177280][ T3655] device veth1_macvtap left promiscuous mode [ 636.191061][ T3655] device veth0_macvtap left promiscuous mode [ 636.204213][ T3655] device veth1_vlan left promiscuous mode [ 636.218830][ T3655] device veth0_vlan left promiscuous mode [ 636.487165][ T8687] netlink: 120 bytes leftover after parsing attributes in process `syz.0.966'. [ 636.880701][ T3655] team0 (unregistering): Port device team_slave_1 removed [ 636.893707][ T3655] team0 (unregistering): Port device team_slave_0 removed [ 636.908435][ T3655] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 636.941045][ T3655] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.337165][ T3616] Bluetooth: hci4: command 0x0409 tx timeout [ 640.436942][ T3655] bond0 (unregistering): Released all slaves [ 640.470793][ T8588] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 640.482221][ T8588] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 640.642286][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 640.649834][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 640.688684][ T8588] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 640.712393][ T8588] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 640.729887][ T8530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.797274][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 640.806683][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 640.839270][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 640.847776][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 640.856691][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 640.868363][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 640.958037][ T8530] device veth0_vlan entered promiscuous mode [ 641.036272][ T8588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 641.051764][ T8530] device veth1_vlan entered promiscuous mode [ 641.073059][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 641.088786][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 641.098008][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 641.110730][ T5107] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 641.139732][ T8588] 8021q: adding VLAN 0 to HW filter on device team0 [ 641.183286][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 641.195411][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 641.206642][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 641.220831][ T3705] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.227952][ T3705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 641.244731][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 641.264610][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 641.273617][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 641.294485][ T8530] device veth0_macvtap entered promiscuous mode [ 641.313934][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 641.322056][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 641.337819][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 641.347049][ T4445] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.354165][ T4445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.360285][ T8709] netlink: 120 bytes leftover after parsing attributes in process `syz.4.972'. [ 641.384652][ T8530] device veth1_macvtap entered promiscuous mode [ 641.412323][ T8530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.426492][ T8530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.440255][ T8530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.454311][ T8530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.471100][ T8530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.483631][ T8530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.499129][ T8530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.511388][ T8530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.530885][ T8530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 641.544556][ T8530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.555265][ T8530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.565810][ T8530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.576493][ T8530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.587539][ T8530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.598306][ T8530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.608224][ T8530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.618977][ T8530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.640260][ T8530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 641.654518][ T5107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 200, setting to 8 [ 641.716914][ T5107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 641.730789][ T5107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 641.742543][ T5107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 641.754846][ T5107] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 641.840344][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 641.849944][ T5107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.860745][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 641.889805][ T5107] usb 1-1: config 0 descriptor?? [ 641.896192][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 641.915483][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 641.938200][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 641.974879][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 641.991038][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 642.000609][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 642.018967][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 642.032243][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 