last executing test programs: 5m40.686608768s ago: executing program 32 (id=202): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x11, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r0}, 0x18) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x4) write$P9_RREADDIR(r1, &(0x7f0000000200)={0xb, 0x29, 0x2, {0x205}}, 0xb) 5m27.579531901s ago: executing program 33 (id=225): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000000)=ANY=[@ANYBLOB="4a98000201"]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="f8000000160001000000000000000000000000000000000000000000000000006401010200"/64, @ANYRES32], 0xf8}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c8, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) 5m7.436915s ago: executing program 34 (id=268): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f00000004c0), &(0x7f0000001c40)=r1}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)) getpid() write(0xffffffffffffffff, &(0x7f0000000340), 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, @desc1}) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) 4m23.640324056s ago: executing program 35 (id=344): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2cb, &(0x7f0000000ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 3m58.971318453s ago: executing program 36 (id=410): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000100000000000000000010018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) clock_adjtime(0x0, &(0x7f00000006c0)={0x7fff, 0x1000000007fff, 0x0, 0x0, 0x10000000000000, 0x2c43, 0xfffffffffffffffa, 0x2, 0x0, 0x300, 0x0, 0x2902, 0x20, 0x100000001, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x5, 0x6}) 3m56.382205093s ago: executing program 37 (id=417): mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 3m46.300763298s ago: executing program 38 (id=433): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0xe) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x523, &(0x7f0000000c00)="$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") r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x14c) fallocate(r3, 0x0, 0xbf5, 0x2000402) truncate(&(0x7f0000000100)='./bus\x00', 0x1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x0, 0x0, 0x2, 0xfffefffffdffffff}) 2m53.120551515s ago: executing program 3 (id=604): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xb, 0x5, 0x4, 0xa932, 0x9, 0xffffffffffffffff, 0x800008}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) getrandom(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 2m52.263449642s ago: executing program 3 (id=607): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f0000000200)=ANY=[@ANYBLOB="726f6469722c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c636f6465706167653d3836342c636f6465706167653d3836352c0000000000000000636861727365743d6b6f933af927af1e9fff7bf9e0b68a9dff69382d72752c73686f72746e616d653d6d697865642c757466383d302c726f6469722c756e695f786c6174653d312c00"], 0x1, 0x26c, &(0x7f0000000340)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) rename(&(0x7f0000000600)='./file1\x00', &(0x7f0000000700)='./file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x101, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/249, 0xf9, 0x8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="240000002100010000000000030000000a00000000000000000000000500150002000000b35a08af2f67aab9ece231703dc503a5da1ff7344617d43e8577a0b3dd29fc723bbca4f257367025daa62e44ea2c403d481daf1aca0229d8ecdc4dbdf2288723923c070b0235577e31e31aee"], 0x24}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="07000000040000000800000001000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000800000000004007ebe920ac405de", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000a40)={0x4, r5, 'id0\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000400", @ANYRES32=r5, @ANYBLOB="0000000000000000d303000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000940)='btrfs_writepage_end_io_hook\x00', r6, 0x0, 0x1}, 0x18) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x22, &(0x7f0000000580)={[], [{@euid_gt}, {@fowner_lt}, {@dont_appraise}]}, 0x1, 0x4ab, &(0x7f0000000c80)="$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") r7 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r7, 0x0, 0xe, 0x1001f0) copy_file_range(r7, 0x0, r7, &(0x7f00000000c0)=0xc615, 0xb51, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) 2m48.026996383s ago: executing program 3 (id=614): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_io_uring_setup(0x6180, &(0x7f0000000740)={0x0, 0x8077, 0x6, 0x3, 0x10288}, 0x0, 0x0) 2m47.67578095s ago: executing program 3 (id=617): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x40) io_setup(0x9, &(0x7f0000000300)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) io_submit(r0, 0x0, &(0x7f0000000540)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x7, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 2m43.222074726s ago: executing program 3 (id=629): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) close(r0) 2m41.100246677s ago: executing program 8 (id=636): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'macvtap0\x00', @random="b40007350060"}) 2m41.020302618s ago: executing program 3 (id=637): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000000)=ANY=[@ANYBLOB="4a980002"]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000033000000ffff"], 0xf8}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c8, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2m40.496586969s ago: executing program 39 (id=637): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000000)=ANY=[@ANYBLOB="4a980002"]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000033000000ffff"], 0xf8}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c8, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2m40.44791938s ago: executing program 8 (id=640): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x100000001, 0x2003) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x8a0c40, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000001000100000800000400050000000000100001000000000020"], 0x24, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10, 0x103) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000380)='./bus\x00', 0x322020, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) 2m39.40473434s ago: executing program 9 (id=641): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setscheduler(r0, 0x6, &(0x7f00000006c0)=0x9b3f) r4 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000001400010300000000000000001e000000c1"], 0x18}}, 0x20000000) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x1, &(0x7f0000001080)=[0xee01]) setgroups(0x0, 0x0) keyctl$chown(0x4, r5, 0xee01, 0x0) keyctl$setperm(0x5, r5, 0x30925) keyctl$KEYCTL_MOVE(0x3, r5, 0x0, 0x0, 0x0) mount(&(0x7f0000000280)=@sg0, &(0x7f0000000600)='.\x00', &(0x7f0000000640)='qnx4\x00', 0x4a5, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='spmi_write_begin\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0, @ANYBLOB="00a4b5c371b7ffba00"]) link(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='./file0\x00') 2m38.214411733s ago: executing program 9 (id=642): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000000)={'nr0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x64000600) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x178, 0x194, 0x194, 0x178, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'sit0\x00', 'ip6_vti0\x00', {}, {}, 0x6, 0x0, 0x4a}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x20, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xffff, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) syz_open_procfs(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() 2m36.746195091s ago: executing program 9 (id=643): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x2, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, 0x0, 0x0) 2m35.474226286s ago: executing program 9 (id=644): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x40) io_setup(0x9, &(0x7f0000000300)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) io_submit(r0, 0x1, &(0x7f0000000540)=[0x0]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x7, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 2m34.864107418s ago: executing program 9 (id=649): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mm_page_free\x00', r0}, 0x18) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x5, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x2000, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, 0x0, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x24004800) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) 2m34.465511506s ago: executing program 8 (id=651): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) msgget(0x1, 0x2b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newtclass={0x460, 0x28, 0x104, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x8, 0x2}, {0x1, 0x1}}, [@tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_htb={{0x8}, {0x414, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0x9, 0x5, 0x7f, 0xffffffff, 0x400000, 0x100, 0x7, 0x6, 0x0, 0x4, 0x3, 0x6, 0x1, 0xffffffc7, 0x9, 0x5, 0x2, 0x8, 0xc54, 0x0, 0x4, 0x8, 0xffffff22, 0x7, 0x4, 0x7, 0x62c2, 0x2, 0x5, 0x9, 0x0, 0x8, 0x1, 0x0, 0x7, 0x9, 0x0, 0x6, 0x4, 0x9, 0x3, 0x2, 0xffff, 0x401, 0x8, 0x3ff, 0x100, 0x9, 0x6, 0x80, 0x2, 0x3, 0x8, 0x7, 0x3, 0xf3c9, 0x4f, 0x4, 0x7, 0x6, 0x8, 0x1, 0x9, 0x3, 0x1, 0xd67d, 0xb8f4, 0x6, 0xfff, 0x3ff, 0xd9, 0x5, 0x6, 0x9, 0x8000, 0x7af, 0xffffffff, 0x5, 0x6, 0x4, 0xbb, 0x3dff, 0x3, 0xfffffff9, 0x3, 0x4, 0xdc, 0x4, 0x9, 0x1ff, 0x20, 0x3, 0x5, 0x6, 0x639, 0x7, 0xfffffffe, 0xda, 0x6, 0x2, 0x0, 0x65f, 0x1, 0x8, 0x4, 0x100, 0x7, 0xffe, 0x3, 0x38a, 0xfffffffe, 0x2, 0x7, 0x0, 0x0, 0xc, 0x79, 0x7ff, 0x9a93, 0x5a, 0x8, 0x5, 0x5, 0x4, 0x1ff, 0x280000, 0x2, 0x5, 0x6d, 0x9068, 0x3, 0x7a5, 0xe0, 0x8, 0x7fffffff, 0x6, 0x7, 0x9, 0x8, 0x1, 0x2, 0x2, 0x784aeebe, 0x9, 0x9, 0x8, 0x9, 0x3, 0x4, 0x4, 0x140000, 0x1000, 0x7, 0x100, 0x6f, 0x80, 0x401, 0x3, 0xd, 0x4, 0x40, 0x7ff, 0x9, 0x9, 0x1, 0x4, 0x3, 0xf, 0x2, 0x8, 0x0, 0x5, 0x3ff, 0x6, 0x2, 0x101, 0x8, 0x7, 0xe3d2, 0x8, 0x9, 0x9, 0x3cc, 0xe0d5, 0xd, 0xfffffff8, 0x0, 0x8, 0x4, 0x2, 0xfffffff7, 0xe, 0x6, 0x5, 0x481, 0xcd, 0x10, 0x1, 0x6, 0xd3, 0x9, 0x5, 0x756, 0x175, 0x6, 0xffff, 0x1ff, 0xc, 0x0, 0xfff, 0x9, 0xff, 0x8, 0x0, 0xf10, 0x6, 0x9db, 0x2, 0x1, 0x5, 0x200, 0x8001, 0x800, 0x1ff, 0x7, 0x5, 0x1, 0x6, 0x1, 0x9, 0x0, 0x3c7, 0x9, 0xc807, 0xf2, 0x1, 0x800, 0x4, 0x10000, 0x5, 0x5, 0x64, 0x6, 0x0, 0x1000, 0xc693, 0x8, 0x1, 0x678, 0x3c, 0xffffffff, 0x4, 0x80000000, 0x7, 0x5, 0x7]}, @TCA_HTB_RATE64={0xc, 0x6, 0x8}]}}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x6, 0x4}}]}, 0x460}, 0x1, 0x0, 0x0, 0x4008000}, 0x4008004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0x9) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) ioctl$sock_ifreq(0xffffffffffffffff, 0x8943, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue}) shutdown(0xffffffffffffffff, 0x1) fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) socket$inet6(0xa, 0x5, 0x6) syz_usb_connect(0x5, 0x0, 0x0, 0x0) sync() r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r6 = syz_io_uring_complete(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x15, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000007055090100000000009500000000000000851000000500000018540000070000000000000000000000184a1f00fbffffff000000000000000039a52000f0ffffffbf91008500000084000000b700000000000000950000"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000180)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x3, 0xe400, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000280)=[{0x5, 0x3, 0xc, 0xa}, {0x5, 0x4, 0x1, 0x9}, {0x0, 0x1, 0xe, 0x3}, {0x4, 0x3, 0x7, 0x5}], 0x10, 0x92}, 0x94) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r7}, 0x4) 2m32.419341515s ago: executing program 9 (id=654): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000780), &(0x7f0000000200)='./file0\x00', 0x2008410, &(0x7f0000000140)=ANY=[], 0x1, 0x559b, &(0x7f0000005d40)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dce8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00'}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) 2m31.12958917s ago: executing program 40 (id=654): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000780), &(0x7f0000000200)='./file0\x00', 0x2008410, &(0x7f0000000140)=ANY=[], 0x1, 0x559b, &(0x7f0000005d40)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dce8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00'}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) 2m30.780284077s ago: executing program 8 (id=658): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x40) io_setup(0x9, &(0x7f0000000300)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) io_submit(r0, 0x1, &(0x7f0000000540)=[0x0]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x7, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 2m30.130685979s ago: executing program 8 (id=660): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x100000001, 0x2003) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x8a0c40, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000001000100000800000400050000000000100001000000000020"], 0x24, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10, 0x103) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000380)='./bus\x00', 0x322020, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) 2m29.883925114s ago: executing program 6 (id=662): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8, &(0x7f00000002c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$TCFLSH(r1, 0x400455c8, 0x4) r6 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000100)={0x10000000}) 2m28.487361531s ago: executing program 6 (id=664): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x3, [@var={0x5, 0x0, 0x0, 0xe, 0x3, 0x1}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xb, 0x4}, {0xc, 0x3}, {0x4, 0x5}]}, @var={0x9, 0x0, 0x0, 0xe, 0x1, 0x2}]}, {0x0, [0x5f]}}, &(0x7f0000000380)=""/228, 0x5f, 0xe4, 0x0, 0x3}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/233, 0xe9}}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000014c0)='!%&\x00', 0x0, 0xffffffffffffffff) syslog(0x2, &(0x7f0000000400)=""/126, 0x7e) 2m28.244360145s ago: executing program 6 (id=665): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) msgget(0x1, 0x2b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newtclass={0x460, 0x28, 0x104, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x8, 0x2}, {0x1, 0x1}}, [@tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_htb={{0x8}, {0x414, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0x9, 0x5, 0x7f, 0xffffffff, 0x400000, 0x100, 0x7, 0x6, 0x0, 0x4, 0x3, 0x6, 0x1, 0xffffffc7, 0x9, 0x5, 0x2, 0x8, 0xc54, 0x0, 0x4, 0x8, 0xffffff22, 0x7, 0x4, 0x7, 0x62c2, 0x2, 0x5, 0x9, 0x0, 0x8, 0x1, 0x0, 0x7, 0x9, 0x0, 0x6, 0x4, 0x9, 0x3, 0x2, 0xffff, 0x401, 0x8, 0x3ff, 0x100, 0x9, 0x6, 0x80, 0x2, 0x3, 0x8, 0x7, 0x3, 0xf3c9, 0x4f, 0x4, 0x7, 0x6, 0x8, 0x1, 0x9, 0x3, 0x1, 0xd67d, 0xb8f4, 0x6, 0xfff, 0x3ff, 0xd9, 0x5, 0x6, 0x9, 0x8000, 0x7af, 0xffffffff, 0x5, 0x6, 0x4, 0xbb, 0x3dff, 0x3, 0xfffffff9, 0x3, 0x4, 0xdc, 0x4, 0x9, 0x1ff, 0x20, 0x3, 0x5, 0x6, 0x639, 0x7, 0xfffffffe, 0xda, 0x6, 0x2, 0x0, 0x65f, 0x1, 0x8, 0x4, 0x100, 0x7, 0xffe, 0x3, 0x38a, 0xfffffffe, 0x2, 0x7, 0x0, 0x0, 0xc, 0x79, 0x7ff, 0x9a93, 0x5a, 0x8, 0x5, 0x5, 0x4, 0x1ff, 0x280000, 0x2, 0x5, 0x6d, 0x9068, 0x3, 0x7a5, 0xe0, 0x8, 0x7fffffff, 0x6, 0x7, 0x9, 0x8, 0x1, 0x2, 0x2, 0x784aeebe, 0x9, 0x9, 0x8, 0x9, 0x3, 0x4, 0x4, 0x140000, 0x1000, 0x7, 0x100, 0x6f, 0x80, 0x401, 0x3, 0xd, 0x4, 0x40, 0x7ff, 0x9, 0x9, 0x1, 0x4, 0x3, 0xf, 0x2, 0x8, 0x0, 0x5, 0x3ff, 0x6, 0x2, 0x101, 0x8, 0x7, 0xe3d2, 0x8, 0x9, 0x9, 0x3cc, 0xe0d5, 0xd, 0xfffffff8, 0x0, 0x8, 0x4, 0x2, 0xfffffff7, 0xe, 0x6, 0x5, 0x481, 0xcd, 0x10, 0x1, 0x6, 0xd3, 0x9, 0x5, 0x756, 0x175, 0x6, 0xffff, 0x1ff, 0xc, 0x0, 0xfff, 0x9, 0xff, 0x8, 0x0, 0xf10, 0x6, 0x9db, 0x2, 0x1, 0x5, 0x200, 0x8001, 0x800, 0x1ff, 0x7, 0x5, 0x1, 0x6, 0x1, 0x9, 0x0, 0x3c7, 0x9, 0xc807, 0xf2, 0x1, 0x800, 0x4, 0x10000, 0x5, 0x5, 0x64, 0x6, 0x0, 0x1000, 0xc693, 0x8, 0x1, 0x678, 0x3c, 0xffffffff, 0x4, 0x80000000, 0x7, 0x5, 0x7]}, @TCA_HTB_RATE64={0xc, 0x6, 0x8}]}}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x6, 0x4}}]}, 0x460}, 0x1, 0x0, 0x0, 0x4008000}, 0x4008004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0x9) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) ioctl$sock_ifreq(0xffffffffffffffff, 0x8943, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue}) shutdown(0xffffffffffffffff, 0x1) fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) socket$inet6(0xa, 0x5, 0x6) syz_usb_connect(0x5, 0x0, 0x0, 0x0) sync() r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r6 = syz_io_uring_complete(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x15, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000007055090100000000009500000000000000851000000500000018540000070000000000000000000000184a1f00fbffffff000000000000000039a52000f0ffffffbf91008500000084000000b700000000000000950000"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000180)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x3, 0xe400, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000280)=[{0x5, 0x3, 0xc, 0xa}, {0x5, 0x4, 0x1, 0x9}, {0x0, 0x1, 0xe, 0x3}, {0x4, 0x3, 0x7, 0x5}], 0x10, 0x92}, 0x94) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) 2m27.99704691s ago: executing program 8 (id=667): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x4080, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r3, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) 2m26.867257902s ago: executing program 41 (id=667): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x4080, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r3, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) 2m25.092388027s ago: executing program 6 (id=669): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x40) io_setup(0x9, &(0x7f0000000300)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) io_submit(r0, 0x1, &(0x7f0000000540)=[0x0]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x7, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 2m24.473811128s ago: executing program 6 (id=670): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x142000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) bind$inet6(r1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) read$snapshot(r4, 0x0, 0xffffffbf) read$watch_queue(r4, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) 2m19.704450011s ago: executing program 6 (id=677): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x40) io_setup(0x9, &(0x7f0000000300)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, 0x0}]) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x7, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 2m19.380939157s ago: executing program 42 (id=677): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x40) io_setup(0x9, &(0x7f0000000300)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, 0x0}]) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x7, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 2m0.194877918s ago: executing program 5 (id=656): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r0, 0x0, 0x20094) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_tcp(0x0, &(0x7f0000000800)='.