last executing test programs: 5m55.059571229s ago: executing program 4 (id=73): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file3\x00', 0x200048, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1d1, &(0x7f0000000440)="$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") read$FUSE(0xffffffffffffffff, &(0x7f0000003880)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000058c0)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002440)={0x2020}, 0x2020) read$char_usb(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{}, [@TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x58}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 5m54.245452954s ago: executing program 4 (id=74): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x22000406, &(0x7f0000000400)={[{@data_err_abort}, {@noblock_validity}, {@nogrpid}, {@orlov}, {@data_err_abort}, {@grpjquota, 0x2e}, {@sb={'sb', 0x3d, 0x1}}, {@init_itable}, {@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0x10000}}], [], 0x2c}, 0x0, 0x4bf, &(0x7f0000001600)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 5m52.625012786s ago: executing program 4 (id=78): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000001a00)) sendmmsg$inet(r2, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000580)="25d876551bc42244971a816aa8a0c4aadf17eda02370a41a7710ac8cf5aeddb2908ae76310f3dc4e2102d0dff789c8ddfbfa39a4d544fb88e29bfadb83461e499c53bef50d25a57e5da96079d17e166a51c3793970ad2fca18ca3114481c5387078af562573874df737cc81c9d1a186ac946fdbadde75740a146af4d0f76db64c65e617a00e9bdb8eec3c2a59af615aa3cd59b032bf8d7a755f5396f9f1832af8b6c914aabcaf8cfbc1170ea871de2b648f79381296ba90ba06543036662eacdf60fe05174fbd428378c17da00bef650552ada8c09a40ef30f9c6ae2a1e0c0d06fd474db698bb1bf093b7ebb89531e0062f8229660efcce0fc63fe6b5268ccf64aa0f756a91c8e06e768ec6bcfa077cd2503fcc069edd4eebdf0b8e8dbdc3efbae90d70f79edd3ed48f24bc7f7f1570dc6fd312ed17b82a28aa2a9b5905890c384f6f1a343648d0f364a6df49bbaf163b436585f13595c0053548cefc79c360b1c9fa6bfed582ace02c692c740ff38a233d306d8dd134e050921eb1187ab2863712494fb083eb6c0392860222ec8605eebfcf9765f3c6cb3b1c196e412bc13b595e0923a22a325c121df5806cac6f3037daa3a2042bdb4df77a432ab11b6469f2764327691137d2f27c9cee48fa2ca530a9eea59c1ba2038ad50ebb824e767db5640baf875616968950b4b8de4db6baa946c96a78fed4705d23df43f537891b85efd0172f9b702a8d69d4ca1472c55b704a2b788a75a02081abc4a1f7e84e6a36b2444f841ec04273500e4067d51c8fa01c94d14d031339388c52062f1f229ee129d67c78ad5567938a0b3eb3674904ccdccc2dee04886efc95b37ca8aea97163c2a8c7323359ef41bd5be34908c4715220a40ca309172a1dfaf5287751eb2c82c1a3717cbba626f07da00e39b5088245eabc86a3f04c7995c3404e3694c11fdb2aaf1079b05bbca5d113a6863292665790f1a02e8526e3e8c52f4a1231d4dfa8d730c9258b69c285c3fc0d0c52a200fe6241e0f5ee9531f75d716dd5b6a0790b26c19eb437e720ffc70f585ae3a92a3b1f143e5f14d09be5ece7beaa5178af61625b7427287bd031742287b5d352edaaff17f2bdea2c2a20d19a0b20332fa4cc7e4f32b837c82399531964ade75d53bce46b14d9d50df13c3a0e285e73d2138ce75a5b69f81f13cce0781a9b610f28ce73433c7b657b652dc370b0654036bdaedc4236cfb6e4e6d57b5c6076b02b8bd1a39ebf561f8235be5d3bd9a10ce88f5a5fa19bab7037fba932b774979cd2b78c65d4908924e5cec12b190913b2b130c1b4f4e0bcecd14fde3c928a09e5ab0c6340b090561f8050f1ee9010205993543051fcf085a132071041f1a34a05bbf81ce944beaa6a7bca64a4851477bee8e92337a1f274e14aa8d47d5f944a6bcc9f28cace37828b03224d092550841c2f02784432c6689160f2a9eb7d545b0981a07a15146faff266735a84aee3a32a3d5563ee268103e5cd1ea6bdcfe2f54ce8605ebb23eb5e5a4b5308980e9bb3246512b7c883e26af06b8741f0f2dc66052e7b5a5651c34a4e687c37ac246d42148c85089e8a72c7eb8ff8cf028d85333aaba6f7da44dcac6fd77692aa2d5458c51a624e15e322ce26520595cc9d93bebd8c889bff30ee9eceb960780b48e683ca2bb3d162d24d3dde8c7958cc69dc606cc78e1d9de2e2f5454bcdd591b94b38b3571ecf1c17f2d3affec21e4dd1e918f4caf584d46eaff99cdb4002057a690525324ec9c05ab16a40816c3804a2bec970413ec3efce45e2c15ae06c24cb96291b8ba7b9d7eb37f7de47a8f350bfbb831672869379f4615b8f7549c7d9258f862fe93a87aaee49eb19b4fc375681ab36453b2bb7a5df2c6fa927b46c182ba5a9a5b5e3871049d813358b3b1a17f0598f6c4ea021dc06e2f74b8c417439af9d2deea48feda5ca78ebb62ea9e06a33ea30950227842091386cf415b0da690dadb852df6825371d0d14748360d9ac0edb3bb618d746b92accf7dc179e4f93e4ec1790c1097ff64aaad6add27650e015e44782f2ea2724af4db2a933ba4cc98ccf1c971a766a5fc4a299ea3c21492202300b543f28b25dcb6e0265e5bd2f4a2772e60174154526600a2031988482c97a01f5d7eccea49e50d3e6400f5287511dc6618ab112e3b8d08b32c401392d0eaec58bd417eee86a784147883f39979360e005267aa2d8906a7a028d96859bb97c6f954217f613cc6988a456d41990bc6af96a2f2e5e635998440dba41fc31cbbc76016634eebe4557cc531657d8444f687475ae6ec6e464a26f74683e363ce18dfa96bf8f2ea502157a6b5229792e8f4dd7046dea7605aaa1a52e2a02bc7e9a5c02faa0b32e1349126b576fc79c08e847c20fa0c8c09fdaab95cd6353698f32605af1360c2b6fc1b984e94f1a0a22855d5808c4080b88b1a7773932a202bcca4ebff9b84e0240af3c71026160cecb76766af515b68d4ea5709994646b7b79bcedd620729a100476050ec8d9a2108fdbaffddc219bce2176eb9eb272c9582ee12d7e332908cea0d6abc5c08e81d6dad649e778d2f2d6faf05d4be1365a4d87697c89d4d01bff8737306416eddda88b06128194c790e1c67e8dc3d925c31c2e436b3479ab5de24e21af8b05689aae10fd61e5818d1deec6a97d4faaaacf5b2903faeb9af824f240d8c5fdfee9a1f60f5261142a8ffa06d9834bf084105e50cfa03a842c3f99921bd4c7014e45ee7ed4aa4ff5a8b0843a4e6d113590e2aae1a3f941c72e4e40faac96bd92d149a4c7a33ecf8e3995c5f9d12a3aa53b17f90a74567f8dfd1afb9c2c29ea046b5ef37c7bca780702d92063496dac50e595d23a7ada51b2110dfd0d3669626865abf2ab0f6ea8f566f18c0a065f10ebbcab5002f095bfe770cf1bb2e2c0c49e37e63d0621abb04a154d9f732e657935a00cafdb08dd16453bb80bb534c66e6fb1d6f37997aeec629b58f55125e74150a5af625061f51818598186457017527413e8885a6d3c19dcbf3abe41ab1eace24f1691b7accfc2edb9a96bf6593eeac4c7e9d456fe99e4001205ab0d82ab42d88b957f3daf7bc2066642860dd3331be0575839ef1d3aa994a35a9dfcfbb428d4cb8032204a8110416bed9f428f9639744bf8baef211c6db7758d15255f4f06320b0f7fd1a93139664dc8c46b0be6a495f764811799b23d83ebd780f136ddcf183e6e0b6216c7dd62a7c60743bc6bc903b0bd31eb12b29c5152e9de9cd7d1ff2fcbb91571ed6fb99a2b731cebdbcfd40a2ac6b572985dfdc8bb88ca94649a380dd0e9f8f9c0605bb9f2535fe0126ad67ba700db7b417f380b6af2354a5aa55ff2c41d427d2675751cd52568f9d72ae61a2a47bff22c01f2e439e54fa7bc6ba604e6dd40b73b9aba4d05c8096f1846d47d60d0ed6c9df6a73bb0bc7066f6b68adc0b12275bc06b23c8d02e052244c31f59b6593dfa33c1fd56cdf7244c8c60f6e5162a745832886f134ff14cdc1eab3f3e3d563e532dac66a1ce79cc65fc0ce5d41f0b43e3f32c0808afaa8f560e253d051bad058f341a4553e637cf9dfe47e728b645c550c7c43659c37579acd60def0d5e2cecd01c56cd86233c0045b0cd9169f65baee5d45479baaf93e47b339574d0797080b8b0acfde33fe16cee1606651f2223d129d907dbeae3a714f6be5eae935cc45664b448776e8322c6994dcebbcc11894b4645a331491967ff7ba3bd1db5aec6c851dbcf7adc0e513f6f58f81692b57a5ab087ebf973a345a8327880f9edfb13e36252fbd4cf9aa53b37c4818c847a00abe649a44bd2e3cc61b52d55163ca2fe9bcf0aacddbf11c58f2b098613b50928a99fff4bda56d8543ca463ded51addae74d1944c652e5e0e32e7eacb8d8e44df1ddb12e08a204b3a702594d6c1bdcdf362427de72c1a0e4aa8120150fdc89a9aeaa4faf610bb967c45a2c10a384e70e034e28b6168d9a4517275510ed2aa9d905d27612c983963b28e8febea41dd62b14adff2421bff47b4c943ba39c77fdff95239f9ea133babf45c78c4baac6c73a33b6aec068bc7c264a85bc48d66ed0168367d3c91bb1f249a76730516d27c8943646df8e1f48432e7f4c75da2ece97ec438b5c18569a65f2b3d0b2f2d0241697afce30e85b4a4fc7dea0ccca08ecac7e40db3c2bea5d712ea855d92ab0d2395458bfd6571bfb6c52906bc5a8d47ea59f56bb2448fb9a2d47acf6655ff903e0cc91ad591f230143c280bf90009d3bbf81e55b06c4e996af6576d4b3ecf38ee6f324bbbd1ca1c4adccba166dc1fb2dccfe55f22ada1a00c38137cecd510baa411c8852e76f85ceeb2cab8c203c7ff4e68e548776afa84a8dae13d8110904d0ff0cbf37ad3c7ce66b330287a9cc1be60e8b6953dfbfa4abb99c71ad768f73ee32ce57896544f3e09637b924ab0abd362b24904033f22605f4d3c117e59a38ac519ee3842c40a17de5b24d027409680d8c8282948b272ac94281763285cd2735669ff7ce952bf789997cc195311943c24654a94c5eaea60984c1164a86b7b43db9f2e58c1fc4a1d38f9d983d32c5e671eacd09bd19096cac91ec494ba797832f6a122473781bf6bc80413ea186e6c9255b85779a2b18b65d359e45a7489f9f7dedfdb70a8ac410e2400318f21dccb43b2ff1b2885501dad00174e70decbf25c55cb5bb469cf7b50b1c1c73e8672e8d5b3dccb68847a415f3532ff6f1c90d8e2ccfcddc6dcb3c028d2a71dd9285cae2e91ef1ea7165b6de819a12355bd415e7f7c644af913152804590631d92c2856cfd97e179a738c64fad475a91e5354e8ea5442f72b9f7497fc14a0bfb1628d2c4e28556715a97f6c438b90d9a4cc018273e39a02f81b9ace61e458e15b2d622442534fcc3966d365eb248de434de0dbdf0bfd7a0b570dc76a2230ce46d2925d2585533d5ab9553a75931c3705c88fa0ecaf062113e84b3952b0da1138bf25d5661a1bae9d818ccfb55bae3411f193560be0bc0a53a88286630625143f1272518c4cfc2ed8f43675218110e958f21dce9eee9087b088e071fd472291dfadb5c13dcb65b371df8e9892e353c912d84761326d28cf7910a76aa659b5d4ef86f267484dadb429e331b5d3b1f3a146917e7858c8dc42aca78d077b8c4d5529a21dcf42b4f61b37d96b4b5244c6c732eae3ce30ad1a20336017be953bd9f3e6b122b543753498b6e969a0940d705ee40d202ca3c4ee448d1e9614dd2f6bbb944319dcff36c9a3f40f415d58a0bab73b8b414a1077f38c8528da6016f5e90103ee589d110b308dba3e4934cd5ff6f1e62b6dcb09762437c286faf7b75a466a3a79d2f7ae793189b59f10760294315043be8c4d0accba137d33ac83584fd76fc9420ad71951346656b2562990e8c73b5ec5c9278e463fe1baf7b8d749b11fa9278bb7034089bb9945ca924c1d8f336cdd864438f0a8dd8a27eafb84541224916a99bf11868df29f69a5295dc8dbf7fa7b372691e5364a65bfb4a7419714b40b94635d33b488b98fcb02a967d77c003462156143959f6ab261d4d121576f613aaf9919712a6e79d0a87b052cb1e96ad0e4b0bfb0e11243100682266b2dbf7e4ef069d70215c2b6d8b5f3d475957842a016695901d4c57a79342662c2a3e903d849fe11ae47a8586c33beef2a0d5e4f7be7383de742563aa247b188c9f5176af2070ffe32ad8ecd9591597dbe2f7067e1b6fa92f936e71a610a6e4cf694482247031ae0d1733fc87daaea6a0b35a12d1abda91e", 0xff0}, {&(0x7f0000000440)="83999b0f322e6b66e82471b62ba4b346aacf829004e4fcf8a06c2b035caa530b577a0bb3b9b1df02463583feefcbf143974548ec2c8c63edef360cee88b2dde1642359f529c8c3a8fd0dfeb132fc21440f6a18ab73a6aef90ee0e117d69f0efb53dc91f06c6404ab387413f7fb4bde523df3e04fe6ab8566bd5a56d71808fe8fc76cf43737f91d2160c4df6fe22fcaf204628043fa4f02e3cd6b4334389cb5cbe1b153a071b5066ab136", 0xaa}], 0x2}}, {{&(0x7f0000001580)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000016c0)=[{&(0x7f00000015c0)}], 0x1, &(0x7f0000001700)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd}}, @ip_ttl={{0x14, 0x0, 0x2, 0xa09}}], 0x48}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @rand_addr=0x2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x68}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001b80)}, {&(0x7f0000001c80)="2b6a22164ae4308cfd0c8055d31ef8a0a1bd23df14a4a899ec7520ea9f8ac2c0c74b340cec6beee50cc76084036795eb1595706c873c16a63487", 0x3a}], 0x2, &(0x7f0000001d40)=[@ip_retopts={{0x30, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x3e, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @timestamp_addr={0x44, 0x14, 0x9b, 0x1, 0x3, [{@remote, 0x1}, {@multicast1, 0x4}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x48}}, {{&(0x7f0000001e00)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000001fc0), 0x0, &(0x7f0000002000)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x100000}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10000}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x90}}], 0x5, 0x240048c0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000002240)={0x0, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x9}, @rc={0x1f, @none, 0x2}, @sco={0x1f, @none}, 0x5, 0x0, 0x0, 0x0, 0x8, &(0x7f0000002200)='caif0\x00', 0x3, 0x401, 0x2}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='rcu_utilization\x00', r3, 0x0, 0x1}, 0x18) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x70}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000340)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6f}, 0x2c) syz_genetlink_get_family_id$nl80211(0x0, r4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002340)={'wlan0\x00'}) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lblc\x00', 0x4, 0x8, 0x77}, {@local, 0x4e21, 0x2, 0x400000cd, 0x12d5f, 0x3}}, 0x44) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/14, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) 5m51.604720963s ago: executing program 4 (id=82): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000d4, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90900f7d6a4ae6dddfbd11000000000000000000ff8ee09e737ff0edf110ff4117639c2eb8f18d2b8f6277dd41905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61ffcf33524bbd9bffbcc2542ded71038232d71e14efbac003000000852f2036dc783800000000e9b49600", "f28359738e229a4c66810000000000f300e6d902000000000000000000000001"}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 5m46.296937192s ago: executing program 4 (id=94): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x18) 5m45.687318827s ago: executing program 4 (id=98): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000080)=0x2) io_setup(0x2, &(0x7f00000003c0)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x3, 0xfffc, 0xffffffffffffffff, &(0x7f0000000180)="8f4a00ffff", 0x5, 0x4, 0x0, 0x2}]) openat$ppp(0xffffffffffffff9c, 0x0, 0x20101, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc2604110, &(0x7f0000000b40)={0x0, [[0x9ef8, 0x5], [0x10000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x40000], [0xb306, 0x0, 0xffffffff, 0x7, 0x0, 0x0, 0x0, 0x4]], '\x00', [{0xffffffff}, {0x6}, {0x0, 0x80000001}, {0x0, 0x80000000, 0x0, 0x0, 0x1}, {0x4, 0xffffffff, 0x0, 0x1, 0x1}, {0x0, 0x5f, 0x1}, {0x1e7, 0x40}, {0xef}, {0x0, 0x80000001}, {0x0, 0xfffffffe}, {0x80000, 0x800000}, {0x0, 0xfffffffd}], '\x00', 0x1000}) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000040)={{0x2f, @empty, 0x4e21, 0x3, 'wlc\x00', 0x9, 0x8, 0x27}, {@broadcast, 0x4e23, 0x2000, 0x5, 0x6, 0x80000000}}, 0x44) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) recvmmsg(r6, &(0x7f0000000040), 0x1, 0x2043, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3b, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000300), 0x6) 5m45.24141479s ago: executing program 32 (id=98): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000080)=0x2) io_setup(0x2, &(0x7f00000003c0)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x3, 0xfffc, 0xffffffffffffffff, &(0x7f0000000180)="8f4a00ffff", 0x5, 0x4, 0x0, 0x2}]) openat$ppp(0xffffffffffffff9c, 0x0, 0x20101, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc2604110, &(0x7f0000000b40)={0x0, [[0x9ef8, 0x5], [0x10000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x40000], [0xb306, 0x0, 0xffffffff, 0x7, 0x0, 0x0, 0x0, 0x4]], '\x00', [{0xffffffff}, {0x6}, {0x0, 0x80000001}, {0x0, 0x80000000, 0x0, 0x0, 0x1}, {0x4, 0xffffffff, 0x0, 0x1, 0x1}, {0x0, 0x5f, 0x1}, {0x1e7, 0x40}, {0xef}, {0x0, 0x80000001}, {0x0, 0xfffffffe}, {0x80000, 0x800000}, {0x0, 0xfffffffd}], '\x00', 0x1000}) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000040)={{0x2f, @empty, 0x4e21, 0x3, 'wlc\x00', 0x9, 0x8, 0x27}, {@broadcast, 0x4e23, 0x2000, 0x5, 0x6, 0x80000000}}, 0x44) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) recvmmsg(r6, &(0x7f0000000040), 0x1, 0x2043, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3b, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000300), 0x6) 5m26.514597807s ago: executing program 0 (id=139): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d0, &(0x7f0000001340)="$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") syz_mount_image$hfsplus(&(0x7f0000000c80), &(0x7f0000000080)='./bus\x00', 0x2000018, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES32], 0xf, 0x6b4, &(0x7f00000000c0)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0) rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5m25.823146492s