last executing test programs: 5m22.672088252s ago: executing program 2 (id=553): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x701, 0x0, 0xffffffff, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) syslog(0x4, 0x0, 0x0) 5m20.282613899s ago: executing program 2 (id=568): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000000c0)=0x1, 0x4) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x841) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5m18.842421711s ago: executing program 2 (id=563): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 5m15.357180255s ago: executing program 2 (id=566): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) syz_io_uring_setup(0x7eda, 0x0, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x4}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) lseek(r1, 0x4, 0x0) readv(r1, &(0x7f0000000340)=[{&(0x7f0000001740)=""/153, 0x99}], 0x1) prlimit64(0x0, 0x7, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) chdir(0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) 5m13.864982798s ago: executing program 2 (id=569): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x701, 0x0, 0xffffffff, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) syslog(0x4, 0x0, 0x0) 5m11.652273543s ago: executing program 2 (id=572): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000200)={r2, 0x0, 0xb7d}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x40000) ioctl$CEC_S_MODE(r3, 0x40046109, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x842, 0x0) 4m56.521648956s ago: executing program 32 (id=572): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000200)={r2, 0x0, 0xb7d}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x40000) ioctl$CEC_S_MODE(r3, 0x40046109, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x842, 0x0) 4m34.761483902s ago: executing program 4 (id=637): r0 = socket$vsock_stream(0x28, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000280)=ANY=[]) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_procfs(0x0, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x1}], 0x1) r3 = accept4$unix(r0, 0x0, 0x0, 0x0) sendto$packet(r2, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 4m30.690612205s ago: executing program 4 (id=641): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r3, &(0x7f00000004c0)='W', 0x1, 0x44011, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback, 0xb}, 0x1c) getsockopt$inet6_opts(r3, 0x29, 0x36, 0x0, &(0x7f0000000040)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e00010000"], 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r6}]}}}]}, 0x6c}}, 0x0) 4m28.39961576s ago: executing program 4 (id=645): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$netrom(0x6, 0x5, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) open(0x0, 0x185380, 0x0) openat$vimc1(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) add_key(&(0x7f0000000200)='pkcs7_test\x00', 0x0, &(0x7f0000000180)="100c060826d775b31aeca7ca3792", 0xe, 0xfffffffffffffffc) shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) 4m26.739643776s ago: executing program 4 (id=649): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00'}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x24002800) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000030601020000000000000000000000000500010007"], 0x1c}}, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) 4m24.181185805s ago: executing program 4 (id=664): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000a9000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',noextend']) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000640)=ANY=[@ANYBLOB='h'], 0x168) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) 4m21.676259894s ago: executing program 4 (id=658): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) pipe2(0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x1d}], 0x1, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) 4m5.958761677s ago: executing program 33 (id=658): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) pipe2(0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x1d}], 0x1, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) 2m55.417471107s ago: executing program 3 (id=788): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180), 0x4) socket(0x10, 0x3, 0x0) sendmsg$unix(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r4, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000780)=ANY=[], 0x31) socket$nl_netfilter(0x10, 0x3, 0xc) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)) 2m45.023037357s ago: executing program 3 (id=805): openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x40c880, 0x0) socket$inet6(0xa, 0x80002, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r2, 0x6, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x2}) fcntl$lock(r2, 0x26, &(0x7f00000031c0)={0x1}) 2m39.763179059s ago: executing program 3 (id=809): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000600000000100010001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0) close(r4) close(r5) 2m38.030152715s ago: executing program 3 (id=811): getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@migrate={0x50, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x50}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x4000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0xfff3}, {}, {0x1c, 0xc}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x44050) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 2m35.499197924s ago: executing program 3 (id=815): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000340)=@get={0x1, 0x0, 0x8}) 2m33.460938824s ago: executing program 3 (id=819): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x18) sync() 2m17.762960884s ago: executing program 34 (id=819): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x18) sync() 1m43.263553558s ago: executing program 0 (id=920): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f00000006c0)="170000000200020000ffbe8c5ee17688a2003c000303000afdff0230040000d90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff0100000001000000", 0xc0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa4}}, 0x0) 1m41.344094267s ago: executing program 0 (id=914): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/61, 0x3d}, 0x6}], 0x1, 0x22, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={0x0, 0xa0}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_tos={0x0, r4, 0x0, 0x300}}, 0x20) splice(0xffffffffffffffff, &(0x7f0000000080)=0x9, r0, &(0x7f0000000240)=0x10aa, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x4, 0x69, 0x4, 0x8000, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x80, 0x700, 0x4, 0x8}}) name_to_handle_at(r3, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=@reiserfs_5={0x14, 0x5, {0x6, 0xf3fc170, 0x0, 0x0, 0x443}}, &(0x7f0000000380), 0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000006c00040026bd7000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="50000000002802000500110009000000050011000100000008001d002300000008000f0008000000592ceb2a33d04327d17a1d6861534a521aa2fcae316e"], 0x40}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000000c0)={0x60000010}) 1m40.955576673s ago: executing program 0 (id=916): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 1m39.551707235s ago: executing program 0 (id=918): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, 0x0, 0x0) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) 1m38.420245302s ago: executing program 0 (id=922): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000480)=0x102, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r3, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0xe90c, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m30.78503962s ago: executing program 0 (id=934): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/sockstat\x00') bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(r0, &(0x7f0000000840)=[{&(0x7f0000000880)=""/181, 0xb5}], 0x1, 0x1, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4f8, 0x250, 0x11, 0x148, 0x0, 0x10, 0x460, 0x2a8, 0x2a8, 0x460, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x1e8, 0x250, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'team_slave_0\x00', {0x0, 0x0, 0x9, 0x3, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@comment={{0x120}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0xff000000, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x558) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x201c008, &(0x7f0000000240)={[{@nogrpid}, {@dioread_lock}, {@noinit_itable}, {@nodioread_nolock}]}, 0x1, 0x635, &(0x7f0000000bc0)="$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") quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 1m13.879433001s ago: executing program 35 (id=934): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/sockstat\x00') bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(r0, &(0x7f0000000840)=[{&(0x7f0000000880)=""/181, 0xb5}], 0x1, 0x1, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4f8, 0x250, 0x11, 0x148, 0x0, 0x10, 0x460, 0x2a8, 0x2a8, 0x460, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x1e8, 0x250, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'team_slave_0\x00', {0x0, 0x0, 0x9, 0x3, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@comment={{0x120}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0xff000000, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x558) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x201c008, &(0x7f0000000240)={[{@nogrpid}, {@dioread_lock}, {@noinit_itable}, {@nodioread_nolock}]}, 0x1, 0x635, &(0x7f0000000bc0)="$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") quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 24.924932457s ago: executing program 5 (id=1041): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x40) ftruncate(r1, 0x2007ffb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f40)={r3, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x3, 0x5, 0x5e78fe70, 0x0, 0x30000, r1, 0x5, '\x00', 0x0, r1, 0x5, 0x1, 0x5, 0x0, @void, @value, @value=r1}, 0x50) sendfile(r0, r1, 0x0, 0x1000000201005) 21.042114307s ago: executing program 5 (id=1046): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @union]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x1, 0x0, 0x0, 0x3}, 0x3}) 20.048793312s ago: executing program 1 (id=1049): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x1c, 0x80) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f0000000040)=0x100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 18.919422459s ago: executing program 1 (id=1052): io_uring_enter(0xffffffffffffffff, 0x389b, 0x10db, 0x11, &(0x7f0000000440)={[0x35]}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x0, 0x2) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f000030e000/0x1000)=nil, 0x1000}, 0x1}) r3 = socket(0x1e, 0x1, 0x0) accept$nfc_llcp(r3, &(0x7f00000003c0), &(0x7f00000004c0)=0x60) setsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000000200)=0x8, 0x4) connect$tipc(r3, 0x0, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0x1}, 0x8) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) 17.164235227s ago: executing program 1 (id=1055): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2ddc4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, r5, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x214e}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x24}}, 0x0) 17.142754947s ago: executing program 7 (id=1056): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c61636c2c6673796e635f6d6f64653d7374726963742c696e6c696e655f78617474722c6673796e635f6d6f64653d706f7369782c646973636172645f756e69743d7365676d656e742c6261636b67726f756e645f67633d6f6e2c6e6f696e6c696e655f78617474722c646973636172645f756e69743d626c6f636b2c6673796e635f6d6f64653d7374726963742c617467632c657874656e745f63616368652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303031343033302c00271d57a599b8b169a579679e220c689eaaec4fa6229021e75c68a687d319b615573b0b0ceefba8e2e2419434463974ef8174b66469344931de0ccad650792761"], 0x1, 0x550b, &(0x7f00000079c0)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x40) ftruncate(r1, 0x2007ffb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f40)={r3, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x3, 0x5, 0x5e78fe70, 0x0, 0x30000, r1, 0x5, '\x00', 0x0, r1, 0x5, 0x1, 0x5, 0x0, @void, @value, @value=r1}, 0x50) sendfile(r0, r1, 0x0, 0x1000000201005) 16.126722673s ago: executing program 1 (id=1057): syz_mount_image$ext4(&(0x7f00000006c0)='ext2\x00', &(0x7f0000000740)='./file0\x00', 0x484, &(0x7f0000000b80)={[], [{@dont_measure}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@subj_role={'subj_role', 0x3d, '\x97\x9c\r\xeeb\xcc%H\x06\x06t@\x1d\xf3D\f\x94\x8dp6L[^\xe7\xad+\xae\x95\xe6\xb6\x8c\xb9\xf2\x1f\x1d\xed}\xe0o%z\x9e\x1b\x87\x87\x983\x82S\xed]\x01ML%\xd3\xdb[:\xc9\xd3H\x95\xed=g'}}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@flag='nolazytime'}]}, 0x0, 0x43b, &(0x7f00000010c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x228, 0xb, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00', {}, {}, 0x11}, 0xb000000, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) 16.126541152s ago: executing program 6 (id=1058): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@dev, 0x200, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) 14.860316472s ago: executing program 6 (id=1060): r0 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, &(0x7f00000001c0)) sendmmsg$inet6(r4, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) 13.914112246s ago: executing program 1 (id=1062): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_setup(0x3efa, &(0x7f0000000000)={0x0, 0x0, 0x1840, 0x2}) lseek(r1, 0x10001, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r4, 0x0, 0x2, 0x2) 13.890648097s ago: executing program 7 (id=1063): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "12b100", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0x5, 0x1ff0000aa}, @private1}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000005) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x2, 0x80000, 0x3) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0xff, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030", @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040000000"], 0xb8}}, 0x0) 12.279452762s ago: executing program 1 (id=1064): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@dev, 0x200, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 12.217750172s ago: executing program 8 (id=1065): r0 = socket(0x11, 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) pselect6(0x0, 0x0, 0x0, &(0x7f0000000100)={0x7, 0x9, 0x3, 0xfff, 0x2, 0x7ff, 0xd6, 0xfc67}, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f0000000200)={0x0}) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0, 0x16}, 0x8, 0x0, 0x0, 0x1}, 0x20000098) 11.928701127s ago: executing program 7 (id=1066): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x8, 0x4, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6", 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="050000007b002300430000000100000090000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000140)={r1, 0x0, 0x0}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xc8}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 9.673952842s ago: executing program 8 (id=1067): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2ddc4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000140)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, 0x0, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x214e}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0x24}}, 0x0) 9.244337698s ago: executing program 5 (id=1068): r0 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r5, &(0x7f0000000140)='./file0\x00') readlinkat(r5, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/204, 0xcc) 8.638496887s ago: executing program 6 (id=1069): epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000080)=0x35) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdir(0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r4, 0x0, 0x0) 8.368956651s ago: executing program 8 (id=1070): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2ddc4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000140)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, r5, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x214e}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0x24}}, 0x0) 8.236714453s ago: executing program 7 (id=1071): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@dev, 0x200, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 7.361852927s ago: executing program 6 (id=1072): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@dev, 0x200, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 7.360562617s ago: executing program 5 (id=1073): pipe(&(0x7f0000000200)={0xffffffffffffffff}) write(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000ac0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x6d, 0x2}, 0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x4000) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="40010000100001002dbd700000000000e0000002000000000800"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000010000000033000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000a0000df000000000000000008001f00030000004800010073686132353600"/248], 0x140}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[], 0x114}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) 6.617489019s ago: executing program 8 (id=1074): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000680)='mountinfo\x00') openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) lseek(r4, 0x10001, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) syz_clone3(&(0x7f00000007c0)={0x40120000, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) 6.54338466s ago: executing program 7 (id=1075): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@dev, 