\x00', &(0x7f0000000840), 0x8010, &(0x7f0000000880)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[], [{@seclabel}]}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r4) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f00"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m56.496805259s ago: executing program 5 (id=699): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x4e02, 0x7ffe, @remote, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1m56.160237725s ago: executing program 5 (id=701): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f0000000200)=ANY=[@ANYBLOB="726f6469722c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c636f6465706167653d3836342c636f6465706167653d3836352c0000000000000000636861727365743d6b6f933af927af1e9fff7bf9e0b68a9dff69382d72752c73686f72746e616d653d6d697865642c757466383d302c726f6469722c756e695f786c6174653d312c00"], 0x1, 0x26c, &(0x7f0000000340)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) rename(&(0x7f0000000600)='./file1\x00', &(0x7f0000000700)='./file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x101, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/249, 0xf9, 0x8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="240000002100010000000000030000000a00000000000000000000000500150002000000b35a08af2f67aab9ece231703dc503a5da1ff7344617d43e8577a0b3dd29fc723bbca4f257367025daa62e44ea2c403d481daf1aca0229d8ecdc4dbdf2288723923c070b0235577e31e31aee"], 0x24}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="07000000040000000800000001000000000000", @ANYRES32=r5, @ANYBLOB="00000000000000000000000000800000000004007ebe920ac405de", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000a40)={0x4, r7, 'id0\x00'}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000400", @ANYRES32=r7, @ANYBLOB="0000000000000000d303000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000940)='btrfs_writepage_end_io_hook\x00', r8, 0x0, 0x1}, 0x18) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x22, &(0x7f0000000580)={[], [{@euid_gt}, {@fowner_lt}, {@dont_appraise}]}, 0x1, 0x4ab, &(0x7f0000000c80)="$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") r9 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r9, 0x0, 0xe, 0x1001f0) copy_file_range(r9, 0x0, r9, &(0x7f00000000c0)=0xc615, 0xb51, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) 1m53.827851811s ago: executing program 5 (id=704): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) msgget(0x1, 0x2b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newtclass={0x460, 0x28, 0x104, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x8, 0x2}, {0x1, 0x1}}, [@tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_htb={{0x8}, {0x414, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0x9, 0x5, 0x7f, 0xffffffff, 0x400000, 0x100, 0x7, 0x6, 0x0, 0x4, 0x3, 0x6, 0x1, 0xffffffc7, 0x9, 0x5, 0x2, 0x8, 0xc54, 0x0, 0x4, 0x8, 0xffffff22, 0x7, 0x4, 0x7, 0x62c2, 0x2, 0x5, 0x9, 0x0, 0x8, 0x1, 0x0, 0x7, 0x9, 0x0, 0x6, 0x4, 0x9, 0x3, 0x2, 0xffff, 0x401, 0x8, 0x3ff, 0x100, 0x9, 0x6, 0x80, 0x2, 0x3, 0x8, 0x7, 0x3, 0xf3c9, 0x4f, 0x4, 0x7, 0x6, 0x8, 0x1, 0x9, 0x3, 0x1, 0xd67d, 0xb8f4, 0x6, 0xfff, 0x3ff, 0xd9, 0x5, 0x6, 0x9, 0x8000, 0x7af, 0xffffffff, 0x5, 0x6, 0x4, 0xbb, 0x3dff, 0x3, 0xfffffff9, 0x3, 0x4, 0xdc, 0x4, 0x9, 0x1ff, 0x20, 0x3, 0x5, 0x6, 0x639, 0x7, 0xfffffffe, 0xda, 0x6, 0x2, 0x0, 0x65f, 0x1, 0x8, 0x4, 0x100, 0x7, 0xffe, 0x3, 0x38a, 0xfffffffe, 0x2, 0x7, 0x0, 0x0, 0xc, 0x79, 0x7ff, 0x9a93, 0x5a, 0x8, 0x5, 0x5, 0x4, 0x1ff, 0x280000, 0x2, 0x5, 0x6d, 0x9068, 0x3, 0x7a5, 0xe0, 0x8, 0x7fffffff, 0x6, 0x7, 0x9, 0x8, 0x1, 0x2, 0x2, 0x784aeebe, 0x9, 0x9, 0x8, 0x9, 0x3, 0x4, 0x4, 0x140000, 0x1000, 0x7, 0x100, 0x6f, 0x80, 0x401, 0x3, 0xd, 0x4, 0x40, 0x7ff, 0x9, 0x9, 0x1, 0x4, 0x3, 0xf, 0x2, 0x8, 0x0, 0x5, 0x3ff, 0x6, 0x2, 0x101, 0x8, 0x7, 0xe3d2, 0x8, 0x9, 0x9, 0x3cc, 0xe0d5, 0xd, 0xfffffff8, 0x0, 0x8, 0x4, 0x2, 0xfffffff7, 0xe, 0x6, 0x5, 0x481, 0xcd, 0x10, 0x1, 0x6, 0xd3, 0x9, 0x5, 0x756, 0x175, 0x6, 0xffff, 0x1ff, 0xc, 0x0, 0xfff, 0x9, 0xff, 0x8, 0x0, 0xf10, 0x6, 0x9db, 0x2, 0x1, 0x5, 0x200, 0x8001, 0x800, 0x1ff, 0x7, 0x5, 0x1, 0x6, 0x1, 0x9, 0x0, 0x3c7, 0x9, 0xc807, 0xf2, 0x1, 0x800, 0x4, 0x10000, 0x5, 0x5, 0x64, 0x6, 0x0, 0x1000, 0xc693, 0x8, 0x1, 0x678, 0x3c, 0xffffffff, 0x4, 0x80000000, 0x7, 0x5, 0x7]}, @TCA_HTB_RATE64={0xc, 0x6, 0x8}]}}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x6, 0x4}}]}, 0x460}, 0x1, 0x0, 0x0, 0x4008000}, 0x4008004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0x9) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) ioctl$sock_ifreq(0xffffffffffffffff, 0x8943, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue}) shutdown(0xffffffffffffffff, 0x1) fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) socket$inet6(0xa, 0x5, 0x6) syz_usb_connect(0x5, 0x0, 0x0, 0x0) sync() r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r6 = syz_io_uring_complete(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x15, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000007055090100000000009500000000000000851000000500000018540000070000000000000000000000184a1f00fbffffff000000000000000039a52000f0ffffffbf91008500000084000000b700000000000000950000"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000180)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x3, 0xe400, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000280)=[{0x5, 0x3, 0xc, 0xa}, {0x5, 0x4, 0x1, 0x9}, {0x0, 0x1, 0xe, 0x3}, {0x4, 0x3, 0x7, 0x5}], 0x10, 0x92}, 0x94) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r7}, 0x8) 1m50.460721716s ago: executing program 5 (id=714): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8, &(0x7f00000002c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$TCFLSH(r1, 0x400455c8, 0x4) r6 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, 0x0) 1m48.540410963s ago: executing program 5 (id=717): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x894a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000", @ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x50f, &(0x7f0000001000)="$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") ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00') lseek(r6, 0x2000, 0x0) open(0x0, 0x143142, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m33.448188364s ago: executing program 43 (id=717): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x894a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000", @ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x50f, &(0x7f0000001000)="$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") ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00') lseek(r6, 0x2000, 0x0) open(0x0, 0x143142, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 11.348628731s ago: executing program 4 (id=937): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000140)={'trans=rdma,', {}, 0x2c, {[{@common=@privport}]}}) 9.655720043s ago: executing program 1 (id=944): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) msgget(0x1, 0x2b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newtclass={0x460, 0x28, 0x104, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x8, 0x2}, {0x1, 0x1}}, [@tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_htb={{0x8}, {0x414, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0x9, 0x5, 0x7f, 0xffffffff, 0x400000, 0x100, 0x7, 0x6, 0x0, 0x4, 0x3, 0x6, 0x1, 0xffffffc7, 0x9, 0x5, 0x2, 0x8, 0xc54, 0x0, 0x4, 0x8, 0xffffff22, 0x7, 0x4, 0x7, 0x62c2, 0x2, 0x5, 0x9, 0x0, 0x8, 0x1, 0x0, 0x7, 0x9, 0x0, 0x6, 0x4, 0x9, 0x3, 0x2, 0xffff, 0x401, 0x8, 0x3ff, 0x100, 0x9, 0x6, 0x80, 0x2, 0x3, 0x8, 0x7, 0x3, 0xf3c9, 0x4f, 0x4, 0x7, 0x6, 0x8, 0x1, 0x9, 0x3, 0x1, 0xd67d, 0xb8f4, 0x6, 0xfff, 0x3ff, 0xd9, 0x5, 0x6, 0x9, 0x8000, 0x7af, 0xffffffff, 0x5, 0x6, 0x4, 0xbb, 0x3dff, 0x3, 0xfffffff9, 0x3, 0x4, 0xdc, 0x4, 0x9, 0x1ff, 0x20, 0x3, 0x5, 0x6, 0x639, 0x7, 0xfffffffe, 0xda, 0x6, 0x2, 0x0, 0x65f, 0x1, 0x8, 0x4, 0x100, 0x7, 0xffe, 0x3, 0x38a, 0xfffffffe, 0x2, 0x7, 0x0, 0x0, 0xc, 0x79, 0x7ff, 0x9a93, 0x5a, 0x8, 0x5, 0x5, 0x4, 0x1ff, 0x280000, 0x2, 0x5, 0x6d, 0x9068, 0x3, 0x7a5, 0xe0, 0x8, 0x7fffffff, 0x6, 0x7, 0x9, 0x8, 0x1, 0x2, 0x2, 0x784aeebe, 0x9, 0x9, 0x8, 0x9, 0x3, 0x4, 0x4, 0x140000, 0x1000, 0x7, 0x100, 0x6f, 0x80, 0x401, 0x3, 0xd, 0x4, 0x40, 0x7ff, 0x9, 0x9, 0x1, 0x4, 0x3, 0xf, 0x2, 0x8, 0x0, 0x5, 0x3ff, 0x6, 0x2, 0x101, 0x8, 0x7, 0xe3d2, 0x8, 0x9, 0x9, 0x3cc, 0xe0d5, 0xd, 0xfffffff8, 0x0, 0x8, 0x4, 0x2, 0xfffffff7, 0xe, 0x6, 0x5, 0x481, 0xcd, 0x10, 0x1, 0x6, 0xd3, 0x9, 0x5, 0x756, 0x175, 0x6, 0xffff, 0x1ff, 0xc, 0x0, 0xfff, 0x9, 0xff, 0x8, 0x0, 0xf10, 0x6, 0x9db, 0x2, 0x1, 0x5, 0x200, 0x8001, 0x800, 0x1ff, 0x7, 0x5, 0x1, 0x6, 0x1, 0x9, 0x0, 0x3c7, 0x9, 0xc807, 0xf2, 0x1, 0x800, 0x4, 0x10000, 0x5, 0x5, 0x64, 0x6, 0x0, 0x1000, 0xc693, 0x8, 0x1, 0x678, 0x3c, 0xffffffff, 0x4, 0x80000000, 0x7, 0x5, 0x7]}, @TCA_HTB_RATE64={0xc, 0x6, 0x8}]}}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x6, 0x4}}]}, 0x460}, 0x1, 0x0, 0x0, 0x4008000}, 0x4008004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0x9) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) ioctl$sock_ifreq(0xffffffffffffffff, 0x8943, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue}) shutdown(0xffffffffffffffff, 0x1) fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) socket$inet6(0xa, 0x5, 0x6) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r6 = syz_io_uring_complete(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x15, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000007055090100000000009500000000000000851000000500000018540000070000000000000000000000184a1f00fbffffff000000000000000039a52000f0ffffffbf91008500000084000000b700000000000000950000"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000180)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x3, 0xe400, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000280)=[{0x5, 0x3, 0xc, 0xa}, {0x5, 0x4, 0x1, 0x9}, {0x0, 0x1, 0xe, 0x3}, {0x4, 0x3, 0x7, 0x5}], 0x10, 0x92}, 0x94) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r7}, 0x8) 8.29733045s ago: executing program 0 (id=950): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x55, &(0x7f0000000100)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}) io_uring_enter(r1, 0x3498, 0x969, 0x0, 0x0, 0x0) 8.021889335s ago: executing program 0 (id=953): socket$igmp(0x2, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x4}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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") 6.829494458s ago: executing program 0 (id=957): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) 6.504061714s ago: executing program 1 (id=960): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x100000001, 0x2003) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x8a0c40, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000001000100000800000400050000000000100001000000000020"], 0x24, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10, 0x103) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000380)='./bus\x00', 0x322020, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) 6.291752768s ago: executing program 4 (id=961): socketpair(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x8, 0x4, 0x2}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, 0x0}, 0x20) 5.400313235s ago: executing program 4 (id=963): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 5.384749706s ago: executing program 1 (id=964): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31", @ANYBLOB], 0x15c}}, 0x0) 3.322178695s ago: executing program 2 (id=968): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x16, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.321957275s ago: executing program 4 (id=969): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = syz_io_uring_setup(0x1052, &(0x7f0000000540)={0x0, 0x758e, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 3.155205789s ago: executing program 1 (id=970): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 2.978191422s ago: executing program 4 (id=972): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000140)={'trans=rdma,', {}, 0x2c, {[{@common=@privport}]}}) 2.884616804s ago: executing program 2 (id=973): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x10, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000811800028004000100100003800c"], 0x44}}, 0x0) 2.884439954s ago: executing program 1 (id=974): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c000000"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r0, 0x0, 0x200000000000006}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x5a3, &(0x7f00000005c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000180)="f7", 0x1, 0x200980) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r3, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) 2.711384067s ago: executing program 7 (id=975): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, 0x0, 0x30004001) open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8], 0x48) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f00000004c0), &(0x7f0000001c40)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 2.711208937s ago: executing program 0 (id=976): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x100000001, 0x2003) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x8a0c40, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000001000100000800000400050000000000100001000000000020"], 0x24, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10, 0x103) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000380)='./bus\x00', 0x322020, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) 2.619666289s ago: executing program 2 (id=977): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r0, &(0x7f00000004c0)=""/57, 0x39) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0x3, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) io_uring_enter(r2, 0x3516, 0xddd3, 0x4, 0x0, 0x0) 2.503371832s ago: executing program 4 (id=978): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setscheduler(r0, 0x6, &(0x7f00000006c0)=0x9b3f) r4 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000001400010300000000000000001e000000c1"], 0x18}}, 0x20000000) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x1, &(0x7f0000001080)=[0xee01]) setgroups(0x0, 0x0) keyctl$chown(0x4, r5, 0xee01, 0x0) keyctl$setperm(0x5, r5, 0x30925) keyctl$KEYCTL_MOVE(0x3, r5, 0x0, 0x0, 0x0) mount(&(0x7f0000000280)=@sg0, &(0x7f0000000600)='.\x00', &(0x7f0000000640)='qnx4\x00', 0x4a5, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='spmi_write_begin\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000020000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="00a4b5c371b7ffba00"]) link(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='./file0\x00') 2.445680402s ago: executing program 7 (id=979): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f0000000200)=ANY=[@ANYBLOB="726f6469722c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c636f6465706167653d3836342c636f6465706167653d3836352c0000000000000000636861727365743d6b6f933af927af1e9fff7bf9e0b68a9dff69382d72752c73686f72746e616d653d6d697865642c757466383d302c726f6469722c756e695f786c6174653d312c00"], 0x1, 0x26c, &(0x7f0000000340)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) rename(&(0x7f0000000600)='./file1\x00', &(0x7f0000000700)='./file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x101, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/249, 0xf9, 0x8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="240000002100010000000000030000000a00000000000000000000000500150002000000b35a08af2f67aab9ece231703dc503a5da1ff7344617d43e8577a0b3dd29fc723bbca4f257367025daa62e44ea2c403d481daf1aca0229d8ecdc4dbdf2288723923c070b0235577e31e31aee"], 0x24}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="07000000040000000800000001000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000800000000004007ebe920ac405de", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000a40)={0x4, r5, 'id0\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000400", @ANYRES32=r5, @ANYBLOB="0000000000000000d303000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000940)='btrfs_writepage_end_io_hook\x00', r6, 0x0, 0x1}, 0x18) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x22, &(0x7f0000000580)={[], [{@euid_gt}, {@fowner_lt}, {@dont_appraise}]}, 0x1, 0x4ab, &(0x7f0000000c80)="$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") r7 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r7, 0x0, 0xe, 0x1001f0) copy_file_range(r7, 0x0, r7, &(0x7f00000000c0)=0xc615, 0xb51, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) 1.252763505s ago: executing program 2 (id=980): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 1.184291567s ago: executing program 7 (id=981): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeb0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r0}, 0x18) syz_io_uring_setup(0x893, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x1, 0x220}, &(0x7f0000000000), &(0x7f0000000340)) 1.096498869s ago: executing program 1 (id=982): syz_open_dev$usbfs(0x0, 0x205, 0x2581) unshare(0x22020600) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x20, 0x3e, 0x107, 0xfffffffe, 0x0, {0x4, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x1c800) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r1, 0xfffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) read$qrtrtun(r3, 0x0, 0xeffd) 813.271794ms ago: executing program 7 (id=983): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000081, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) close_range(r0, r0, 0x200000000000000) 720.885466ms ago: executing program 0 (id=984): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) r2 = gettid() rt_sigqueueinfo(r2, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) 244.640305ms ago: executing program 7 (id=985): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000000000001"], 0x20, 0x4060019}, 0x20000841) 239.787975ms ago: executing program 2 (id=986): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1a, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) getgroups(0x0, 0x0) 234.110605ms ago: executing program 0 (id=987): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) fallocate(r0, 0x8, 0x4000, 0x4000) 44.538099ms ago: executing program 7 (id=988): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000001480)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r2, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 0s ago: executing program 2 (id=989): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) getgroups(0x0, 0x0) kernel console output (not intermixed with test programs): (loop8): Try to recover 1th superblock, ret: 0 [ 267.871237][ T5950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 267.903293][ T5950] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 267.906322][ T6451] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 267.934153][ T5950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 267.971255][ T6156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.985397][ T6451] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 267.990336][ T6156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.022538][ T6156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.028143][ T6451] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 268.063867][ T6156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.083692][ T6156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.114536][ T6156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.138573][ T6156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.154947][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 268.175811][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 268.211862][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 268.230920][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 268.278729][ T6258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.354573][ T5849] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 268.354599][ T5849] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 268.392312][ T5849] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 268.432876][ T5849] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 268.471763][ T5849] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 268.498647][ T5849] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 268.546142][ T5849] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix. [ 268.727466][ T5950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.779910][ T5950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.817662][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 269.560317][ T4348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.586601][ T4348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.693941][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 269.722199][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.740356][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.761738][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.783100][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.806901][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 269.831740][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 270.266768][ T6503] loop8: detected capacity change from 0 to 512 [ 270.383212][ T6503] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 270.392633][ T6503] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 270.407002][ T6503] netlink: 'syz.8.472': attribute type 16 has an invalid length. [ 270.418976][ T6503] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 270.428560][ T6503] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 270.533694][ T6514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.477'. [ 270.544496][ T6509] loop6: detected capacity change from 0 to 256 [ 270.614359][ T6514] IPVS: Error joining to the multicast group [ 270.819842][ T6516] tipc: Started in network mode [ 270.824840][ T6516] tipc: Node identity 7f000001, cluster identity 4711 [ 270.832264][ T6516] tipc: Enabled bearer , priority 10 [ 271.642891][ T27] audit: type=1800 audit(1758418369.857:469): pid=6520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.476" name="file1" dev="loop6" ino=1048646 res=0 errno=0 [ 271.810546][ T5849] EXT4-fs (loop8): unmounting filesystem. [ 271.824246][ T5950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 271.899712][ T5950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 271.946291][ T4319] tipc: Node number set to 2130706433 [ 272.020123][ T6258] device veth0_vlan entered promiscuous mode [ 273.256987][ T47] Bluetooth: hci0: command 0x0406 tx timeout [ 273.293341][ T5634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 273.323526][ T5634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 273.405664][ T6258] device veth1_vlan entered promiscuous mode [ 273.432632][ T5634] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 273.498555][ T5634] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 273.529186][ T6539] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 273.535712][ T6539] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 273.551425][ T6539] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 273.558917][ T6539] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 273.566254][ T6539] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 273.602380][ T6539] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 273.611112][ T6539] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 273.617520][ T6539] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 273.627686][ T6539] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 273.635028][ T6539] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 273.641506][ T6539] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 273.649876][ T6539] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 273.657185][ T6539] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 273.663157][ T6539] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 273.672315][ T6539] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 273.816249][ T5634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 273.836656][ T5634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 273.878507][ T27] audit: type=1326 audit(1758418372.117:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.3.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3f58ec29 code=0x7ffc0000 [ 273.904981][ T6258] device veth0_macvtap entered promiscuous mode [ 273.949575][ T6258] device veth1_macvtap entered promiscuous mode [ 273.971828][ T27] audit: type=1326 audit(1758418372.137:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.3.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f4d3f58ec29 code=0x7ffc0000 [ 274.062545][ T6553] loop9: detected capacity change from 0 to 128 [ 274.078186][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.167179][ T27] audit: type=1326 audit(1758418372.137:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.3.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3f58ec29 code=0x7ffc0000 [ 274.203149][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.261632][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.315773][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.347743][ T27] audit: type=1800 audit(1758418372.477:473): pid=6553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.486" name="bus" dev="loop9" ino=1048647 res=0 errno=0 [ 274.391330][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.430817][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.445104][ T6559] syz.9.486: attempt to access beyond end of device [ 274.445104][ T6559] loop9: rw=2049, sector=409, nr_sectors = 632 limit=128 [ 274.482983][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.523647][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.578448][ T6258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.613055][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 274.642556][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 274.687056][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 274.702823][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 274.730396][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.770450][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.804669][ T27] audit: type=1326 audit(1758418373.037:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3f58ec29 code=0x7ffc0000 [ 274.810446][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.872813][ T6569] futex_wake_op: syz.6.489 tries to shift op by -1; fix this program [ 274.874585][ T27] audit: type=1326 audit(1758418373.037:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3f58ec29 code=0x7ffc0000 [ 274.910437][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.923841][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.937189][ T27] audit: type=1326 audit(1758418373.077:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d3f58ec29 code=0x7ffc0000 [ 274.969828][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.983014][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.994368][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.005059][ T27] audit: type=1326 audit(1758418373.077:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3f58ec29 code=0x7ffc0000 [ 275.031745][ T6258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.042970][ T27] audit: type=1326 audit(1758418373.077:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3f58ec29 code=0x7ffc0000 [ 275.067463][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 275.083249][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 275.482450][ T47] Bluetooth: hci0: command 0x0c1a tx timeout [ 275.508349][ T6577] netlink: 4 bytes leftover after parsing attributes in process `syz.9.493'. [ 275.606481][ T47] Bluetooth: hci2: command 0x0c1a tx timeout [ 275.687702][ T47] Bluetooth: hci4: command 0x0c1a tx timeout [ 275.693837][ T47] Bluetooth: hci3: command 0x0c1a tx timeout [ 275.701628][ T4278] Bluetooth: hci1: command 0x0c1a tx timeout [ 275.735260][ T6587] netlink: 256 bytes leftover after parsing attributes in process `syz.6.495'. [ 275.764379][ T4578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.785756][ T4578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.847945][ T5634] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 275.891489][ T5634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.913960][ T5634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.955446][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 276.262088][ T6594] fuse: Unknown parameter 'grou00000000000000000000' [ 277.052444][ T27] kauditd_printk_skb: 66 callbacks suppressed [ 277.052460][ T27] audit: type=1326 audit(1758418375.287:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed94f8ec29 code=0x7ffc0000 [ 277.181548][ T27] audit: type=1326 audit(1758418375.317:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed94f8ec29 code=0x7ffc0000 [ 277.311687][ T27] audit: type=1326 audit(1758418375.317:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed94f8ec29 code=0x7ffc0000 [ 277.579803][ T4278] Bluetooth: hci0: command 0x0406 tx timeout [ 277.593324][ T27] audit: type=1326 audit(1758418375.317:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed94f8ec29 code=0x7ffc0000 [ 277.766547][ T6616] xt_CT: You must specify a L4 protocol and not use inversions on it [ 277.787211][ T6616] loop1: detected capacity change from 0 to 1024 [ 277.795984][ T4278] Bluetooth: hci1: command 0x0406 tx timeout [ 277.802172][ T4284] Bluetooth: hci2: command 0x0406 tx timeout [ 278.467846][ T47] Bluetooth: hci3: command 0x0406 tx timeout [ 278.471670][ T4284] Bluetooth: hci4: command 0x0406 tx timeout [ 278.509817][ T5145] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 278.566826][ T27] audit: type=1326 audit(1758418375.347:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed94f8ec29 code=0x7ffc0000 [ 278.748045][ T27] audit: type=1326 audit(1758418375.347:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed94f8ec29 code=0x7ffc0000 [ 278.886110][ T27] audit: type=1326 audit(1758418375.347:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed94f8ec29 code=0x7ffc0000 [ 279.076195][ T27] audit: type=1326 audit(1758418375.347:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed94f8ec29 code=0x7ffc0000 [ 279.233964][ T27] audit: type=1326 audit(1758418375.347:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed94f8ec29 code=0x7ffc0000 [ 279.258865][ T27] audit: type=1326 audit(1758418375.347:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed94f8ec29 code=0x7ffc0000 [ 280.293675][ T6656] netlink: 36 bytes leftover after parsing attributes in process `syz.9.517'. [ 280.689090][ T6666] xt_CT: You must specify a L4 protocol and not use inversions on it [ 280.777716][ T6666] loop3: detected capacity change from 0 to 1024 [ 281.705219][ T6676] sg_write: data in/out 327804/1 bytes for SCSI command 0x1c-- guessing data in; [ 281.705219][ T6676] program syz.6.524 not setting count and/or reply_len properly [ 281.772008][ T6678] loop9: detected capacity change from 0 to 512 [ 281.795591][ T6683] loop3: detected capacity change from 0 to 512 [ 281.820079][ T6678] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 281.983054][ T6683] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 282.038392][ T6678] EXT4-fs (loop9): 1 truncate cleaned up [ 282.066564][ T6678] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 282.298131][ T6683] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.528: invalid indirect mapped block 4294967295 (level 0) [ 282.737177][ T6683] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.528: invalid indirect mapped block 4294967295 (level 1) [ 282.752568][ T27] kauditd_printk_skb: 54 callbacks suppressed [ 282.752582][ T27] audit: type=1326 audit(1758418380.997:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6674 comm="syz.6.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646438ec29 code=0x7ffc0000 [ 282.802581][ T6683] EXT4-fs (loop3): 1 orphan inode deleted [ 282.830451][ T6683] EXT4-fs (loop3): 1 truncate cleaned up [ 282.872851][ T27] audit: type=1326 audit(1758418380.997:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6674 comm="syz.6.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646438ec29 code=0x7ffc0000 [ 282.945094][ T6683] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 282.989433][ T27] audit: type=1326 audit(1758418381.027:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6694 comm="syz.6.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f64643c14e5 code=0x7ffc0000 [ 283.023473][ T6156] EXT4-fs (loop3): unmounting filesystem. [ 283.034458][ T27] audit: type=1326 audit(1758418381.177:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6694 comm="syz.6.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f646438ec29 code=0x7ffc0000 [ 283.099678][ T6124] EXT4-fs (loop9): unmounting filesystem. [ 283.237131][ T6700] netlink: 4 bytes leftover after parsing attributes in process `syz.8.530'. [ 284.299876][ T6710] tipc: Enabling of bearer rejected, already enabled [ 286.563682][ T6758] loop3: detected capacity change from 0 to 512 [ 286.571681][ T27] audit: type=1326 audit(1758418384.817:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed94f8ec29 code=0x7ffc0000 [ 286.593064][ T6758] EXT4-fs: Ignoring removed mblk_io_submit option [ 286.645639][ T6758] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 286.771436][ T27] audit: type=1326 audit(1758418384.817:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed94f8ec29 code=0x7ffc0000 [ 286.861769][ T6758] EXT4-fs (loop3): 1 truncate cleaned up [ 286.958848][ T6767] tipc: Enabling of bearer rejected, already enabled [ 287.004080][ T27] audit: type=1326 audit(1758418384.847:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed94f8ec29 code=0x7ffc0000 [ 287.027685][ T6758] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 287.931475][ T27] audit: type=1326 audit(1758418384.847:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed94f8ec29 code=0x7ffc0000 [ 288.196033][ T27] audit: type=1326 audit(1758418384.847:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed94f8ec29 code=0x7ffc0000 [ 288.280833][ T6156] EXT4-fs (loop3): unmounting filesystem. [ 288.353988][ T27] audit: type=1326 audit(1758418384.847:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fed94f8ec29 code=0x7ffc0000 [ 288.377818][ T6784] loop8: detected capacity change from 0 to 512 [ 288.450487][ T27] audit: type=1326 audit(1758418384.847:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed94f8ec29 code=0x7ffc0000 [ 288.509855][ T6784] fscrypt (loop8, inode 2): Error -61 getting encryption context [ 288.538588][ T6784] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -61 [ 288.597680][ T6792] syz.1.556 uses obsolete (PF_INET,SOCK_PACKET) [ 288.608701][ T6784] EXT4-fs error (device loop8): ext4_orphan_get:1400: inode #13: comm syz.8.553: iget: bad i_size value: 12154757448730 [ 288.641712][ T6792] netlink: 'syz.1.556': attribute type 10 has an invalid length. [ 288.664319][ T6784] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.553: couldn't read orphan inode 13 (err -117) [ 288.691109][ T6784] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 288.711283][ T27] audit: type=1326 audit(1758418384.847:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed94f8ec29 code=0x7ffc0000 [ 288.773376][ T27] audit: type=1326 audit(1758418384.847:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fed94f8ec29 code=0x7ffc0000 [ 288.821030][ T27] audit: type=1326 audit(1758418384.847:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed94f8ec29 code=0x7ffc0000 [ 289.021119][ T6784] fscrypt (loop8, inode 2): Error -61 getting encryption context [ 289.057745][ T6792] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.510730][ T6792] bond0: (slave team0): Enslaving as an active interface with an up link [ 289.528768][ T27] audit: type=1326 audit(1758418384.847:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed94f8ec29 code=0x7ffc0000 [ 289.585795][ T27] audit: type=1804 audit(1758418386.097:624): pid=6758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.548" name="/newroot/18/bus/bus" dev="loop3" ino=18 res=1 errno=0 [ 289.607300][ T27] audit: type=1326 audit(1758418386.357:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6777 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed94f8ec29 code=0x7ffc0000 [ 289.729549][ T5849] EXT4-fs (loop8): unmounting filesystem. [ 290.879186][ T6814] loop1: detected capacity change from 0 to 1024 [ 290.902366][ T6814] EXT4-fs: Ignoring removed orlov option [ 291.342015][ T6814] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 291.468708][ T6814] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.792243][ T6810] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: comm syz.1.562: lblock 0 mapped to illegal pblock 0 (length 1) [ 291.990822][ T6810] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 292.053590][ T6810] EXT4-fs (loop1): This should not happen!! Data will be lost [ 292.053590][ T6810] [ 292.164456][ T6842] xt_CT: You must specify a L4 protocol and not use inversions on it [ 292.235873][ T6842] loop3: detected capacity change from 0 to 1024 [ 293.068951][ T6258] EXT4-fs (loop1): unmounting filesystem. [ 294.156631][ T27] kauditd_printk_skb: 45 callbacks suppressed [ 294.156646][ T27] audit: type=1326 audit(1758418392.397:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6861 comm="syz.9.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae918ec29 code=0x7ffc0000 [ 294.316325][ T27] audit: type=1326 audit(1758418392.427:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6861 comm="syz.9.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae918ec29 code=0x7ffc0000 [ 294.949276][ T27] audit: type=1326 audit(1758418392.437:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6861 comm="syz.9.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faae918ec29 code=0x7ffc0000 [ 295.327975][ T27] audit: type=1326 audit(1758418392.437:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6861 comm="syz.9.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae918ec29 code=0x7ffc0000 [ 295.427046][ T6848] tipc: Started in network mode [ 295.457146][ T6848] tipc: Node identity 7f000001, cluster identity 4711 [ 295.479332][ T6876] loop6: detected capacity change from 0 to 512 [ 295.484960][ T27] audit: type=1326 audit(1758418392.437:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6861 comm="syz.9.