ago: executing program 0 (id=140): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) io_uring_setup(0xc8e, &(0x7f0000000040)) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x400000bce) bpf$PROG_LOAD(0x5, 0x0, 0xfffffda4) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001300)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mlockall(0x6) r3 = semget$private(0x0, 0x6, 0x0) semtimedop(r3, &(0x7f0000000040)=[{0x1, 0xfffc}], 0x1, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5m24.041172905s ago: executing program 0 (id=143): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$usbip_server(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) eventfd2(0x0, 0x0) io_getevents(r2, 0x1, 0x1, &(0x7f0000000080)=[{}], 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000004fc0)={@initdev, @multicast1}, &(0x7f0000005000)=0xc) 5m20.033386695s ago: executing program 0 (id=152): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) io_uring_setup(0xc8e, &(0x7f0000000040)) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x400000bce) bpf$PROG_LOAD(0x5, 0x0, 0xfffffda4) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001300)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mlockall(0x6) r3 = semget$private(0x0, 0x6, 0x0) semtimedop(r3, &(0x7f0000000040)=[{0x1, 0xfffc}], 0x1, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5m13.76533712s ago: executing program 0 (id=164): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x201, &(0x7f0000000f40)="$eJzsVUtrU0EU/s7NJLfRLAru3BpsN9rmFsS1G7vXH2BIr7WY+OhENKFgdNONgvgnCv4JXQi6dyEiuNGFgi4qrioSOTNnJpMH9ra+NvPB5XznPY87M1f0TZ0C+LG71cI8DAg1vCWCArBA1rZXsfKryKHgo7J6Q+xPRH4QqXv9Vw8s7V9tttv5pu79mqQgYJ+YcTJtOvf04bHi+RPk5f1xC6FIFqnD9Po90i3ZlZ12PRqzpLNiJBeTlRsX/vEsDk+qU4N35FsNCC2f/mD3Mq9mGTNjiA70r88gXMAQwLu+16a3aZK8eWw7z4wpSXoV48uyL+FT/L93mQnfRYYkB0rXkP3Q5+8l+EJAGa93t1psvSS3GLvX7OeOhMli5XkQc1wBA4BKGJqiXEdJ7AKApW7nxpLu9U9tdJrr+Xp+LctWziy/OCpHdHgX2Gjny2SGYdMTJgoefE6rgZ//tHcj/wABKBgaeF4jsy/pLufFE0FIFUiC3KCGFHjm+6diu6U7uIiTmANwe8DuTBaoDq6mcJmntgpCSZSGCgeEPSSYM47TrevttW0QyKXtQPkajfcoeyUThRvlK2f99LdF1kWuitwZ9TNwb5d7k5Sp8Fm0xQFQwZ1mt7tpHi/L2FbxFYwtm/edE+nqXkPXrJ6iII4UDYyIiIiIiIiI+Ev4GQAA//8sQT03") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) futex(0x0, 0x3, 0x801, 0x0, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000000040)=0x0) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x10012, r0, 0x1000) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) socket$nl_route(0x10, 0x3, 0x0) timer_settime(r1, 0x1, &(0x7f0000000000)={{0x77359400}}, &(0x7f00000000c0)) 5m11.567482666s ago: executing program 0 (id=169): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000000080), 0x72a, 0x500, 0x0) 4m56.900892884s ago: executing program 5 (id=186): socket$inet(0x2, 0x4000000000000001, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xf, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 4m56.285172998s ago: executing program 33 (id=169): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000000080), 0x72a, 0x500, 0x0) 4m54.548870301s ago: executing program 5 (id=190): bpf$PROG_LOAD(0x5, 0x0, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x3, 0x3}) prlimit64(0x0, 0x0, &(0x7f00000000c0)={0x8, 0xfffffffffffffffe}, 0x0) timer_create(0x3, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) unshare(0x48000000) 4m49.448733038s ago: executing program 5 (id=197): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, 0x0, 0x0) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2=0xe0000300, 0x1, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff5, 0x6, 0x6}, 0x3c) close_range(r1, 0xffffffffffffffff, 0x0) 4m44.397357995s ago: executing program 5 (id=204): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a1d000/0x18000)=nil, 0x0, 0x0, 0x50, &(0x7f00000004c0), 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20a02, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x4) r2 = syz_open_procfs(0x0, 0x0) getdents64(r2, 0x0, 0x0) semget$private(0x0, 0x2, 0x209) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a80)={'syz1\x00', {0x0, 0x0, 0x0, 0x2}, 0xfffffffe, [0x0, 0x0, 0x1, 0x8, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40000], [0x0, 0x0, 0x80000, 0x6, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x59b, 0x0, 0x81b, 0xfff, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x5, 0x3ff, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x30f2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xffeffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2c1, 0x0, 0x8000000, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0x7fff, 0x4, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3ffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2ef, 0x0, 0x3, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4080, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b]}, 0x45c) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 4m41.050598059s ago: executing program 5 (id=209): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDISABIO(r0, 0x4b37) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000040)) fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, 0xffffffffffffffff, 0x0) r4 = gettid() rt_sigsuspend(&(0x7f0000000040)={[0x3]}, 0x8) tkill(r4, 0x7) 4m39.164802863s ago: executing program 5 (id=211): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000004c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@sb={'sb', 0x3d, 0x2b}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@sysvgroups}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x20000000000000e4, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) clock_getres(0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) ioctl$sock_bt_hci(r4, 0x400448e2, 0x0) lseek(0xffffffffffffffff, 0x1, 0x4) 4m22.895639912s ago: executing program 34 (id=211): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000004c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@sb={'sb', 0x3d, 0x2b}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@sysvgroups}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x20000000000000e4, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) clock_getres(0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) ioctl$sock_bt_hci(r4, 0x400448e2, 0x0) lseek(0xffffffffffffffff, 0x1, 0x4) 3m0.040050504s ago: executing program 1 (id=356): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_80211_inject_frame(0x0, 0x0, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) setns(r3, 0x8000000) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x20000000}) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x20}) 2m58.842656432s ago: executing program 1 (id=357): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file3\x00', 0x200048, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1d1, &(0x7f0000000440)="$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") read$FUSE(0xffffffffffffffff, &(0x7f0000003880)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000058c0)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002440)={0x2020}, 0x2020) read$char_usb(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{}, [@TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x58}}, 0x0) 2m57.858636768s ago: executing program 1 (id=359): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28031, 0xffffffffffffffff, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r6}, 0x18) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x80}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) request_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000780)={'syz', 0x0}, &(0x7f0000000740)='lon\x00', 0x0) 2m55.768613892s ago: executing program 1 (id=362): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@quota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@oldalloc}, {@nodioread_nolock}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0x40, 0x551, &(0x7f0000000cc0)="$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") setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x841, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) pwrite64(r1, 0x0, 0x0, 0x80c0c5d) inotify_init1(0x800) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) write$binfmt_misc(r0, &(0x7f0000000100), 0xfdef) 2m52.640814223s ago: executing program 1 (id=366): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f0000000a00)=ANY=[], 0x1, 0x1b6, &(0x7f00000005c0)="$eJzs2zFrE2EYB/Dn0hrTOiSDkzjc6BSafoIWqSAGBCWDgqDYBqQnBQsBHUw3B7+EH8dVP4ljB+EkyV3alASLYC9tfr8lD3f3D88dJPe+L7yv778/3D867r/qf49GkkRtJ9I4TaIVtSidBABwk5zmefzK8zy/fRIb3yLP86o7AgD+N+9/AFg9z1+8fLLb7e49S9NGRPZl0Bv0Jp+T87v9eBdZHMRWNON3jAYIhUn96HF3bysda8XXbFjkh4Pe2my+E81ozc93Jvl0Nn8rNs/nt6MZd+fnt+fm6/Ggfi7fjmb8fBtHkcV+jLJn+c+dNH34tHshf2d8HQAAANwE7XRqPH+vx+z8vd2ePT/oDWoRMZyuDyTl+sBa8Y0L1wcuzK/X4956dfcNAKvs+OOnwzdZdvBhWYsfm5NGl6WfxUX5SKdHdsoDy9Lh34qN69FqUmxJucTFSUSMinJwWn3zy140iieWXf1/EXC1zn79VXcCAAAAAAAAAAAAAAAs8i9bhZpF9rKpim8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBX0JwAA//+uuHu6") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x9080, 0x28) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000580)='./file1\x00', 0xe2000741) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000100)={0xfffffffd, 0xffffffffffffffff, 0x8}) 2m51.951370458s ago: executing program 1 (id=367): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0}, 0x20) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x1d) socket$kcm(0x29, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="30000000121401002abd7000eeffffff08004f"], 0x30}}, 0x4000) r4 = fcntl$dupfd(r3, 0x0, r2) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r4, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x86, &(0x7f0000000500)=[{}], 0x8, 0x10, &(0x7f00000005c0), &(0x7f0000000640), 0x8, 0x8d, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r9, 0x6, 0x6, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000240)={0x0, 0xb, 0x0, 0x7fffffffffffffff, 0x7fff}, &(0x7f0000000280)=0x18) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="4800000010004b0428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000804805001c0012800b00010062726964676500000c0002800800080088a800000a000100aaaaaaaaaa000000"], 0x48}}, 0x4) 2m51.234692163s ago: executing program 35 (id=367): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0}, 0x20) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x1d) socket$kcm(0x29, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="30000000121401002abd7000eeffffff08004f"], 0x30}}, 0x4000) r4 = fcntl$dupfd(r3, 0x0, r2) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r4, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x86, &(0x7f0000000500)=[{}], 0x8, 0x10, &(0x7f00000005c0), &(0x7f0000000640), 0x8, 0x8d, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r9, 0x6, 0x6, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000240)={0x0, 0xb, 0x0, 0x7fffffffffffffff, 0x7fff}, &(0x7f0000000280)=0x18) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="4800000010004b0428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000804805001c0012800b00010062726964676500000c0002800800080088a800000a000100aaaaaaaaaa000000"], 0x48}}, 0x4) 1m25.264169334s ago: executing program 3 (id=503): socket$inet(0x2, 0x4000000000000001, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xf, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 1m22.913805929s ago: executing program 3 (id=507): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_setup(0x6776, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2d1}) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000680)=ANY=[@ANYBLOB="6d616e676c65000000000000000000000000000000000000000000000000000002000000caaceab2e2beb653ef1ba10087b5b4d8d1828f6ff1a95d18f3f7c3bb7a1c50816d7cee31d5f458cae8d9f11660751d700a8f84616d74dc23defab9f3097014bf98396e9a4ee098d2aa5d9c6c4864adfd5d5ca7803096c040cfdd86e350dc6eabd2c5c6418dec6bb433"], &(0x7f00000000c0)=0x26) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r7, 0x7a5, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r7, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000200)='g', 0x1}], 0x1}, 0x0) 1m20.772462754s ago: executing program 3 (id=510): bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$vcsu(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x0, 0x0, {0x1e}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000180)={'fscrypt:', @auto=[0x63, 0x34, 0x39, 0x34, 0x66, 0x66, 0x1, 0x61, 0x38, 0x37, 0x35, 0x30, 0x30, 0x62, 0x63, 0x33]}, &(0x7f0000000300)={0x0, "b444e77d6c5f6df98a7ea5d32f2a8de753bb30e8c1295d9fb70dbfd879e4cea97af89d3920f2cd42b529886143eea31702f742b111cfa27f7824a460d61a24d0", 0x27}, 0x48, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r3, 0x0, &(0x7f0000000380)='}^\x00') r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r4, 0x8b32, &(0x7f0000000040)) 1m20.424846656s ago: executing program 3 (id=513): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001440)=""/126, 0x7e, 0x41) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000024c0)={'syztnl1\x00', &(0x7f0000002440)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0x7, 0x7ff, 0x40, @dev={0xfe, 0x80, '\x00', 0x44}, @dev={0xfe, 0x80, '\x00', 0x20}, 0x7800, 0x7800, 0xab61, 0x2}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) 1m17.856786823s ago: executing program 3 (id=516): socket$inet(0x2, 0x4000000000000001, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xf, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 1m15.091579402s ago: executing program 3 (id=523): syz_open_dev$vcsa(&(0x7f00000000c0), 0x7b95b611, 0x80342) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x3, 0x0, 0x20, 0x0, 0x3, 0xb0, 0x4, 0x0, @empty, @empty, {[@generic={0x88, 0x2}]}}, {0x0, 0x0, 0x8}}}}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$udf(&(0x7f0000000a40), &(0x7f00000004c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4400, &(0x7f0000000080)=ANY=[], 0x1, 0xa1b, &(0x7f0000000a80)="$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") r3 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) 58.341564983s ago: executing program 36 (id=523): syz_open_dev$vcsa(&(0x7f00000000c0), 0x7b95b611, 0x80342) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x3, 0x0, 0x20, 0x0, 0x3, 0xb0, 0x4, 0x0, @empty, @empty, {[@generic={0x88, 0x2}]}}, {0x0, 0x0, 0x8}}}}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$udf(&(0x7f0000000a40), &(0x7f00000004c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4400, &(0x7f0000000080)=ANY=[], 0x1, 0xa1b, &(0x7f0000000a80)="$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") r3 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) 27.657824517s ago: executing program 2 (id=594): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) 26.653167963s ago: executing program 2 (id=595): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000100)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000234e00224e0000", 0x58}], 0x1) 26.508302774s ago: executing program 2 (id=596): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4000c2a) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)}, 0x1) setsockopt$sock_attach_bpf(r4, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r4, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x10002) sendto$inet(r3, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000180)={0x37, @time={0x65757100, 