0x200, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 4.017508119s ago: executing program 6 (id=1076): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in=@rand_addr=0x64010100, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x80}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d5, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x3, 0x0, 0xb7, 0x3, 0xffffffff}}, 0xe8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) sendmmsg(r3, &(0x7f0000000180), 0x400000000000077, 0x7600) 3.668574604s ago: executing program 5 (id=1077): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$key(0xf, 0x3, 0x2) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x0, 0x0, 0xc8}}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) 3.206320521s ago: executing program 8 (id=1078): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pselect6(0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x13, &(0x7f0000000480)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$key(0xf, 0x3, 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x1800, @private=0xfffffffc}}) 2.948560325s ago: executing program 7 (id=1079): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$sndtimer(0xffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0x3, 0x0, 0x1, 0x2}) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r4, 0x0, 0x9, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0xc4d, &(0x7f0000001b40)="$eJzs3V1sXGdaB/DnnWMndsqyU9qmXbpIsxSxaZoE56OtUVrkbIy1K0VtVMcLNyCP40kY1R67trNKK1gFCbgBQVCRVsAFuUHigovcIKEVQhE3iwRIEajSIpAItI1WQoBXsLBiJYzOzDv22BvXbr6cNL/fbvKfc+Y9M++Z9jlzpprnTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEV/46RNDh9NOzwIAuJ9eG39j6Kj3fwB4pJzx+R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK2lKOKtSPHe2HKabC93DJxqti5cnBgdu/VmgylSVKJojy//DBw+cvTYiy+9PNzNj97+bvtMvD5+5kTt5Nzs/EJjcbExXZtoNc/OTTe2/Qh3uv1G+9svQG32zQvT584t1o4cOrru7ovVm7sf21s9Pvzsgee7YydGx8bGe8b09d/2s3+fdPceik+QXVHEFyPFNw5+K9UjohJ3XgtbHDvutcHoK+uvvRMTo2PtHZlp1ltL5Z2pkkf1RVR7Nhrp1sh9qMU7MhJxqfznVE54f7l74/P1hfrUTKN2ur6w1FxqzrVSpTPbcn+qUYnhFDEfEcvFTk+eB01/FPFqpLj5veU0FRFFtw5eeG38jaGjm2/Ydx8nucnTV4uI6/EQ1Cw8oHZHEb8dKd6dHIqzua7aZfNBxOfLfCXirTKvpbicl1N5gBiO+Lb3E3io9UURfxMp5tJymu7Wfvu88tSXa19qnZvrGds9r3zoPx/cT85NeIANRBFT7TP+5XT7/7ELAAAAAAAAAAAAALg/ivh6pLg6uy/NR29PabN1vnamPjXT+VZw97v/tbzVysrKSjV1spZzKOdIztM5J3PO57yU83LOKzmv5ryW83rOGzmXc0YlP3/OWs6hnCM5T+eczDmf81LOyzmvdLLb0bhyLa+/nvNGzuWcoe8JAAAAAAAAAAAAAAAAAACAu2wwiviNSPHvv/+V9u9KR/t36T99fPjkqU/1/mb8M1s8Tjn2UER8Pbb3m7y78m+Np0r5v7u/X8DWBqKIr+bf//vlnZ4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwQKhEEb8SKb72neUUKSJGIiajkzeKnZ4dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFDanYp4NVL87O+OrK7ri4jU/n/HvvKvYzFS5HyizFdi5HA7KyMnyhyIOLQD8wdu3+Lb77xZn5lpLLjhhhturN7Y6SMTAAAAAAAAAAAAAAAAADzCUhF/Hyl+8veWUzUiLlZv7n5sb/X48LMHni+iaF8EIPWOf338zInaybnZ+YXG4mJjujbRap6dm25s9+kGTjVbFy5OjI7dk53Z0uA9nv/gwMm5+bcXmud/YemW9+8ZODG1uLRQP3vru2Mw+iKGetfsb094YnSsPemZZr3V3jRVNplgX0RtuzvDI29PKuJ/I8V7B78Zj+d1+fof/Z2lter/w19cW/rhvvW5+q9j+/jx6ePDJ/c8t53babsT3d8uvLIQxsZ7VvflWf5Qz7pqnte2HxseUWX9vxApfv6PitStoVz/P9BZKlbH/s9X12rq+IZctUP1/0TPuuP5qNXfFzGwNDvf/3TEwOLb7xxsztbPN843WseOvPzS8LGXXzz2Uv+uiIFzzZnG0Nqtbb92AAAAAAAAAAAAAAAAAHCv9KcivhApfunv/nK1bzz3/32qs7TW/9fb/7tvw+P0Xjdgs9u37PXboq+vV/mcKRXxVKR49s+eac83xR4973Cb9qQivlvW0/QX0+fyulz/ubP/1vV/aUOu2qH+38d71l3Kx4n/iBSP/8Ez8bme48TG7t5y3F9Eiqkf+WweF7vKcd3H6/REdxqDy7FfiRTvn14/tts3/cTa2MPb3S3YSWX9z0aKf/itv40fzevWX//j1vW/Z0Ou2qH6f7J3nyJi8e133qzPzDQWFrf9UsAjp6z/X48Uf/0n34zn8rqPuv5P9zo/+55bn4PdQTtU/0/1rKvmef3Yx3wtAAAAAAAAAAAA4GGxJxXxT5Hiz//0QDqY123n+7/TG3LVDn3/7+meddPrvv97725s+0UGAIAHRH8q4icixR9Pf5C6vbGb9v++stb/M7rxxL19Tv+D7T7/j3Wu/zH6/8vnTKmI/8t9vUNb9PX+eKT4tZ86kMelveW4ke50238PvDbXOnhiZmbubH2pPjXTqI3P1882ym33R4p//bfP5m0r7T7fbn90pzd4rSf4dyLFz33YHdvpCe72Uj65NvZwOfZgpPju++vHdvuunlobe6Qc+5uRYuy/bz1279rYo+XYf4wU//lurTt2Tzm2+3nu6bWxh87OzXzfRzYAAAAAAAAAAAAAAAAAAAB2Xn8qIkWKaz9zZbU3fv31v7rXAVh//a+N7tXv/1fvzm4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEMhRRH/FSneG1tON4pyuWPgVLN14eLE6NitNxtMkaISRXt8+Wfg8JGjx1586eXhbn709nfbZ+L18TMnaifnZucXGouLjenaRKt5dm66se1HuL3ti03v2d9+AWqzb16YPndusXbk0NF1d1+s3tz92N7q8eFnDzzfHTsxOjY23jOmr3/bs99SunsPxSfIrijiryLFNw5+K/1zEVGJ266FVVscO+61wegr66+9ExOjY+0dmWnWW0vlnamSR/VFVHs2GunWyH2oxTsyEnEpIirlhPeXuzc+X1+oT800aqfrC0vNpeZcK1U6sy33pxqVGE4R8xGxvPnRikdUfxRxLVLc/N5y+pei84bWroMXXht/Y+jo5hv23cdJbvL01SLiejwENQsPqN1RxJOR4t3JoXi/6NRVu2w+iPh8ma9EvFXmtRSX83IqDxDDEd/2fgIPtb4o4nSkmEvL6YMi1377vPLUl2tfap2b6xnbPa986D8f3E/OTXiADUQRH7bP+JfTh97PAQAAAAAAAAAAAOABV8SrkeLq7L7U7g9d7Sltts7XztSnZjpf6+9+97+Wt1pZWVmppk7Wcg7lHMl5Oudkzvmcl3Jeznkl59Wc13Jez3mjnbvbjYnlclTy8+es5RzKOZLzdM7JnPM5L+W8nPNKzqs5r+W8nvNGzuWcH9H1DwAAAAAAAAAAAAAAAAAAd6QSRfxqpPjad5bTStH5fdnJ6OSN9X2uu3ZqjsC98f8BAAD//3zgG/w=") r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$FUSE_WRITE(r5, &(0x7f00000000c0)={0x18}, 0xfffffdef) 24.93523ms ago: executing program 6 (id=1080): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2ddc4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000140)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, 0x0, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x214e}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0x24}}, 0x0) 23.08852ms ago: executing program 8 (id=1081): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) 0s ago: executing program 5 (id=1082): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000040)={0xf030000, 0x1, 0x2, 0xffffffffffffffff, 0x0, 0x0}) syz_usb_connect(0x3, 0x0, 0x0, 0x0) epoll_create1(0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000002380)=@mangle={'mangle\x00', 0x44, 0x6, 0x5c8, 0x1d0, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@addrtype={{0x30}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @private}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'ip6_vti0\x00', {}, 'ip6gre0\x00', {}, 0x0, 0x13}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @inet=@TOS={0x28}}, {{@ip={@local, @dev, 0x0, 0x0, 'veth1\x00', 'team0\x00'}, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @TTL={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x628) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x138, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r5, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r6, r6, 0x0, 0x9) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000000)={0x4, 0x4, 0x46}) syz_usb_connect(0x2, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): nd mount option has been deprecated and [ 84.391486][ T4340] and is ignored by this kernel. Remove the mand [ 84.391486][ T4340] option from the mount to silence this warning. [ 84.391486][ T4340] ======================================================= [ 84.398409][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.449438][ T4340] EXT4-fs: Ignoring removed nobh option [ 84.462395][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.483053][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.491748][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.502650][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.537947][ T4340] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #11: comm syz.0.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 84.561145][ T4253] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.581889][ T4253] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.594971][ T4253] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.611580][ T4340] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1: couldn't read orphan inode 11 (err -117) [ 84.630598][ T4253] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.643189][ T4340] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 84.766688][ T4337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.777982][ T4337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.823672][ T4340] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.1: Invalid block bitmap block 0 in block_group 0 [ 84.940440][ T4338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.957037][ T4340] Quota error (device loop0): write_blk: dquota write failed [ 84.969638][ T4338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.985292][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.998096][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.009020][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.020013][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.038817][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.050435][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.063809][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.063812][ T4340] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 85.081768][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.095206][ T4340] EXT4-fs error (device loop0): ext4_acquire_dquot:6795: comm syz.0.1: Failed to acquire dquot type 0 [ 85.108406][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.141771][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.153987][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.186400][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.207710][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.263034][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.283459][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.295018][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.307616][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.319066][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.331237][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.342766][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.359758][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.488920][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.991305][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.065961][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.085892][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 86.124799][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.142423][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.261155][ T4254] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.284686][ T4254] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.293715][ T4254] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.310656][ T4254] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.330197][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.400189][ T4354] loop3: detected capacity change from 0 to 128 [ 88.754745][ T4380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.762947][ T4380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.804334][ T26] audit: type=1326 audit(1744121754.117:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4381 comm="syz.3.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f018d169 code=0x7ffc0000 [ 88.815132][ T4371] device syzkaller0 entered promiscuous mode [ 88.848419][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.895521][ T26] audit: type=1326 audit(1744121754.117:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4381 comm="syz.3.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f018d169 code=0x7ffc0000 [ 88.934368][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.954188][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.999926][ T26] audit: type=1326 audit(1744121754.177:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4381 comm="syz.3.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f00f018d169 code=0x7ffc0000 [ 89.062063][ T4369] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.106449][ T26] audit: type=1326 audit(1744121754.177:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4381 comm="syz.3.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f018d169 code=0x7ffc0000 [ 89.174674][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.993831][ T26] audit: type=1326 audit(1744121754.177:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4381 comm="syz.3.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f018d169 code=0x7ffc0000 [ 90.034906][ T26] audit: type=1326 audit(1744121754.187:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4381 comm="syz.3.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f00f018d169 code=0x7ffc0000 [ 90.061594][ T26] audit: type=1326 audit(1744121754.187:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4381 comm="syz.3.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f018d169 code=0x7ffc0000 [ 90.097564][ T26] audit: type=1326 audit(1744121754.187:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4381 comm="syz.3.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f018d169 code=0x7ffc0000 [ 90.221617][ T26] audit: type=1326 audit(1744121754.207:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4381 comm="syz.3.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f00f018d169 code=0x7ffc0000 [ 90.300977][ T4395] loop3: detected capacity change from 0 to 512 [ 90.304578][ T26] audit: type=1326 audit(1744121754.207:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4381 comm="syz.3.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f018d169 code=0x7ffc0000 [ 90.354547][ T4395] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 90.385940][ T26] audit: type=1326 audit(1744121754.207:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4381 comm="syz.3.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f018d169 code=0x7ffc0000 [ 90.411869][ T4399] loop4: detected capacity change from 0 to 512 [ 90.419151][ T4395] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 90.431017][ T4399] EXT4-fs: Ignoring removed nobh option [ 90.566052][ T4402] loop2: detected capacity change from 0 to 1024 [ 90.634686][ T4399] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 90.749970][ T4402] hfsplus: xattr searching failed [ 90.768103][ T4402] hfsplus: xattr searching failed [ 91.116779][ T26] audit: type=1326 audit(1744121754.207:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4381 comm="syz.3.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f00f018d169 code=0x7ffc0000 [ 91.196518][ T4395] EXT4-fs (loop3): 1 truncate cleaned up [ 91.205998][ T4395] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 91.271949][ T4399] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.16: invalid indirect mapped block 256 (level 2) [ 91.282215][ T26] audit: type=1326 audit(1744121754.207:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4381 comm="syz.3.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f018d169 code=0x7ffc0000 [ 91.310065][ T26] audit: type=1326 audit(1744121754.207:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4381 comm="syz.3.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f018d169 code=0x7ffc0000 [ 91.341068][ T4399] EXT4-fs (loop4): 2 truncates cleaned up [ 91.347820][ T4399] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 92.103147][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 92.302158][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 92.627291][ T4419] capability: warning: `syz.1.18' uses deprecated v2 capabilities in a way that may be insecure [ 94.665721][ T4422] netlink: 'syz.4.21': attribute type 1 has an invalid length. [ 95.375498][ T4428] orangefs_mount: mount request failed with -4 [ 95.730136][ T4448] netlink: 'syz.0.29': attribute type 1 has an invalid length. [ 96.631271][ T4453] netlink: 28 bytes leftover after parsing attributes in process `syz.0.29'. [ 98.435434][ T4456] loop2: detected capacity change from 0 to 2048 [ 99.374067][ C0] sched: RT throttling activated [ 99.547895][ T4456] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 99.909047][ T4487] netlink: 28 bytes leftover after parsing attributes in process `syz.3.37'. [ 100.005519][ T4487] netlink: 28 bytes leftover after parsing attributes in process `syz.3.37'. [ 100.100281][ T4457] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm vhost-4456: bg 0: block 234: padding at end of block bitmap is not set [ 100.121135][ T4487] device team0 entered promiscuous mode [ 100.134526][ T4487] device team_slave_0 entered promiscuous mode [ 100.141973][ T4487] device team_slave_1 entered promiscuous mode [ 101.328413][ T4487] device team0 left promiscuous mode [ 101.344427][ T4487] device team_slave_0 left promiscuous mode [ 101.423056][ T4487] device team_slave_1 left promiscuous mode [ 101.721242][ T4500] tipc: Started in network mode [ 101.726665][ T4500] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 101.738029][ T4500] tipc: Enabled bearer , priority 10 [ 102.145445][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 103.535473][ T4299] tipc: Node number set to 4269801488 [ 104.140992][ T4527] loop2: detected capacity change from 0 to 256 [ 104.362130][ T26] kauditd_printk_skb: 63 callbacks suppressed [ 104.362148][ T26] audit: type=1326 audit(1744121769.677:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4525 comm="syz.2.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d058d169 code=0x7ffc0000 [ 104.416604][ T26] audit: type=1326 audit(1744121769.717:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4525 comm="syz.2.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff5d058d169 code=0x7ffc0000 [ 104.439905][ T26] audit: type=1326 audit(1744121769.717:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4525 comm="syz.2.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d058d169 code=0x7ffc0000 [ 105.419682][ T26] audit: type=1326 audit(1744121769.737:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4525 comm="syz.2.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff5d058d169 code=0x7ffc0000 [ 105.802203][ T26] audit: type=1326 audit(1744121769.737:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4525 comm="syz.2.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d058d169 code=0x7ffc0000 [ 105.843762][ T26] audit: type=1326 audit(1744121769.737:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4525 comm="syz.2.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7ff5d058d169 code=0x7ffc0000 [ 105.939760][ T26] audit: type=1326 audit(1744121769.737:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4525 comm="syz.2.