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae918ec29 code=0x7ffc0000 [ 295.510490][ T27] audit: type=1326 audit(1758418392.437:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6861 comm="syz.9.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faae918ec29 code=0x7ffc0000 [ 295.540615][ T6876] EXT4-fs: journaled quota format not specified [ 295.567167][ T6848] tipc: Enabled bearer , priority 10 [ 295.598853][ T27] audit: type=1326 audit(1758418392.437:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6861 comm="syz.9.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae918ec29 code=0x7ffc0000 [ 296.325981][ T27] audit: type=1326 audit(1758418392.437:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6861 comm="syz.9.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae918ec29 code=0x7ffc0000 [ 296.366510][ T6876] netlink: 32 bytes leftover after parsing attributes in process `syz.6.581'. [ 296.438889][ T6876] netlink: 'syz.6.581': attribute type 13 has an invalid length. [ 296.512398][ T27] audit: type=1326 audit(1758418392.437:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6861 comm="syz.9.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faae918ec29 code=0x7ffc0000 [ 296.626436][ T14] tipc: Node number set to 2130706433 [ 296.634574][ T27] audit: type=1326 audit(1758418392.437:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6861 comm="syz.9.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae918ec29 code=0x7ffc0000 [ 296.988760][ T6904] loop8: detected capacity change from 0 to 512 [ 297.017037][ T6904] EXT4-fs: Ignoring removed bh option [ 297.033974][ T6904] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 297.076084][ T6904] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 297.224240][ T6904] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 297.265348][ T6904] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 297.479737][ T6904] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 298.196788][ T6876] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.204306][ T6876] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.677782][ T6876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.782974][ T6876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.050105][ T6910] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 353: padding at end of block bitmap is not set [ 299.689220][ T6938] loop3: detected capacity change from 0 to 128 [ 299.761847][ T27] kauditd_printk_skb: 26 callbacks suppressed [ 299.761864][ T27] audit: type=1800 audit(1758418397.997:707): pid=6938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.593" name="file2" dev="loop3" ino=1048651 res=0 errno=0 [ 299.867547][ T6938] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 299.875771][ T6938] FAT-fs (loop3): Filesystem has been set read-only [ 299.956313][ T6938] syz.3.593: attempt to access beyond end of device [ 299.956313][ T6938] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 300.048916][ T6938] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 300.098909][ T6938] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 300.167486][ T6944] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 300.176042][ T6904] infiniband syz!: set active [ 300.198134][ T6904] infiniband syz!: added team_slave_0 [ 300.205767][ T6944] syz.3.593: attempt to access beyond end of device [ 300.205767][ T6944] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 300.232625][ T6904] rdma_rxe: unable to create cq [ 300.249429][ T6904] infiniband syz!: Couldn't create ib_mad CQ [ 300.261047][ T6944] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 300.269528][ T6944] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 300.280485][ T6904] infiniband syz!: Couldn't open port 1 [ 300.285187][ T6938] syz.3.593: attempt to access beyond end of device [ 300.285187][ T6938] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 300.306424][ T6944] syz.3.593: attempt to access beyond end of device [ 300.306424][ T6944] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 301.143977][ T6953] xt_ecn: cannot match TCP bits for non-tcp packets [ 301.175364][ T6904] RDS/IB: syz!: added [ 301.206124][ T6904] smc: adding ib device syz! with port count 1 [ 301.208082][ T6944] syz.3.593: attempt to access beyond end of device [ 301.208082][ T6944] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 301.226049][ T6904] smc: ib device syz! port 1 has pnetid [ 301.282208][ T6938] syz.3.593: attempt to access beyond end of device [ 301.282208][ T6938] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 301.381740][ T6938] syz.3.593: attempt to access beyond end of device [ 301.381740][ T6938] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 301.549787][ T6961] loop9: detected capacity change from 0 to 512 [ 301.599897][ T6961] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 301.696414][ T6961] EXT4-fs (loop9): 1 truncate cleaned up [ 301.702220][ T6961] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 301.993155][ T6124] EXT4-fs (loop9): unmounting filesystem. [ 302.869157][ T6983] fuse: Unknown parameter 'group_i00000000000000000000' [ 303.583406][ T6987] loop3: detected capacity change from 0 to 256 [ 304.297902][ T7004] xt_ecn: cannot match TCP bits for non-tcp packets [ 306.931225][ T5849] EXT4-fs (loop8): unmounting filesystem. [ 307.196061][ T7015] loop1: detected capacity change from 0 to 512 [ 307.273125][ T7015] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 307.316089][ T7015] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 307.386096][ T7015] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #13: comm syz.1.613: iget: bad i_size value: 12154757448730 [ 307.483051][ T7015] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.613: couldn't read orphan inode 13 (err -117) [ 307.535611][ T7015] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 307.908884][ T7030] loop3: detected capacity change from 0 to 1024 [ 308.091537][ T7030] EXT4-fs: Ignoring removed nomblk_io_submit option [ 308.463190][ T6258] EXT4-fs (loop1): unmounting filesystem. [ 308.472409][ T7030] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 308.618618][ T7030] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 308.646369][ T7030] System zones: 0-1, 3-36 [ 308.681612][ T7030] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 309.356147][ T7052] xt_CT: You must specify a L4 protocol and not use inversions on it [ 309.650017][ T7052] loop1: detected capacity change from 0 to 1024 [ 310.599480][ T5145] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 310.616026][ T7030] loop3: detected capacity change from 1024 to 0 [ 311.376509][ T7060] xt_ecn: cannot match TCP bits for non-tcp packets [ 311.668432][ T7063] loop6: detected capacity change from 0 to 256 [ 311.930240][ C0] I/O error, dev loop3, sector 96 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 312.758452][ C0] I/O error, dev loop3, sector 12 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 312.768457][ C0] I/O error, dev loop3, sector 14 op 0x0:(READ) flags 0x80700 phys_seg 17 prio class 2 [ 312.778293][ C0] I/O error, dev loop3, sector 10 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 312.795206][ T6156] EXT4-fs error (device loop3): ext4_get_inode_loc:4645: inode #2: block 6: comm syz-executor: unable to read itable block [ 312.858823][ T4348] loop: Write error at byte offset 9223372036854776831, length 1024. [ 312.868222][ C1] I/O error, dev loop3, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 312.877814][ C1] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 312.886274][ T6156] EXT4-fs (loop3): I/O error while writing superblock [ 312.893077][ T6156] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5915: IO failure [ 312.902331][ T4348] loop: Write error at byte offset 9223372036854776831, length 1024. [ 312.910703][ C1] I/O error, dev loop3, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 312.920259][ C1] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 312.941814][ T6156] EXT4-fs (loop3): I/O error while writing superblock [ 312.987543][ T6156] EXT4-fs error (device loop3): ext4_dirty_inode:6119: inode #2: comm syz-executor: mark_inode_dirty error [ 313.022638][ T4348] loop: Write error at byte offset 9223372036854776831, length 1024. [ 313.034710][ C1] I/O error, dev loop3, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 313.044318][ C1] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 313.054279][ T6156] EXT4-fs (loop3): I/O error while writing superblock [ 313.280049][ C1] I/O error, dev loop3, sector 10 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 313.290347][ C1] I/O error, dev loop3, sector 14 op 0x0:(READ) flags 0x80700 phys_seg 17 prio class 2 [ 313.300617][ T4589] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4630: inode #2: block 6: comm kworker/u4:14: unable to read itable block [ 313.321449][ T4435] loop: Write error at byte offset 9223372036854776831, length 1024. [ 313.331352][ C1] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 313.341366][ T4589] EXT4-fs (loop3): I/O error while writing superblock [ 313.359444][ T6156] EXT4-fs (loop3): unmounting filesystem. [ 313.600489][ T4348] loop: Write error at byte offset 9223372036854776831, length 1024. [ 313.615996][ C1] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 313.624471][ T6156] EXT4-fs (loop3): I/O error while writing superblock [ 314.276208][ T7098] macvtap0: refused to change device tx_queue_len [ 315.069038][ T7111] tipc: Enabling of bearer rejected, already enabled [ 316.205780][ T7122] fuse: Unknown parameter 'group_i00000000000000000000' [ 317.052187][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.218504][ T47] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 317.227980][ T47] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 317.236747][ T47] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 317.258101][ T4278] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 317.276625][ T4278] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 317.283984][ T4278] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 318.121645][ T7133] xt_ecn: cannot match TCP bits for non-tcp packets [ 319.549520][ T47] Bluetooth: hci3: command 0x0409 tx timeout [ 319.601990][ T7127] chnl_net:caif_netlink_parms(): no params data found [ 319.821607][ T7149] loop9: detected capacity change from 0 to 1024 [ 319.849588][ T7149] EXT4-fs: Ignoring removed nomblk_io_submit option [ 319.878939][ T7127] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.896624][ T7127] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.904944][ T7127] device bridge_slave_0 entered promiscuous mode [ 319.912894][ T7149] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 319.970486][ T7149] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 319.982802][ T7127] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.993549][ T7149] System zones: 0-1, 3-36 [ 320.003973][ T7127] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.013824][ T7149] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 320.026066][ T7127] device bridge_slave_1 entered promiscuous mode [ 320.126185][ T7149] loop9: detected capacity change from 1024 to 0 [ 320.147718][ T7127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.195275][ T7127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.288928][ C0] blk_print_req_error: 3 callbacks suppressed [ 320.288946][ C0] I/O error, dev loop9, sector 96 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 320.336182][ C0] I/O error, dev loop9, sector 12 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 320.345776][ C0] I/O error, dev loop9, sector 14 op 0x0:(READ) flags 0x80700 phys_seg 17 prio class 2 [ 320.345787][ T6124] EXT4-fs error (device loop9): ext4_get_inode_loc:4645: inode #2: block 6: comm syz-executor: unable to read itable block [ 320.368482][ C0] I/O error, dev loop9, sector 10 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 320.379536][ T4589] loop: Write error at byte offset 9223372036854776831, length 1024. [ 320.405266][ C1] I/O error, dev loop9, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 320.414874][ C1] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 320.423503][ T6124] EXT4-fs (loop9): I/O error while writing superblock [ 320.430943][ T6124] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5915: IO failure [ 320.453981][ T7127] team0: Port device team_slave_0 added [ 320.466130][ T4795] loop: Write error at byte offset 9223372036854776831, length 1024. [ 320.484104][ T7127] team0: Port device team_slave_1 added [ 320.486187][ C0] I/O error, dev loop9, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 320.499344][ C0] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 320.514409][ T6124] EXT4-fs (loop9): I/O error while writing superblock [ 320.521908][ T6124] EXT4-fs error (device loop9): ext4_dirty_inode:6119: inode #2: comm syz-executor: mark_inode_dirty error [ 320.565986][ T33] loop: Write error at byte offset 9223372036854776831, length 1024. [ 320.600920][ C1] I/O error, dev loop9, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 320.610501][ C1] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 320.618864][ T6124] EXT4-fs (loop9): I/O error while writing superblock [ 320.693083][ T7127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.703187][ T7127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.734685][ T7127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.746320][ C0] I/O error, dev loop9, sector 10 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 320.756049][ C0] I/O error, dev loop9, sector 14 op 0x0:(READ) flags 0x80700 phys_seg 17 prio class 2 [ 320.765885][ C0] I/O error, dev loop9, sector 12 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 320.775670][ T4589] EXT4-fs error (device loop9): __ext4_get_inode_loc_noinmem:4630: inode #2: block 6: comm kworker/u4:14: unable to read itable block [ 320.813357][ T4435] loop: Write error at byte offset 9223372036854776831, length 1024. [ 320.837223][ C0] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 320.846467][ T4589] EXT4-fs (loop9): I/O error while writing superblock [ 320.871238][ T6124] EXT4-fs (loop9): unmounting filesystem. [ 320.907244][ T4589] loop: Write error at byte offset 9223372036854776831, length 1024. [ 320.929114][ C0] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 320.937888][ T6124] EXT4-fs (loop9): I/O error while writing superblock [ 321.339771][ T7127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.844742][ T7127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.917010][ T47] Bluetooth: hci3: command 0x041b tx timeout [ 322.451651][ T7127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.530187][ T7179] lo speed is unknown, defaulting to 1000 [ 322.537726][ T7179] lo speed is unknown, defaulting to 1000 [ 322.544019][ T7179] lo speed is unknown, defaulting to 1000 [ 322.648351][ T7179] infiniband sz1: set active [ 322.653103][ T7179] infiniband sz1: added lo [ 322.661675][ T22] lo speed is unknown, defaulting to 1000 [ 322.704655][ T7179] RDS/IB: sz1: added [ 322.709172][ T7179] smc: adding ib device sz1 with port count 1 [ 322.715419][ T7179] smc: ib device sz1 port 1 has pnetid [ 322.865280][ T7179] lo speed is unknown, defaulting to 1000 [ 322.923217][ T22] lo speed is unknown, defaulting to 1000 [ 322.971371][ T7179] lo speed is unknown, defaulting to 1000 [ 323.597731][ T7179] lo speed is unknown, defaulting to 1000 [ 323.703562][ T7179] lo speed is unknown, defaulting to 1000 [ 323.855561][ T7179] lo speed is unknown, defaulting to 1000 [ 323.944742][ T47] Bluetooth: hci3: command 0x040f tx timeout [ 324.014665][ T7127] device hsr_slave_0 entered promiscuous mode [ 324.055797][ T7127] device hsr_slave_1 entered promiscuous mode [ 324.084752][ T7127] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.126009][ T7127] Cannot create hsr debugfs directory [ 324.132652][ T7179] lo speed is unknown, defaulting to 1000 [ 324.132663][ T4578] tipc: Disabling bearer [ 324.155281][ T4578] tipc: Left network mode [ 324.501673][ T7205] loop8: detected capacity change from 0 to 1024 [ 324.562477][ T7205] EXT4-fs: Ignoring removed nomblk_io_submit option [ 324.601541][ T7205] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 324.666708][ T7205] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 324.674917][ T7205] System zones: 0-1, 3-36 [ 324.699078][ T7205] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 324.797214][ T7205] loop8: detected capacity change from 1024 to 0 [ 325.024134][ T5849] EXT4-fs error (device loop8): ext4_get_inode_loc:4645: inode #2: block 6: comm syz-executor: unable to read itable block [ 325.108119][ T33] loop: Write error at byte offset 9223372036854776831, length 1024. [ 325.125202][ C0] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 325.133682][ T5849] EXT4-fs (loop8): I/O error while writing superblock [ 325.153662][ T5849] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5915: IO failure [ 325.178049][ T33] loop: Write error at byte offset 9223372036854776831, length 1024. [ 325.196036][ C0] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 325.204462][ T5849] EXT4-fs (loop8): I/O error while writing superblock [ 325.224751][ T5849] EXT4-fs error (device loop8): ext4_dirty_inode:6119: inode #2: comm syz-executor: mark_inode_dirty error [ 325.276637][ T4284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 325.288662][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 325.297598][ T4284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 325.298840][ T4589] loop: Write error at byte offset 9223372036854776831, length 1024. [ 325.321227][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 325.330594][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 325.338014][ T4284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 325.347380][ C1] blk_print_req_error: 8 callbacks suppressed [ 325.347395][ C1] I/O error, dev loop8, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 325.363002][ C1] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 325.371449][ T5849] EXT4-fs (loop8): I/O error while writing superblock [ 325.424419][ T27] audit: type=1326 audit(1758418423.657:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.1.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed94f8ec29 code=0x7ffc0000 [ 325.458749][ T7226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.663'. [ 325.525189][ T7127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.552863][ T27] audit: type=1326 audit(1758418423.677:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.1.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed94f8ec29 code=0x7ffc0000 [ 325.597620][ T7226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.663'. [ 325.647286][ C0] I/O error, dev loop8, sector 10 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 325.657002][ C0] I/O error, dev loop8, sector 14 op 0x0:(READ) flags 0x80700 phys_seg 17 prio class 2 [ 325.658377][ T27] audit: type=1326 audit(1758418423.677:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.1.