642.052032][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 642.062942][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 642.078681][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 642.195757][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 642.207186][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 642.216756][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 642.226346][ T8530] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.237009][ T8530] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.246241][ T8530] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.255232][ T8530] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.281491][ T8684] chnl_net:caif_netlink_parms(): no params data found [ 642.411937][ T8588] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 642.451602][ T3616] Bluetooth: hci4: command 0x041b tx timeout [ 642.947440][ T2987] usb 1-1: USB disconnect, device number 11 [ 643.184880][ T8684] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.214108][ T8684] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.254928][ T8684] device bridge_slave_0 entered promiscuous mode [ 643.459476][ T8732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.976'. [ 644.090898][ T8684] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.118944][ T8684] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.204378][ T8684] device bridge_slave_1 entered promiscuous mode [ 644.435005][ T8740] netlink: 165 bytes leftover after parsing attributes in process `syz.0.978'. [ 644.493988][ T7546] Bluetooth: hci4: command 0x040f tx timeout [ 645.888433][ T8684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.908995][ T8746] loop0: detected capacity change from 0 to 8 [ 645.951031][ T8684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.064501][ T3689] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.074127][ T8746] SQUASHFS error: Unable to read directory block [629:26] [ 646.088847][ T3689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.100760][ T8588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.359580][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 647.371055][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 647.434923][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 647.461008][ T8684] team0: Port device team_slave_0 added [ 647.622649][ T8684] team0: Port device team_slave_1 added [ 648.343600][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 648.444883][ T3689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.474844][ T3689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.512870][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 648.543457][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 648.586591][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 648.622714][ T8684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.646784][ T8684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.735913][ T8684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.750383][ T8684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.758020][ T8684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.783921][ C1] vkms_vblank_simulate: vblank timer overrun [ 648.791896][ T8684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.907503][ T8684] device hsr_slave_0 entered promiscuous mode [ 648.959714][ T8684] device hsr_slave_1 entered promiscuous mode [ 648.983589][ T8684] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 649.083978][ T8684] Cannot create hsr debugfs directory [ 649.089701][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 649.111769][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 649.155431][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 649.165580][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 649.202037][ T8588] device veth0_vlan entered promiscuous mode [ 649.311195][ T8588] device veth1_vlan entered promiscuous mode [ 649.620378][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 649.630975][ T8772] loop0: detected capacity change from 0 to 8192 [ 649.634748][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 650.292614][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 650.360808][ T8772] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 650.380067][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 650.404052][ T8772] REISERFS (device loop0): using ordered data mode [ 650.410736][ T8772] reiserfs: using flush barriers [ 650.434833][ T8782] loop3: detected capacity change from 0 to 128 [ 650.491304][ T8772] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 650.514261][ T8772] REISERFS (device loop0): checking transaction log (loop0) [ 650.538126][ T8588] device veth0_macvtap entered promiscuous mode [ 650.586128][ T8684] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.617781][ T8782] EXT4-fs (loop3): Test dummy encryption mode enabled [ 650.694694][ T8782] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 650.720348][ T8588] device veth1_macvtap entered promiscuous mode [ 650.740731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 650.769264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 650.801153][ T8782] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038 (0x7fffffff) [ 650.840912][ T8588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 650.881933][ T8588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.051186][ T8588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.087208][ T8772] REISERFS (device loop0): Using tea hash to sort names [ 651.101699][ T8588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.112857][ T8772] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 651.227215][ T8588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.237879][ T8588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.847488][ T8588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.858236][ T8588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.873837][ T8588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.911416][ T8588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.194052][ T8588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 653.273392][ T8684] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.312496][ T8791] loop3: detected capacity change from 0 to 4096 [ 653.367946][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 653.389582][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 653.424780][ T8588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.482976][ T8588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.524345][ T8588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.670000][ T8588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.680869][ T8588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.696065][ T8588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.706160][ T8588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.726864][ T8588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.059680][ T8588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.074408][ T8588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.086511][ T8588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 654.141651][ T8684] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.162849][ T8795] netlink: 'syz.0.989': attribute type 7 has an invalid length. [ 654.190683][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 654.282894][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 654.303879][ T8684] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.325084][ T8588] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.396765][ T8802] xt_bpf: check failed: parse error [ 654.415072][ T8588] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.489123][ T8588] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.568014][ T8588] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.176096][ T3651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.182351][ T8809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1001'. [ 655.192795][ T3651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.261654][ T8815] QAT: Invalid ioctl 1076925456 [ 655.266759][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 655.267871][ T3651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.328143][ T8684] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 655.334872][ T3651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.374599][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 655.390427][ T8684] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 655.446888][ T8684] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 655.477328][ T8684] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 655.678839][ T8684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.721434][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 655.729694][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 655.740368][ T8684] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.750490][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 655.768143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 655.780807][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.787937][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.900963][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 655.917726][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 655.977081][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 656.542906][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.550184][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.654059][ T8684] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 656.664844][ T8684] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 657.230625][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 657.244059][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 657.256903][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 657.278017][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 657.289373][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 657.306204][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 657.407131][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 657.479082][ T8835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.995'. [ 657.502489][ T8846] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 657.515362][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 657.651370][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 657.703140][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 657.738935][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 657.757146][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 658.386307][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 658.394373][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 658.431202][ T8684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 658.501005][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 658.511406][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 658.559097][ T8866] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1004'. [ 658.624111][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 658.648060][ T8870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1006'. [ 658.668719][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 658.678264][ T8870] loop0: detected capacity change from 0 to 1024 [ 659.538556][ T8684] device veth0_vlan entered promiscuous mode [ 659.559749][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 659.620715][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 