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d058d169 code=0x7ffc0000 [ 106.055750][ T26] audit: type=1326 audit(1744121769.747:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4525 comm="syz.2.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7ff5d058d169 code=0x7ffc0000 [ 106.079835][ T26] audit: type=1326 audit(1744121769.747:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4525 comm="syz.2.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d058d169 code=0x7ffc0000 [ 106.150641][ T4540] process 'syz.1.51' launched './file1' with NULL argv: empty string added [ 106.398472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 106.476985][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 106.485772][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 106.494319][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 106.502937][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 106.511763][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 106.520568][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 106.529196][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 106.537837][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 107.525109][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 108.898199][ T4573] loop4: detected capacity change from 0 to 128 [ 108.906859][ T4577] device wg1 entered promiscuous mode [ 111.198777][ T4380] tipc: Subscription rejected, illegal request [ 111.634322][ T129] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 112.015841][ T129] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.659748][ T129] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.711663][ T129] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 113.267855][ T129] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 113.277634][ T129] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.292703][ T129] usb 5-1: config 0 descriptor?? [ 114.409076][ T129] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 114.470742][ T129] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 114.641312][ T129] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 114.687154][ T4613] loop3: detected capacity change from 0 to 1024 [ 115.514730][ T4613] ext4: Bad value for 'min_batch_time' [ 115.687302][ T129] usb 5-1: USB disconnect, device number 2 [ 115.705418][ T4618] loop1: detected capacity change from 0 to 512 [ 115.735173][ T4618] ext4: Bad value for 'max_batch_time' [ 120.186582][ T4655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.251703][ T4655] bond0: (slave rose0): Enslaving as an active interface with an up link [ 120.335907][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 120.606410][ T4661] loop1: detected capacity change from 0 to 40427 [ 121.038702][ T4661] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 121.047163][ T4661] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 121.055777][ T4661] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x3ffff [ 121.064565][ T4661] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x1f8 [ 121.084939][ T4661] F2FS-fs (loop1): invalid crc value [ 121.138122][ T4661] F2FS-fs (loop1): Found nat_bits in checkpoint [ 121.225147][ T4673] syz.2.81[4673] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.226453][ T4673] syz.2.81[4673] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.467641][ T4661] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 122.487596][ T4661] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 123.334674][ T4269] Bluetooth: hci1: unexpected event 0x03 length: 17 > 11 [ 123.339487][ T4254] syz-executor: attempt to access beyond end of device [ 123.339487][ T4254] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 125.374239][ T4270] Bluetooth: hci1: command 0x0409 tx timeout [ 128.499747][ T4269] Bluetooth: hci1: command 0x040f tx timeout [ 128.782612][ T4722] netlink: 'syz.1.92': attribute type 1 has an invalid length. [ 130.704839][ T4728] bond1: (slave gretap1): making interface the new active one [ 130.714921][ T4728] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 130.729772][ T4269] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 130.741323][ T4269] CPU: 0 PID: 4269 Comm: kworker/u5:8 Not tainted 6.1.133-syzkaller #0 [ 130.749672][ T4269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 130.759774][ T4269] Workqueue: hci1 hci_rx_work [ 130.764564][ T4269] Call Trace: [ 130.767886][ T4269] [ 130.770858][ T4269] dump_stack_lvl+0x1e3/0x2cb [ 130.775818][ T4269] ? nf_tcp_handle_invalid+0x647/0x647 [ 130.781554][ T4269] ? panic+0x764/0x764 [ 130.785704][ T4269] sysfs_create_dir_ns+0x2c6/0x390 [ 130.790994][ T4269] ? sysfs_warn_dup+0xa0/0xa0 [ 130.796435][ T4269] kobject_add_internal+0x6df/0xd10 [ 130.801889][ T4269] kobject_add+0x14e/0x210 [ 130.806350][ T4269] ? device_add+0x3c2/0xfd0 [ 130.810890][ T4269] ? kobject_init+0x1d0/0x1d0 [ 130.815590][ T4269] ? __raw_spin_lock_init+0x41/0x100 [ 130.820922][ T4269] ? get_device_parent+0x128/0x400 [ 130.826146][ T4269] device_add+0x476/0xfd0 [ 130.830534][ T4269] hci_conn_add_sysfs+0xe4/0x1f0 [ 130.835499][ T4269] le_conn_complete_evt+0xcfe/0x1350 [ 130.840835][ T4269] ? trace_contention_end+0x61/0x170 [ 130.846141][ T4269] ? hci_le_big_info_adv_report_evt+0x390/0x390 [ 130.852431][ T4269] ? __mutex_unlock_slowpath+0x218/0x750 [ 130.858175][ T4269] ? mutex_unlock+0x10/0x10 [ 130.862696][ T4269] ? skb_pull_data+0x10e/0x220 [ 130.867480][ T4269] hci_le_conn_complete_evt+0x188/0x410 [ 130.873063][ T4269] hci_event_packet+0xa40/0x1510 [ 130.878019][ T4269] ? hci_remote_host_features_evt+0x270/0x270 [ 130.884104][ T4269] ? bis_list+0x290/0x290 [ 130.888532][ T4269] ? do_raw_spin_unlock+0x137/0x8a0 [ 130.894075][ T4269] ? kcov_remote_start+0x4ae/0x7c0 [ 130.899229][ T4269] ? lockdep_hardirqs_on+0x80/0x130 [ 130.904559][ T4269] ? hci_send_to_monitor+0x99/0x4d0 [ 130.910039][ T4269] hci_rx_work+0x3a6/0xd10 [ 130.914513][ T4269] ? process_one_work+0x806/0x1260 [ 130.919671][ T4269] process_one_work+0x917/0x1260 [ 130.924755][ T4269] ? worker_detach_from_pool+0x260/0x260 [ 130.930448][ T4269] ? _raw_spin_lock_irqsave+0x120/0x120 [ 130.936018][ T4269] ? kthread_data+0x4e/0xc0 [ 130.940549][ T4269] ? wq_worker_running+0x97/0x190 [ 130.945713][ T4269] worker_thread+0xa47/0x1200 [ 130.950452][ T4269] ? _raw_spin_unlock+0x40/0x40 [ 130.955326][ T4269] ? release_firmware_map_entry+0x18b/0x18b [ 130.961332][ T4269] ? _raw_spin_unlock+0x40/0x40 [ 130.966210][ T4269] kthread+0x28d/0x320 [ 130.970299][ T4269] ? worker_clr_flags+0x190/0x190 [ 130.975346][ T4269] ? kthread_blkcg+0xd0/0xd0 [ 130.979975][ T4269] ret_from_fork+0x1f/0x30 [ 130.984425][ T4269] [ 130.993313][ T4269] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 131.006956][ T4269] Bluetooth: hci1: failed to register connection device [ 131.024203][ T4731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.92'. [ 131.106841][ T4731] bond1 (unregistering): (slave gretap1): Releasing active interface [ 131.199614][ T4731] bond1 (unregistering): Released all slaves [ 132.525326][ T4765] loop1: detected capacity change from 0 to 8192 [ 132.559457][ T4773] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 132.721683][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.729784][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.577079][ T3623] loop1: p2 p3 p4 [ 133.577079][ T3623] p4: [ 133.604323][ T3623] loop1: p2 size 64053 extends beyond EOD, truncated [ 133.634723][ T3623] loop1: p3 start 65280 is beyond EOD, truncated [ 133.724169][ T3623] loop1: p4 size 50331904 extends beyond EOD, truncated [ 133.755284][ T3623] loop1: p6 size 50331904 extends beyond EOD, truncated [ 134.422909][ T4245] udevd[4245]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 134.442452][ T4243] udevd[4243]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 134.457756][ T4271] udevd[4271]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 137.064664][ T4826] xt_cgroup: invalid path, errno=-2 [ 137.716582][ T4850] netlink: 224 bytes leftover after parsing attributes in process `syz.4.118'. [ 138.700632][ T4852] sctp: failed to load transform for md5: -4 [ 138.704323][ T4846] sctp: failed to load transform for md5: -2 [ 138.734372][ T4859] sctp: failed to load transform for md5: -2 [ 138.782025][ T4855] sctp: failed to load transform for md5: -2 [ 138.864167][ T4299] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 139.095320][ T4299] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 139.103664][ T4299] usb 5-1: config 0 has no interface number 0 [ 139.152226][ T4299] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 139.213354][ T4299] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 139.263606][ T4299] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.324862][ T4299] usb 5-1: Product: syz [ 139.558474][ T4299] usb 5-1: Manufacturer: syz [ 139.563943][ T4299] usb 5-1: SerialNumber: syz [ 139.580017][ T4299] usb 5-1: config 0 descriptor?? [ 139.598296][ T4864] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 140.239356][ T4299] usb-storage 5-1:0.20: USB Mass Storage device detected [ 140.298448][ T4299] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 140.319841][ T4895] loop3: detected capacity change from 0 to 512 [ 140.382586][ T4299] scsi host1: usb-storage 5-1:0.20 [ 141.198287][ T4299] usb 5-1: USB disconnect, device number 3 [ 142.171010][ T4895] EXT4-fs (loop3): orphan cleanup on readonly fs [ 142.641517][ T4895] Quota error (device loop3): v2_read_file_info: Can't read info structure [ 142.685936][ T4895] EXT4-fs warning (device loop3): ext4_enable_quotas:7030: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 142.703690][ T4895] EXT4-fs (loop3): Cannot turn on quotas: error -5 [ 142.724368][ T4928] dccp_close: ABORT with 32 bytes unread [ 142.733897][ T4895] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.124: bg 0: block 64: padding at end of block bitmap is not set [ 142.905118][ T4895] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 142.917120][ T4895] EXT4-fs (loop3): 1 orphan inode deleted [ 142.923038][ T4895] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 143.107836][ T4931] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.132'. [ 143.196260][ T4931] openvswitch: netlink: Flow actions attr not present in new flow. [ 143.415338][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 150.633148][ T5006] syz.3.149 uses obsolete (PF_INET,SOCK_PACKET) [ 153.684081][ T5024] loop2: detected capacity change from 0 to 2048 [ 154.791113][ T5024] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.543798][ T5058] loop2: detected capacity change from 0 to 512 [ 157.610997][ T5058] EXT4-fs: Ignoring removed oldalloc option [ 157.618761][ T5052] loop3: detected capacity change from 0 to 512 [ 157.871544][ T5058] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 157.892254][ T5052] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.162: casefold flag without casefold feature [ 157.909218][ T5058] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 158.069465][ T5052] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.162: couldn't read orphan inode 15 (err -117) [ 158.094842][ T5058] EXT4-fs (loop2): 1 truncate cleaned up [ 158.127435][ T5058] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 158.243555][ T5052] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 159.140395][ T5074] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 159.845521][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 159.857893][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 160.235435][ T5081] loop2: detected capacity change from 0 to 1024 [ 160.235500][ T5085] loop1: detected capacity change from 0 to 512 [ 160.255144][ T5085] EXT4-fs: Ignoring removed bh option [ 160.257037][ T5086] bridge0: port 3(syz_tun) entered blocking state [ 160.260634][ T5085] EXT4-fs: Ignoring removed i_version option [ 160.278832][ T5081] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 160.308700][ T5081] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.437488][ T5085] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 160.557573][ T5086] bridge0: port 3(syz_tun) entered disabled state [ 160.628917][ T5085] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 2)! [ 160.938552][ T5085] EXT4-fs (loop1): group descriptors corrupted! [ 160.957691][ T5086] device syz_tun entered promiscuous mode [ 161.048304][ T5086] bridge0: port 3(syz_tun) entered blocking state [ 161.056093][ T5086] bridge0: port 3(syz_tun) entered forwarding state [ 161.196958][ T5085] netlink: 24 bytes leftover after parsing attributes in process `syz.1.169'. [ 161.374908][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 161.713714][ T5107] Cannot find add_set index 0 as target [ 163.751660][ T5115] loop4: detected capacity change from 0 to 256 [ 163.761972][ T5115] exfat: Deprecated parameter 'namecase' [ 163.805760][ T5115] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 167.358804][ T5139] loop2: detected capacity change from 0 to 256 [ 167.569460][ T4269] Bluetooth: hci4: unexpected event 0x05 length: 6 > 4 [ 169.409738][ T5165] 9pnet_fd: Insufficient options for proto=fd [ 170.015937][ T5163] netlink: 830 bytes leftover after parsing attributes in process `syz.1.185'. [ 170.533836][ T5175] loop3: detected capacity change from 0 to 512 [ 170.561638][ T5175] EXT4-fs (loop3): ea_inode feature is not supported for Hurd [ 172.382709][ T5186] netlink: 'syz.0.190': attribute type 10 has an invalid length. [ 173.282582][ T5178] Set syz1 is full, maxelem 65536 reached [ 174.508643][ T5202] sctp: failed to load transform for md5: -4 [ 174.508696][ T5194] sctp: failed to load transform for md5: -2 [ 174.602584][ T5210] sctp: failed to load transform for md5: -2 [ 174.673021][ T5199] sctp: failed to load transform for md5: -2 [ 174.699922][ T5223] ip6gretap0 speed is unknown, defaulting to 1000 [ 174.785787][ T5223] ip6gretap0 speed is unknown, defaulting to 1000 [ 174.872219][ T5201] sctp: failed to load transform for md5: -2 [ 174.951708][ T5231] device ip6gretap0 entered promiscuous mode [ 174.959871][ T5223] ip6gretap0 speed is unknown, defaulting to 1000 [ 175.041688][ T5223] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 175.477688][ T5244] loop3: detected capacity change from 0 to 2048 [ 175.745884][ T5223] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 175.952546][ T5223] ip6gretap0 speed is unknown, defaulting to 1000 [ 176.006928][ T5223] ip6gretap0 speed is unknown, defaulting to 1000 [ 176.058022][ T5223] ip6gretap0 speed is unknown, defaulting to 1000 [ 176.075140][ T5223] ip6gretap0 speed is unknown, defaulting to 1000 [ 176.090218][ T5223] ip6gretap0 speed is unknown, defaulting to 1000 [ 183.791729][ T93] block nbd2: Attempted send on invalid socket [ 183.798702][ T93] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 183.810587][ T5291] vxfs: unable to read disk superblock at 1 [ 183.818935][ T93] block nbd2: Attempted send on invalid socket [ 183.825308][ T93] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 183.837330][ T5291] vxfs: unable to read disk superblock at 8 [ 183.843288][ T5291] vxfs: can't find superblock. [ 184.054597][ T5308] bridge0: port 3(syz_tun) entered blocking state [ 184.065289][ T5308] bridge0: port 3(syz_tun) entered disabled state [ 184.101314][ T5308] device syz_tun entered promiscuous mode [ 184.149502][ T5308] bridge0: port 3(syz_tun) entered blocking state [ 184.156169][ T5308] bridge0: port 3(syz_tun) entered forwarding state [ 184.332097][ T5308] syz.4.213 (5308) used greatest stack depth: 17216 bytes left [ 184.341916][ T5321] loop1: detected capacity change from 0 to 512 [ 185.530356][ T5321] EXT4-fs (loop1): ea_inode feature is not supported for Hurd [ 187.527124][ T5334] loop2: detected capacity change from 0 to 32768 [ 189.042843][ T5334] JBD2: Ignoring recovery information on journal [ 189.109700][ T5334] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 189.367112][ T5345] loop4: detected capacity change from 0 to 1024 [ 189.473649][ T5344] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 189.656415][ T4263] ocfs2: Unmounting device (7,2) on (node local) [ 190.043405][ T5349] hfsplus: request for non-existent node 33423360 in B*Tree [ 190.172132][ T5349] hfsplus: request for non-existent node 33423360 in B*Tree [ 191.092682][ T5345] hfsplus: request for non-existent node 33423360 in B*Tree [ 191.142133][ T5343] loop1: detected capacity change from 0 to 1024 [ 191.153661][ T5343] hfsplus: failed to load root directory [ 191.204128][ T5345] hfsplus: request for non-existent node 33423360 in B*Tree [ 191.224134][ T5351] hfsplus: request for non-existent node 33423360 in B*Tree [ 191.231584][ T5351] hfsplus: request for non-existent node 33423360 in B*Tree [ 191.287219][ T5347] hfsplus: request for non-existent node 33423360 in B*Tree [ 191.305085][ T5347] hfsplus: request for non-existent node 33423360 in B*Tree [ 191.526469][ T5357] hfsplus: request for non-existent node 33423360 in B*Tree [ 191.533839][ T5357] hfsplus: request for non-existent node 33423360 in B*Tree [ 194.395859][ T5349] hfsplus: request for non-existent node 33423360 in B*Tree [ 194.620705][ T5349] hfsplus: request for non-existent node 33423360 in B*Tree [ 195.745349][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.752378][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.463665][ T5375] Set syz1 is full, maxelem 65536 reached [ 200.785730][ T5398] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.795119][ T5398] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.804246][ T5398] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.813569][ T5398] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.215013][ T5398] team0: Port device vxlan0 added [ 202.084118][ T4270] Bluetooth: hci0: command 0x0406 tx timeout [ 202.090355][ T4269] Bluetooth: hci2: command 0x0406 tx timeout [ 202.095588][ T4264] Bluetooth: hci1: command 0x0406 tx timeout [ 202.102458][ T4264] Bluetooth: hci4: command 0x0406 tx timeout [ 202.109557][ T4264] Bluetooth: hci3: command 0x0406 tx timeout [ 202.221620][ T5415] loop2: detected capacity change from 0 to 2048 [ 202.278431][ T5415] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 203.854114][ T5423] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 207.962247][ T5447] netlink: 'syz.1.249': attribute type 10 has an invalid length. [ 208.094912][ T5447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.113238][ T5447] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 208.331604][ T5454] loop2: detected capacity change from 0 to 512 [ 208.378083][ T5454] EXT4-fs (loop2): ea_inode feature is not supported for Hurd [ 208.386251][ T5455] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.396268][ T5455] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.405237][ T5455] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.414053][ T5455] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.501228][ T5455] team0: Port device vxlan0 added [ 210.433735][ T5479] device gtp0 entered promiscuous mode [ 210.529422][ T5482] device bond_slave_0 entered promiscuous mode [ 210.536234][ T5482] device bond_slave_1 entered promiscuous mode [ 210.580199][ T5482] device vlan3 entered promiscuous mode [ 210.602313][ T5482] device bond0 entered promiscuous mode [ 210.667371][ T5482] device bond0 left promiscuous mode [ 210.673029][ T5482] device bond_slave_0 left promiscuous mode [ 210.680248][ T5482] device bond_slave_1 left promiscuous mode [ 214.270807][ T5508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.270'. [ 217.648338][ T5533] device ipvlan2 entered promiscuous mode [ 222.013340][ T4269] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 222.997470][ T5580] trusted_key: encrypted_key: insufficient parameters specified [ 224.658562][ T5601] netlink: 'syz.0.295': attribute type 1 has an invalid length. [ 224.927172][ T26] audit: type=1326 audit(1744121890.237:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5592 comm="syz.2.