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fed94f8ec29 code=0x7ffc0000 [ 325.666773][ C0] I/O error, dev loop8, sector 12 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 325.672512][ T4589] EXT4-fs error (device loop8): __ext4_get_inode_loc_noinmem:4630: inode #2: block 6: comm kworker/u4:14: unable to read itable block [ 325.690534][ T27] audit: type=1326 audit(1758418423.677:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.1.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed94f8ec29 code=0x7ffc0000 [ 325.742264][ T27] audit: type=1326 audit(1758418423.677:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.1.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fed94f8ec29 code=0x7ffc0000 [ 325.746456][ T33] loop: Write error at byte offset 9223372036854776831, length 1024. [ 325.802048][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 325.991878][ T7230] capability: warning: `syz.1.663' uses 32-bit capabilities (legacy support in use) [ 326.049701][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 326.057408][ T47] Bluetooth: hci3: command 0x0419 tx timeout [ 326.218948][ T7127] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.376328][ T27] audit: type=1326 audit(1758418423.677:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.1.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed94f8ec29 code=0x7ffc0000 [ 326.410125][ C1] I/O error, dev loop8, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 326.419708][ C1] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 326.428365][ T4589] EXT4-fs (loop8): I/O error while writing superblock [ 326.433250][ T27] audit: type=1326 audit(1758418423.697:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.1.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fed94f8ec29 code=0x7ffc0000 [ 326.437906][ T6407] EXT4-fs (loop8): unmounting filesystem. [ 326.467563][ T27] audit: type=1326 audit(1758418423.817:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.1.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed94f8ec29 code=0x7ffc0000 [ 326.506759][ T33] loop: Write error at byte offset 9223372036854776831, length 1024. [ 326.525157][ C1] I/O error, dev loop8, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 326.534756][ C1] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 326.543118][ T6407] EXT4-fs (loop8): I/O error while writing superblock [ 326.620585][ T27] audit: type=1326 audit(1758418423.817:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.1.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed94f8ec29 code=0x7ffc0000 [ 326.663993][ T27] audit: type=1326 audit(1758418423.837:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.1.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7fed94f8ec29 code=0x7ffc0000 [ 326.754790][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 326.772507][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 326.795572][ T4589] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.802851][ T4589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.935221][ T7220] lo speed is unknown, defaulting to 1000 [ 327.937005][ T4278] Bluetooth: hci1: command 0x0409 tx timeout [ 328.014634][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 328.038107][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 328.106774][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 328.126360][ T4589] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.133601][ T4589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.196325][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 328.221953][ T7247] rdma_rxe: rxe_register_device failed with error -23 [ 328.229985][ T7247] rdma_rxe: failed to add lo [ 328.279681][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 328.351311][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 328.376593][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 328.738860][ T7243] rdma_rxe: rxe_register_device failed with error -23 [ 328.779634][ T7243] rdma_rxe: failed to add lo [ 329.376770][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 329.437740][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 329.458803][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 329.522740][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 329.545278][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 329.599702][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 329.622925][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 329.665114][ T7127] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 329.895375][ T47] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 329.908051][ T47] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 329.921865][ T47] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 330.006043][ T47] Bluetooth: hci1: command 0x041b tx timeout [ 330.050764][ T47] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 330.061198][ T47] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 330.084427][ T47] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 330.214835][ T7275] loop6: detected capacity change from 0 to 1024 [ 330.243435][ T7275] EXT4-fs: Ignoring removed nomblk_io_submit option [ 330.273466][ T7220] chnl_net:caif_netlink_parms(): no params data found [ 330.296900][ T7275] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 330.351451][ T4578] device hsr_slave_0 left promiscuous mode [ 330.367963][ T4578] device hsr_slave_1 left promiscuous mode [ 330.386455][ T4578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.393923][ T4578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.402232][ T7275] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 330.416026][ T7275] System zones: 0-1, 3-36 [ 330.444240][ T7275] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 330.448128][ T4578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.466626][ T4578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.491905][ T4578] device bridge_slave_1 left promiscuous mode [ 330.503390][ T4578] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.518428][ T7275] loop6: detected capacity change from 1024 to 0 [ 330.539459][ T4578] device bridge_slave_0 left promiscuous mode [ 330.545746][ T4578] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.615091][ T4578] device veth1_macvtap left promiscuous mode [ 330.621265][ T4578] device veth0_macvtap left promiscuous mode [ 330.627559][ T4578] device veth1_vlan left promiscuous mode [ 330.633404][ T4578] device veth0_vlan left promiscuous mode [ 330.667590][ C1] I/O error, dev loop6, sector 96 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 330.684064][ C1] I/O error, dev loop6, sector 12 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 330.693698][ C1] I/O error, dev loop6, sector 14 op 0x0:(READ) flags 0x80700 phys_seg 17 prio class 2 [ 330.703473][ C1] I/O error, dev loop6, sector 10 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 330.716129][ T5193] EXT4-fs error (device loop6): ext4_get_inode_loc:4645: inode #2: block 6: comm syz-executor: unable to read itable block [ 330.736606][ T4539] loop: Write error at byte offset 9223372036854776831, length 1024. [ 330.750909][ C1] I/O error, dev loop6, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 330.760523][ C1] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 330.768885][ T5193] EXT4-fs (loop6): I/O error while writing superblock [ 330.775706][ T5193] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5915: IO failure [ 330.817987][ T4806] loop: Write error at byte offset 9223372036854776831, length 1024. [ 330.836019][ C0] I/O error, dev loop6, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 330.845576][ C0] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 330.854328][ T5193] EXT4-fs (loop6): I/O error while writing superblock [ 330.861330][ T5193] EXT4-fs error (device loop6): ext4_dirty_inode:6119: inode #2: comm syz-executor: mark_inode_dirty error [ 330.887124][ T4539] loop: Write error at byte offset 9223372036854776831, length 1024. [ 330.907596][ C1] I/O error, dev loop6, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 330.917183][ C1] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 330.925654][ T5193] EXT4-fs (loop6): I/O error while writing superblock [ 330.994463][ C0] I/O error, dev loop6, sector 10 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 331.004174][ C0] I/O error, dev loop6, sector 14 op 0x0:(READ) flags 0x80700 phys_seg 17 prio class 2 [ 331.013983][ C0] I/O error, dev loop6, sector 12 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 331.023975][ T6272] EXT4-fs error (device loop6): __ext4_get_inode_loc_noinmem:4630: inode #2: block 6: comm kworker/u4:21: unable to read itable block [ 331.038235][ T4539] loop: Write error at byte offset 9223372036854776831, length 1024. [ 331.054110][ C1] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 331.062588][ T6272] EXT4-fs (loop6): I/O error while writing superblock [ 331.071166][ T5193] EXT4-fs (loop6): unmounting filesystem. [ 331.087551][ T6272] loop: Write error at byte offset 9223372036854776831, length 1024. [ 331.184754][ C1] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 331.213387][ T5193] EXT4-fs (loop6): I/O error while writing superblock [ 332.087786][ T47] Bluetooth: hci1: command 0x040f tx timeout [ 332.167485][ T47] Bluetooth: hci2: command 0x0409 tx timeout [ 332.715361][ T4578] team0 (unregistering): Port device team_slave_1 removed [ 332.795646][ T4578] team0 (unregistering): Port device team_slave_0 removed [ 332.883911][ T4578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.949084][ T4578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.210546][ T47] Bluetooth: hci1: command 0x0419 tx timeout [ 334.246429][ T47] Bluetooth: hci2: command 0x041b tx timeout [ 335.096580][ T4578] bond0 (unregistering): Released all slaves [ 335.212402][ T7268] lo speed is unknown, defaulting to 1000 [ 335.296765][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 335.304301][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 335.362920][ T7309] rdma_rxe: rxe_register_device failed with error -23 [ 335.369988][ T7309] rdma_rxe: failed to add lo [ 335.380930][ T7127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.550619][ T7220] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.572994][ T7220] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.610945][ T7220] device bridge_slave_0 entered promiscuous mode [ 335.670152][ T7220] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.706019][ T7220] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.730098][ T7220] device bridge_slave_1 entered promiscuous mode [ 335.889595][ T7220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.976737][ T7220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.127268][ T7220] team0: Port device team_slave_0 added [ 336.165027][ T7220] team0: Port device team_slave_1 added [ 336.293740][ T7268] chnl_net:caif_netlink_parms(): no params data found [ 336.324908][ T7220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.332807][ T47] Bluetooth: hci2: command 0x040f tx timeout [ 336.349190][ T7220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.424989][ T7220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.502740][ T7220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.520998][ T7220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.553185][ T4278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 336.562784][ T4278] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 336.571042][ T4278] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 336.578935][ T4278] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 336.587360][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 336.587651][ T7220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.607847][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 336.641137][ T4578] tipc: Disabling bearer [ 336.654292][ T4578] tipc: Left network mode [ 336.698006][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 336.717089][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 336.763847][ T4578] tipc: Disabling bearer [ 336.772647][ T4578] tipc: Left network mode [ 336.857184][ T7268] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.864352][ T7268] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.903072][ T7268] device bridge_slave_0 entered promiscuous mode [ 336.969433][ T7127] device veth0_vlan entered promiscuous mode [ 336.990704][ T7220] device hsr_slave_0 entered promiscuous mode [ 337.006387][ T7220] device hsr_slave_1 entered promiscuous mode [ 337.014897][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 337.053614][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 337.074199][ T7268] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.092518][ T7268] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.104731][ T7268] device bridge_slave_1 entered promiscuous mode [ 337.163132][ T7268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.183651][ T7268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.206337][ T7127] device veth1_vlan entered promiscuous mode [ 338.008232][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 338.026685][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 338.034746][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 338.287026][ T7339] lo speed is unknown, defaulting to 1000 [ 338.299559][ T7268] team0: Port device team_slave_0 added [ 338.358682][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 338.375710][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 338.403257][ T7268] team0: Port device team_slave_1 added [ 338.409234][ T47] Bluetooth: hci2: command 0x0419 tx timeout [ 338.418808][ T7127] device veth0_macvtap entered promiscuous mode [ 338.503208][ T7127] device veth1_macvtap entered promiscuous mode [ 338.533751][ T7349] rdma_rxe: rxe_register_device failed with error -23 [ 338.542872][ T7349] rdma_rxe: failed to add lo [ 338.599181][ T7268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.607149][ T7268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.633402][ T7268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.646056][ T47] Bluetooth: hci0: command 0x0409 tx timeout [ 338.701944][ T7127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.713017][ T7127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.723812][ T7127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.734585][ T7127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.744914][ T7127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.755545][ T7127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.767514][ T7127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.776006][ T7268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.782990][ T7268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.810384][ T7268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.838569][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 338.852466][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 338.862508][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 338.876144][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 338.887411][ T7127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.906967][ T7127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.923314][ T7127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.934135][ T7127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.951636][ T7127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.963238][ T7127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.983856][ T7127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.071893][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 339.081632][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 339.224888][ T7268] device hsr_slave_0 entered promiscuous mode [ 339.232585][ T7268] device hsr_slave_1 entered promiscuous mode [ 339.245064][ T7268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 339.253581][ T7268] Cannot create hsr debugfs directory [ 339.927674][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.959655][ T7339] chnl_net:caif_netlink_parms(): no params data found [ 339.972156][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.150541][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 340.363992][ T4806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.373430][ T7220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.402681][ T4806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.549051][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 340.561040][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 340.596635][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 340.629615][ T7220] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.746254][ T4284] Bluetooth: hci0: command 0x041b tx timeout [ 341.368369][ T7339] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.375588][ T7339] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.407164][ T7339] device bridge_slave_0 entered promiscuous mode [ 341.531683][ T7339] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.581182][ T7339] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.618164][ T7339] device bridge_slave_1 entered promiscuous mode [ 341.679808][ T7415] loop1: detected capacity change from 0 to 512 [ 341.731456][ T7415] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 341.741350][ T7415] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 341.818043][ T7415] netlink: 'syz.1.682': attribute type 16 has an invalid length. [ 341.834211][ T7415] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 341.841841][ T7415] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 341.855569][ T7415] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 341.871822][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 341.913242][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 341.932365][ T6621] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.934111][ T6258] EXT4-fs (loop1): unmounting filesystem. [ 341.940020][ T6621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.002814][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 342.081175][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 342.091069][ T6621] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.098274][ T6621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.115185][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 342.164920][ T7339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.213031][ T7339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.247618][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 342.335586][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 342.368223][ T7339] team0: Port device team_slave_0 added [ 342.385578][ T7339] team0: Port device team_slave_1 added [ 342.508110][ T4578] device hsr_slave_0 left promiscuous mode [ 342.525791][ T4578] device hsr_slave_1 left promiscuous mode [ 342.567227][ T4578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.580759][ T4578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.616794][ T4578] device bridge_slave_1 left promiscuous mode [ 342.624799][ T4578] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.665000][ T4578] device bridge_slave_0 left promiscuous mode [ 342.687752][ T4578] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.736956][ T4578] device hsr_slave_0 left promiscuous mode [ 342.756812][ T4578] device hsr_slave_1 left promiscuous mode [ 342.776399][ T4578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.801882][ T4578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.829130][ T4578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.856150][ T4578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.874706][ T4284] Bluetooth: hci0: command 0x040f tx timeout [ 342.882544][ T4578] device bridge_slave_1 left promiscuous mode [ 342.888891][ T4578] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.905791][ T4578] device bridge_slave_0 left promiscuous mode [ 342.912505][ T4578] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.008022][ T7442] xt_CT: You must specify a L4 protocol and not use inversions on it [ 343.082405][ T7442] loop4: detected capacity change from 0 to 1024 [ 343.265047][ T5145] blk_print_req_error: 2 callbacks suppressed [ 343.265086][ T5145] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 343.709136][ T4578] device veth1_macvtap left promiscuous mode [ 343.715246][ T4578] device veth0_macvtap left promiscuous mode [ 343.736166][ T4578] device veth1_vlan left promiscuous mode [ 343.742098][ T4578] device veth0_vlan left promiscuous mode [ 343.852708][ T27] kauditd_printk_skb: 27 callbacks suppressed [ 343.852724][ T27] audit: type=1326 audit(1758418442.087:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz.1.