0x4}}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRESDEC, @ANYBLOB='\x00'/20, @ANYRES16=r4, @ANYRES32, @ANYBLOB="0001000000000000000000000000000000000000000000000000000034a4d710000069600682995efca3c89cf6ba4f397e36fb18f89f6a"], 0x50) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r7, &(0x7f0000000180)={0x1f, 0xffffffffffffffff, 0x3}, 0x15) write$bt_hci(r7, &(0x7f0000000040)=ANY=[], 0x6) 24.332530479s ago: executing program 2 (id=597): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0xfffffffffffff998, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0xe, 0x0, &(0x7f0000000140)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/asound/seq/timer\x00', 0x0, 0x0) 20.594305363s ago: executing program 2 (id=602): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x210c5e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}, {@nobh}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001200)='io\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0xe4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) 19.62903223s ago: executing program 2 (id=603): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_80211_inject_frame(0x0, 0x0, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x18) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) setns(r2, 0x8000000) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x20000000}) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x20}) 11.524439034s ago: executing program 7 (id=616): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) 11.068259117s ago: executing program 7 (id=617): socket$inet(0x2, 0x4000000000000001, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xf, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 8.491708324s ago: executing program 7 (id=620): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x9, 0x1a1300) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x8000000014, 0x0, 0x0, 0x0, 0xd, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000e0ffffffffffffff00", "90be8b1c551265406c7f309a03d8a0f49d00", [0x6, 0x7f]}}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 7.418027421s ago: executing program 8 (id=621): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x3200014, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0], 0x1, 0x60b, &(0x7f0000002080)="$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") socket(0x1, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x1881c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x22) rename(&(0x7f0000000400)='./bus\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 7.236634272s ago: executing program 6 (id=622): ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x3}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x10, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() getrlimit(0xc, &(0x7f0000000300)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_vhci(0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000180)=[{}, {}, {}, {}, {0x3}], 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f00000001c0), &(0x7f0000000080)=""/38}, 0x20) 6.847914805s ago: executing program 9 (id=543): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000000008, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x2711, @local}, 0x10) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10) 6.760888215s ago: executing program 8 (id=623): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x404e081}, 0x8000) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f626172726965722c63726561746f723d5c5d07842c63726561746f723dbd3cfff52c6e6c733d63703433372c756d61736b3d30303030303030303030303030303030303030303033372c6e6f6465636f6d706f73652c00"], 0x1, 0x6a4, &(0x7f0000000cc0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fdatasync(r1) 5.072725426s ago: executing program 9 (id=624): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000000008010100000000000000000a000003050003008400000006000240000d00000900010073797a3000000000bcbb616c68cdadc39905e8425a17a23eb6c74127fb8f9a10a7c0b9a1ab849cd457ec85b9e1cafd759c48c6b0fe7fabdc87f2b7e74b067783225bb220c7101ada9b07583de01e2860979c449796111b0d747170a71d3e69730f342ffb0d750382db2f4c2413d2"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x4c0c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fa}, 0xe) 5.050791047s ago: executing program 8 (id=625): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0xa0a1, 0x800) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x1000, 0x2, r2, 0x9}) r3 = eventfd2(0x7, 0x801) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000580)={0x1, 0x1000, 0x0, r3}) 4.647269609s ago: executing program 6 (id=626): syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x21488b, &(0x7f0000000440)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="0000b18eb0ea96e8437d91edf772ce16e8f4545927e1e38533740c5b1da10b839e273fa468d364205a63adda5262cda8e690c1049c88d615fd8362cd464a35e122ae29c203d5ce83fd7888eb1f09a8a7f55959926a7fd5ac27fd519b1ddcfd9072f503656169e720fdc2da8c998a8706232e5263a0", @ANYRES16, @ANYBLOB="48aa122ce7bad1d4005fd66df97f8e8d089b806053c44bbc71da3c639abd9ee548b49a9c10009f28579f82efb3cf18d7e4f7d0cda9f6feec4c5df95db277defa1414ccf2075e6fd144cdc78c1f843f1574502ce415c27f3cec88", @ANYBLOB="bfe49d"], 0x1, 0x65c, &(0x7f0000002280)="$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") shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x3200040, &(0x7f0000000140)=ANY=[], 0x3, 0x378, &(0x7f00000007c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 4.49666893s ago: executing program 8 (id=627): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(r1, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="0a0000000100", 0x6) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043506aaaa"], 0x9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}}, 0x14}}, 0x814) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0x11, 0x11, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, [@call={0x85, 0x0, 0x0, 0xe}, @snprintf]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x58040}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.420901411s ago: executing program 37 (id=603): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_80211_inject_frame(0x0, 0x0, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x18) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) setns(r2, 0x8000000) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x20000000}) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x20}) 4.364570191s ago: executing program 7 (id=629): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 3.980643174s ago: executing program 6 (id=630): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = accept4$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x810c12, &(0x7f0000000400)=ANY=[], 0x2, 0x1e3, &(0x7f0000000b40)="$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") r2 = openat(0xffffffffffffff9c, 0x0, 0x4800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fadvise64(r2, 0xaa1f, 0x1a958, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x0, 0x1ca, &(0x7f00000008c0)="$eJzsmb+uEkEUxr+Z3QvcG2NiY2GjiTfxmlyW3UUNjQU+gQn4r5PIStAFDGwBJBbExsbH8BUsqCzs7Gy1UBMTCymt18xw2B35J8QQSTy/hNlvZs7MnDnAVwAYhvlv+frl5+dXt0rVUwBncIwsjX+30hhpxH/Kkfj4+l377PPx/H4CQBxvfr4N4G3ZQkT9OP599TE9q5CJvgOJq6TvQcAh/RASd0kHEHhA+omhO4ckwsB51Anrj5th4KrGU42vmuJ8fpORQB1AjvITxnxvMHxaC8OgOy8O4tk5C1Pbij/Uz56UJW4a9VPv1/2XL0aqP6uNa9TPg4RHugiBCukSsnAcJy2Jcf8Ldrq/tcn990Gcy6+LOd2DDFn8AyGMkUMl1Bc6GTk/Gb9fXPVtl4ld2u2VQZ69MPXh6O92zpAJLI1J/VNZ7hXDn2zYiX8UotazQm8wzDdbtUbQCNq+X7zhXnPd635BG9G0XeN/Oe1PR8b+BytiMyKDfi2Kul4fiLpe0venreG4lTedH3qN1P4ncXJ5uof6qOhrZ5efIegl9VOpE2tl8gzDMAzDMAzDMAzDMAzDMFtxEUL/Ckp/VMUr8G/r6F8BAAD///ckZMc=") getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000063019b00000000009500000000000000423e21eaa034893d57699d7e3e10004d910f6d8e16ce3006b486ecdd290370a3844716eeb5378d0705c68511a89ef3f26db95ff827dc71b523165e55df0ec54c105f91c97295e56516381e5f94e58d1f2f8ff22e29c5e7b64019317f5e555ac3f0dfd5f51c028ac09a02eefe1c561cccda6d4dbe7fffe6a766c2edbf0fb1b9d8732686417253f30bfaaffe187b0d427dc284f08c3aed"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2.350584145s ago: executing program 6 (id=631): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4000c2a) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x1) setsockopt$sock_attach_bpf(r4, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r4, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x10002) sendto$inet(r3, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000295000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb2c5ca683a4b6fc89398f2b9000f224891060017cfa6fa26fa7a34701008c61897d4a6148a1c11428607c40de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc6002084e5b52710800e835cf0d78e45f70983826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174bed9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632fd30bf05121438bb74e4670ab5dfe447a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffb426e1230bc1cd4c02c4c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd78a9f3fdc1f50c445e3f30e703cf05b90fbf940e6652d377474ed5f816f66ac3027460ae991e7f834dd7a7fc2a7003d1a6cf5478533584961c329fcf4fed5c9455640dcd28273dc9753cc979113f2915a3039c3ca60ec53bb1130c2d27fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc51177cce5ef265c92b7957a334ff7be2ca867fd94286e016febfdb5827efc7a6efb01d66a396f84c1ca75daa4ead099694ed03d449b185cc836bab1a41a61bd6f03a54fafcee554bbb52adf8f1d7ede9f9a711256fb45e6c3d12ff560ee69d68733d522d9bbecf52396f15976381c27015403778139808142b48ced145ca8a6da5f322d413d09cc38b832fa05dd3c799042588f9eea6f443baa759257a000000000000000000bed1dad228e11f80cfea5848e436acf6e89dfae0b3d95b911af1818e0081504811a5f3c5d1ced3e592224f1d2ca3bdb2cc89001605db6987899eb99f94265401a95ff0a5a266438f1db461b7ebedd419bc038f7d36bd2bd4b3f92cd1469b63b1ce456a96152d353a8ab65f8bae521db73ff00b5d5cac7a439ab40d97e57f23e703fd6395930b9c3485ab181a83ed568cade43111530ec584cfb48e0cc5d63e2807b2e98525a84f9ac59cf74f3ba279e228e2a0dc8da8017cba3996541008785ab8f041f0a8d1399d88a3a58765e5a0149b9d0ea54b323675149783ec057ec6d6e8e600b9eced07ddcc56b77d8ea08223"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000180)={0x37, @time={0x65757100, 0x4}}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRESDEC, @ANYBLOB='\x00'/20, @ANYRES16=r4, @ANYRES32, @ANYBLOB="0001000000000000000000000000000000000000000000000000000034a4d710000069600682995efca3c89cf6ba4f397e36fb18f89f6a"], 0x50) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r7, &(0x7f0000000180)={0x1f, 0xffffffffffffffff, 0x3}, 0x15) write$bt_hci(r7, &(0x7f0000000040)=ANY=[], 0x6) 2.287150515s ago: executing program 8 (id=632): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) 1.271738262s ago: executing program 8 (id=633): socket$inet(0x2, 0x4000000000000001, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xf, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 1.266776122s ago: executing program 6 (id=634): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file3\x00', 0x200048, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1d1, &(0x7f0000000440)="$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") read$FUSE(0xffffffffffffffff, &(0x7f00000058c0)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002440)={0x2020}, 0x2020) read$char_usb(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{}, [@TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x58}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 1.187129472s ago: executing program 7 (id=635): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x404e081}, 0x8000) socket$packet(0x11, 0x2, 0x300) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f626172726965722c63726561746f723d5c5d07842c63726561746f723dbd3cfff52c6e6c733d63703433372c756d61736b3d30303030303030303030303030303030303030303033372c6e6f6465636f6d706f73652c00"], 0x1, 0x6a4, &(0x7f0000000cc0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fdatasync(r1) 402.574548ms ago: executing program 6 (id=636): ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x3}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x10, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() getrlimit(0xc, &(0x7f0000000300)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_vhci(0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000180)=[{}, {}, {}, {}, {0x3}], 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f00000001c0), &(0x7f0000000080)=""/38}, 0x20) 0s ago: executing program 7 (id=637): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000004) kernel console output (not intermixed with test programs): EV_CHANGE): veth1: link becomes ready [ 151.445362][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.464828][ T4926] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 151.488553][ T4712] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.495592][ T4926] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.515732][ T27] audit: type=1326 audit(1741593796.806:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4920 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ad18d169 code=0x7ffc0000 [ 151.590746][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.619844][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.671149][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.679342][ T4341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.704642][ T27] audit: type=1326 audit(1741593796.806:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4920 comm="syz.2.