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d058d169 code=0x7ffc0000 [ 225.843874][ T26] audit: type=1326 audit(1744121890.237:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5592 comm="syz.2.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7ff5d058d169 code=0x7ffc0000 [ 225.879568][ T26] audit: type=1326 audit(1744121890.237:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5592 comm="syz.2.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d058d169 code=0x7ffc0000 [ 225.923095][ T5601] 8021q: adding VLAN 0 to HW filter on device bond1 [ 225.941746][ T5607] device geneve2 entered promiscuous mode [ 225.949166][ T5606] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 225.957616][ T26] audit: type=1326 audit(1744121890.237:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5592 comm="syz.2.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7ff5d058d169 code=0x7ffc0000 [ 225.959569][ T5606] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 225.984117][ T26] audit: type=1326 audit(1744121890.237:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5592 comm="syz.2.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d058d169 code=0x7ffc0000 [ 226.060642][ T5607] bond1: (slave geneve2): making interface the new active one [ 226.097668][ T26] audit: type=1326 audit(1744121890.247:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5592 comm="syz.2.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d058d169 code=0x7ffc0000 [ 226.125848][ T5607] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 226.130568][ T5595] kvm [5590]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 226.134731][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 226.199122][ T5595] kvm [5590]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x186 data 0x4000 [ 230.804267][ T5648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.208669][ T5688] loop3: detected capacity change from 0 to 16 [ 234.362749][ T5688] erofs: (device loop3): mounted with root inode @ nid 36. [ 235.773181][ T4270] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 236.084868][ T5705] loop2: detected capacity change from 0 to 8 [ 237.713916][ T26] audit: type=1800 audit(1744121903.027:94): pid=5705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.319" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 237.994166][ T4258] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 238.344641][ T4258] usb 3-1: Using ep0 maxpacket: 8 [ 238.494997][ T4258] usb 3-1: config 0 has an invalid interface number: 56 but max is 0 [ 238.504403][ T4258] usb 3-1: config 0 has no interface number 0 [ 239.516033][ T4258] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 239.528133][ T4258] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.566472][ T4258] usb 3-1: config 0 descriptor?? [ 239.780655][ T4258] usb 3-1: can't set config #0, error -71 [ 239.789483][ T4258] usb 3-1: USB disconnect, device number 2 [ 241.085697][ T5747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.330'. [ 241.664399][ T5747] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.676184][ T5747] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.214281][ T5756] ip6gretap0 speed is unknown, defaulting to 1000 [ 243.443001][ T5747] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.755380][ T5747] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.169403][ T5769] netlink: 28 bytes leftover after parsing attributes in process `syz.2.336'. [ 244.198552][ T5769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.336'. [ 244.283382][ T5770] bridge0: port 3(syz_tun) entered blocking state [ 244.304154][ T5770] bridge0: port 3(syz_tun) entered disabled state [ 244.313073][ T5770] device syz_tun entered promiscuous mode [ 244.321357][ T5770] bridge0: port 3(syz_tun) entered blocking state [ 244.327990][ T5770] bridge0: port 3(syz_tun) entered forwarding state [ 244.961473][ T5747] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.972368][ T5747] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.109852][ T5747] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.121911][ T5747] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.143879][ T5778] netlink: 'syz.2.339': attribute type 12 has an invalid length. [ 245.600760][ T5747] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.627680][ T5747] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.682426][ T5747] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.707484][ T5747] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.762366][ T5747] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.780112][ T5747] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.806025][ T5747] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.820126][ T5747] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.881796][ T5801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.765176][ T5815] loop4: detected capacity change from 0 to 128 [ 248.956399][ T5815] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 252.270954][ T5832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.354'. [ 252.290492][ T5832] netlink: 16 bytes leftover after parsing attributes in process `syz.0.354'. [ 252.369766][ T5832] device bond0 entered promiscuous mode [ 252.411974][ T5832] device bond_slave_0 entered promiscuous mode [ 252.419421][ T5832] device bond_slave_1 entered promiscuous mode [ 252.444561][ T5832] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 252.481676][ T5825] loop4: detected capacity change from 0 to 4096 [ 252.530949][ T5825] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 252.563504][ T5836] loop1: detected capacity change from 0 to 64 [ 252.626081][ T5836] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 252.793876][ T5825] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 255.070786][ T5863] loop3: detected capacity change from 0 to 8 [ 255.997290][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.003671][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.129571][ T26] audit: type=1800 audit(1744121921.447:95): pid=5863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.364" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 256.424110][ T4345] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 256.644375][ T4345] usb 4-1: Using ep0 maxpacket: 8 [ 256.686741][ T4345] usb 4-1: config 0 has an invalid interface number: 56 but max is 0 [ 256.787944][ T4345] usb 4-1: config 0 has no interface number 0 [ 256.962379][ T4345] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 257.042109][ T4345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.056314][ T4345] usb 4-1: Product: syz [ 257.060692][ T4345] usb 4-1: Manufacturer: syz [ 257.069668][ T4345] usb 4-1: SerialNumber: syz [ 257.141513][ T4345] usb 4-1: config 0 descriptor?? [ 257.180688][ T4345] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 257.190085][ T4345] pctv452e: pctv452e_power_ctrl: 1 [ 257.190085][ T4345] [ 257.199145][ T4345] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 257.199145][ T4345] [ 257.246196][ T4345] dvb-usb: bulk message failed: -22 (5/0) [ 257.294929][ T4345] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 257.356868][ T4345] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 257.397108][ T4345] usb 4-1: media controller created [ 257.403216][ T4345] dvb-usb: bulk message failed: -22 (8/0) [ 257.409839][ T26] audit: type=1800 audit(1744121922.727:96): pid=5863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.364" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 257.460225][ T4345] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 257.477560][ T4345] dvb-usb: MAC address reading failed. [ 257.539873][ T4345] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 257.727834][ T4345] DVB: Unable to find symbol stb0899_attach() [ 257.735540][ T4345] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 258.734911][ T4345] rc_core: IR keymap rc-tt-1500 not found [ 258.774027][ T4345] Registered IR keymap rc-empty [ 258.780488][ T4345] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 258.803790][ T5901] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 258.813731][ T5901] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 258.878987][ T4345] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input5 [ 259.172945][ T4345] dvb-usb: schedule remote query interval to 100 msecs. [ 259.180557][ T4345] pctv452e: pctv452e_power_ctrl: 0 [ 259.180557][ T4345] [ 259.188521][ T4345] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 259.201705][ T4345] usb 4-1: USB disconnect, device number 2 [ 261.122792][ T4345] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 261.327566][ T5918] loop1: detected capacity change from 0 to 1024 [ 261.475115][ T5918] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 261.544617][ T5918] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.557922][ T5923] netlink: 87 bytes leftover after parsing attributes in process `syz.4.377'. [ 262.289667][ T4254] EXT4-fs (loop1): unmounting filesystem. [ 264.870597][ T5960] netlink: 'syz.0.386': attribute type 12 has an invalid length. [ 265.698055][ T5964] ptrace attach of "./syz-executor exec"[4253] was attempted by "./syz-executor exec"[5964] [ 266.442810][ T5974] netlink: 'syz.1.389': attribute type 1 has an invalid length. [ 266.624628][ T5977] loop3: detected capacity change from 0 to 64 [ 266.730227][ T5977] hfs: bad catalog folder thread [ 267.576276][ T5974] 8021q: adding VLAN 0 to HW filter on device bond1 [ 267.656062][ T5976] bond1: (slave gretap2): making interface the new active one [ 267.718781][ T5976] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 267.782727][ T5979] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 267.813765][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 270.677040][ T5997] loop1: detected capacity change from 0 to 1024 [ 271.624594][ T5997] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 271.634474][ T5997] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 271.644014][ T5997] EXT4-fs error (device loop1): ext4_acquire_dquot:6795: comm syz.1.394: Failed to acquire dquot type 0 [ 271.676859][ T5997] EXT4-fs error (device loop1): mb_free_blocks:1815: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 271.694326][ T5997] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #13: comm syz.1.394: corrupted inode contents [ 271.726040][ T5997] EXT4-fs error (device loop1): ext4_dirty_inode:6089: inode #13: comm syz.1.394: mark_inode_dirty error [ 271.743377][ T5997] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #13: comm syz.1.394: corrupted inode contents [ 271.760696][ T5997] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #13: comm syz.1.394: mark_inode_dirty error [ 271.780443][ T5997] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #13: comm syz.1.394: corrupted inode contents [ 271.802164][ T5997] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 271.818071][ T5997] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #13: comm syz.1.394: corrupted inode contents [ 271.838764][ T5997] EXT4-fs error (device loop1): ext4_truncate:4311: inode #13: comm syz.1.394: mark_inode_dirty error [ 271.853151][ T5997] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 271.898314][ T5997] EXT4-fs (loop1): 1 truncate cleaned up [ 271.904394][ T5997] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 272.379340][ T4254] EXT4-fs (loop1): unmounting filesystem. [ 274.639045][ T6022] loop2: detected capacity change from 0 to 8 [ 274.665025][ T6022] squashfs: Unknown parameter 'net/arp' [ 274.883727][ T6024] ip6gretap0 speed is unknown, defaulting to 1000 [ 277.370370][ T6049] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 277.380021][ T6049] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 280.250175][ T6074] netlink: 16 bytes leftover after parsing attributes in process `syz.1.412'. [ 281.751310][ T6094] atomic_op ffff8880751f4998 conn xmit_atomic 0000000000000000 [ 282.310152][ T6102] kvm [6098]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x8a8 [ 282.367833][ T6102] kvm [6098]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x37 [ 282.390221][ T6102] kvm [6098]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x78 [ 282.408797][ T6102] kvm [6098]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x807, nop [ 284.238265][ T6125] mmap: syz.0.424 (6125) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 284.635045][ T6131] bridge0: port 3(vlan2) entered blocking state [ 284.760739][ T6131] bridge0: port 3(vlan2) entered disabled state [ 285.081162][ T6131] device vlan2 entered promiscuous mode [ 285.291863][ T6131] device bond0 entered promiscuous mode [ 285.316565][ T6131] device bond_slave_0 entered promiscuous mode [ 285.400567][ T6131] device bond_slave_1 entered promiscuous mode [ 285.412159][ T6131] device batadv0 entered promiscuous mode [ 285.419493][ T6131] bridge0: port 3(vlan2) entered blocking state [ 285.427663][ T6131] bridge0: port 3(vlan2) entered forwarding state [ 287.249261][ T6152] loop1: detected capacity change from 0 to 1024 [ 287.271094][ T6152] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 288.255956][ T6152] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 288.265405][ T6152] EXT4-fs (loop1): orphan cleanup on readonly fs [ 288.305628][ T6149] ip6gretap0 speed is unknown, defaulting to 1000 [ 288.340428][ T6152] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.432: Invalid block bitmap block 0 in block_group 0 [ 288.505470][ T6152] Quota error (device loop1): write_blk: dquota write failed [ 288.547751][ T6152] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 289.534567][ T6152] EXT4-fs error (device loop1): ext4_acquire_dquot:6795: comm syz.1.432: Failed to acquire dquot type 0 [ 289.586825][ T6152] EXT4-fs error (device loop1): ext4_free_blocks:6210: comm syz.1.432: Freeing blocks not in datazone - block = 0, count = 4096 [ 289.658896][ T6152] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.432: Invalid inode bitmap blk 0 in block_group 0 [ 289.697936][ T6152] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 289.709084][ T4403] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8 [ 289.721494][ T4403] EXT4-fs error (device loop1): ext4_release_dquot:6818: comm kworker/u4:12: Failed to release dquot type 0 [ 289.760962][ T6152] EXT4-fs (loop1): 1 orphan inode deleted [ 289.858543][ T6152] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 291.571098][ T6207] infiniband s}z1: RDMA CMA: cma_listen_on_dev, error -98 [ 291.655225][ T4254] EXT4-fs (loop1): unmounting filesystem. [ 291.798810][ T6232] netlink: 'syz.4.437': attribute type 12 has an invalid length. [ 297.475931][ T6280] tty tty29: ldisc open failed (-12), clearing slot 28 [ 298.340209][ T6286] loop3: detected capacity change from 0 to 512 [ 298.490740][ T6286] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 298.499893][ T6286] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.364156][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 303.127036][ T6332] libceph: resolve '. [ 303.127036][ T6332] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 303.127036][ T6332] ' (ret=-3): failed [ 308.383606][ T26] audit: type=1326 audit(1744121973.697:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.3.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f018d169 code=0x7ffc0000 [ 308.673807][ T26] audit: type=1326 audit(1744121973.707:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.3.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f00f018d169 code=0x7ffc0000 [ 308.825490][ T26] audit: type=1326 audit(1744121973.707:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.3.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f018d169 code=0x7ffc0000 [ 308.910208][ T26] audit: type=1326 audit(1744121973.707:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.3.