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed94f8ec29 code=0x7ffc0000 [ 343.889966][ T27] audit: type=1326 audit(1758418442.117:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz.1.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed94f8ec29 code=0x7ffc0000 [ 343.912983][ T4578] infiniband syz!: set down [ 343.913257][ T27] audit: type=1326 audit(1758418442.117:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz.1.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed94f8ec29 code=0x7ffc0000 [ 343.943103][ T27] audit: type=1326 audit(1758418442.117:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz.1.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed94f8ec29 code=0x7ffc0000 [ 343.965461][ T27] audit: type=1326 audit(1758418442.117:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz.1.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed94f8ec29 code=0x7ffc0000 [ 343.990337][ T27] audit: type=1326 audit(1758418442.117:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz.1.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed94f8ec29 code=0x7ffc0000 [ 344.023336][ T27] audit: type=1326 audit(1758418442.117:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz.1.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed94f8ec29 code=0x7ffc0000 [ 344.055324][ T27] audit: type=1326 audit(1758418442.117:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz.1.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed94f8ec29 code=0x7ffc0000 [ 344.058914][ T4578] infiniband sz1: set down [ 344.078408][ T27] audit: type=1326 audit(1758418442.117:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz.1.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed94f8ec29 code=0x7ffc0000 [ 344.105393][ T27] audit: type=1326 audit(1758418442.117:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz.1.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed94f8ec29 code=0x7ffc0000 [ 344.533089][ T4578] team0 (unregistering): Port device team_slave_1 removed [ 344.579854][ T4578] team0 (unregistering): Port device team_slave_0 removed [ 344.627386][ T4578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.676260][ T4578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.925663][ T4284] Bluetooth: hci0: command 0x0419 tx timeout [ 345.075083][ T4578] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 345.172574][ T7451] rdma_rxe: rxe_register_device failed with error -23 [ 345.180143][ T7451] rdma_rxe: failed to add lo [ 346.042722][ T4578] bond0 (unregistering): Released all slaves [ 346.548549][ T4578] team0 (unregistering): Port device team_slave_1 removed [ 346.596904][ T4578] team0 (unregistering): Port device team_slave_0 removed [ 346.606294][ T4348] smc: removing ib device syz! [ 346.649978][ T4578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.698264][ T4578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.201755][ T4578] bond0 (unregistering): Released all slaves [ 347.278557][ T4940] smc: removing ib device sz1 [ 347.320539][ T7339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.341255][ T7339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.367353][ T7339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.390655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 347.411792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 347.484309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 347.552870][ T22] lo speed is unknown, defaulting to 1000 [ 347.571199][ T7339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.592516][ T7339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.774217][ T7339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.843025][ T7268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.956206][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 348.007736][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 348.063586][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 348.115609][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 348.150208][ T7467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.688'. [ 348.304823][ T7339] device hsr_slave_0 entered promiscuous mode [ 348.405292][ T7339] device hsr_slave_1 entered promiscuous mode [ 348.425414][ T7339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.762149][ T7339] Cannot create hsr debugfs directory [ 349.042026][ T7220] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 349.104634][ T7220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 349.160118][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 349.177154][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 349.422156][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 349.463351][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 349.532102][ T7497] loop4: detected capacity change from 0 to 512 [ 349.544288][ T7268] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.956590][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 349.975066][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 349.998328][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.005558][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.053761][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 350.083268][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 350.106405][ T7497] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 350.133838][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.141195][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.152548][ T7497] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 350.177169][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 350.202999][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 350.214909][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 350.234748][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 350.267376][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 350.276742][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 350.429438][ T7508] loop1: detected capacity change from 0 to 8192 [ 350.454225][ T7497] netlink: 'syz.4.691': attribute type 16 has an invalid length. [ 350.510508][ T7497] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 350.518660][ T7497] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 350.555764][ T7497] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 350.624268][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 350.639045][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 350.673564][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 350.684575][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 350.704509][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 350.716268][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 350.749520][ T7220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.794608][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 350.817097][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 350.837969][ T7268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 351.186081][ T7339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.247966][ T7339] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.260817][ T4940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 351.298460][ T4940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 351.352727][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 351.369924][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 351.392317][ T4578] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.399567][ T4578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.409252][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 351.437929][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 351.457865][ T4578] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.465039][ T4578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.494062][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 351.546738][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 351.565131][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 351.598975][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 351.651541][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 351.670244][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 351.699441][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 351.740183][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 351.789301][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 351.811619][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 351.846836][ T7339] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 351.878133][ T7339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 351.903787][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 351.923167][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 351.997869][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 352.005395][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 352.053237][ T7268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.118935][ T4940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 352.133861][ T4940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 352.213135][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 352.244796][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 352.285501][ T7220] device veth0_vlan entered promiscuous mode [ 352.324142][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 352.337132][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 352.353081][ T7220] device veth1_vlan entered promiscuous mode [ 352.471245][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 352.506862][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 352.526686][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 352.546683][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 352.586413][ T7220] device veth0_macvtap entered promiscuous mode [ 352.614035][ T7220] device veth1_macvtap entered promiscuous mode [ 352.674345][ T7220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.715505][ T7220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.746026][ T7220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.785986][ T7220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.816014][ T7220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.846284][ T7220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.883458][ T7220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.912032][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 352.937666][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 352.996898][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 353.026760][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 353.044651][ T7220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.075937][ T7220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.085814][ T7220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.126475][ T7220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.156059][ T7220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.185924][ T7220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.219274][ T7220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.246126][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 353.254362][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 353.306206][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 353.336859][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 353.381662][ T7339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.557669][ T4348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.565851][ T4348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.635362][ T4940] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 353.650860][ T4940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 353.666885][ T4940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 353.720674][ T4940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.776750][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 353.786393][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 353.797454][ T4940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.821629][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 353.866636][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 354.069666][ T7268] device veth0_vlan entered promiscuous mode [ 354.093393][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 354.181618][ T7581] xt_CT: You must specify a L4 protocol and not use inversions on it [ 354.256149][ T7581] loop1: detected capacity change from 0 to 1024 [ 354.849397][ T5145] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 354.885845][ T7268] device veth1_vlan entered promiscuous mode [ 355.133940][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 355.197047][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 355.235342][ T7268] device veth0_macvtap entered promiscuous mode [ 355.394131][ T7268] device veth1_macvtap entered promiscuous mode [ 355.892202][ T7600] lo speed is unknown, defaulting to 1000 [ 355.911876][ T7600] lo speed is unknown, defaulting to 1000 [ 355.920841][ T7600] lo speed is unknown, defaulting to 1000 [ 356.331635][ T7600] infiniband sz1: set active [ 356.336438][ T7600] infiniband sz1: added lo [ 356.344795][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 356.386481][ T7600] RDS/IB: sz1: added [ 356.390605][ T7600] smc: adding ib device sz1 with port count 1 [ 356.396851][ T7600] smc: ib device sz1 port 1 has pnetid [ 356.411016][ T7268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.451056][ T7268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.482362][ T7268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.534452][ T7268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.565105][ T7268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.602911][ T7268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.633203][ T7268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.664413][ T7268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.705486][ T7268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.725606][ T4374] lo speed is unknown, defaulting to 1000 [ 356.734983][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 356.753829][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 356.775461][ T7600] lo speed is unknown, defaulting to 1000 [ 356.886958][ T6929] lo speed is unknown, defaulting to 1000 [ 356.897457][ T7268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.908589][ T7268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.918524][ T7268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.929027][ T7268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.938935][ T7268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.949446][ T7268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.959354][ T7268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.969929][ T7268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.987616][ T7268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.996223][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 357.019239][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 357.047469][ T7600] lo speed is unknown, defaulting to 1000 [ 357.155638][ T7600] lo speed is unknown, defaulting to 1000 [ 357.280100][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 357.302933][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 357.346755][ T7600] lo speed is unknown, defaulting to 1000 [ 357.455058][ T7600] lo speed is unknown, defaulting to 1000 [ 357.563073][ T7600] lo speed is unknown, defaulting to 1000 [ 357.698991][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 357.724518][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 357.767935][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 357.785819][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 357.818778][ T7339] device veth0_vlan entered promiscuous mode [ 357.877548][ T7339] device veth1_vlan entered promiscuous mode [ 357.968398][ T6272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.986549][ T6272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.998299][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 358.024141][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 358.048064][ T7127] EXT4-fs (loop4): unmounting filesystem. [ 358.061050][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 358.113025][ T7339] device veth0_macvtap entered promiscuous mode [ 358.167380][ T7339] device veth1_macvtap entered promiscuous mode [ 358.195772][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.234840][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.246955][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.277443][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.287746][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.298612][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.308971][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.319984][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.331264][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.350979][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.370652][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.400707][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.443291][ T7339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.465154][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 358.482313][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 358.508801][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 358.525603][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 358.547010][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 