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ad18d169 code=0x7ffc0000 [ 151.705039][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 151.750694][ T4932] loop1: detected capacity change from 0 to 2048 [ 151.757668][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.782682][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.802410][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.809617][ T4341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.839390][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 151.861560][ T4348] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 151.883283][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 153.430210][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.444379][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.709226][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.634964][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.714624][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 154.750336][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 154.792606][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 154.831376][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.869104][ T4712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.933288][ T4712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 154.970560][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.998925][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.256685][ T4951] loop0: detected capacity change from 0 to 8 [ 155.564044][ T4951] SQUASHFS error: Failed to read block 0x4de: -5 [ 155.653022][ T4951] SQUASHFS error: Failed to read block 0x4de: -5 [ 155.693557][ T27] audit: type=1800 audit(1741593801.416:14): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.164" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 155.738013][ T4951] SQUASHFS error: Failed to read block 0x4de: -5 [ 156.852905][ T4951] SQUASHFS error: Failed to read block 0x4de: -5 [ 156.859755][ T4951] SQUASHFS error: Failed to read block 0x4de: -5 [ 157.032992][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 157.040548][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 157.076610][ T4712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.088267][ T4969] netlink: 56 bytes leftover after parsing attributes in process `syz.2.168'. [ 158.655585][ T4985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.472264][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 161.489820][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 161.557283][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 161.573764][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 161.605086][ T4712] device veth0_vlan entered promiscuous mode [ 161.623533][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 161.641993][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 161.663182][ T4712] device veth1_vlan entered promiscuous mode [ 161.727203][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 161.742930][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 161.770540][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 161.802203][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 161.833378][ T4712] device veth0_macvtap entered promiscuous mode [ 161.853075][ T4712] device veth1_macvtap entered promiscuous mode [ 161.914974][ T4712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.954691][ T4712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.983327][ T4712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.007842][ T4712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.032612][ T4712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.052209][ T4712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.074685][ T4712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.176171][ T4712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.302457][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.324149][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 163.431771][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 163.458577][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 163.462461][ T5019] loop1: detected capacity change from 0 to 512 [ 163.550786][ T5019] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 163.561656][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 163.617540][ T5019] EXT4-fs (loop1): 1 truncate cleaned up [ 163.631036][ T5019] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 163.660574][ T5019] syz.1.178 (pid 5019) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 163.674646][ T4712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.677608][ T5019] EXT4-fs (loop1): shut down requested (1) [ 163.693417][ T5019] fscrypt (loop1, inode 18): Error -5 getting encryption context [ 163.737323][ T4712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.761103][ T4712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.921168][ T4712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.940998][ T4712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.011103][ T4712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.076646][ T4712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.122636][ T4712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.225029][ T4259] EXT4-fs (loop1): unmounting filesystem. [ 164.232649][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.241316][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 164.259906][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.422810][ T4712] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.501539][ T4712] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.510314][ T4712] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.621644][ T5032] loop2: detected capacity change from 0 to 2048 [ 164.644013][ T5032] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 164.718941][ T4712] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.412934][ T4369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.430428][ T4369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.539118][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 166.936948][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.973417][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.028147][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 168.596333][ T5057] netlink: 24 bytes leftover after parsing attributes in process `syz.5.99'. [ 168.848605][ T5059] netlink: 'syz.5.99': attribute type 8 has an invalid length. [ 169.895902][ T5063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.184722][ T5068] netlink: 56 bytes leftover after parsing attributes in process `syz.3.180'. [ 170.215845][ T5068] siw: device registration error -23 [ 172.492745][ T5079] loop2: detected capacity change from 0 to 1024 [ 172.529044][ T5079] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 172.566396][ T27] audit: type=1800 audit(1741593818.277:15): pid=5079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.185" name="file1" dev="loop2" ino=839 res=0 errno=0 [ 173.957259][ T5086] x_tables: duplicate underflow at hook 2 [ 175.862076][ T5102] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 176.008073][ T5103] wlan0 speed is unknown, defaulting to 1000 [ 176.223869][ T5104] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 176.482120][ T4348] udevd[4348]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 178.002938][ T4265] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 178.011955][ T4265] Bluetooth: hci1: Injecting HCI hardware error event [ 178.023072][ T4256] Bluetooth: hci1: hardware error 0x00 [ 178.393358][ T5118] netlink: 24 bytes leftover after parsing attributes in process `syz.3.194'. [ 178.673503][ T5123] netlink: 'syz.3.194': attribute type 8 has an invalid length. [ 179.361284][ T4265] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 179.371362][ T4265] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 179.379485][ T4265] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 179.388687][ T4265] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 179.397560][ T48] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 179.405477][ T4265] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 180.371045][ T5127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.735874][ T5126] wlan0 speed is unknown, defaulting to 1000 [ 180.761224][ T5138] netlink: 56 bytes leftover after parsing attributes in process `syz.3.198'. [ 180.850048][ T5138] siw: device registration error -23 [ 182.526763][ T4265] Bluetooth: hci5: command 0x0409 tx timeout [ 184.115949][ T4256] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 184.571881][ T4256] Bluetooth: hci5: command 0x041b tx timeout [ 186.091793][ T5165] netlink: 24 bytes leftover after parsing attributes in process `syz.3.206'. [ 186.710652][ T4256] Bluetooth: hci5: command 0x040f tx timeout [ 186.935716][ T5167] netlink: 'syz.3.206': attribute type 8 has an invalid length. [ 187.384615][ T5126] chnl_net:caif_netlink_parms(): no params data found [ 187.503461][ T5173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.819180][ T5126] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.887976][ T5126] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.922198][ T5126] device bridge_slave_0 entered promiscuous mode [ 187.965064][ T5126] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.430485][ T4265] Bluetooth: hci5: command 0x0419 tx timeout [ 189.649366][ T5126] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.595408][ T5126] device bridge_slave_1 entered promiscuous mode [ 190.630656][ T5204] netlink: 56 bytes leftover after parsing attributes in process `syz.2.212'. [ 191.283350][ T5126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.336702][ T5126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.685288][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.759206][ T5126] team0: Port device team_slave_0 added [ 192.897275][ T5126] team0: Port device team_slave_1 added [ 193.118687][ T5222] netlink: 24 bytes leftover after parsing attributes in process `syz.2.216'. [ 193.178662][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.408800][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.415260][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.284131][ T5228] netlink: 'syz.2.216': attribute type 8 has an invalid length. [ 195.567291][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.678628][ T5126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.708332][ T5126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.810961][ T5126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.827352][ T5239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.963339][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.997372][ T5126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.037783][ T5126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.161525][ T5126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.660675][ T4265] Bluetooth: hci4: command 0x0406 tx timeout [ 197.952023][ T27] audit: type=1326 audit(1741593843.678:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5253 comm="syz.3.225" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f688df8d169 code=0x0 [ 198.000573][ T4301] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 198.015368][ T5126] device hsr_slave_0 entered promiscuous mode [ 198.110952][ T5126] device hsr_slave_1 entered promiscuous mode [ 198.121267][ T5126] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.128912][ T5126] Cannot create hsr debugfs directory [ 198.214485][ T4301] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.234957][ T4301] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.273329][ T4301] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 198.307360][ T4301] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 198.340110][ T4301] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 198.367463][ T4301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.383771][ T4301] usb 3-1: Product: syz [ 198.410591][ T4301] usb 3-1: Manufacturer: syz [ 198.415257][ T4301] usb 3-1: SerialNumber: syz [ 198.607563][ T5256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.225'. [ 198.620594][ T5256] device batadv_slave_1 entered promiscuous mode [ 199.554871][ T4301] cdc_ncm 3-1:1.0: bind() failure [ 200.063764][ T4301] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 200.118549][ T4301] cdc_ncm 3-1:1.1: bind() failure [ 200.276065][ T4301] usb 3-1: USB disconnect, device number 2 [ 200.458309][ T5269] loop5: detected capacity change from 0 to 2048 [ 200.496785][ T5269] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 200.674309][ T5274] siw: device registration error -23 [ 201.044949][ T5271] netlink: 56 bytes leftover after parsing attributes in process `syz.1.226'. [ 202.176820][ T5126] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 203.265359][ T5287] netlink: 24 bytes leftover after parsing attributes in process `syz.3.227'. [ 203.554813][ T5126] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 203.577036][ T5283] netlink: 'syz.3.227': attribute type 8 has an invalid length. [ 203.589893][ T5126] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 205.176863][ T5126] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 208.041859][ T5304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.562535][ T5126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.622268][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 211.657907][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 211.704097][ T5126] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.832815][ T4265] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 211.843074][ T4265] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 211.851385][ T4265] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 211.860215][ T4265] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 211.879644][ T4265] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 211.887707][ T4265] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.182004][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 212.201025][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 212.258114][ T4632] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.265313][ T4632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.331063][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 212.351174][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 212.370675][ T4632] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.377907][ T4632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.413894][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 212.480491][ T126] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 212.670286][ T126] usb 3-1: Using ep0 maxpacket: 16 [ 212.686564][ T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.718293][ T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.738821][ T126] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 212.772555][ T126] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 212.802951][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.848823][ T126] usb 3-1: config 0 descriptor?? [ 213.006622][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.040732][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.221220][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.288331][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.299882][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.311388][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.331202][ T5327] wlan0 speed is unknown, defaulting to 1000 [ 213.365743][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 213.391834][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 213.396942][ T126] HID 045e:07da: Invalid code 65791 type 1 [ 213.739356][ T5339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.237'. [ 213.861023][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 213.866172][ T126] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0002/input/input8 [ 213.902661][ T5126] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.930442][ T4256] Bluetooth: hci0: command 0x0409 tx timeout [ 213.941544][ T126] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 213.962527][ T126] usb 3-1: USB disconnect, device number 3 [ 213.990010][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 214.164130][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 214.193220][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.380802][ T46] device hsr_slave_0 left promiscuous mode [ 214.500623][ T46] device hsr_slave_1 left promiscuous mode [ 214.515688][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.548707][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.771509][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.779260][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.846049][ T46] device bridge_slave_1 left promiscuous mode [ 214.875319][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.939075][ T46] device bridge_slave_0 left promiscuous mode [ 214.963694][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.827382][ T46] device veth1_macvtap left promiscuous mode [ 