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f00f018d169 code=0x7ffc0000 [ 308.991335][ T6446] libceph: resolve '. [ 308.991335][ T6446] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 308.991335][ T6446] ' (ret=-3): failed [ 310.137546][ T26] audit: type=1326 audit(1744121973.777:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.3.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f00f0184127 code=0x7ffc0000 [ 310.233745][ T26] audit: type=1326 audit(1744121973.777:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.3.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f00f0129359 code=0x7ffc0000 [ 310.321211][ T26] audit: type=1326 audit(1744121973.777:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.3.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f00f018d169 code=0x7ffc0000 [ 310.344373][ T26] audit: type=1326 audit(1744121973.787:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.3.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f00f0184127 code=0x7ffc0000 [ 310.380703][ T26] audit: type=1326 audit(1744121973.787:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.3.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f00f0129359 code=0x7ffc0000 [ 310.411683][ T26] audit: type=1326 audit(1744121973.787:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.3.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f00f018d169 code=0x7ffc0000 [ 310.824623][ T22] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 311.024145][ T22] usb 5-1: Using ep0 maxpacket: 8 [ 311.041356][ T22] usb 5-1: config 2 interface 0 has no altsetting 0 [ 311.088959][ T22] usb 5-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 311.135679][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.161061][ T22] usb 5-1: Product: syz [ 311.166277][ T22] usb 5-1: Manufacturer: syz [ 311.170967][ T22] usb 5-1: SerialNumber: syz [ 314.724751][ T22] usb 5-1: USB disconnect, device number 4 [ 317.037386][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.043797][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.058452][ T6492] loop2: detected capacity change from 0 to 256 [ 318.483481][ T6493] netlink: 16 bytes leftover after parsing attributes in process `syz.1.487'. [ 320.572267][ T6509] netlink: 'syz.0.492': attribute type 1 has an invalid length. [ 320.668658][ T6512] device bond2 entered promiscuous mode [ 320.690156][ T6512] 8021q: adding VLAN 0 to HW filter on device bond2 [ 321.461307][ T6509] device ip6gretap1 entered promiscuous mode [ 321.507520][ T6205] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 321.564979][ T6509] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 321.584977][ T6205] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 321.697769][ T11] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 321.816690][ T6524] ip6gretap0 speed is unknown, defaulting to 1000 [ 322.174217][ T4301] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 322.406905][ T6534] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 322.416669][ T4301] usb 4-1: Using ep0 maxpacket: 16 [ 322.430766][ T4301] usb 4-1: config 7 has an invalid interface number: 76 but max is 0 [ 322.632572][ T4301] usb 4-1: config 7 has no interface number 0 [ 322.734132][ T4301] usb 4-1: config 7 interface 76 has no altsetting 0 [ 322.831696][ T4301] usb 4-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=b7.d3 [ 322.842610][ T4301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.851252][ T4301] usb 4-1: Product: syz [ 322.856198][ T4301] usb 4-1: Manufacturer: syz [ 322.860836][ T4301] usb 4-1: SerialNumber: syz [ 326.825079][ T4301] snd-usb-audio: probe of 4-1:7.76 failed with error -2 [ 326.904510][ T4301] usb 4-1: USB disconnect, device number 3 [ 326.933148][ T4800] udevd[4800]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.76/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 332.506716][ T6606] ip6gretap0 speed is unknown, defaulting to 1000 [ 333.604834][ T6616] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 334.046522][ T6627] libceph: resolve '. [ 334.046522][ T6627] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 334.046522][ T6627] ' (ret=-3): failed [ 339.455849][ T6669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.530'. [ 340.806990][ T6679] input: syz0 as /devices/virtual/input/input6 [ 341.364001][ T6683] ip6gretap0 speed is unknown, defaulting to 1000 [ 342.404172][ T22] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 342.594189][ T22] usb 2-1: Using ep0 maxpacket: 16 [ 342.611573][ T22] usb 2-1: config 7 has an invalid interface number: 76 but max is 0 [ 342.650108][ T22] usb 2-1: config 7 has no interface number 0 [ 342.666046][ T22] usb 2-1: config 7 interface 76 has no altsetting 0 [ 342.700827][ T22] usb 2-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=b7.d3 [ 342.733086][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.878862][ T22] usb 2-1: Product: syz [ 342.883360][ T22] usb 2-1: Manufacturer: syz [ 342.906433][ T22] usb 2-1: SerialNumber: syz [ 344.025934][ T22] snd-usb-audio: probe of 2-1:7.76 failed with error -2 [ 344.066783][ T22] usb 2-1: USB disconnect, device number 2 [ 344.074693][ T4800] udevd[4800]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:7.76/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 345.525253][ T6707] loop2: detected capacity change from 0 to 8 [ 347.251090][ T6727] loop1: detected capacity change from 0 to 64 [ 347.335970][ T6731] loop4: detected capacity change from 0 to 256 [ 347.345640][ T6731] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 347.412140][ T6731] FAT-fs (loop4): Directory bread(block 64) failed [ 347.419131][ T6731] FAT-fs (loop4): Directory bread(block 65) failed [ 347.426243][ T6731] FAT-fs (loop4): Directory bread(block 66) failed [ 347.432914][ T6731] FAT-fs (loop4): Directory bread(block 67) failed [ 347.440015][ T6731] FAT-fs (loop4): Directory bread(block 68) failed [ 347.446742][ T6731] FAT-fs (loop4): Directory bread(block 69) failed [ 347.453965][ T6731] FAT-fs (loop4): Directory bread(block 70) failed [ 347.460623][ T6731] FAT-fs (loop4): Directory bread(block 71) failed [ 347.467675][ T6731] FAT-fs (loop4): Directory bread(block 72) failed [ 347.474378][ T6731] FAT-fs (loop4): Directory bread(block 73) failed [ 348.224105][ T6728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.547'. [ 349.810095][ T6746] loop4: detected capacity change from 0 to 512 [ 349.824434][ T26] kauditd_printk_skb: 60 callbacks suppressed [ 349.824453][ T26] audit: type=1326 audit(1744122015.097:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.3.550" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f00f018d169 code=0x0 [ 349.959339][ T6746] EXT4-fs: Ignoring removed mblk_io_submit option [ 350.098918][ T6746] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b816c118, mo2=0002] [ 350.107381][ T6746] System zones: 1-12 [ 350.118562][ T6746] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.548: corrupted in-inode xattr [ 350.474077][ T6746] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.548: couldn't read orphan inode 15 (err -117) [ 350.694162][ T6746] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 352.437965][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 352.481510][ T6774] netlink: 'syz.2.568': attribute type 1 has an invalid length. [ 352.990232][ T6777] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 353.396138][ T6784] loop1: detected capacity change from 0 to 512 [ 353.504763][ T6781] device veth3 entered promiscuous mode [ 353.564829][ T6784] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 353.591006][ T6781] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 353.615675][ T6784] EXT4-fs (loop1): invalid journal inode [ 353.695270][ T6784] EXT4-fs (loop1): can't get journal size [ 353.741017][ T6784] EXT4-fs (loop1): 1 truncate cleaned up [ 353.753229][ T6784] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 357.464106][ T26] audit: type=1326 audit(1744122022.777:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6811 comm="syz.2.566" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff5d058d169 code=0x0 [ 358.389970][ T4254] EXT4-fs (loop1): unmounting filesystem. [ 361.928521][ T6828] loop1: detected capacity change from 0 to 512 [ 362.020191][ T6828] EXT4-fs: Ignoring removed oldalloc option [ 362.054375][ T6828] EXT4-fs: Ignoring removed nomblk_io_submit option [ 363.457912][ T6846] ufs: You didn't specify the type of your ufs filesystem [ 363.457912][ T6846] [ 363.457912][ T6846] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 363.457912][ T6846] [ 363.457912][ T6846] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 363.489406][ T6846] ufs: ufstype=old is supported read-only [ 363.503767][ T6846] ufs: ufs_fill_super(): bad magic number [ 363.945294][ T6828] EXT4-fs: failed to create workqueue [ 364.079966][ T6828] EXT4-fs (loop1): mount failed [ 364.636300][ T129] libceph: connect (1)[c::]:6789 error -101 [ 364.672451][ T129] libceph: mon0 (1)[c::]:6789 connect error [ 364.732878][ T6851] ceph: No mds server is up or the cluster is laggy [ 364.751333][ T4298] libceph: connect (1)[c::]:6789 error -101 [ 364.767113][ T4298] libceph: mon0 (1)[c::]:6789 connect error [ 366.305161][ T6874] loop4: detected capacity change from 0 to 8 [ 370.525538][ T6900] netlink: zone id is out of range [ 371.092637][ T6904] ptrace attach of "./syz-executor exec"[4251] was attempted by "./syz-executor exec"[6904] [ 371.310274][ T6904] syz.3.586 (6904): /proc/6904/oom_adj is deprecated, please use /proc/6904/oom_score_adj instead. [ 376.557209][ T4270] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 376.568328][ T6941] binder: 6933:6941 ioctl c0306201 0 returned -14 [ 377.522198][ T4269] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 377.529162][ T6948] loop1: detected capacity change from 0 to 128 [ 377.536126][ T48] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 377.544763][ T48] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 377.552636][ T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 377.560518][ T48] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 377.568001][ T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 377.673628][ T6805] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 377.740982][ T6946] ip6gretap0 speed is unknown, defaulting to 1000 [ 378.475987][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.486936][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.514617][ T48] Bluetooth: hci4: command 0x0405 tx timeout [ 379.595606][ T48] Bluetooth: hci5: command 0x0409 tx timeout [ 379.610608][ T6970] ptrace attach of "./syz-executor exec"[4254] was attempted by "./syz-executor exec"[6970] [ 381.566217][ T6946] chnl_net:caif_netlink_parms(): no params data found [ 381.685105][ T48] Bluetooth: hci5: command 0x041b tx timeout [ 381.893519][ T6946] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.934814][ T6946] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.975011][ T6946] device bridge_slave_0 entered promiscuous mode [ 382.202955][ T6946] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.210203][ T6946] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.218649][ T6946] device bridge_slave_1 entered promiscuous mode [ 382.588477][ T6946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.762562][ T6946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.476303][ T7010] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 384.369292][ T48] Bluetooth: hci5: command 0x040f tx timeout [ 384.377621][ T7015] overlayfs: failed to clone upperpath [ 384.416617][ T6835] bridge0: port 3(syz_tun) entered disabled state [ 386.102887][ T7026] xt_policy: neither incoming nor outgoing policy selected [ 386.320977][ T7025] hub 6-0:1.0: USB hub found [ 386.372077][ T7031] 9pnet_fd: Insufficient options for proto=fd [ 386.444132][ T48] Bluetooth: hci5: command 0x0419 tx timeout [ 386.529196][ T6835] device syz_tun left promiscuous mode [ 386.536823][ T6835] bridge0: port 3(syz_tun) entered disabled state [ 386.550908][ T7025] hub 6-0:1.0: 1 port detected [ 387.910011][ T6946] team0: Port device team_slave_0 added [ 387.922042][ T6946] team0: Port device team_slave_1 added [ 387.970950][ T6946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.981494][ T6946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.017135][ T6946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.037603][ T6946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.053363][ T6946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.124850][ T6946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.026365][ T4270] Bluetooth: hci5: command 0x0405 tx timeout [ 389.237134][ T7055] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan1, syncid = -1, id = 0 [ 389.253061][ T6946] device hsr_slave_0 entered promiscuous mode [ 389.491880][ T6946] device hsr_slave_1 entered promiscuous mode [ 389.647495][ T6946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 389.783861][ T6946] Cannot create hsr debugfs directory [ 392.751554][ T7072] loop4: detected capacity change from 0 to 32768 [ 392.793552][ T7072] [ 392.793552][ T7072] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 392.793552][ T7072] [ 392.841367][ T7072] ERROR: (device loop4): diWrite: ixpxd invalid [ 392.841367][ T7072] [ 392.854527][ T7072] ERROR: (device loop4): txCommit: [ 392.854527][ T7072] [ 393.053006][ T7072] netlink: 'syz.4.627': attribute type 10 has an invalid length. [ 393.061158][ T7072] netlink: 40 bytes leftover after parsing attributes in process `syz.4.627'. [ 394.454677][ T7072] team0: Port device geneve0 added [ 395.016266][ T6946] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 396.184262][ T7094] befs: (nullb0): No write support. Marking filesystem read-only [ 396.198250][ T7094] befs: (nullb0): invalid magic header [ 397.811401][ T6946] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 397.924873][ T4253] [ 397.924873][ T4253] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 397.924873][ T4253] [ 397.936958][ T4253] [ 397.936958][ T4253] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 397.936958][ T4253] [ 397.940228][ T6946] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 398.007125][ T7097] bridge0: port 3(syz_tun) entered disabled state [ 398.200446][ T7097] device syz_tun left promiscuous mode [ 398.214061][ T7097] bridge0: port 3(syz_tun) entered disabled state [ 398.239099][ T6946] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 399.428789][ T7115] loop3: detected capacity change from 0 to 256 [ 401.891243][ T6946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.047709][ T6236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 402.079306][ T6236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 402.132490][ T6946] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.690335][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 403.730352][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 403.784169][ T4312] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.791397][ T4312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.882664][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 404.359909][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 404.543055][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 404.711863][ T4312] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.719111][ T4312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.737404][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 404.784637][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 404.855228][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 404.918613][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 404.940167][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 404.960072][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 404.970838][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 404.980270][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 404.990690][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 405.008792][ T6946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 405.031668][ T6946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 405.056705][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 405.075329][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 405.098674][ T7144] ieee802154 phy0 wpan0: encryption failed: -22 [ 405.222790][ T7147] PKCS7: Unknown OID: [4] 0.38.11253.6554(bad) [ 405.229441][ T7147] PKCS7: Only support pkcs7_signedData type [ 406.774980][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 406.783275][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 406.803752][ T6946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.273302][ T7203] device syzkaller0 entered promiscuous mode [ 413.279810][ T7203] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 414.022107][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 414.031850][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 414.092946][ T6946] device veth0_vlan entered promiscuous mode [ 414.124099][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 414.132601][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 414.146142][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 414.157911][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 414.169101][ T6946] device veth1_vlan entered promiscuous mode [ 414.192264][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 414.200884][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 414.210270][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 414.219519][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 414.231793][ T6946] device veth0_macvtap entered promiscuous mode [ 414.242606][ T6946] device veth1_macvtap entered promiscuous mode [ 414.258952][ T6946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.269679][ T6946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.279677][ T6946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.290403][ T6946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.300373][ T6946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.310880][ T6946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.321682][ T6946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.332927][ T6946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.343567][ T6946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.355590][ T6946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.367368][ T6946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.378647][ T6946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.389223][ T6946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.399122][ T6946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.409671][ T6946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.420034][ T6946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.430864][ T6946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.440837][ T6946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.451367][ T6946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.461309][ T6946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.471806][ T6946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.483270][ T6946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.491072][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 414.499750][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 414.508003][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 414.516866][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 414.526698][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 414.535618][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 414.547220][ T6946] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.556384][ T6946] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.565223][ T6946] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.574084][ T6946] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.651565][ T4516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.661671][ T4516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.678095][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 414.700604][ T4516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.709084][ T4516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.721882][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 415.517298][ T7228] ip6gretap0 speed is unknown, defaulting to 1000 [ 417.078694][ T7239] __vm_enough_memory: pid: 7239, comm: syz.0.667, no enough memory for the allocation [ 417.777601][ T7244] loop1: detected capacity change from 0 to 2048 [ 418.082598][ T7244] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 420.612714][ T7265] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 420.638992][ T7265] CIFS mount error: No usable UNC path provided in device string! [ 420.638992][ T7265] [ 420.649546][ T7265] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 421.184034][ T7272] loop1: detected capacity change from 0 to 64 [ 423.832218][ T7288] hub 6-0:1.0: USB hub found [ 423.852914][ T7288] hub 6-0:1.0: 1 port detected [ 424.094919][ T7291] 9pnet_fd: Insufficient options for proto=fd [ 427.040562][ T7302] netlink: 20 bytes leftover after parsing attributes in process `syz.1.685'. [ 428.484530][ T7315] befs: (nullb0): No write support. Marking filesystem read-only [ 428.492959][ T7315] befs: (nullb0): invalid magic header [ 429.448278][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 429.467654][ T4269] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 429.477302][ T4269] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 429.488693][ T4269] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 429.497968][ T4269] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 429.505610][ T4269] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 429.642796][ T7320] ip6gretap0 speed is unknown, defaulting to 1000 [ 430.115738][ T7330] Zero length message leads to an empty skb [ 430.874974][ T7333] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 431.460227][ T7320] chnl_net:caif_netlink_parms(): no params data found [ 431.962463][ T7341] loop5: detected capacity change from 0 to 2048 [ 432.037322][ T4269] Bluetooth: hci4: command 0x0409 tx timeout [ 432.118880][ T7341] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 433.202227][ T7320] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.232578][ T7320] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.330302][ T7320] device bridge_slave_0 entered promiscuous mode [ 433.340025][ T7320] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.347560][ T7320] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.367069][ T7320] device bridge_slave_1 entered promiscuous mode [ 433.527319][ T7320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.558442][ T7320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.545785][ T4269] Bluetooth: hci4: command 0x041b tx timeout [ 435.432691][ T7320] team0: Port device team_slave_0 added [ 435.918063][ T7375] xt_connbytes: Forcing CT accounting to be enabled [ 435.926181][ T7375] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 435.938688][ T7375] xt_bpf: check failed: parse error [ 436.764989][ T7320] team0: Port device team_slave_1 added [ 437.009793][ T7379] loop1: detected capacity change from 0 to 64 [ 437.034134][ T4269] Bluetooth: hci4: command 0x040f tx timeout [ 437.055641][ T7320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.103361][ T7320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.336264][ T7320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.663858][ T7320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.714111][ T7320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.781514][ T7320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.916736][ T7320] device hsr_slave_0 entered promiscuous mode [ 438.948680][ T7320] device hsr_slave_1 entered promiscuous mode [ 439.193784][ T4269] Bluetooth: hci4: command 0x0419 tx timeout [ 439.219304][ T7320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 439.248952][ T7320] Cannot create hsr debugfs directory [ 440.174524][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.180913][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.336904][ T7402] loop1: detected capacity change from 0 to 2048 [ 441.256573][ T7402] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 441.840453][ T7320] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 442.063336][ T7320] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 443.607935][ T7417] wireguard: wg1: Could not create IPv4 socket [ 443.733577][ T7320] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 443.776644][ T7320] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 443.930022][ T7426] tmpfs: Unknown parameter 'grpquota' [ 446.338799][ T7441] loop1: detected capacity change from 0 to 64 [ 446.497740][ T7320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.528512][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 447.435889][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 447.457085][ T7320] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.500727][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 447.523416][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 447.569225][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.576850][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.941831][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 448.588782][ T7458] loop1: detected capacity change from 0 to 1024 [ 449.253343][ T4306] hfsplus: b-tree write err: -5, ino 4 [ 449.301715][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 449.314886][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 449.362498][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.369747][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.652790][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 449.680161][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 450.525385][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 450.634053][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 450.875364][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 451.623614][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 451.656152][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 451.797053][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 451.817533][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 451.843795][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 453.207857][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 453.684600][ T7492] loop3: detected capacity change from 0 to 512 [ 453.697574][ T7492] EXT4-fs: quotafile must be on filesystem root [ 454.763512][ T7496] loop5: detected capacity change from 0 to 2048 [ 455.095477][ T7496] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 455.204165][ T7498] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 455.278247][ T7500] loop1: detected capacity change from 0 to 64 [ 455.320641][ T7433] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 458.194564][ T7518] Malformed UNC in devname [ 458.194564][ T7518] [ 460.182758][ T7518] CIFS: VFS: Malformed UNC in devname [ 460.649085][ T6211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 460.679765][ T6211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 460.741186][ T7320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.031349][ T7549] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 466.187345][ T7553] sch_tbf: burst 7710 is lower than device lo mtu (65550) ! [ 466.236811][ T7556] loop3: detected capacity change from 0 to 1024 [ 466.260720][ T7556] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 466.857902][ T7568] netlink: 172 bytes leftover after parsing attributes in process `syz.1.744'. [ 467.082465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 467.249972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 467.699589][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 467.717670][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 467.752499][ T7320] device veth0_vlan entered promiscuous mode [ 469.328627][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 470.131450][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 470.175535][ T7320] device veth1_vlan entered promiscuous mode [ 470.210779][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 470.285692][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 470.295287][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 470.306043][ T7320] device veth0_macvtap entered promiscuous mode [ 470.330140][ T7320] device veth1_macvtap entered promiscuous mode [ 470.488845][ T7320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.641569][ T7320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.651655][ T7320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.695372][ T7320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.706337][ T7320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.334809][ T7320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.396240][ T7320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.420531][ T7320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.430545][ T7320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.441061][ T7320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.452474][ T7320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.463373][ T7320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.475467][ T7320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.486467][ T7320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.496982][ T7320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.510035][ T7320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.542500][ T7320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.573149][ T7320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.614817][ T7320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.648682][ T7320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.663475][ T7320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.674085][ T7320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.685091][ T7320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.695063][ T7320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.705734][ T7320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.719965][ T7320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.754598][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 473.423027][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 473.561173][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 473.586048][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 473.626570][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 474.757556][ T7320] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.814029][ T7320] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.822803][ T7320] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.844887][ T7320] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.736606][ T6215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.200980][ T6215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.632143][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 479.042024][ T6228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.055071][ T6228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.101108][ T6215] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 479.720353][ T7657] wireguard: wg1: Could not create IPv4 socket [ 483.121571][ T7681] sd 0:0:1:0: device reset [ 495.754532][ T7744] loop3: detected capacity change from 0 to 1024 [ 496.690761][ T7744] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 497.239894][ T7754] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 501.058932][ T7774] loop6: detected capacity change from 0 to 1764 [ 501.357424][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.363839][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.018371][ T7793] ufs: You didn't specify the type of your ufs filesystem [ 503.018371][ T7793] [ 503.018371][ T7793] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 503.018371][ T7793] [ 503.018371][ T7793] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 503.049535][ T7793] ufs: ufstype=old is supported read-only [ 503.058570][ T7793] ufs: ufs_fill_super(): bad magic number [ 510.534603][ T7832] wireguard: wg1: Could not create IPv4 socket [ 513.145136][ T7846] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 513.859881][ T7850] loop1: detected capacity change from 0 to 1024 [ 513.910568][ T7850] hfsplus: unable to parse mount options [ 514.338217][ T7433] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 519.273064][ T4269] Bluetooth: hci5: command 0x0406 tx timeout [ 519.282867][ T7880] serio: Serial port ptm0 [ 522.859316][ T7902] block device autoloading is deprecated and will be removed. [ 522.895107][ T7902] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 526.693829][ T7932] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 531.237535][ T7981] loop6: detected capacity change from 0 to 128 [ 536.781851][ T4269] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 536.795502][ T4269] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 536.804887][ T4269] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 536.815163][ T4269] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 537.714831][ T4269] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 537.725987][ T4269] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 538.379239][ T8033] ip6gretap0 speed is unknown, defaulting to 1000 [ 539.545467][ T8033] chnl_net:caif_netlink_parms(): no params data found [ 540.046866][ T4269] Bluetooth: hci6: command 0x0409 tx timeout [ 540.533619][ T8033] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.541491][ T8033] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.569458][ T8033] device bridge_slave_0 entered promiscuous mode [ 540.636329][ T8033] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.684688][ T8033] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.762813][ T8033] device bridge_slave_1 entered promiscuous mode [ 542.749812][ T4269] Bluetooth: hci6: command 0x041b tx timeout [ 542.966662][ T8033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.057836][ T8033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.419119][ T8033] team0: Port device team_slave_0 added [ 544.470278][ T8033] team0: Port device team_slave_1 added [ 544.542981][ T8033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.563930][ T8033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.646888][ T8033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.761127][ T8033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.776782][ T8033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.805353][ T4269] Bluetooth: hci6: command 0x040f tx timeout [ 545.704195][ T8033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.836142][ T8092] overlayfs: failed to clone upperpath [ 546.649393][ T8033] device hsr_slave_0 entered promiscuous mode [ 546.673562][ T8033] device hsr_slave_1 entered promiscuous mode [ 546.707416][ T8033] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 546.738238][ T8033] Cannot create hsr debugfs directory [ 546.903946][ T4269] Bluetooth: hci6: command 0x0419 tx timeout [ 551.038205][ T8033] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 551.049012][ T8033] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 551.060105][ T8033] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 551.070767][ T8033] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 552.855812][ T8135] overlayfs: failed to clone lowerpath [ 553.860189][ T8033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.916498][ T8033] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.955060][ T6412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 553.965815][ T6412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 