358.573384][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.605014][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.626228][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.672241][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.693678][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.715378][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.762716][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.801655][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.861553][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.882164][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.895580][ T7339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.916155][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 358.964211][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 359.054260][ T7630] loop5: detected capacity change from 0 to 256 [ 359.930801][ T7636] tipc: Started in network mode [ 359.935745][ T7636] tipc: Node identity 7f000001, cluster identity 4711 [ 359.943425][ T7636] tipc: Enabled bearer , priority 10 [ 360.205442][ T4435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.226174][ T4435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.341225][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 360.629202][ T4795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.116676][ T6188] tipc: Node number set to 2130706433 [ 361.178179][ T4795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.232762][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 361.840966][ T7668] rdma_rxe: rxe_register_device failed with error -23 [ 361.849242][ T7668] rdma_rxe: failed to add lo [ 363.500041][ T7692] fuse: Unknown parameter 'group_id00000000000000000000' [ 364.449687][ T7703] loop1: detected capacity change from 0 to 256 [ 364.773055][ T7706] xt_CT: You must specify a L4 protocol and not use inversions on it [ 364.851104][ T7706] loop2: detected capacity change from 0 to 1024 [ 365.041066][ T7707] tipc: Started in network mode [ 365.046238][ T7707] tipc: Node identity 7f000001, cluster identity 4711 [ 365.058153][ T7707] tipc: Enabled bearer , priority 10 [ 366.066076][ T4374] tipc: Node number set to 2130706433 [ 366.834197][ T7729] loop5: detected capacity change from 0 to 512 [ 367.007150][ T7729] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 367.046579][ T7729] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 367.218118][ T7729] netlink: 'syz.5.717': attribute type 16 has an invalid length. [ 367.380258][ T7739] rdma_rxe: already configured on lo [ 367.983367][ T7729] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 367.991504][ T7729] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 368.072670][ T7729] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 369.884483][ T7766] fuse: Bad value for 'user_id' [ 371.512319][ T7778] xt_CT: You must specify a L4 protocol and not use inversions on it [ 371.543247][ T7778] loop0: detected capacity change from 0 to 1024 [ 372.380046][ T7781] loop4: detected capacity change from 0 to 256 [ 372.688450][ T7785] rdma_rxe: already configured on lo [ 374.808472][ T7818] fuse: Bad value for 'user_id' [ 375.446156][ T4284] Bluetooth: hci4: command 0x0406 tx timeout [ 377.904637][ T7836] rdma_rxe: rxe_register_device failed with error -23 [ 377.911607][ T7836] rdma_rxe: failed to add lo [ 378.591381][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.698272][ T7841] loop1: detected capacity change from 0 to 256 [ 380.906440][ T7845] xt_CT: You must specify a L4 protocol and not use inversions on it [ 381.125723][ T7845] loop0: detected capacity change from 0 to 1024 [ 382.368273][ T7881] fuse: Bad value for 'user_id' [ 385.507869][ T7898] rdma_rxe: rxe_register_device failed with error -23 [ 385.515412][ T7898] rdma_rxe: failed to add lo [ 386.368114][ T7906] rdma_rxe: rxe_register_device failed with error -23 [ 386.408895][ T7906] rdma_rxe: failed to add lo [ 386.446868][ T47] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 386.457091][ T47] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 386.466619][ T47] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 386.486225][ T47] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 386.506351][ T47] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 386.514730][ T47] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 386.560164][ T7907] lo speed is unknown, defaulting to 1000 [ 387.083248][ T7916] loop0: detected capacity change from 0 to 256 [ 388.458360][ T7907] chnl_net:caif_netlink_parms(): no params data found [ 388.566056][ T4284] Bluetooth: hci5: command 0x0409 tx timeout [ 388.917686][ T7728] EXT4-fs (loop5): unmounting filesystem. [ 388.940993][ T7907] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.043984][ T7942] fuse: Bad value for 'fd' [ 389.864168][ T7907] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.897895][ T7907] device bridge_slave_0 entered promiscuous mode [ 389.949506][ T7907] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.988659][ T7907] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.026063][ T7907] device bridge_slave_1 entered promiscuous mode [ 390.430308][ T7907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.546627][ T7956] xt_CT: You must specify a L4 protocol and not use inversions on it [ 390.621863][ T7956] loop1: detected capacity change from 0 to 1024 [ 391.110960][ T7907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.256816][ T4284] Bluetooth: hci5: command 0x041b tx timeout [ 391.369334][ T5145] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 391.603176][ T7907] team0: Port device team_slave_0 added [ 392.150627][ T7967] rdma_rxe: rxe_register_device failed with error -23 [ 392.158242][ T7967] rdma_rxe: failed to add lo [ 393.285976][ T4284] Bluetooth: hci5: command 0x040f tx timeout [ 393.497756][ T7907] team0: Port device team_slave_1 added [ 393.537679][ T7978] loop1: detected capacity change from 0 to 256 [ 393.717887][ T7907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.734712][ T7907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.181508][ T7907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.523882][ T7907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.582833][ T7907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.644616][ T7907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.981525][ T7907] device hsr_slave_0 entered promiscuous mode [ 395.018634][ T7907] device hsr_slave_1 entered promiscuous mode [ 395.046421][ T7907] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 395.072195][ T7907] Cannot create hsr debugfs directory [ 395.366277][ T4284] Bluetooth: hci5: command 0x0419 tx timeout [ 395.718346][ T8000] loop2: detected capacity change from 0 to 512 [ 395.775631][ T8000] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 395.928430][ T8008] fuse: Bad value for 'fd' [ 396.167856][ T8000] EXT4-fs (loop2): 1 truncate cleaned up [ 396.239514][ T8000] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 396.769592][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 396.769609][ T27] audit: type=1800 audit(1758418495.007:770): pid=8000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.770" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 396.907411][ T8015] xt_CT: You must specify a L4 protocol and not use inversions on it [ 396.928008][ T8015] loop4: detected capacity change from 0 to 1024 [ 397.096295][ T5145] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 397.152781][ T27] audit: type=1800 audit(1758418495.387:771): pid=8023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.770" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 397.905564][ T7339] EXT4-fs (loop2): unmounting filesystem. [ 398.264817][ T8037] loop0: detected capacity change from 0 to 256 [ 398.431624][ T8040] rdma_rxe: rxe_register_device failed with error -23 [ 398.439152][ T8040] rdma_rxe: failed to add lo [ 399.817992][ T7907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.014804][ T8047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 400.037190][ T8047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 400.258670][ T7907] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.394461][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 400.443631][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 400.507869][ T8054] rdma_rxe: rxe_register_device failed with error -23 [ 400.516773][ T8054] rdma_rxe: failed to add lo [ 401.066367][ T4348] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.073559][ T4348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.176279][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 401.185378][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 401.194086][ T4348] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.201286][ T4348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.217785][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 401.278330][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 401.622720][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 401.639867][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 401.693257][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 401.722665][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 401.746979][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 401.783742][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 401.805594][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 401.814576][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 401.861934][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 401.888917][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 401.931739][ T7907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 402.207359][ T4578] device hsr_slave_0 left promiscuous mode [ 402.267227][ T4578] device hsr_slave_1 left promiscuous mode [ 402.281726][ T4578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.319206][ T4578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.366519][ T4578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.406043][ T4578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.472141][ T4578] device bridge_slave_1 left promiscuous mode [ 402.478475][ T4578] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.489278][ T4578] device bridge_slave_0 left promiscuous mode [ 402.497094][ T4578] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.563898][ T8081] fuse: Bad value for 'fd' [ 403.746350][ T4578] device veth1_macvtap left promiscuous mode [ 403.769284][ T4578] device veth0_macvtap left promiscuous mode [ 403.775456][ T4578] device veth1_vlan left promiscuous mode [ 403.800761][ T8089] loop0: detected capacity change from 0 to 256 [ 403.812556][ T4578] device veth0_vlan left promiscuous mode [ 406.262220][ T8115] rdma_rxe: rxe_register_device failed with error -23 [ 406.269204][ T8115] rdma_rxe: failed to add lo [ 408.159165][ T8130] xt_CT: You must specify a L4 protocol and not use inversions on it [ 408.358590][ T8130] loop1: detected capacity change from 0 to 1024 [ 408.821243][ T8133] fuse: Bad value for 'fd' [ 409.417999][ T5145] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 409.443200][ T4578] team0 (unregistering): Port device team_slave_1 removed [ 409.528607][ T8138] rdma_rxe: rxe_register_device failed with error -23 [ 409.536284][ T8138] rdma_rxe: failed to add lo [ 410.409237][ T4578] team0 (unregistering): Port device team_slave_0 removed [ 410.523276][ T4578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.607855][ T4578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.663398][ T4578] bond0 (unregistering): Released all slaves [ 413.004170][ T7907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.061011][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 413.070139][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 413.170927][ T8171] rdma_rxe: rxe_register_device failed with error -23 [ 413.178447][ T8171] rdma_rxe: failed to add lo [ 414.304041][ T8186] fuse: Bad value for 'fd' [ 415.737434][ T8206] xt_CT: You must specify a L4 protocol and not use inversions on it [ 415.819891][ T8206] loop2: detected capacity change from 0 to 1024 [ 416.702093][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 416.741787][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 416.818200][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 416.841136][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 416.883981][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 416.920178][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 416.944441][ T7907] device veth0_vlan entered promiscuous mode [ 416.992329][ T7907] device veth1_vlan entered promiscuous mode [ 417.212070][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 417.235435][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 417.295409][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 417.364970][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 417.417503][ T7907] device veth0_macvtap entered promiscuous mode [ 417.463356][ T7907] device veth1_macvtap entered promiscuous mode [ 417.699172][ T7907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.760556][ T7907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.787098][ T8226] loop4: detected capacity change from 0 to 256 [ 417.865928][ T7907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.876528][ T7907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.886526][ T7907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.541497][ T8230] rdma_rxe: rxe_register_device failed with error -23 [ 418.548488][ T8230] rdma_rxe: failed to add lo [ 418.750574][ T7907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.864767][ T7907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.112735][ T7907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.420251][ T8234] fuse: Bad value for 'fd' [ 419.804570][ T7907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.831883][ T7907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.863672][ T7907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.896129][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 419.917932][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 419.966815][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 419.997237][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 420.033367][ T7907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.048423][ T7907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.082955][ T7907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.105154][ T7907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.162261][ T7907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.209202][ T7907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.240429][ T7907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.267068][ T7907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.300334][ T7907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.342628][ T7907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.365701][ T7907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.530755][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 420.547980][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 420.638121][ T8253] rdma_rxe: rxe_register_device failed with error -23 [ 420.645539][ T8253] rdma_rxe: failed to add lo [ 421.699687][ T4589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.709196][ T4589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.927570][ T8265] xt_CT: You must specify a L4 protocol and not use inversions on it [ 421.957186][ T8265] loop2: detected capacity change from 0 to 1024 [ 422.063386][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 422.647427][ T5145] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 422.656994][ T5634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.685204][ T5634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.726006][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 425.901822][ T8302] loop2: detected capacity change from 0 to 256 [ 426.344539][ T8311] fuse: Invalid rootmode [ 427.665688][ T8326] xt_CT: You must specify a L4 protocol and not use inversions on it [ 427.741218][ T8326] loop7: detected capacity change from 0 to 1024 [ 428.577278][ T8331] rdma_rxe: already configured on lo [ 430.643719][ T8354] rdma_rxe: rxe_register_device failed with error -23 [ 430.652270][ T8354] rdma_rxe: failed to add lo [ 432.841655][ T8368] fuse: Invalid rootmode [ 433.729433][ T8372] loop7: detected capacity change from 0 to 256 [ 434.910891][ T8387] xt_CT: You must specify a L4 protocol and not use inversions on it [ 434.931951][ T8387] loop2: detected capacity change from 0 to 1024 [ 435.080521][ T4385] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 438.078995][ T8423] fuse: Invalid rootmode [ 439.302410][ T8435] rdma_rxe: rxe_register_device failed with error -23 [ 439.309776][ T8435] rdma_rxe: failed to add lo [ 439.930357][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.024541][ T8434] loop2: detected capacity change from 0 to 256 [ 440.936747][ T8453] rdma_rxe: rxe_register_device failed with error -23 [ 440.944147][ T8453] rdma_rxe: failed to add lo [ 442.021552][ T4284] Bluetooth: hci3: command 0x0406 tx timeout [ 444.663977][ T8498] fuse: Bad value for 'rootmode' [ 445.618834][ T8508] loop1: detected capacity change from 0 to 256 [ 446.261227][ T8496] xt_CT: You must specify a L4 protocol and not use inversions on it [ 447.062335][ T8496] loop4: detected capacity change from 0 to 1024 [ 447.085132][ T8527] rdma_rxe: already configured on lo [ 448.119904][ T8536] rdma_rxe: rxe_register_device failed with error -23 [ 448.127372][ T8536] rdma_rxe: failed to add lo [ 448.970322][ T8545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.880'. [ 449.124131][ T8548] netlink: 4 bytes leftover after parsing attributes in process `syz.7.881'. [ 450.399128][ T8568] fuse: Bad value for 'rootmode' [ 451.136352][ T8572] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 451.157722][ T8575] loop0: detected capacity change from 0 to 256 [ 451.197134][ T8572] device bridge_slave_1 left promiscuous mode [ 451.211502][ T8572] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.391898][ T8572] device bridge_slave_0 left promiscuous mode [ 451.406197][ T8572] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.468598][ T8586] IPVS: stopping master sync thread 8588 ... [ 452.486084][ T47] Bluetooth: hci2: command 0x0406 tx timeout [ 452.818090][ T8597] device syzkaller1 entered promiscuous mode [ 453.204824][ T8608] rdma_rxe: rxe_register_device failed with error -23 [ 453.212463][ T8608] rdma_rxe: failed to add lo [ 454.260575][ T8626] loop1: detected capacity change from 0 to 256 [ 454.453580][ T8632] xt_CT: You must specify a L4 protocol and not use inversions on it [ 454.532764][ T8632] loop4: detected capacity change from 0 to 1024 [ 455.119549][ T4385] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 455.163052][ T8626] syz.1.901: attempt to access beyond end of device [ 455.163052][ T8626] loop1: rw=2049, sector=256, nr_sectors = 68 limit=256 [ 455.702813][ T8648] loop1: detected capacity change from 0 to 512 [ 455.806157][ T8648] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 455.824086][ T8653] loop7: detected capacity change from 0 to 1024 [ 455.832300][ T8648] EXT4-fs warning (device loop1): ext4_enable_quotas:7068: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 455.848690][ T8648] EXT4-fs (loop1): mount failed [ 456.062747][ T8653] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 456.080735][ T8653] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 456.237821][ T7907] EXT4-fs (loop7): unmounting filesystem. [ 456.284440][ T8667] lo speed is unknown, defaulting to 1000 [ 456.799349][ T8664] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 456.805514][ T8664] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 456.811707][ T8664] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 456.821313][ T8664] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 456.828609][ T8664] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 456.834627][ T8664] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 456.844139][ T8664] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 456.851688][ T8664] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 456.857710][ T8664] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 456.865252][ T8664] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 456.873177][ T8664] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 456.879260][ T8664] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 456.896313][ T8664] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 457.009388][ T8681] fuse: Unknown parameter 'use00000000000000000000' [ 458.014407][ T8689] loop0: detected capacity change from 0 to 2048 [ 458.117314][ T8691] xt_CT: You must specify a L4 protocol and not use inversions on it [ 458.440924][ T8691] loop4: detected capacity change from 0 to 1024 [ 458.466015][ T47] Bluetooth: hci4: command 0x0c1a tx timeout [ 458.906244][ T47] Bluetooth: hci5: command 0x0c1a tx timeout [ 458.906365][ T4284] Bluetooth: hci0: command 0x0c1a tx timeout [ 458.912437][ T47] Bluetooth: hci2: command 0x0c1a tx timeout [ 458.920236][ T4284] Bluetooth: hci3: command 0x0c1a tx timeout [ 458.961154][ T8689] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 459.019495][ T8698] netlink: 'syz.1.919': attribute type 12 has an invalid length. [ 459.115341][ T7268] EXT4-fs (loop0): unmounting filesystem. [ 460.061359][ T8716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.921'. [ 460.459004][ T8724] lo speed is unknown, defaulting to 1000 [ 460.642668][ T8734] fuse: Unknown parameter 'use00000000000000000000' [ 461.326517][ T8735] rdma_rxe: already configured on lo [ 461.335058][ T4278] Bluetooth: hci2: command 0x0406 tx timeout [ 461.350566][ T4278] Bluetooth: hci0: command 0x0406 tx timeout [ 461.361309][ T4278] Bluetooth: hci5: command 0x0406 tx timeout [ 461.372963][ T4278] Bluetooth: hci3: command 0x0406 tx timeout [ 462.014912][ T8741] loop2: detected capacity change from 0 to 512 [ 462.070700][ T8741] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 462.128953][ T8741] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.220841][ T7339] EXT4-fs (loop2): unmounting filesystem. [ 462.275993][ T27] audit: type=1326 audit(1758418560.487:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8745 comm="syz.7.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7fad8ec29 code=0x7ffc0000 [ 462.276042][ T27] audit: type=1326 audit(1758418560.487:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8745 comm="syz.7.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7fad8ec29 code=0x7ffc0000 [ 462.276080][ T27] audit: type=1326 audit(1758418560.487:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8745 comm="syz.7.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa7fad8ec29 code=0x7ffc0000 [ 462.276117][ T27] audit: type=1326 audit(1758418560.487:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8745 comm="syz.7.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7fad8ec29 code=0x7ffc0000 [ 462.276153][ T27] audit: type=1326 audit(1758418560.487:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8745 comm="syz.7.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7fad8ec29 code=0x7ffc0000 [ 462.276203][ T27] audit: type=1326 audit(1758418560.487:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8745 comm="syz.7.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7fad8ec29 code=0x7ffc0000 [ 462.276239][ T27] audit: type=1326 audit(1758418560.487:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8745 comm="syz.7.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7fad8ec29 code=0x7ffc0000 [ 462.276281][ T27] audit: type=1326 audit(1758418560.487:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8745 comm="syz.7.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7fad8ec29 code=0x7ffc0000 [ 462.276317][ T27] audit: type=1326 audit(1758418560.487:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8745 comm="syz.7.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7fad8ec29 code=0x7ffc0000 [ 462.276351][ T27] audit: type=1326 audit(1758418560.487:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8745 comm="syz.7.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7fad8ec29 code=0x7ffc0000 [ 462.529729][ T8756] xt_CT: You must specify a L4 protocol and not use inversions on it [ 462.598711][ T8756] loop0: detected capacity change from 0 to 1024 [ 463.059645][ T8751] batman_adv: batadv0: Adding interface: dummy0 [ 463.059705][ T8751] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.059817][ T8751] batman_adv: batadv0: Interface activated: dummy0 [ 463.224272][ T8757] batadv0: mtu less than device minimum [ 463.226397][ T8757] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 463.228413][ T8757] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 463.230382][ T8757] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 463.232267][ T8757] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 463.234220][ T8757] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 463.236253][ T8757] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 463.238207][ T8757] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 463.240221][ T8757] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 463.242166][ T8757] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 463.364210][ T5145] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 463.371721][ T8753] netlink: 28 bytes leftover after parsing attributes in process `syz.0.931'. [ 463.456123][ T8699] Bluetooth: hci0: command 0x0406 tx timeout [ 464.014493][ T8772] loop2: detected capacity change from 0 to 4096 [ 464.087918][ T8772] ext4: Unknown parameter 'fsmagic' [ 464.762191][ T8788] fuse: Unknown parameter 'use00000000000000000000' [ 465.861140][ T8804] rdma_rxe: already configured on lo [ 467.212636][ T8826] loop0: detected capacity change from 0 to 512 [ 467.437651][ T8826] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.953: bg 0: block 393: padding at end of block bitmap is not set [ 467.454553][ T8826] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 467.466891][ T8826] EXT4-fs (loop0): 2 truncates cleaned up [ 467.477081][ T8826] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 467.561384][ T8833] fuse: Unknown parameter 'user_i00000000000000000000' [ 468.196550][ T8823] syz.2.952 (8823) used greatest stack depth: 17408 bytes left [ 468.315358][ T7268] EXT4-fs (loop0): unmounting filesystem. [ 469.904580][ T8865] netlink: 272 bytes leftover after parsing attributes in process `syz.1.964'. [ 471.438965][ T8870] fuse: Unknown parameter 'user_i00000000000000000000' [ 471.461553][ T8873] lo speed is unknown, defaulting to 1000 [ 472.404594][ T8889] loop1: detected capacity change from 0 to 1024 [ 472.588936][ T8898] netlink: 96 bytes leftover after parsing attributes in process `syz.7.975'. [ 472.637167][ T8889] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 472.651333][ T8889] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.879742][ T8907] loop7: detected capacity change from 0 to 256 [ 474.004960][ T75] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm kworker/u4:4: bg 0: block 393: padding at end of block bitmap is not set [ 474.122372][ T75] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 216 with error 117 [ 474.179224][ T75] EXT4-fs (loop1): This should not happen!! Data will be lost [ 474.179224][ T75] [ 474.233916][ T75] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 474.293821][ T75] EXT4-fs (loop1): This should not happen!! Data will be lost [ 474.293821][ T75] [ 474.323852][ T75] EXT4-fs (loop1): Total free blocks count 0 [ 474.342301][ T75] EXT4-fs (loop1): Free/Dirty block details [ 474.363731][ T75] EXT4-fs (loop1): free_blocks=0 [ 474.411971][ T75] EXT4-fs (loop1): dirty_blocks=32 [ 474.455929][ T75] EXT4-fs (loop1): Block reservation details [ 474.689268][ T8903] fuse: Unknown parameter 'user_i00000000000000000000' [ 474.989351][ T8945] loop0: detected capacity change from 0 to 512 [ 475.104353][ T8945] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 475.116038][ T8945] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 475.161182][ T8945] [ 475.163565][ T8945] ====================================================== [ 475.170607][ T8945] WARNING: possible circular locking dependency detected [ 475.177658][ T8945] syzkaller #0 Not tainted [ 475.182105][ T8945] ------------------------------------------------------ [ 475.189145][ T8945] syz.0.987/8945 is trying to acquire lock: [ 475.195098][ T8945] ffff888072611698 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x903/0x1b60 [ 475.204668][ T8945] [ 475.204668][ T8945] but task is already holding lock: [ 475.212071][ T8945] ffff88807a974208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_write_dquot+0x12b/0x190 [ 475.221695][ T8945] [ 475.221695][ T8945] which lock already depends on the new lock. [ 475.221695][ T8945] [ 475.232117][ T8945] [ 475.232117][ T8945] the existing dependency chain (in reverse order) is: [ 475.241159][ T8945] [ 475.241159][ T8945] -> #2 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 475.249277][ T8945] down_read+0x42/0x2d0 [ 475.254007][ T8945] v2_read_dquot+0x4a/0x110 [ 475.259065][ T8945] dquot_acquire+0x152/0x520 [ 475.264201][ T8945] ext4_acquire_dquot+0x2d9/0x4a0 [ 475.269782][ T8945] dqget+0x778/0xeb0 [ 475.274250][ T8945] __dquot_initialize+0x3b6/0xcb0 [ 475.279825][ T8945] ext4_create+0x8c/0x460 [ 475.284718][ T8945] path_openat+0x1187/0x2e70 [ 475.289871][ T8945] do_filp_open+0x1c1/0x3c0 [ 475.294922][ T8945] do_sys_openat2+0x142/0x490 [ 475.300203][ T8945] __x64_sys_creat+0x8c/0xb0 [ 475.305364][ T8945] do_syscall_64+0x4c/0xa0 [ 475.310334][ T8945] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 475.316774][ T8945] [ 475.316774][ T8945] -> #1 (&dquot->dq_lock){+.+.}-{3:3}: [ 475.324443][ T8945] __mutex_lock+0x120/0xaf0 [ 475.329496][ T8945] dquot_commit+0x5a/0x410 [ 475.334455][ T8945] ext4_write_dquot+0x1f0/0x360 [ 475.339854][ T8945] mark_all_dquot_dirty+0xf9/0x400 [ 475.345506][ T8945] __dquot_alloc_space+0x5fc/0xe60 [ 475.351163][ T8945] ext4_mb_new_blocks+0xf74/0x4720 [ 475.356828][ T8945] ext4_ext_map_blocks+0x143c/0x66d0 [ 475.362654][ T8945] ext4_map_blocks+0x9d1/0x1b60 [ 475.368068][ T8945] _ext4_get_block+0x1d7/0x4e0 [ 475.373391][ T8945] ext4_get_block_unwritten+0x2a/0x100 [ 475.379411][ T8945] ext4_block_write_begin+0x637/0x12f0 [ 475.385419][ T8945] ext4_write_begin+0x624/0xf50 [ 475.390816][ T8945] ext4_da_write_begin+0x304/0x950 [ 475.396476][ T8945] generic_perform_write+0x2db/0x560 [ 475.402319][ T8945] ext4_buffered_write_iter+0x11a/0x3e0 [ 475.408420][ T8945] ext4_file_write_iter+0x1d6/0x16e0 [ 475.414255][ T8945] aio_write+0x50e/0x720 [ 475.419039][ T8945] io_submit_one+0x6aa/0x1300 [ 475.424274][ T8945] __se_sys_io_submit+0x190/0x300 [ 475.429846][ T8945] do_syscall_64+0x4c/0xa0 [ 475.434812][ T8945] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 475.441254][ T8945] [ 475.441254][ T8945] -> #0 (&ei->i_data_sem/2){++++}-{3:3}: [ 475.449111][ T8945] __lock_acquire+0x2cf8/0x7c50 [ 475.454518][ T8945] lock_acquire+0x1b4/0x490 [ 475.459581][ T8945] down_write+0x36/0x60 [ 475.464284][ T8945] ext4_map_blocks+0x903/0x1b60 [ 475.469692][ T8945] ext4_getblk+0x1ab/0x6d0 [ 475.474670][ T8945] ext4_bread+0x26/0x170 [ 475.479471][ T8945] ext4_quota_write+0x230/0x570 [ 475.484882][ T8945] find_free_dqentry+0x673/0xc20 [ 475.490390][ T8945] do_insert_tree+0x70d/0x1040 [ 475.495705][ T8945] do_insert_tree+0x9ae/0x1040 [ 475.501020][ T8945] do_insert_tree+0x9ae/0x1040 [ 475.506336][ T8945] do_insert_tree+0x9ae/0x1040 [ 475.511654][ T8945] qtree_write_dquot+0x48d/0x5b0 [ 475.517149][ T8945] v2_write_dquot+0x108/0x190 [ 475.522395][ T8945] dquot_acquire+0x2d5/0x520 [ 475.527528][ T8945] ext4_acquire_dquot+0x2d9/0x4a0 [ 475.533106][ T8945] dqget+0x778/0xeb0 [ 475.537544][ T8945] __dquot_initialize+0x328/0xcb0 [ 475.543115][ T8945] ext4_file_open+0x2cb/0x6a0 [ 475.548356][ T8945] do_dentry_open+0x7e9/0x10d0 [ 475.553676][ T8945] path_openat+0x25c6/0x2e70 [ 475.558823][ T8945] do_filp_open+0x1c1/0x3c0 [ 475.563870][ T8945] do_sys_openat2+0x142/0x490 [ 475.569120][ T8945] __x64_sys_openat+0x135/0x160 [ 475.574530][ T8945] do_syscall_64+0x4c/0xa0 [ 475.579589][ T8945] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 475.586033][ T8945] [ 475.586033][ T8945] other info that might help us debug this: [ 475.586033][ T8945] [ 475.596370][ T8945] Chain exists of: [ 475.596370][ T8945] &ei->i_data_sem/2 --> &dquot->dq_lock --> &s->s_dquot.dqio_sem [ 475.596370][ T8945] [ 475.610073][ T8945] Possible unsafe locking scenario: [ 475.610073][ T8945] [ 475.617546][ T8945] CPU0 CPU1 [ 475.622940][ T8945] ---- ---- [ 475.628334][ T8945] lock(&s->s_dquot.dqio_sem); [ 475.633223][ T8945] lock(&dquot->dq_lock); [ 475.640204][ T8945] lock(&s->s_dquot.dqio_sem); [ 475.647605][ T8945] lock(&ei->i_data_sem/2); [ 475.652236][ T8945] [ 475.652236][ T8945] *** DEADLOCK *** [ 475.652236][ T8945] [ 475.660399][ T8945] 2 locks held by syz.0.987/8945: [ 475.665460][ T8945] #0: ffff8880256a2b28 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_acquire+0x63/0x520 [ 475.674914][ T8945] #1: ffff88807a974208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_write_dquot+0x12b/0x190 [ 475.685023][ T8945] [ 475.685023][ T8945] stack backtrace: [ 475.690954][ T8945] CPU: 0 PID: 8945 Comm: syz.0.987 Not tainted syzkaller #0 [ 475.698342][ T8945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 475.708430][ T8945] Call Trace: [ 475.711740][ T8945] [ 475.714700][ T8945] dump_stack_lvl+0x168/0x22e [ 475.719423][ T8945] ? load_image+0x3b0/0x3b0 [ 475.723972][ T8945] ? show_regs_print_info+0x12/0x12 [ 475.729206][ T8945] ? print_circular_bug+0x12b/0x1a0 [ 475.734447][ T8945] check_noncircular+0x274/0x310 [ 475.739427][ T8945] ? add_chain_block+0x940/0x940 [ 475.744397][ T8945] ? lockdep_lock+0xdc/0x1e0 [ 475.749029][ T8945] ? __lock_acquire+0x13c0/0x7c50 [ 475.754194][ T8945] ? _find_first_zero_bit+0xcf/0x100 [ 475.759524][ T8945] __lock_acquire+0x2cf8/0x7c50 [ 475.764430][ T8945] ? verify_lock_unused+0x140/0x140 [ 475.769668][ T8945] ? verify_lock_unused+0x140/0x140 [ 475.774908][ T8945] lock_acquire+0x1b4/0x490 [ 475.779484][ T8945] ? ext4_map_blocks+0x903/0x1b60 [ 475.784558][ T8945] ? __might_sleep+0xd0/0xd0 [ 475.789192][ T8945] ? read_lock_is_recursive+0x10/0x10 [ 475.794603][ T8945] ? percpu_counter_add_batch+0x13b/0x160 [ 475.800362][ T8945] ? rcu_is_watching+0x11/0xa0 [ 475.805171][ T8945] ? ext4_es_lookup_extent+0x443/0xb20 [ 475.810680][ T8945] down_write+0x36/0x60 [ 475.814869][ T8945] ? ext4_map_blocks+0x903/0x1b60 [ 475.819940][ T8945] ext4_map_blocks+0x903/0x1b60 [ 475.824831][ T8945] ? ext4_es_lookup_extent+0x443/0xb20 [ 475.830329][ T8945] ? ext4_issue_zeroout+0x250/0x250 [ 475.835571][ T8945] ? kasan_set_track+0x4b/0x70 [ 475.840372][ T8945] ? find_free_dqentry+0x55/0xc20 [ 475.845433][ T8945] ? do_insert_tree+0x70d/0x1040 [ 475.850402][ T8945] ? do_insert_tree+0x9ae/0x1040 [ 475.855385][ T8945] ? ext4_issue_zeroout+0x250/0x250 [ 475.860634][ T8945] ? v2_write_dquot+0x108/0x190 [ 475.865518][ T8945] ext4_getblk+0x1ab/0x6d0 [ 475.870082][ T8945] ? do_sys_openat2+0x142/0x490 [ 475.874983][ T8945] ? __x64_sys_openat+0x135/0x160 [ 475.880061][ T8945] ? do_syscall_64+0x4c/0xa0 [ 475.884684][ T8945] ? ext4_get_block_unwritten+0x100/0x100 [ 475.890445][ T8945] ? ext4_getblk+0x2a8/0x6d0 [ 475.895095][ T8945] ? ext4_get_block_unwritten+0x100/0x100 [ 475.900956][ T8945] ext4_bread+0x26/0x170 [ 475.905244][ T8945] ext4_quota_write+0x230/0x570 [ 475.910129][ T8945] ? ext4_quota_read+0x380/0x380 [ 475.915107][ T8945] ? ext4_quota_read+0x305/0x380 [ 475.920108][ T8945] ? check_dquot_block_header+0x212/0x2f0 [ 475.925906][ T8945] ? ext4_quota_read+0x380/0x380 [ 475.930874][ T8945] find_free_dqentry+0x673/0xc20 [ 475.935848][ T8945] do_insert_tree+0x70d/0x1040 [ 475.940653][ T8945] do_insert_tree+0x9ae/0x1040 [ 475.945461][ T8945] do_insert_tree+0x9ae/0x1040 [ 475.950273][ T8945] do_insert_tree+0x9ae/0x1040 [ 475.955083][ T8945] qtree_write_dquot+0x48d/0x5b0 [ 475.960078][ T8945] ? qtree_entry_unused+0xe0/0xe0 [ 475.965148][ T8945] ? rwsem_write_trylock+0x12f/0x1b0 [ 475.970473][ T8945] ? trace_contention_end+0x5f/0x170 [ 475.975808][ T8945] ? preempt_count_add+0x8d/0x190 [ 475.980874][ T8945] v2_write_dquot+0x108/0x190 [ 475.985588][ T8945] dquot_acquire+0x2d5/0x520 [ 475.990212][ T8945] ext4_acquire_dquot+0x2d9/0x4a0 [ 475.995283][ T8945] dqget+0x778/0xeb0 [ 475.999213][ T8945] __dquot_initialize+0x328/0xcb0 [ 476.004272][ T8945] ? dquot_initialize+0x20/0x20 [ 476.009154][ T8945] ? dput+0x37/0x1d0 [ 476.013086][ T8945] ? dput+0x37/0x1d0 [ 476.017026][ T8945] ? generic_file_open+0x91/0xc0 [ 476.022119][ T8945] ext4_file_open+0x2cb/0x6a0 [ 476.026863][ T8945] ? ext4_file_mmap+0x360/0x360 [ 476.031763][ T8945] ? tomoyo_file_open+0xe9/0x170 [ 476.036746][ T8945] ? fsnotify_perm+0x248/0x550 [ 476.041546][ T8945] ? ext4_file_mmap+0x360/0x360 [ 476.046452][ T8945] do_dentry_open+0x7e9/0x10d0 [ 476.051266][ T8945] path_openat+0x25c6/0x2e70 [ 476.055904][ T8945] ? do_filp_open+0x3c0/0x3c0 [ 476.060710][ T8945] do_filp_open+0x1c1/0x3c0 [ 476.065260][ T8945] ? vfs_tmpfile+0x480/0x480 [ 476.069893][ T8945] ? _raw_spin_unlock+0x24/0x40 [ 476.074786][ T8945] ? alloc_fd+0x58f/0x630 [ 476.079174][ T8945] do_sys_openat2+0x142/0x490 [ 476.083889][ T8945] ? do_sys_open+0xe0/0xe0 [ 476.088342][ T8945] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 476.094358][ T8945] ? lock_chain_count+0x20/0x20 [ 476.099242][ T8945] __x64_sys_openat+0x135/0x160 [ 476.104131][ T8945] do_syscall_64+0x4c/0xa0 [ 476.108579][ T8945] ? clear_bhb_loop+0x60/0xb0 [ 476.113295][ T8945] ? clear_bhb_loop+0x60/0xb0 [ 476.118005][ T8945] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 476.123952][ T8945] RIP: 0033:0x7ff54a58ec29 [ 476.128407][ T8945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.148061][ T8945] RSP: 002b:00007ff54b4e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 476.156515][ T8945] RAX: ffffffffffffffda RBX: 00007ff54a7d5fa0 RCX: 00007ff54a58ec29 [ 476.164518][ T8945] RDX: 0000000000000441 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 476.172523][ T8945] RBP: 00007ff54a611e41 R08: 0000000000000000 R09: 0000000000000000 [ 476.180704][ T8945] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000 [ 476.188813][ T8945] R13: 00007ff54a7d6038 R14: 00007ff54a7d5fa0 R15: 00007ffc923b98d8 [ 476.196841][ T8945] [ 476.275436][ T7268] EXT4-fs (loop0): unmounting filesystem.