659.628156][ T8877] loop2: detected capacity change from 0 to 256 [ 659.704339][ T8684] device veth1_vlan entered promiscuous mode [ 659.767839][ T8877] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d) [ 660.296173][ T8684] device veth0_macvtap entered promiscuous mode [ 660.320258][ T8684] device veth1_macvtap entered promiscuous mode [ 660.545007][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 660.597025][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 660.620721][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 661.148961][ T8902] loop0: detected capacity change from 0 to 128 [ 661.233851][ T3614] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 661.602780][ T8684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.639331][ T8684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.695688][ T8684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.725140][ T8684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.736646][ T8684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.753807][ T8684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.785075][ T8684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.797681][ T8684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.808688][ T8684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.827640][ T8684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.852277][ T8684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.876105][ T8684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.883821][ T3614] usb 5-1: Using ep0 maxpacket: 32 [ 661.902592][ T8917] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 661.916445][ T8684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 661.943864][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 661.955076][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 661.993343][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 662.046653][ T8906] netlink: 'syz.2.1012': attribute type 39 has an invalid length. [ 662.074062][ T3614] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 662.082521][ T3614] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 662.218904][ T3614] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 662.237826][ T3614] usb 5-1: config 1 has no interface number 0 [ 662.251934][ T3614] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 662.343842][ T8926] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1013'. [ 663.040409][ T3614] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 663.067857][ T3614] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 663.087275][ T3614] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.252234][ T3614] usb 5-1: can't set config #1, error -71 [ 663.260039][ T3614] usb 5-1: USB disconnect, device number 10 [ 663.272841][ T8684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 663.328794][ T8684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.364183][ T8684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 663.405956][ T8684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.416102][ T8684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 663.426766][ T8684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.436898][ T8684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 663.480745][ T8684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.494581][ T8684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 663.618752][ T8942] dlm: no local IP address has been set [ 663.625270][ T8942] dlm: cannot start dlm midcomms -107 [ 664.266126][ T8684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.293852][ T8684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.304589][ T8684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.316021][ T8684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 664.362930][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 664.380074][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 664.667106][ T8684] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.676872][ T8684] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.694006][ T8684] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.115659][ T8684] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.499180][ T3655] device hsr_slave_0 left promiscuous mode [ 665.513131][ T3655] device hsr_slave_1 left promiscuous mode [ 665.668941][ T8958] loop0: detected capacity change from 0 to 256 [ 665.730132][ T3655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 665.745469][ T3655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 665.753613][ T3655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 665.761739][ T3655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 665.790125][ T3655] device bridge_slave_1 left promiscuous mode [ 665.797235][ T3655] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.623157][ T3655] device bridge_slave_0 left promiscuous mode [ 666.630630][ T3655] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.644153][ T3655] device veth1_macvtap left promiscuous mode [ 666.650312][ T3655] device veth0_macvtap left promiscuous mode [ 666.656868][ T3655] device veth1_vlan left promiscuous mode [ 666.662764][ T3655] device veth0_vlan left promiscuous mode [ 666.992636][ T3655] team0 (unregistering): Port device team_slave_1 removed [ 667.008819][ T3655] team0 (unregistering): Port device team_slave_0 removed [ 667.020774][ T3655] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 667.038172][ T3655] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 667.088204][ T3655] bond0 (unregistering): (slave team0): Releasing backup interface [ 667.121576][ T3655] bond0 (unregistering): Released all slaves [ 667.859066][ T3627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.910466][ T2987] Bluetooth: hci1: command 0x0406 tx timeout [ 667.944366][ T3627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.028101][ T8977] loop0: detected capacity change from 0 to 512 [ 668.052068][ T3651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.070537][ T3651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.152130][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 668.200998][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 668.287080][ T8985] binder: BINDER_SET_CONTEXT_MGR already set [ 668.293941][ T8985] binder: 8978:8985 ioctl 4018620d 20000040 returned -16 [ 669.062758][ T8977] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1025: Invalid inode bitmap blk 4 in block_group 0 [ 669.129063][ T8977] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,data_err=abort,noload,nobarrier,lazytime,,errors=continue. Quota mode: none. [ 669.712439][ T8988] bond0: (slave rose0): Enslaving as an active interface with an up link [ 669.785893][ T3583] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 670.627097][ T8977] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 670.645232][ T9001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1029'. [ 670.966208][ T9005] loop0: detected capacity change from 0 to 256 [ 671.680734][ T9013] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1033'. [ 671.744978][ T9015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1032'. [ 671.954444][ T9007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1032'. [ 672.003630][ T9007] device geneve2 entered promiscuous mode [ 675.060845][ T9056] loop0: detected capacity change from 0 to 16 [ 675.072686][ T9054] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 675.159333][ T9056] erofs: (device loop0): mounted with root inode @ nid 36. [ 676.149548][ T9064] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1044'. [ 677.943687][ T9056] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 677.959228][ T9056] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -27 in[61, 4035] out[1851] [ 677.971967][ T9056] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 678.073882][ T5109] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 678.301888][ T9075] loop2: detected capacity change from 0 to 512 [ 678.340121][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 678.369764][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 678.412744][ T9077] loop0: detected capacity change from 0 to 2048 [ 678.429520][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 678.464129][ T3558] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 678.520446][ T9080] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 678.545269][ T5109] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 678.567193][ T9077] attempt to access beyond end of device [ 678.567193][ T9077] loop0: rw=0, want=15393162788902, limit=2048 [ 678.594227][ T9077] attempt to access beyond end of device [ 678.594227][ T9077] loop0: rw=0, want=15393162788902, limit=2048 [ 678.599299][ T5109] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 678.618207][ T9081] attempt to access beyond end of device [ 678.618207][ T9081] loop0: rw=0, want=15393162788902, limit=2048 [ 678.656764][ T9081] attempt to access beyond end of device [ 678.656764][ T9081] loop0: rw=0, want=15393162788902, limit=2048 [ 678.668670][ T5109] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 678.682249][ T5109] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 678.696933][ T5109] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.731442][ T5109] usb 2-1: config 0 descriptor?? [ 678.733004][ T9077] attempt to access beyond end of device [ 678.733004][ T9077] loop0: rw=0, want=15393162788902, limit=2048 [ 678.754459][ T9066] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 678.760487][ T9077] attempt to access beyond end of device [ 678.760487][ T9077] loop0: rw=0, want=15393162788902, limit=2048 [ 678.797157][ T9070] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1048'. [ 678.822338][ T9077] attempt to access beyond end of device [ 678.822338][ T9077] loop0: rw=0, want=15393162788902, limit=2048 [ 679.084118][ T5109] usbhid 2-1:0.0: can't add hid device: -71 [ 679.090234][ T5109] usbhid: probe of 2-1:0.0 failed with error -71 [ 679.130141][ T5109] usb 2-1: USB disconnect, device number 7 [ 679.253286][ T9078] chnl_net:caif_netlink_parms(): no params data found [ 679.317983][ T9086] loop1: detected capacity change from 0 to 64 [ 679.645556][ T9078] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.670686][ T9078] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.679271][ T13] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 679.709748][ T9078] device bridge_slave_0 entered promiscuous mode [ 679.745268][ T9078] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.766315][ T9078] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.771584][ T9098] ip6t_REJECT: ECHOREPLY is not supported [ 679.802370][ T9078] device bridge_slave_1 entered promiscuous mode [ 679.955030][ T9078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.012880][ T9078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 680.044052][ T13] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 680.060173][ T9102] loop1: detected capacity change from 0 to 1024 [ 680.077742][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.084859][ T9102] hfsplus: unable to parse mount options [ 680.124715][ T13] usb 3-1: config 0 descriptor?? [ 680.265685][ T9078] team0: Port device team_slave_0 added [ 680.272884][ T13] cp210x 3-1:0.0: cp210x converter detected [ 680.274782][ T9078] team0: Port device team_slave_1 added [ 680.408617][ T9105] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 