554.035026][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 554.044149][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 554.052934][ T4379] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.060276][ T4379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.069184][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 554.079471][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 554.088440][ T4379] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.095664][ T4379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.556697][ T8150] netlink: 'syz.6.885': attribute type 1 has an invalid length. [ 554.605892][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 554.746626][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 554.834577][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 554.855542][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 554.931627][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 555.022563][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 555.128657][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 555.258647][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 555.795240][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 556.524627][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 556.591077][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 556.627058][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 556.695028][ T8033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 558.746533][ T8178] loop6: detected capacity change from 0 to 64 [ 559.101434][ T8183] overlayfs: failed to clone upperpath [ 561.316566][ T8033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.334126][ T6236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 561.607754][ T6236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 564.011218][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.017720][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.135883][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 567.139798][ T8245] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 567.165299][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 567.214976][ T8250] loop1: detected capacity change from 0 to 2048 [ 567.239305][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 567.256661][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 567.267299][ T8250] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 567.287796][ T8033] device veth0_vlan entered promiscuous mode [ 567.303043][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 567.406597][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 567.490330][ T8033] device veth1_vlan entered promiscuous mode [ 567.548489][ T6215] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 567.582984][ T6215] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 567.610577][ T6215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 567.888941][ T6215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 568.137600][ T8033] device veth0_macvtap entered promiscuous mode [ 568.184703][ T8033] device veth1_macvtap entered promiscuous mode [ 568.303320][ T8033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.353989][ T8033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.383946][ T8033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.394688][ T8033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.404720][ T8033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.415448][ T8033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.434115][ T8033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.454895][ T8033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.494046][ T8033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.533933][ T8033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.573751][ T8033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.620902][ T8033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.631251][ T8033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.642713][ T8033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.656347][ T4254] EXT4-fs (loop1): unmounting filesystem. [ 568.657594][ T8033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 568.679921][ T6215] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 568.688955][ T6215] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 568.699294][ T6215] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 568.741225][ T6215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 568.768810][ T8033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.780420][ T8033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.827203][ T8033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.844257][ T8033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.863875][ T8033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.886701][ T8033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.907449][ T8033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.929891][ T8033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.012501][ T8263] tmpfs: Unknown parameter 'usrquota' [ 569.473627][ T8033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.673757][ T8033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.702655][ T8033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.737914][ T8033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.823976][ T8033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.923974][ T8033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.967673][ T8033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.558074][ T8272] __vm_enough_memory: pid: 8272, comm: syz.1.912, no enough memory for the allocation [ 570.560562][ T8033] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.578183][ T8033] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.588648][ T8033] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.597860][ T8033] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.610701][ T6215] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 570.620431][ T6215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 572.104652][ T6228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.113093][ T6228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.142342][ T6213] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 572.314315][ T6228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.340249][ T6228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.685514][ T6228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 573.198831][ T8281] set match dimension is over the limit! [ 574.343752][ T8302] loop5: detected capacity change from 0 to 64 [ 578.459445][ T8330] loop6: detected capacity change from 0 to 40427 [ 578.521814][ T8330] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 578.529745][ T8330] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 578.558810][ T8330] F2FS-fs (loop6): invalid crc value [ 578.673583][ T8330] F2FS-fs (loop6): Found nat_bits in checkpoint [ 578.740109][ T8330] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 578.748182][ T8330] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 580.921855][ T6228] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 581.085294][ T6228] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 582.114862][ T8353] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 584.519652][ T8363] loop7: detected capacity change from 0 to 64 [ 588.126076][ T8386] loop1: detected capacity change from 0 to 64 [ 592.381724][ T8415] loop1: detected capacity change from 0 to 64 [ 596.204596][ T8450] loop5: detected capacity change from 0 to 16 [ 598.393987][ T8450] erofs: (device loop5): mounted with root inode @ nid 36. [ 601.358496][ T4270] Bluetooth: hci4: unexpected event 0x2f length: 763 > 260 [ 601.364242][ T8458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 602.214283][ T4269] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 602.227236][ T4269] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 602.236496][ T4269] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 602.247110][ T48] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 602.268207][ T48] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 602.275813][ T48] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 602.428340][ T8477] ip6gretap0 speed is unknown, defaulting to 1000 [ 604.345849][ T4270] Bluetooth: hci7: command 0x0409 tx timeout [ 605.360457][ T8477] chnl_net:caif_netlink_parms(): no params data found [ 605.457177][ T26] audit: type=1326 audit(1744122270.777:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8495 comm="syz.6.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40b38d169 code=0x7ffc0000 [ 606.174126][ T26] audit: type=1326 audit(1744122270.807:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8495 comm="syz.6.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fb40b38d169 code=0x7ffc0000 [ 606.265763][ T8477] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.300958][ T26] audit: type=1326 audit(1744122270.807:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8495 comm="syz.6.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40b38d169 code=0x7ffc0000 [ 606.326474][ T8477] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.414030][ T48] Bluetooth: hci7: command 0x041b tx timeout [ 606.531700][ T26] audit: type=1326 audit(1744122270.817:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8495 comm="syz.6.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb40b38d169 code=0x7ffc0000 [ 606.535780][ T8477] device bridge_slave_0 entered promiscuous mode [ 608.221435][ T26] audit: type=1326 audit(1744122270.817:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8495 comm="syz.6.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40b38d169 code=0x7ffc0000 [ 608.253496][ T26] audit: type=1326 audit(1744122270.817:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8495 comm="syz.6.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb40b38d169 code=0x7ffc0000 [ 608.293598][ T8477] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.309520][ T8477] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.324108][ T26] audit: type=1326 audit(1744122270.817:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8495 comm="syz.6.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40b38d169 code=0x7ffc0000 [ 608.348580][ T8512] loop6: detected capacity change from 0 to 512 [ 608.358357][ T8477] device bridge_slave_1 entered promiscuous mode [ 608.374106][ T8512] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 608.401796][ T26] audit: type=1326 audit(1744122270.827:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8495 comm="syz.6.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fb40b38d169 code=0x7ffc0000 [ 608.473947][ T4270] Bluetooth: hci7: command 0x040f tx timeout [ 608.543119][ T8519] netlink: 8 bytes leftover after parsing attributes in process `syz.5.967'. [ 608.640680][ T26] audit: type=1326 audit(1744122270.827:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8495 comm="syz.6.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40b38d169 code=0x7ffc0000 [ 608.663538][ T26] audit: type=1326 audit(1744122270.827:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8495 comm="syz.6.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb40b38d169 code=0x7ffc0000 [ 609.472379][ T8523] hub 2-0:1.0: USB hub found [ 609.485147][ T8523] hub 2-0:1.0: 1 port detected [ 610.140126][ T8512] EXT4-fs (loop6): 1 truncate cleaned up [ 610.189833][ T8512] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 610.228169][ T8477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.292049][ T7320] EXT4-fs (loop6): unmounting filesystem. [ 610.538196][ T8477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.574136][ T4270] Bluetooth: hci7: command 0x0419 tx timeout [ 611.891010][ T8537] loop7: detected capacity change from 0 to 8 [ 612.045534][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 612.045552][ T26] audit: type=1800 audit(1744122277.367:236): pid=8537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.978" name="file1" dev="loop7" ino=5 res=0 errno=0 [ 612.593422][ T8477] team0: Port device team_slave_0 added [ 612.607264][ T8477] team0: Port device team_slave_1 added [ 613.357342][ T8543] netlink: 4 bytes leftover after parsing attributes in process `syz.5.980'. [ 613.514419][ T8477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.552866][ T8477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.641787][ T8477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.655970][ T8477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.663094][ T8477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.689975][ T8477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.786037][ T8477] device hsr_slave_0 entered promiscuous mode [ 613.944355][ T8477] device hsr_slave_1 entered promiscuous mode [ 613.954501][ T8477] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 613.962172][ T8477] Cannot create hsr debugfs directory [ 614.669120][ T8560] loop1: detected capacity change from 0 to 256 [ 614.695700][ T8560] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 614.739232][ T8560] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 614.768899][ T8560] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 614.784033][ T8560] UDF-fs: Scanning with blocksize 512 failed [ 614.824887][ T8560] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 614.884604][ T8560] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 615.213667][ T8569] loop7: detected capacity change from 0 to 512 [ 615.623051][ T8569] EXT4-fs (loop7): 1 orphan inode deleted [ 615.672062][ T8569] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 615.714012][ T8569] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 615.847340][ T6412] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 615.874325][ T6412] EXT4-fs error (device loop7): ext4_release_dquot:6818: comm kworker/u4:37: Failed to release dquot type 1 [ 616.021324][ T8568] EXT4-fs (loop7): unmounting filesystem. [ 616.247207][ T8477] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 616.270470][ T8477] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 616.309966][ T8477] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 616.329932][ T8477] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 618.223751][ T8587] netlink: 20 bytes leftover after parsing attributes in process `syz.1.990'. [ 619.222387][ T8597] IPv6: ADDRCONF(NETDEV_CHANGE): nr16: link becomes ready [ 619.344439][ T8477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.410603][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 619.420539][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 619.700899][ T8477] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.946906][ T6412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 623.034887][ T6412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 623.090700][ T6412] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.098017][ T6412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.131106][ T6412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 623.140748][ T6412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 623.162423][ T6412] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.169743][ T6412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 623.190450][ T6412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 623.202481][ T6412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 623.213577][ T6412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 623.223385][ T6412] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 623.233255][ T6412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 623.247928][ T6412] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 623.257161][ T6412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 623.267810][ T6412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 623.305295][ T6412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 623.348340][ T6412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 623.389185][ T6412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 623.413276][ T6412] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 623.436549][ T8477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 624.272666][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.279215][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.307786][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 626.320135][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 626.351368][ T8477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 631.220551][ T8688] loop5: detected capacity change from 0 to 1024 [ 631.233285][ T8690] loop6: detected capacity change from 0 to 512 [ 631.314576][ T8690] ext2: Unknown parameter 'dont_measure' [ 631.451673][ T6228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 631.469475][ T6228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 631.533408][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 631.552204][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 631.571995][ T8477] device veth0_vlan entered promiscuous mode [ 631.582746][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 631.621769][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 631.632205][ T8612] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 631.645038][ T8688] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 632.945785][ T48] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 632.958905][ T48] Bluetooth: hci5: Injecting HCI hardware error event [ 632.975069][ T48] Bluetooth: hci5: hardware error 0x00 [ 633.429004][ T8477] device veth1_vlan entered promiscuous mode [ 633.644506][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 635.797150][ T48] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 635.897842][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 635.948472][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 