215.839366][ T46] device veth0_macvtap left promiscuous mode [ 215.864852][ T46] device veth1_vlan left promiscuous mode [ 215.886181][ T46] device veth0_vlan left promiscuous mode [ 216.000475][ T4256] Bluetooth: hci0: command 0x041b tx timeout [ 218.080361][ T4256] Bluetooth: hci0: command 0x040f tx timeout [ 219.487169][ T5379] netlink: 24 bytes leftover after parsing attributes in process `syz.3.244'. [ 219.515387][ T46] team0 (unregistering): Port device team_slave_1 removed [ 220.161311][ T4256] Bluetooth: hci0: command 0x0419 tx timeout [ 220.596525][ T5381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.802292][ T46] team0 (unregistering): Port device team_slave_0 removed [ 220.875783][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.941268][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.426765][ T46] bond0 (unregistering): Released all slaves [ 223.621485][ T5352] netlink: 56 bytes leftover after parsing attributes in process `syz.2.240'. [ 223.667427][ T5383] netlink: 'syz.3.244': attribute type 8 has an invalid length. [ 224.286515][ T5126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.543142][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 224.632851][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 226.252070][ T5327] chnl_net:caif_netlink_parms(): no params data found [ 227.747933][ T5327] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.790446][ T5327] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.836938][ T5327] device bridge_slave_0 entered promiscuous mode [ 227.866865][ T5327] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.890531][ T5327] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.928177][ T5327] device bridge_slave_1 entered promiscuous mode [ 228.253311][ T46] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.441595][ T46] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.508060][ T5327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.536266][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 228.558015][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 228.704975][ T46] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.745172][ T5327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.865258][ T5126] device veth0_vlan entered promiscuous mode [ 228.963572][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 228.975958][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 229.031307][ T46] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.200588][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 229.230853][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 230.083870][ T5126] device veth1_vlan entered promiscuous mode [ 230.107658][ T5327] team0: Port device team_slave_0 added [ 230.276177][ T5327] team0: Port device team_slave_1 added [ 230.333858][ T5458] netlink: 56 bytes leftover after parsing attributes in process `syz.2.257'. [ 230.357408][ T5460] netlink: 24 bytes leftover after parsing attributes in process `syz.3.258'. [ 230.532592][ T5327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.539670][ T5327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.164662][ T5327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.402771][ T5466] netlink: 'syz.3.258': attribute type 8 has an invalid length. [ 231.788049][ T5327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.802943][ T5327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.378823][ T5463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.340986][ T5327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.375782][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 233.411692][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 233.623976][ T5327] device hsr_slave_0 entered promiscuous mode [ 234.650590][ T5327] device hsr_slave_1 entered promiscuous mode [ 234.681719][ T5327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.700234][ T5327] Cannot create hsr debugfs directory [ 234.717629][ T5486] netlink: 56 bytes leftover after parsing attributes in process `syz.2.262'. [ 234.774402][ T5486] netlink: 56 bytes leftover after parsing attributes in process `syz.2.262'. [ 235.329670][ T5493] loop2: detected capacity change from 0 to 1024 [ 235.435605][ T5493] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 235.475029][ T5493] hfsplus: xattr searching failed [ 235.539096][ T4257] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 235.589396][ T4265] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 235.600558][ T4265] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 235.611141][ T4265] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 235.618722][ T4265] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 235.630523][ T4265] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 235.630984][ T5493] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 235.750277][ T5493] hfsplus: xattr searching failed [ 235.756681][ T5495] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 235.802630][ T5495] hfsplus: xattr search failed [ 235.963570][ T5496] wlan0 speed is unknown, defaulting to 1000 [ 236.161780][ T9] hfsplus: b-tree write err: -5, ino 4 [ 237.850421][ T4256] Bluetooth: hci3: command 0x0409 tx timeout [ 241.034465][ T4256] Bluetooth: hci3: command 0x041b tx timeout [ 241.508960][ T5517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.604330][ T5327] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 241.619559][ T5524] netlink: 24 bytes leftover after parsing attributes in process `syz.1.267'. [ 241.644834][ T5526] loop2: detected capacity change from 0 to 256 [ 241.889274][ T5327] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 241.897236][ T5526] overlayfs: filesystem on './file1' not supported [ 241.910951][ T5327] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 241.998061][ T5526] 9pnet_virtio: no channels available for device syz [ 242.166838][ T5533] netlink: 'syz.1.267': attribute type 8 has an invalid length. [ 242.622879][ T5327] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 243.649999][ T4256] Bluetooth: hci3: command 0x040f tx timeout [ 243.664698][ T5496] chnl_net:caif_netlink_parms(): no params data found [ 243.895305][ T5543] siw: device registration error -23 [ 244.890517][ T5549] loop2: detected capacity change from 0 to 512 [ 244.897285][ T5549] EXT4-fs: Ignoring removed i_version option [ 244.903492][ T5549] ext4: Unknown parameter 'dont_measure' [ 245.680695][ T4256] Bluetooth: hci3: command 0x0419 tx timeout [ 246.112149][ T5556] futex_wake_op: syz.2.274 tries to shift op by 32; fix this program [ 246.288440][ T46] device hsr_slave_0 left promiscuous mode [ 246.301007][ T46] device hsr_slave_1 left promiscuous mode [ 246.851884][ T5559] tty tty24: ldisc open failed (-12), clearing slot 23 [ 246.940718][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.948212][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.965231][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.978779][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.014184][ T46] device bridge_slave_1 left promiscuous mode [ 247.025251][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.062871][ T46] device bridge_slave_0 left promiscuous mode [ 247.087535][ T5564] loop2: detected capacity change from 0 to 128 [ 247.110490][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.158417][ T5564] EXT4-fs (loop2): Test dummy encryption mode enabled [ 247.187996][ T46] device veth1_macvtap left promiscuous mode [ 247.222907][ T46] device veth0_macvtap left promiscuous mode [ 247.229092][ T46] device veth1_vlan left promiscuous mode [ 247.265946][ T46] device veth0_vlan left promiscuous mode [ 247.359029][ T5564] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 247.376979][ T5564] ext4 filesystem being mounted at /70/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 247.942290][ T5564] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 248.480044][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 251.223849][ T5584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.363513][ T5592] loop2: detected capacity change from 0 to 512 [ 251.537852][ T5592] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #3: comm syz.2.279: corrupted inode contents [ 251.586215][ T5592] EXT4-fs error (device loop2): ext4_dirty_inode:6089: inode #3: comm syz.2.279: mark_inode_dirty error [ 251.642729][ T5592] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #3: comm syz.2.279: corrupted inode contents [ 251.670643][ T5592] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.279: mark_inode_dirty error [ 251.713728][ T5592] Quota error (device loop2): write_blk: dquota write failed [ 251.732697][ T5592] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 251.800319][ T5592] EXT4-fs error (device loop2): ext4_acquire_dquot:6795: comm syz.2.279: Failed to acquire dquot type 0 [ 251.853433][ T5604] loop1: detected capacity change from 0 to 512 [ 251.868117][ T5592] EXT4-fs (loop2): 1 orphan inode deleted [ 251.874475][ T5592] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 251.891009][ T4363] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 251.902266][ T4363] EXT4-fs error (device loop2): ext4_release_dquot:6818: comm kworker/u4:10: Failed to release dquot type 1 [ 251.917437][ T5592] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.973251][ T5604] EXT4-fs (loop1): orphan cleanup on readonly fs [ 252.001036][ T5604] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.282: bg 0: block 248: padding at end of block bitmap is not set [ 252.051850][ T5604] Quota error (device loop1): write_blk: dquota write failed [ 252.203169][ T5604] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 252.225345][ T5604] EXT4-fs error (device loop1): ext4_acquire_dquot:6795: comm syz.1.282: Failed to acquire dquot type 1 [ 252.591437][ T5604] EXT4-fs (loop1): 1 truncate cleaned up [ 252.663900][ T5604] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 252.895892][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 252.937571][ T27] audit: type=1800 audit(1741593898.658:17): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.282" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 253.061591][ T46] team0 (unregistering): Port device team_slave_1 removed [ 253.088470][ T4259] EXT4-fs (loop1): unmounting filesystem. [ 253.189146][ T46] team0 (unregistering): Port device team_slave_0 removed [ 253.258127][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.412927][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.797316][ T4332] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 254.784031][ T4332] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.627689][ T4332] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 256.005716][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.030535][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.522428][ T4332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.530545][ T4332] usb 3-1: Product: syz [ 256.534847][ T4332] usb 3-1: Manufacturer: syz [ 256.539501][ T4332] usb 3-1: SerialNumber: syz [ 256.550760][ T4332] usb 3-1: can't set config #1, error -71 [ 256.576016][ T4332] usb 3-1: USB disconnect, device number 5 [ 256.677414][ T5637] 9pnet: p9_errstr2errno: server reported unknown error YNs ukVg [ 256.838992][ T5640] loop2: detected capacity change from 0 to 164 [ 257.013988][ T46] bond0 (unregistering): Released all slaves [ 257.176402][ T5496] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.190207][ T5496] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.213871][ T5496] device bridge_slave_0 entered promiscuous mode [ 257.226353][ T5496] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.238181][ T5496] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.256250][ T5496] device bridge_slave_1 entered promiscuous mode [ 257.326167][ T5496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.346631][ T5496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.415586][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.424792][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.451318][ T5633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.216019][ T5327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.235791][ T5327] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.274885][ T5327] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 258.316431][ T5327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 258.333374][ T5496] team0: Port device team_slave_0 added [ 258.386749][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 258.418347][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.441067][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 258.480975][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 258.502696][ T4363] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.509904][ T4363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.550640][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 258.577738][ T5655] loop1: detected capacity change from 0 to 2048 [ 258.585515][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.597816][ T4363] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.605147][ T4363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.755933][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 258.757114][ T5655] ext4: Unknown parameter 'dont_appraise' [ 258.765355][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 258.781470][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 258.794513][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 258.804222][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 258.850617][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 258.861862][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 259.521115][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 259.591533][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 259.659209][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 259.722218][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 259.765703][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 259.807609][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 259.879303][ T5496] team0: Port device team_slave_1 added [ 260.004568][ T5496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.060596][ T5496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.123953][ T5496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.157417][ T5496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.210674][ T5496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.276911][ T5686] loop1: detected capacity change from 0 to 512 [ 260.299664][ T5496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.042416][ T5693] loop2: detected capacity change from 0 to 16 [ 261.067097][ T5693] erofs: (device loop2): mounted with root inode @ nid 36. [ 261.116372][ T5686] EXT4-fs (loop1): 1 orphan inode deleted [ 261.123364][ T5693] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 261.156078][ T4345] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 261.175963][ T5686] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 261.203679][ T5496] device hsr_slave_0 entered promiscuous mode [ 261.208328][ T5693] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 261.218394][ T4345] EXT4-fs error (device loop1): ext4_release_dquot:6818: comm