680.659210][ T2987] Bluetooth: hci2: command 0x0409 tx timeout [ 682.881346][ T9078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 683.025431][ T9078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 683.257900][ T9078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 683.278890][ T9120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1058'. [ 683.557597][ T9122] overlayfs: failed to resolve './file0': -2 [ 684.176037][ T9124] loop0: detected capacity change from 0 to 256 [ 684.894376][ T3614] Bluetooth: hci2: command 0x041b tx timeout [ 685.133583][ T9110] netlink: 'syz.2.1053': attribute type 21 has an invalid length. [ 685.142061][ T9110] netlink: 'syz.2.1053': attribute type 1 has an invalid length. [ 685.175214][ T9078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.182645][ T9078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.210421][ T9123] [U] ÿª¿uªví§KôJÈ•U~x`M÷v“UŸúÖÌxtBàòPzy«¦A¢hÎU«ãk¢&Šoÿ»€¶%IAŒÓùQÑ…Tì!¨O¯&æ£lkÀÉ´7+(!0ãÛ/Ð…Šè÷¥Ý܉YB%ׄA¥3.Óè&—xÄ!ÊÏqó%C‡J4Y8"DÜâýD·¦, [ 685.220399][ T9078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.227459][ T9123] [U] ˜ Ï#Âü‰K¥I¢íû~0ÃdB%ê›&¹ûø9ûžF¼Ï×ÎbÈËÉðÕÿÿV¥wíØiIÑn7ã—ÎNU…¼=:À [ 685.228867][ T3558] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 685.274056][ T13] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 685.291096][ T3558] usb 5-1: can't read configurations, error -71 [ 685.301641][ T13] cp210x 3-1:0.0: querying part number failed [ 685.355708][ T9113] [U] ËîÅ [ 685.378839][ T13] usb 3-1: cp210x converter now attached to ttyUSB0 [ 685.397038][ T13] usb 3-1: USB disconnect, device number 16 [ 685.417721][ T13] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 685.434890][ T9128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 685.454874][ T13] cp210x 3-1:0.0: device disconnected [ 685.547823][ T1387] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.554186][ T1387] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.583428][ T9131] loop1: detected capacity change from 0 to 4096 [ 685.612913][ T9137] loop2: detected capacity change from 0 to 2048 [ 685.660446][ T9137] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 685.756767][ T9131] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 685.999387][ T9078] device hsr_slave_0 entered promiscuous mode [ 686.007728][ T9078] device hsr_slave_1 entered promiscuous mode [ 686.010601][ T9131] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 686.026908][ T9078] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 686.070291][ T9078] Cannot create hsr debugfs directory [ 687.177966][ T3614] Bluetooth: hci2: command 0x040f tx timeout [ 687.421558][ T3651] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.519881][ T144] ntfs3: loop1: ntfs3_write_inode r=5 failed, -22. [ 687.545723][ T8684] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 687.649670][ T9161] loop2: detected capacity change from 0 to 1024 [ 687.685927][ T3651] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.874468][ T9161] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 687.887704][ T9161] EXT4-fs (loop2): orphan cleanup on readonly fs [ 687.942738][ T9166] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 687.961176][ T3651] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.973269][ T9161] EXT4-fs error (device loop2): __ext4_get_inode_loc:4320: comm syz.2.1066: Invalid inode table block 0 in block_group 0 [ 688.008869][ T9161] EXT4-fs (loop2): Remounting filesystem read-only [ 688.016619][ T9161] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5803: Corrupt filesystem [ 688.042601][ T9161] EXT4-fs error (device loop2): ext4_quota_write:6591: inode #3: comm syz.2.1066: mark_inode_dirty error [ 688.097351][ T9161] __quota_error: 153 callbacks suppressed [ 688.097368][ T9161] Quota error (device loop2): write_blk: dquota write failed [ 688.122343][ T3651] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.143723][ T9161] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 688.157770][ T9161] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.1066: Failed to acquire dquot type 0 [ 688.169915][ T9161] EXT4-fs (loop2): 1 truncate cleaned up [ 688.178946][ T9161] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,grpid,errors=remount-ro,noblock_validity,block_validity,minixdf,noauto_da_alloc,. Quota mode: writeback. [ 688.413990][ T26] audit: type=1326 audit(1729018411.952:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9160 comm="syz.2.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b1ed2cff9 code=0x7ffc0000 [ 688.470332][ T26] audit: type=1326 audit(1729018411.952:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9160 comm="syz.2.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b1ed2cff9 code=0x7ffc0000 [ 688.851413][ T26] audit: type=1326 audit(1729018411.992:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9160 comm="syz.2.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f9b1ed2cff9 code=0x7ffc0000 [ 689.035698][ T26] audit: type=1326 audit(1729018411.992:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9160 comm="syz.2.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9b1ed2d033 code=0x7ffc0000 [ 689.083978][ T26] audit: type=1326 audit(1729018411.992:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9160 comm="syz.2.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9b1ed2d033 code=0x7ffc0000 [ 689.438181][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 689.703867][ T26] audit: type=1326 audit(1729018411.992:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9160 comm="syz.2.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b1ed2cff9 code=0x7ffc0000 [ 689.804930][ T26] audit: type=1326 audit(1729018412.012:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9160 comm="syz.2.