636.008701][ T8477] device veth0_macvtap entered promiscuous mode [ 636.153144][ T8718] fuse: Bad value for 'fd' [ 637.066908][ T8477] device veth1_macvtap entered promiscuous mode [ 637.234381][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 637.287477][ T6946] EXT4-fs (loop5): unmounting filesystem. [ 637.326710][ T8477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.923392][ T8477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.942050][ T8477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.981977][ T8477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.039373][ T8477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.095866][ T8477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.150892][ T8477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.277793][ T8731] loop1: detected capacity change from 0 to 40427 [ 638.294347][ T8731] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 638.308613][ T8731] F2FS-fs (loop1): invalid crc value [ 638.355620][ T8731] F2FS-fs (loop1): Found nat_bits in checkpoint [ 638.390248][ T8477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.494278][ T8477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.505416][ T8477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.515630][ T8477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.526611][ T8477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.537005][ T8477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.702921][ T8731] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 639.517626][ T8734] loop5: detected capacity change from 0 to 2048 [ 639.524262][ T8477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.668734][ T8477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.732677][ T8477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.787252][ T8477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 639.821966][ T8731] F2FS-fs (loop1) : inject page get in f2fs_pagecache_get_page of generic_perform_write+0x2fc/0x5e0 [ 639.874749][ T8731] F2FS-fs (loop1) : inject page get in f2fs_pagecache_get_page of generic_perform_write+0x2fc/0x5e0 [ 639.926317][ T8731] F2FS-fs (loop1) : inject page get in f2fs_pagecache_get_page of generic_perform_write+0x2fc/0x5e0 [ 639.975755][ T8731] F2FS-fs (loop1) : inject page get in f2fs_pagecache_get_page of generic_perform_write+0x2fc/0x5e0 [ 640.219394][ T8734] Alternate GPT is invalid, using primary GPT. [ 640.229041][ T8734] loop5: p1 p2 p3 [ 640.423505][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 640.497384][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 641.157973][ T8477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.209717][ T8477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.222765][ T8477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.256839][ T8477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.280383][ T8477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.311610][ T8477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.329786][ T8477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.346800][ T8477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.369249][ T8477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.392835][ T8477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.427266][ T8753] udevd[8753]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 641.448707][ T8612] udevd[8612]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 641.477523][ T8613] udevd[8613]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 641.491285][ T8477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.504171][ T8477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.516773][ T8477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.527663][ T8477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.538276][ T8477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.737219][ T8477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.749156][ T8477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 642.761005][ T8477] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.214362][ T8477] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.263091][ T8477] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.316025][ T8477] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.368686][ T8765] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 643.504053][ T4254] syz-executor: attempt to access beyond end of device [ 643.504053][ T4254] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 643.824221][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 644.112324][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 646.463702][ T4464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.547530][ T4464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.754336][ T6236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.776794][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 646.784991][ T6236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.804020][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 646.832326][ T6236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 648.061823][ T8796] loop5: detected capacity change from 0 to 40427 [ 648.084381][ T8796] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x3ffff [ 648.098541][ T8796] F2FS-fs (loop5): invalid crc value [ 650.093205][ T8796] F2FS-fs (loop5): Found nat_bits in checkpoint [ 650.148187][ T8796] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 657.571416][ T8874] loop1: detected capacity change from 0 to 512 [ 657.631237][ T8874] ext2: Unknown parameter 'dont_measure' [ 662.794033][ T48] Bluetooth: hci6: command 0x0406 tx timeout [ 665.081713][ T8923] wireguard: wg1: Could not create IPv4 socket [ 668.092028][ T8942] ip6gretap0 speed is unknown, defaulting to 1000 [ 672.594166][ T28] INFO: task syz.3.819:7889 blocked for more than 144 seconds. [ 672.604295][ T28] Not tainted 6.1.133-syzkaller #0 [ 672.659496][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 672.805186][ T28] task:syz.3.819 state:D stack:21304 pid:7889 ppid:4251 flags:0x00004004 [ 672.858659][ T28] Call Trace: [ 672.882061][ T28] [ 672.902795][ T28] __schedule+0x143f/0x4570 [ 672.928026][ T28] ? release_firmware_map_entry+0x18b/0x18b [ 672.953482][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 672.974902][ T28] ? print_irqtrace_events+0x210/0x210 [ 673.084037][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 673.112945][ T28] schedule+0xbf/0x180 [ 673.665420][ T28] ? down_read+0x69f/0xa30 [ 673.680221][ T28] schedule_preempt_disabled+0xf/0x20 [ 673.709115][ T28] down_read+0x6ff/0xa30 [ 673.729263][ T28] ? __down_common+0x8b0/0x8b0 [ 673.751474][ T28] ? do_raw_spin_lock+0x14a/0x370 [ 673.775207][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 673.796826][ T28] iterate_supers+0xac/0x1e0 [ 673.812471][ T28] ? ksys_sync+0x1c0/0x1c0 [ 673.828600][ T28] ksys_sync+0xb9/0x1c0 [ 673.843263][ T28] ? sync_filesystem+0x220/0x220 [ 673.859859][ T28] ? preempt_schedule_notrace_thunk+0x16/0x18 [ 673.917733][ T28] ? rcu_is_watching+0x11/0xb0 [ 673.928441][ T28] ? syscall_enter_from_user_mode+0x12d/0x230 [ 673.942608][ T28] __do_sys_sync+0xa/0x10 [ 673.953122][ T28] do_syscall_64+0x3b/0xb0 [ 673.964313][ T28] ? clear_bhb_loop+0x45/0xa0 [ 673.972410][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 673.983949][ T28] RIP: 0033:0x7f00f018d169 [ 673.988468][ T28] RSP: 002b:00007f00effbd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 674.003857][ T28] RAX: ffffffffffffffda RBX: 00007f00f03a6160 RCX: 00007f00f018d169 [ 674.012080][ T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 674.024503][ T28] RBP: 00007f00f03a6160 R08: 0000000000000000 R09: 0000000000000000 [ 674.032911][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 674.041105][ T28] R13: 0000000000000000 R14: 00007f00f03a6160 R15: 00007fff38f318e8 [ 674.050468][ T28] [ 674.057077][ T28] [ 674.057077][ T28] Showing all locks held in the system: [ 674.093257][ T28] 1 lock held by rcu_tasks_kthre/12: [ 674.111039][ T28] #0: ffffffff8d32e910 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 674.122132][ T28] 1 lock held by rcu_tasks_trace/13: [ 674.134198][ T28] #0: ffffffff8d32f110 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 674.145630][ T28] 1 lock held by khungtaskd/28: [ 674.150531][ T28] #0: ffffffff8d32e740 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 674.162598][ T28] 2 locks held by getty/4012: [ 674.167406][ T28] #0: ffff88814d072098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 674.177314][ T28] #1: ffffc9000325e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x54a/0x1620 [ 674.187849][ T28] 1 lock held by syz-executor/4241: [ 674.193098][ T28] #0: ffff8880b8f3a998 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 674.203915][ T28] 1 lock held by syz-executor/4253: [ 674.210068][ T28] #0: ffff88802c4060e0 (&type->s_umount_key#103){++++}-{3:3}, at: deactivate_super+0xa9/0xe0 [ 674.221174][ T28] 2 locks held by kworker/u4:19/6205: [ 674.227356][ T28] 4 locks held by kworker/u4:20/6209: [ 674.232865][ T28] #0: ffff888017e16938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 674.243449][ T28] #1: ffffc9001be2fd20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 674.254299][ T28] #2: ffffffff8e544110 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x166/0xd20 [ 674.264286][ T28] #3: ffffffff8d333c40 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x5f0 [ 674.274854][ T28] 2 locks held by kworker/1:9/7457: [ 674.280205][ T28] #0: ffff888017c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 674.291362][ T28] #1: ffffc90005887d20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 674.303411][ T28] 1 lock held by syz.3.819/7889: [ 674.309856][ T28] #0: ffff88802c4060e0 (&type->s_umount_key#103){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 674.320661][ T28] 1 lock held by syz.0.934/8356: [ 674.326492][ T28] #0: ffff88802c4060e0 (&type->s_umount_key#103){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 674.337204][ T28] 1 lock held by syz.6.1080/8982: [ 674.342369][ T28] 4 locks held by kvm-nx-lpage-re/8976: [ 674.348236][ T28] #0: ffffffff8d357508 (cgroup_mutex){+.+.}-{3:3}, at: cgroup_attach_task_all+0x23/0xe0 [ 674.358931][ T28] #1: ffffffff8d1cad90 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_attach_lock+0xd/0x30 [ 674.369429][ T28] #2: ffffffff8d3576f0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: cgroup_attach_task_all+0x2d/0xe0 [ 674.380780][ T28] #3: ffffffff8d333d78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 [ 674.407639][ T28] [ 674.423759][ T28] ============================================= [ 674.423759][ T28] [ 674.451010][ T28] NMI backtrace for cpu 1 [ 674.455425][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.133-syzkaller #0 [ 674.463351][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 674.473486][ T28] Call Trace: [ 674.476798][ T28] [ 674.479755][ T28] dump_stack_lvl+0x1e3/0x2cb [ 674.484472][ T28] ? nf_tcp_handle_invalid+0x647/0x647 [ 674.489965][ T28] ? panic+0x764/0x764 [ 674.494073][ T28] ? vprintk_emit+0x622/0x740 [ 674.498789][ T28] ? printk_sprint+0x490/0x490 [ 674.503585][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 674.508738][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 674.513721][ T28] ? nmi_trigger_cpumask_backtrace+0x430/0x430 [ 674.519915][ T28] ? _printk+0xd1/0x111 [ 674.524119][ T28] ? panic+0x764/0x764 [ 674.528241][ T28] ? __wake_up_klogd+0xcc/0x100 [ 674.533137][ T28] ? panic+0x764/0x764 [ 674.537290][ T28] ? nmi_trigger_cpumask_backtrace+0xfc/0x430 [ 674.543397][ T28] nmi_trigger_cpumask_backtrace+0x1ca/0x430 [ 674.549421][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 674.555533][ T28] watchdog+0xf88/0xfd0 [ 674.559735][ T28] ? watchdog+0x1f8/0xfd0 [ 674.564119][ T28] kthread+0x28d/0x320 [ 674.568219][ T28] ? hungtask_pm_notify+0x50/0x50 [ 674.573305][ T28] ? kthread_blkcg+0xd0/0xd0 [ 674.577935][ T28] ret_from_fork+0x1f/0x30 [ 674.582422][ T28] [ 674.586416][ T28] Sending NMI from CPU 1 to CPUs 0: [ 674.591785][ C0] NMI backtrace for cpu 0 [ 674.591798][ C0] CPU: 0 PID: 3612 Comm: klogd Not tainted 6.1.133-syzkaller #0 [ 674.591817][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 674.591826][ C0] RIP: 0010:match_held_lock+0x1/0xb0 [ 674.591862][ C0] Code: 57 ef 03 00 75 cf 48 c7 c7 60 1c 0c 8b 48 c7 c6 a0 1c 0c 8b e8 80 26 a1 f6 0f 0b eb b6 e8 e7 fa ff ff 0f 1f 80 00 00 00 00 55 <53> bd 01 00 00 00 48 39 77 10 74 67 48 89 fb 81 7f 20 00 00 10 00 [ 674.591878][ C0] RSP: 0018:ffffc900032b75e8 EFLAGS: 00000083 [ 674.591893][ C0] RAX: 0000000000000004 RBX: 0000000000000001 RCX: 0000000080000004 [ 674.591905][ C0] RDX: 1ffff1100fb96d85 RSI: ffffffff8d32e6c0 RDI: ffff88807c4d8b08 [ 674.591918][ C0] RBP: ffff88807c4d8b08 R08: 0000000000000000 R09: 1ffff1100fb96b2a [ 674.591930][ C0] R10: ffff88807dcb5954 R11: ffffffff901d1010 R12: 0000000000000046 [ 674.591943][ C0] R13: ffff88807c4d8000 R14: 00000000ffffffff R15: ffffffff8d32e6c0 [ 674.591955][ C0] FS: 00007f387d7a1380(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 674.591971][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 674.591983][ C0] CR2: 000000110c426950 CR3: 0000000018a28000 CR4: 00000000003526f0 [ 674.591998][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 674.592008][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 674.592019][ C0] Call Trace: [ 674.592025][ C0] [ 674.592031][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 674.592050][ C0] ? read_lock_is_recursive+0x10/0x10 [ 674.592078][ C0] ? nmi_trigger_cpumask_backtrace+0x430/0x430 [ 674.592106][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 674.592123][ C0] ? nmi_handle+0x12e/0x440 [ 674.592150][ C0] ? nmi_handle+0x25/0x440 [ 674.592176][ C0] ? match_held_lock+0x1/0xb0 [ 674.592196][ C0] ? default_do_nmi+0x62/0x150 [ 674.592215][ C0] ? exc_nmi+0xa8/0x100 [ 674.592232][ C0] ? end_repeat_nmi+0x16/0x31 [ 674.592259][ C0] ? match_held_lock+0x1/0xb0 [ 674.592280][ C0] ? match_held_lock+0x1/0xb0 [ 674.592300][ C0] ? match_held_lock+0x1/0xb0 [ 674.592321][ C0] [ 674.592326][ C0] [ 674.592331][ C0] lock_is_held_type+0xa4/0x180 [ 674.592354][ C0] rcu_read_lock_sched_held+0x89/0x130 [ 674.592378][ C0] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 674.592405][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 674.592423][ C0] task_psi_group+0x50/0x1a0 [ 674.592441][ C0] psi_task_change+0xc5/0x260 [ 674.592461][ C0] enqueue_task+0x28e/0x2e0 [ 674.592486][ C0] ttwu_do_activate+0x1b4/0x370 [ 674.592511][ C0] try_to_wake_up+0x6f6/0x1250 [ 674.592536][ C0] ? do_raw_spin_lock+0x14a/0x370 [ 674.592555][ C0] ? cpu_curr_snapshot+0x470/0x470 [ 674.592579][ C0] ? __rwlock_init+0x140/0x140 [ 674.592598][ C0] ? _raw_spin_lock_irqsave+0xac/0x120 [ 674.592618][ C0] autoremove_wake_function+0x12/0x110 [ 674.592645][ C0] __wake_up_common+0x2a0/0x4e0 [ 674.592674][ C0] __wake_up_sync_key+0x114/0x1c0 [ 674.592701][ C0] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 674.592734][ C0] ? sock_def_readable+0x1d/0x280 [ 674.592761][ C0] sock_def_readable+0x15b/0x280 [ 674.592788][ C0] unix_dgram_sendmsg+0x153d/0x2060 [ 674.592829][ C0] ? unix_dgram_poll+0x650/0x650 [ 674.592863][ C0] ? aa_sock_msg_perm+0x91/0x150 [ 674.592882][ C0] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 674.592906][ C0] ? security_socket_sendmsg+0x7d/0xa0 [ 674.592934][ C0] ? unix_dgram_poll+0x650/0x650 [ 674.592958][ C0] __sys_sendto+0x480/0x600 [ 674.592977][ C0] ? __ia32_sys_getpeername+0x80/0x80 [ 674.593008][ C0] ? print_irqtrace_events+0x210/0x210 [ 674.593037][ C0] __x64_sys_sendto+0xda/0xf0 [ 674.593055][ C0] do_syscall_64+0x3b/0xb0 [ 674.593070][ C0] ? clear_bhb_loop+0x45/0xa0 [ 674.593092][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 674.593114][ C0] RIP: 0033:0x7f387d9039b5 [ 674.593128][ C0] Code: 8b 44 24 08 48 83 c4 28 48 98 c3 48 98 c3 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 26 45 31 c9 45 31 c0 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 7a 48 8b 15 44 c4 0c 00 f7 d8 64 89 02 48 83 [ 674.593142][ C0] RSP: 002b:00007ffd8a4421f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 674.593159][ C0] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f387d9039b5 [ 674.593172][ C0] RDX: 0000000000000050 RSI: 000055ed7e796e20 RDI: 0000000000000003 [ 674.593183][ C0] RBP: 000055ed7e790910 R08: 0000000000000000 R09: 0000000000000000 [ 674.593193][ C0] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000013 [ 674.593204][ C0] R13: 00007f387da91212 R14: 00007ffd8a4422f8 R15: 0000000000000000 [ 674.593223][ C0] [ 674.604813][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 674.604833][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.133-syzkaller #0 [ 674.604856][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 674.604870][ T28] Call Trace: [ 674.604878][ T28] [ 674.604886][ T28] dump_stack_lvl+0x1e3/0x2cb [ 674.604918][ T28] ? nf_tcp_handle_invalid+0x647/0x647 [ 674.604943][ T28] ? panic+0x764/0x764 [ 674.604971][ T28] ? llist_add_batch+0x160/0x1d0 [ 674.605000][ T28] ? vscnprintf+0x59/0x80 [ 674.605032][ T28] panic+0x318/0x764 [ 674.605061][ T28] ? nmi_trigger_cpumask_backtrace+0x2db/0x430 [ 674.605095][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 674.605125][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 674.605161][ T28] ? nmi_trigger_cpumask_backtrace+0x2db/0x430 [ 674.605185][ T28] ? nmi_trigger_cpumask_backtrace+0x358/0x430 [ 674.605220][ T28] ? nmi_trigger_cpumask_backtrace+0x35d/0x430 [ 674.605244][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 674.605272][ T28] watchdog+0xfc7/0xfd0 [ 674.605310][ T28] ? watchdog+0x1f8/0xfd0 [ 674.605347][ T28] kthread+0x28d/0x320 [ 674.605367][ T28] ? hungtask_pm_notify+0x50/0x50 [ 674.605397][ T28] ? kthread_blkcg+0xd0/0xd0 [ 674.605422][ T28] ret_from_fork+0x1f/0x30 [ 674.605466][ T28] [ 674.606166][ T28] Kernel Offset: disabled [ 675.172447][ T28] Rebooting in 86400 seconds..