kworker/u4:9: Failed to release dquot type 1 [ 261.221886][ T5693] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 261.249096][ T5686] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.249703][ T5496] device hsr_slave_1 entered promiscuous mode [ 261.310905][ T5496] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.318531][ T5496] Cannot create hsr debugfs directory [ 261.637736][ T4259] EXT4-fs (loop1): unmounting filesystem. [ 262.717381][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 262.725995][ T5709] loop1: detected capacity change from 0 to 1024 [ 262.726749][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 262.762976][ T5709] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 262.797693][ T5327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.072243][ T4332] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 263.292831][ T4332] usb 2-1: unable to get BOS descriptor or descriptor too short [ 263.322366][ T4332] usb 2-1: config 173 has an invalid interface number: 195 but max is 0 [ 263.344246][ T4332] usb 2-1: config 173 has no interface number 0 [ 263.357261][ T4332] usb 2-1: config 173 interface 195 altsetting 230 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 263.380335][ T4332] usb 2-1: config 173 interface 195 altsetting 230 has an invalid endpoint with address 0x80, skipping [ 263.401772][ T4332] usb 2-1: config 173 interface 195 altsetting 230 has an invalid endpoint with address 0x80, skipping [ 263.430254][ T4332] usb 2-1: config 173 interface 195 altsetting 230 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 263.457562][ T4332] usb 2-1: config 173 interface 195 altsetting 230 endpoint 0xB has invalid maxpacket 399, setting to 64 [ 263.485250][ T4332] usb 2-1: config 173 interface 195 altsetting 230 has an invalid endpoint with address 0x80, skipping [ 263.506500][ T4332] usb 2-1: config 173 interface 195 has no altsetting 0 [ 263.522806][ T4332] usb 2-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=57.ab [ 263.542399][ T4332] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.560411][ T4332] usb 2-1: Product: syz [ 263.572115][ T4332] usb 2-1: Manufacturer: syz [ 263.580752][ T4332] usb 2-1: SerialNumber: syz [ 263.820699][ T4332] usb 2-1: USB disconnect, device number 2 [ 264.367678][ T4259] EXT4-fs (loop1): unmounting filesystem. [ 266.591826][ T4256] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 266.619972][ T4256] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 266.636032][ T4256] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 266.653321][ T4256] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 266.664322][ T4256] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 266.672969][ T4265] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 267.075849][ T5746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.313'. [ 267.237987][ T5746] device hsr_slave_1 left promiscuous mode [ 267.249083][ T5728] wlan0 speed is unknown, defaulting to 1000 [ 267.418798][ T5748] wlan0 speed is unknown, defaulting to 1000 [ 267.920549][ T4257] Bluetooth: hci2: command 0x0406 tx timeout [ 268.957415][ T4265] Bluetooth: hci5: command 0x0409 tx timeout [ 269.339382][ T5778] loop2: detected capacity change from 0 to 1024 [ 269.663846][ T5748] chnl_net:caif_netlink_parms(): no params data found [ 269.822572][ T5792] loop2: detected capacity change from 0 to 2048 [ 270.017137][ T5792] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 271.040453][ T4265] Bluetooth: hci5: command 0x041b tx timeout [ 271.099858][ T5748] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.150399][ T5748] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.170376][ T5748] device bridge_slave_0 entered promiscuous mode [ 271.184614][ T27] audit: type=1800 audit(1741593916.908:18): pid=5792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.322" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 271.226704][ T5496] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 271.247970][ T5809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.309218][ T5812] loop1: detected capacity change from 0 to 256 [ 271.315572][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 271.322013][ T5748] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.329143][ T5748] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.358904][ T5748] device bridge_slave_1 entered promiscuous mode [ 271.367629][ T5496] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 271.445901][ T46] device hsr_slave_0 left promiscuous mode [ 271.454158][ T5812] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 271.482659][ T46] device hsr_slave_1 left promiscuous mode [ 271.525344][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.542374][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.567241][ T46] device bridge_slave_1 left promiscuous mode [ 271.595494][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.607308][ T46] device bridge_slave_0 left promiscuous mode [ 271.621306][ T5818] netlink: 24 bytes leftover after parsing attributes in process `syz.2.325'. [ 271.638949][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.775224][ T46] device veth1_vlan left promiscuous mode [ 272.993056][ T46] device veth0_vlan left promiscuous mode [ 273.200162][ T4257] Bluetooth: hci5: command 0x040f tx timeout [ 274.113519][ T5835] loop1: detected capacity change from 0 to 2048 [ 274.151116][ T5835] EXT4-fs: Ignoring removed mblk_io_submit option [ 274.266545][ T5835] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 274.341462][ T5842] siw: device registration error -23 [ 274.743170][ T46] team0 (unregistering): Port device team_slave_1 removed [ 275.272958][ T46] team0 (unregistering): Port device team_slave_0 removed [ 275.391604][ T4257] Bluetooth: hci5: command 0x0419 tx timeout [ 275.414402][ T4259] EXT4-fs (loop1): unmounting filesystem. [ 275.424356][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.518664][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.615001][ T5848] loop1: detected capacity change from 0 to 16 [ 276.054646][ T5848] erofs: (device loop1): mounted with root inode @ nid 36. [ 276.561908][ T46] bond0 (unregistering): Released all slaves [ 276.643591][ T5496] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 276.659130][ T5496] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 276.685674][ T5748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.702571][ T5818] netlink: 'syz.2.325': attribute type 8 has an invalid length. [ 276.900572][ T5748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.043625][ T5852] loop1: detected capacity change from 0 to 256 [ 277.047909][ T5748] team0: Port device team_slave_0 added [ 277.079718][ T5852] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 277.089718][ T5748] team0: Port device team_slave_1 added [ 277.098735][ T5850] wlan0 speed is unknown, defaulting to 1000 [ 277.244502][ T5496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.208437][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.220424][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.246646][ T5748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.359320][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.404800][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.468055][ T5748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.525077][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 278.553137][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 279.319155][ T5867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.429265][ T5496] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.031505][ T5748] device hsr_slave_0 entered promiscuous mode [ 280.069180][ T5748] device hsr_slave_1 entered promiscuous mode [ 280.094286][ T5748] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 280.106813][ T5748] Cannot create hsr debugfs directory [ 280.139021][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 280.167193][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 280.204153][ T5267] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.211356][ T5267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.291024][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 280.315243][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 280.338090][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 280.374529][ T5896] netlink: 24 bytes leftover after parsing attributes in process `syz.2.339'. [ 280.374857][ T5267] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.390800][ T5267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.470984][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 281.018628][ T5905] siw: device registration error -23 [ 281.083339][ T5899] netlink: 'syz.2.339': attribute type 8 has an invalid length. [ 281.462637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 281.531754][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 281.542304][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 281.591282][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 281.630649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 281.640672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 281.661926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 281.701139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 281.727221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 281.734794][ T5908] netlink: 'syz.3.343': attribute type 3 has an invalid length. [ 281.741167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 281.743161][ T5908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.343'. [ 281.774281][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 283.884072][ T5922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.344700][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 284.360891][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 284.437313][ T5496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.581042][ T5941] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 284.822779][ T5748] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 284.873932][ T5748] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 285.021539][ T46] device hsr_slave_0 left promiscuous mode [ 286.093581][ T5961] netlink: 24 bytes leftover after parsing attributes in process `syz.2.352'. [ 286.350974][ T46] device hsr_slave_1 left promiscuous mode [ 288.082536][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.119777][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.168910][ T46] device bridge_slave_1 left promiscuous mode [ 288.200781][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.223147][ T46] device bridge_slave_0 left promiscuous mode [ 288.223362][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.923173][ T5974] siw: device registration error -23 [ 289.271906][ T5971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.380853][ T46] team0 (unregistering): Port device team_slave_1 removed [ 289.433659][ T46] team0 (unregistering): Port device team_slave_0 removed [ 289.476519][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.525956][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.405515][ T5977] loop1: detected capacity change from 0 to 16 [ 290.420933][ T5977] erofs: (device loop1): mounted with root inode @ nid 36. [ 290.561903][ T46] bond0 (unregistering): Released all slaves [ 290.635464][ T5748] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 290.652143][ T5964] netlink: 'syz.2.352': attribute type 8 has an invalid length. [ 290.760294][ T5748] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 291.062829][ T5985] loop2: detected capacity change from 0 to 1024 [ 291.890264][ T5985] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 292.006919][ T5748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.138103][ T5748] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.168746][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 292.292390][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 293.286999][ T5748] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 293.339769][ T6000] loop1: detected capacity change from 0 to 1024 [ 293.364480][ T5748] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 293.399468][ T6000] EXT4-fs: Ignoring removed oldalloc option [ 293.440405][ T6000] EXT4-fs: Ignoring removed bh option [ 293.901599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 294.093175][ T6000] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 294.124626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 295.084573][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.091921][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.370609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 295.411672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 295.452645][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.459810][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.521047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 295.554521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 295.594971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 295.635024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 295.671907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 295.691046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 295.711281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 295.740743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 295.753153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 295.797590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 295.854816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 295.884074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 295.961139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 296.431558][ T4265] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 296.441787][ T4265] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 296.451649][ T4265] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 296.460646][ T4265] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 296.468199][ T4265] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 296.478172][ T4265] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 296.621027][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 296.628606][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 296.637663][ T4259] EXT4-fs (loop1): unmounting filesystem. [ 296.704264][ T5748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.746158][ T6026] wlan0 speed is unknown, defaulting to 1000 [ 298.570674][ T4265] Bluetooth: hci0: command 0x0409 tx timeout [ 299.239736][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 299.262691][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 299.366549][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 299.398691][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 299.433195][ T5748] device veth0_vlan entered promiscuous mode [ 299.448245][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 299.475675][ T4265] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 299.476439][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 299.493099][ T4265] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 299.501356][ T4265] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 299.510927][ T4265] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 