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9b1ed2cff9 code=0x7ffc0000 [ 689.835481][ T26] audit: type=1326 audit(1729018412.012:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9160 comm="syz.2.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b1ed2cff9 code=0x7ffc0000 [ 689.895897][ T9193] loop1: detected capacity change from 0 to 512 [ 690.034476][ T9193] EXT4-fs (loop1): 1 orphan inode deleted [ 690.040363][ T9193] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 690.143981][ T9193] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038 (0x7fffffff) [ 690.297824][ T9204] xt_CT: You must specify a L4 protocol and not use inversions on it [ 691.246809][ T9212] fuse: Bad value for 'rootmode' [ 691.472644][ T3614] Bluetooth: hci2: command 0x0405 tx timeout [ 691.539388][ T9078] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 691.558724][ T9221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1076'. [ 691.621992][ T9078] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 691.638983][ T9078] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 691.685598][ T9225] loop2: detected capacity change from 0 to 1024 [ 691.704593][ T9225] hfsplus: unable to parse mount options [ 691.736210][ T9078] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 691.879874][ T9223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1076'. [ 692.504071][ T9223] device geneve2 entered promiscuous mode [ 692.548430][ T9233] IPVS: set_ctl: invalid protocol: 60 172.30.1.3:20003 [ 692.887636][ T9239] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 693.927625][ T425] ------------[ cut here ]------------ [ 693.931581][ T3689] ------------[ cut here ]------------ [ 693.941738][ T3689] WARNING: CPU: 1 PID: 3689 at net/wireless/core.h:235 cfg80211_ch_switch_notify+0x2b5/0x470 [ 693.953463][ T3689] Modules linked in: [ 693.957534][ T3689] CPU: 1 PID: 3689 Comm: kworker/u4:8 Not tainted 5.15.167-syzkaller #0 [ 693.969376][ T9242] loop1: detected capacity change from 0 to 128 [ 693.982508][ T3689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 694.004408][ T425] WARNING: CPU: 1 PID: 425 at net/wireless/core.h:235 cfg80211_ch_switch_notify+0x2b5/0x470 [ 694.054599][ T3689] Workqueue: phy75 ieee80211_csa_finalize_work [ 694.063192][ T425] Modules linked in: [ 694.079611][ T9242] EXT4-fs (loop1): Test dummy encryption mode enabled [ 694.100542][ T425] CPU: 1 PID: 425 Comm: kworker/u4:3 Not tainted 5.15.167-syzkaller #0 [ 694.175160][ T3689] RIP: 0010:cfg80211_ch_switch_notify+0x2b5/0x470 [ 694.181631][ T3689] Code: 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d5 01 00 00 e8 d0 91 d7 f7 0f 0b e9 9e fe ff ff e8 c4 91 d7 f7 0f 0b eb b1 e8 bb 91 d7 f7 <0f> 0b e9 fc fd ff ff e8 af 91 d7 f7 0f 0b e9 db fe ff ff e8 a3 91 [ 694.294270][ T3689] RSP: 0018:ffffc90003137be8 EFLAGS: 00010293 [ 695.114603][ T3689] RAX: ffffffff89a8c8b5 RBX: ffff888060f68c90 RCX: ffff888079038000 [ 695.187334][ T425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 695.199361][ T425] Workqueue: phy74 ieee80211_csa_finalize_work [ 695.205743][ T425] RIP: 0010:cfg80211_ch_switch_notify+0x2b5/0x470 [ 695.212182][ T425] Code: 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d5 01 00 00 e8 d0 91 d7 f7 0f 0b e9 9e fe ff ff e8 c4 91 d7 f7 0f 0b eb b1 e8 bb 91 d7 f7 <0f> 0b e9 fc fd ff ff e8 af 91 d7 f7 0f 0b e9 db fe ff ff e8 a3 91 [ 695.212198][ T9242] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 695.233478][ T3689] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 695.253202][ T425] RSP: 0018:ffffc90002f87be8 EFLAGS: 00010293 [ 695.259834][ T9242] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038 (0x7fffffff) [ 695.270620][ T3689] RBP: 0000000000000000 R08: ffffffff89a8c6ab R09: fffffbfff1bd2c16 [ 695.283827][ T425] RAX: ffffffff89a8c8b5 RBX: ffff888056a38c90 RCX: ffff88801ef8d940 [ 695.291865][ T3689] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88807d2505c0 [ 695.313353][ T425] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 695.313686][ T9248] netlink: 'syz.4.1083': attribute type 8 has an invalid length. [ 695.321555][ T3689] R13: dffffc0000000000 R14: ffff888060f68cd8 R15: ffff888060f696c0 [ 695.321579][ T3689] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 695.321598][ T3689] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 695.321615][ T3689] CR2: 0000001b32d18ff8 CR3: 000000005bf7d000 CR4: 00000000003506e0 [ 695.321635][ T3689] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 695.321650][ T3689] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 695.409399][ T425] RBP: 0000000000000000 R08: ffffffff89a8c6ab R09: fffffbfff1bd2c16 [ 695.420969][ T9078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 695.435219][ T425] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88807d1c05c0 [ 695.453487][ T425] R13: dffffc0000000000 R14: ffff888056a38cd8 R15: ffff888056a396c0 [ 695.472946][ T425] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 695.524514][ T425] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 695.550715][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 695.556065][ T425] CR2: 00007f5d6f29f378 CR3: 0000000022da0000 CR4: 00000000003506e0 [ 695.564588][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 695.588602][ T9078] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.603829][ T3689] Call Trace: [ 695.607215][ T425] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 695.628456][ T3689] [ 695.637821][ T3689] ? __warn+0x15b/0x300 [ 695.642338][ T9242] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 695.659741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 695.677485][ T425] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 