299.518593][ T4265] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 299.524910][ T5748] device veth1_vlan entered promiscuous mode [ 299.532548][ T4265] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 299.596513][ T6026] chnl_net:caif_netlink_parms(): no params data found [ 299.647959][ T6062] wlan0 speed is unknown, defaulting to 1000 [ 299.700752][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 299.710007][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 299.731319][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 299.751035][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 299.830929][ T5748] device veth0_macvtap entered promiscuous mode [ 299.885286][ T5748] device veth1_macvtap entered promiscuous mode [ 299.975579][ T5748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.034976][ T5748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.070251][ T5748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.136620][ T5748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.146906][ T5748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.157510][ T5748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.169281][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.180567][ T5748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.192400][ T5748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.516361][ T5748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.628325][ T5748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.136656][ T4265] Bluetooth: hci0: command 0x041b tx timeout [ 301.179780][ T5748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.274192][ T5748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.359714][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.574307][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 301.630280][ T4265] Bluetooth: hci2: command 0x0409 tx timeout [ 301.649270][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 301.679810][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 301.717791][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 301.741360][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 301.779429][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 302.694531][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.467141][ T6096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.377'. [ 303.918525][ T4257] Bluetooth: hci0: command 0x040f tx timeout [ 303.918905][ T4265] Bluetooth: hci2: command 0x041b tx timeout [ 304.927232][ T5748] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.968863][ T5748] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.990306][ T5748] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.999075][ T5748] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.075884][ T6026] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.091149][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.109719][ T6026] device bridge_slave_0 entered promiscuous mode [ 305.152335][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.461328][ T6026] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.553744][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.712212][ T6026] device bridge_slave_1 entered promiscuous mode [ 305.718827][ T6108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.784478][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.796911][ T6116] siw: device registration error -23 [ 305.831144][ T6026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.853543][ T6026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.891735][ T6026] team0: Port device team_slave_0 added [ 305.935366][ T6026] team0: Port device team_slave_1 added [ 305.959030][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.000519][ T4265] Bluetooth: hci2: command 0x040f tx timeout [ 306.010378][ T4265] Bluetooth: hci0: command 0x0419 tx timeout [ 306.057359][ T6026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.064638][ T6026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.093171][ T6026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.138866][ T6026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.146226][ T6026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.173434][ T6026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.192110][ T4632] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.221317][ T4632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.506382][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 306.651436][ T6126] Bluetooth: MGMT ver 1.22 [ 307.353481][ T6026] device hsr_slave_0 entered promiscuous mode [ 307.378596][ T6026] device hsr_slave_1 entered promiscuous mode [ 307.396688][ T6026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 307.410472][ T6026] Cannot create hsr debugfs directory [ 307.416271][ T6062] chnl_net:caif_netlink_parms(): no params data found [ 307.635345][ T4363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.927313][ T6136] loop2: detected capacity change from 0 to 16 [ 307.944886][ T6136] erofs: Unknown parameter './file0' [ 308.093987][ T6135] syz.2.383 uses obsolete (PF_INET,SOCK_PACKET) [ 308.199356][ T4363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.423981][ T4265] Bluetooth: hci2: command 0x0419 tx timeout [ 308.534027][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 309.010631][ T6154] loop7: detected capacity change from 0 to 1024 [ 309.391834][ T6154] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 309.419458][ T6154] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.430409][ T6062] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.437537][ T6062] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.474658][ T6062] device bridge_slave_0 entered promiscuous mode [ 309.608639][ T5748] EXT4-fs (loop7): unmounting filesystem. [ 309.730673][ T6062] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.737830][ T6062] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.804034][ T6062] device bridge_slave_1 entered promiscuous mode [ 310.767625][ T6167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.033130][ T6062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.142382][ T6062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.334444][ T6176] siw: device registration error -23 [ 312.246754][ T6182] loop2: detected capacity change from 0 to 256 [ 312.503613][ T6062] team0: Port device team_slave_0 added [ 312.801909][ T6184] loop7: detected capacity change from 0 to 1024 [ 312.843629][ T6062] team0: Port device team_slave_1 added [ 312.860860][ T6184] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 312.892932][ T27] audit: type=1800 audit(1741593958.618:19): pid=6184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.392" name="file1" dev="loop7" ino=839 res=0 errno=0 [ 313.987003][ T6193] loop2: detected capacity change from 0 to 2048 [ 314.007561][ T6062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.017631][ T6062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.054441][ T6062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.077261][ T6193] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 314.106607][ T6193] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.159063][ T6193] fs-verity: sha512 using implementation "sha512-avx2" [ 314.193109][ T6062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.218446][ T6062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.267815][ T6062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.408865][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 314.685954][ T6200] loop2: detected capacity change from 0 to 128 [ 314.764389][ T6200] EXT4-fs (loop2): Test dummy encryption mode enabled [ 314.804856][ T6200] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 314.823670][ T6200] ext4 filesystem being mounted at /109/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.109970][ T6208] loop7: detected capacity change from 0 to 16 [ 315.206778][ T6208] erofs: (device loop7): mounted with root inode @ nid 36. [ 316.457984][ T6062] device hsr_slave_0 entered promiscuous mode [ 316.497716][ T6062] device hsr_slave_1 entered promiscuous mode [ 316.530697][ T6062] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.608979][ T6062] Cannot create hsr debugfs directory [ 316.911873][ T6216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.012168][ T46] device hsr_slave_0 left promiscuous mode [ 317.025349][ T46] device hsr_slave_1 left promiscuous mode [ 317.035721][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.046080][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.046137][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.115187][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.128899][ T46] device bridge_slave_1 left promiscuous mode [ 317.135691][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.136858][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 317.287451][ T6224] loop2: detected capacity change from 0 to 128 [ 317.335539][ T6224] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 317.352427][ T6224] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.393262][ T46] device bridge_slave_0 left promiscuous mode [ 317.412029][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.820770][ T6224] EXT4-fs (loop2): shut down requested (2) [ 318.831565][ T46] device hsr_slave_0 left promiscuous mode [ 318.849612][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.857308][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.887801][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.903301][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 318.910635][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.942020][ T46] device bridge_slave_1 left promiscuous mode [ 318.950513][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.964981][ T46] device bridge_slave_0 left promiscuous mode [ 318.982648][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.415855][ T46] device veth1_macvtap left promiscuous mode [ 319.425752][ T46] device veth0_macvtap left promiscuous mode [ 319.433133][ T46] device veth1_vlan left promiscuous mode [ 319.439103][ T46] device veth0_vlan left promiscuous mode [ 319.619479][ T6239] loop2: detected capacity change from 0 to 1024 [ 319.725625][ T6239] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 319.844502][ T27] audit: type=1800 audit(1741593965.568:20): pid=6239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.404" name="file1" dev="loop2" ino=839 res=0 errno=0 [ 321.731742][ T46] team0 (unregistering): Port device team_slave_1 removed [ 321.897034][ T46] team0 (unregistering): Port device team_slave_0 removed [ 322.091545][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.274673][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.923356][ T6281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.015961][ T46] bond0 (unregistering): Released all slaves [ 329.077016][ T6291] loop7: detected capacity change from 0 to 1024 [ 329.084120][ T6291] UDF-fs: bad mount option "GPL" or missing value [ 329.271686][ T6082] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 332.537414][ T6310] netlink: 452 bytes leftover after parsing attributes in process `syz.7.424'. [ 334.916231][ T46] team0 (unregistering): Port device team_slave_1 removed [ 335.016401][ T46] team0 (unregistering): Port device team_slave_0 removed [ 335.094771][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.190487][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.467659][ T6317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.272042][ T46] bond0 (unregistering): Released all slaves [ 336.440836][ T6026] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 336.519734][ T6026] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 336.580609][ T6026] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 336.611332][ T6026] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 339.830629][ T6026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.880534][ T6062] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 339.929976][ T6026] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.965639][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 339.998950][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 341.156473][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 341.191067][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 341.230856][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.238016][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.290573][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 341.310512][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 341.330322][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.337482][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.386706][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 341.410027][ T6062] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 341.519973][ T6339] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.529017][ T6339] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.647311][ T6340] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.654545][ T6340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.662972][ T6340] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.670147][ T6340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.694878][ T6340] device bridge0 entered promiscuous mode [ 341.763192][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 341.791131][ T6062] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 341.833807][ T6062] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 341.872508][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 341.931093][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 341.979908][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 342.001585][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 342.021215][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 342.075148][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 342.124245][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 342.169623][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 342.196784][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 342.262614][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 342.295384][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 342.633470][ T6062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.737161][ T6062] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.289015][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 344.316726][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 344.432263][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 344.451037][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 344.459840][ T4369] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.467037][ T4369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.476287][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 344.491165][ T6359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.496218][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 344.512632][ T4369] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.519791][ T4369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.528310][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 344.578648][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 