695.679332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 695.687864][ T3689] ? cfg80211_ch_switch_notify+0x2b5/0x470 [ 695.723851][ T425] Call Trace: [ 695.731265][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.735881][ T425] [ 695.738403][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 695.741255][ T425] ? __warn+0x15b/0x300 [ 695.873761][ T3689] ? report_bug+0x1b7/0x2e0 [ 695.878492][ T3689] ? handle_bug+0x3d/0x70 [ 695.892329][ T3689] ? exc_invalid_op+0x16/0x40 [ 695.900292][ T425] ? cfg80211_ch_switch_notify+0x2b5/0x470 [ 695.906471][ T3689] ? asm_exc_invalid_op+0x16/0x20 [ 695.924381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 695.939819][ T425] ? report_bug+0x1b7/0x2e0 [ 695.955818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 695.966164][ T3689] ? cfg80211_ch_switch_notify+0xab/0x470 [ 695.979923][ T425] ? handle_bug+0x3d/0x70 [ 696.137574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 696.147874][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.154959][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 696.725610][ T3689] ? cfg80211_ch_switch_notify+0x2b5/0x470 [ 696.731479][ T3689] ? cfg80211_ch_switch_notify+0x2b5/0x470 [ 696.794382][ T425] ? exc_invalid_op+0x16/0x40 [ 696.799143][ T425] ? asm_exc_invalid_op+0x16/0x20 [ 696.808862][ T425] ? cfg80211_ch_switch_notify+0xab/0x470 [ 696.815077][ T425] ? cfg80211_ch_switch_notify+0x2b5/0x470 [ 696.836626][ T425] ? cfg80211_ch_switch_notify+0x2b5/0x470 [ 696.842491][ T3689] ? cfg80211_ch_switch_notify+0x2b5/0x470 [ 696.848990][ T425] ? cfg80211_ch_switch_notify+0x2b5/0x470 [ 696.855721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 696.870139][ T3689] ieee80211_csa_finalize_work+0xf8/0x140 [ 696.878385][ T425] ieee80211_csa_finalize_work+0xf8/0x140 [ 696.889793][ T3689] process_one_work+0x8a1/0x10c0 [ 696.895111][ T425] process_one_work+0x8a1/0x10c0 [ 696.900207][ T3689] ? worker_detach_from_pool+0x260/0x260 [ 696.909468][ T425] ? worker_detach_from_pool+0x260/0x260 [ 696.922745][ T3689] ? _raw_spin_lock_irqsave+0x120/0x120 [ 696.928734][ T425] ? _raw_spin_lock_irqsave+0x120/0x120 [ 696.935765][ T3689] ? kthread_data+0x4e/0xc0 [ 696.941460][ T425] ? kthread_data+0x4e/0xc0 [ 696.947174][ T3689] ? wq_worker_running+0x97/0x170 [ 696.952331][ T425] ? wq_worker_running+0x97/0x170 [ 696.958008][ T3689] worker_thread+0xaca/0x1280 [ 696.962788][ T425] worker_thread+0xaca/0x1280 [ 696.968121][ T3689] kthread+0x3f6/0x4f0 [ 696.974121][ T425] kthread+0x3f6/0x4f0 [ 696.978312][ T3689] ? rcu_lock_release+0x20/0x20 [ 696.983648][ T425] ? rcu_lock_release+0x20/0x20 [ 696.999863][ T3689] ? kthread_blkcg+0xd0/0xd0 [ 697.011874][ T425] ? kthread_blkcg+0xd0/0xd0 [ 697.016734][ T3689] ret_from_fork+0x1f/0x30 [ 697.023633][ T3689] [ 697.027364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 697.027646][ T425] ret_from_fork+0x1f/0x30 [ 697.040187][ T3689] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 697.047470][ T3689] CPU: 1 PID: 3689 Comm: kworker/u4:8 Not tainted 5.15.167-syzkaller #0 [ 697.055941][ T3689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 697.066000][ T3689] Workqueue: phy75 ieee80211_csa_finalize_work [ 697.072143][ T3689] Call Trace: [ 697.075411][ T3689] [ 697.078324][ T3689] dump_stack_lvl+0x1e3/0x2d0 [ 697.082995][ T3689] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 697.088627][ T3689] ? panic+0x860/0x860 [ 697.092689][ T3689] ? cfg80211_ch_switch_notify+0x200/0x470 [ 697.098478][ T3689] ? cfg80211_ch_switch_notify+0x200/0x470 [ 697.104273][ T3689] panic+0x318/0x860 [ 697.108194][ T3689] ? __warn+0x16a/0x300 [ 697.112378][ T3689] ? fb_is_primary_device+0xd0/0xd0 [ 697.117604][ T3689] ? ret_from_fork+0x1f/0x30 [ 697.122202][ T3689] ? cfg80211_ch_switch_notify+0x2b5/0x470 [ 697.127994][ T3689] __warn+0x2b2/0x300 [ 697.131967][ T3689] ? cfg80211_ch_switch_notify+0x2b5/0x470 [ 697.137771][ T3689] report_bug+0x1b7/0x2e0 [ 697.142093][ T3689] handle_bug+0x3d/0x70 [ 697.146230][ T3689] exc_invalid_op+0x16/0x40 [ 697.150711][ T3689] asm_exc_invalid_op+0x16/0x20 [ 697.155540][ T3689] RIP: 0010:cfg80211_ch_switch_notify+0x2b5/0x470 [ 697.161937][ T3689] Code: 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d5 01 00 00 e8 d0 91 d7 f7 0f 0b e9 9e fe ff ff e8 c4 91 d7 f7 0f 0b eb b1 e8 bb 91 d7 f7 <0f> 0b e9 fc fd ff ff e8 af 91 d7 f7 0f 0b e9 db fe ff ff e8 a3 91 [ 697.181540][ T3689] RSP: 0018:ffffc90003137be8 EFLAGS: 00010293 [ 697.187622][ T3689] RAX: ffffffff89a8c8b5 RBX: ffff888060f68c90 RCX: ffff888079038000 [ 697.195620][ T3689] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 697.203570][ T3689] RBP: 0000000000000000 R08: ffffffff89a8c6ab R09: fffffbfff1bd2c16 [ 697.211519][ T3689] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88807d2505c0 [ 697.219484][ T3689] R13: dffffc0000000000 R14: ffff888060f68cd8 R15: ffff888060f696c0 [ 697.227453][ T3689] ? cfg80211_ch_switch_notify+0xab/0x470 [ 697.233175][ T3689] ? cfg80211_ch_switch_notify+0x2b5/0x470 [ 697.238973][ T3689] ? cfg80211_ch_switch_notify+0x2b5/0x470 [ 697.244782][ T3689] ieee80211_csa_finalize_work+0xf8/0x140 [ 697.250509][ T3689] process_one_work+0x8a1/0x10c0 [ 697.255444][ T3689] ? worker_detach_from_pool+0x260/0x260 [ 697.261065][ T3689] ? _raw_spin_lock_irqsave+0x120/0x120 [ 697.266594][ T3689] ? kthread_data+0x4e/0xc0 [ 697.271079][ T3689] ? wq_worker_running+0x97/0x170 [ 697.276101][ T3689] worker_thread+0xaca/0x1280 [ 697.280781][ T3689] kthread+0x3f6/0x4f0 [ 697.284835][ T3689] ? rcu_lock_release+0x20/0x20 [ 697.289674][ T3689] ? kthread_blkcg+0xd0/0xd0 [ 697.294283][ T3689] ret_from_fork+0x1f/0x30 [ 697.298704][ T3689] [ 697.301998][ T3689] Kernel Offset: disabled [ 697.306803][ T3689] Rebooting in 86400 seconds..