344.598256][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 344.617065][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 344.635209][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 344.661069][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 344.676961][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 344.686167][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 344.722530][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 344.751409][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 344.779518][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 344.801321][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 344.827975][ T6062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 344.861810][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 344.879578][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 344.913437][ T6026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.452353][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 347.459912][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 347.505995][ T6062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.778643][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 347.793578][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 347.853328][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 347.875013][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 347.904316][ T6026] device veth0_vlan entered promiscuous mode [ 347.923896][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 347.941743][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 347.983326][ T6026] device veth1_vlan entered promiscuous mode [ 348.072269][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 348.100999][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 348.131145][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 348.151151][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 348.296854][ T6026] device veth0_macvtap entered promiscuous mode [ 348.493716][ T6026] device veth1_macvtap entered promiscuous mode [ 349.995735][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 350.054273][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 350.552622][ T6026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.581068][ T6026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.600873][ T6026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.641880][ T6026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.719597][ T6026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.754759][ T6026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.777562][ T6026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.836856][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 350.862053][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 351.001152][ T6026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.030126][ T6026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.410282][ T6026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.480304][ T6026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.538793][ T6026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.615709][ T6026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.691263][ T6026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.763617][ T6026] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.826931][ T6026] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.870173][ T6026] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.878940][ T6026] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.953005][ T6417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.133283][ T6062] device veth0_vlan entered promiscuous mode [ 352.181691][ T6062] device veth1_vlan entered promiscuous mode [ 352.268623][ T6062] device veth0_macvtap entered promiscuous mode [ 352.317632][ T6062] device veth1_macvtap entered promiscuous mode [ 352.378117][ T6062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.409430][ T6062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.502942][ T6062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.534621][ T6062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.575572][ T6062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.726674][ T6062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.780644][ T6062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.811719][ T6062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.836753][ T6062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.949275][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 353.054387][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 353.164876][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 353.277111][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 353.410956][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 353.438312][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 353.487125][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 353.525350][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 353.571222][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 353.651011][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 353.659817][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 353.680761][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 353.689689][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 353.705635][ T6429] loop7: detected capacity change from 0 to 512 [ 353.735753][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 353.751054][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 353.766087][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 353.828257][ T6062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.861945][ T6429] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 353.887153][ T6429] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.894090][ T6062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.907824][ T6062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.919114][ T6062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.935201][ T6062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.945904][ T6062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.955932][ T6062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.966495][ T6062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.977973][ T6062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.996694][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 354.060555][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 354.084924][ T6062] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.119511][ T6062] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.129783][ T6062] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.142907][ T6062] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.298046][ T5748] EXT4-fs (loop7): unmounting filesystem. [ 354.456901][ T4363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.512096][ T4363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.523882][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 354.794177][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.833001][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.844902][ T4632] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.877845][ T4632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.990528][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 355.355677][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 355.691059][ T4386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.699210][ T4386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.773469][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 355.907589][ T6454] loop2: detected capacity change from 0 to 16 [ 355.924327][ T6454] erofs: (device loop2): mounted with root inode @ nid 36. [ 358.021792][ T6460] loop8: detected capacity change from 0 to 512 [ 358.331400][ T6460] EXT4-fs: Ignoring removed oldalloc option [ 358.414758][ T6460] EXT4-fs (loop8): 1 truncate cleaned up [ 358.422919][ T6460] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 358.444409][ T6460] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.369: invalid indirect mapped block 234881024 (level 0) [ 358.463306][ T6460] EXT4-fs (loop8): Remounting filesystem read-only [ 358.579651][ T6062] EXT4-fs (loop8): unmounting filesystem. [ 359.230444][ T27] audit: type=1326 audit(1741594004.898:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6468 comm="syz.8.460" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f694418d169 code=0x0 [ 360.018014][ T4256] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 360.029426][ T4256] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 360.038693][ T4256] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 360.046608][ T4256] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 360.054600][ T4256] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 360.062716][ T4256] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 360.507768][ T6475] wlan0 speed is unknown, defaulting to 1000 [ 360.671449][ T4632] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.858934][ T6495] loop8: detected capacity change from 0 to 16 [ 360.974997][ T6495] erofs: (device loop8): mounted with root inode @ nid 36. [ 361.223559][ T4632] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.590482][ T4632] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.120605][ T6513] loop2: detected capacity change from 0 to 512 [ 363.008354][ T4256] Bluetooth: hci3: command 0x0409 tx timeout [ 363.095545][ T6513] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 363.104736][ T6513] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.138770][ T4632] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.229146][ T6518] loop7: detected capacity change from 0 to 1024 [ 363.300813][ T6518] EXT4-fs: inline encryption not supported [ 363.338546][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 363.409730][ T6475] chnl_net:caif_netlink_parms(): no params data found [ 363.425703][ T6518] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 363.495931][ T6523] loop2: detected capacity change from 0 to 512 [ 363.589445][ T6523] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 364.395557][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 364.734701][ T5748] EXT4-fs (loop7): unmounting filesystem. [ 364.810422][ T6535] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 364.976155][ T6475] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.996278][ T6475] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.040713][ T4256] Bluetooth: hci3: command 0x041b tx timeout [ 365.072938][ T6475] device bridge_slave_0 entered promiscuous mode [ 365.275312][ T4328] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 365.356489][ T6475] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.364005][ T6475] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.392177][ T6475] device bridge_slave_1 entered promiscuous mode [ 365.502434][ T4328] usb 3-1: unable to get BOS descriptor or descriptor too short [ 365.520807][ T4328] usb 3-1: not running at top speed; connect to a high speed hub [ 365.532671][ T6475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.562582][ T4328] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 655, setting to 64 [ 365.588082][ T4328] usb 3-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 365.632013][ T4328] usb 3-1: config 1 interface 0 has no altsetting 0 [ 365.695444][ T4328] usb 3-1: string descriptor 0 read error: -22 [ 365.731208][ T6475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.745491][ T4328] usb 3-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice= 0.40 [ 365.786116][ T4328] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.829248][ T6546] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 365.941899][ T6566] loop8: detected capacity change from 0 to 16 [ 366.433288][ T6566] erofs: (device loop8): mounted with root inode @ nid 36. [ 366.481193][ T4328] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input9 [ 366.529570][ T3607] bcm5974 3-1:1.0: could not read from device [ 366.546765][ T6565] loop7: detected capacity change from 0 to 1024 [ 366.710668][ T4328] usb 3-1: USB disconnect, device number 6 [ 366.733483][ T3607] bcm5974 3-1:1.0: could not read from device [ 366.759583][ T6565] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 366.845570][ T6475] team0: Port device team_slave_0 added [ 367.120206][ T4256] Bluetooth: hci3: command 0x040f tx timeout [ 367.237225][ T6475] team0: Port device team_slave_1 added [ 367.298502][ T27] audit: type=1800 audit(1741594013.018:22): pid=6565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.474" name="file1" dev="loop7" ino=839 res=0 errno=0 [ 368.030512][ T6574] loop8: detected capacity change from 0 to 1024 [ 368.037582][ T6574] ext4: Unknown parameter 'pcr' [ 369.200178][ T4256] Bluetooth: hci3: command 0x0419 tx timeout [ 369.261419][ T6541] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 369.772551][ T6475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.779562][ T6475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.818775][ T6585] "syz.8.483" (6585) uses obsolete ecb(arc4) skcipher [ 369.949546][ T6475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.235802][ T6475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.266066][ T6475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.278765][ T6475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.401223][ T6601] loop2: detected capacity change from 0 to 16 [ 371.514655][ T6601] erofs: (device loop2): mounted with root inode @ nid 36. [ 373.234853][ T4632] device hsr_slave_0 left promiscuous mode [ 373.654248][ T6616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.470723][ T4632] device hsr_slave_1 left promiscuous mode [ 374.486988][ T4632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.537639][ T4632] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.635767][ T4632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.654145][ T4632] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.141864][ T4632] device bridge_slave_1 left promiscuous mode [ 375.156692][ T4632] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.199974][ T4632] device bridge_slave_0 left promiscuous mode [ 375.213255][ T4632] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.502805][ T4632] device veth1_macvtap left promiscuous mode [ 376.508889][ T4632] device veth0_macvtap left promiscuous mode [ 376.707074][ T4632] device veth1_vlan left promiscuous mode [ 377.901830][ T4632] device veth0_vlan left promiscuous mode [ 378.483232][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.489595][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.429398][ T6650] loop7: detected capacity change from 0 to 1024 [ 379.622270][ T6650] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 379.850229][ T27] audit: type=1800 audit(1741594025.568:23): pid=6650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.498" name="file1" dev="loop7" ino=839 res=0 errno=0 [ 380.169626][ T6654] loop2: detected capacity change from 0 to 16 [ 380.631830][ T6654] erofs: (device loop2): mounted with root inode @ nid 36. [ 380.670396][ T4632] team0 (unregistering): Port device team_slave_1 removed [ 380.901272][ T4632] team0 (unregistering): Port device team_slave_0 removed [ 381.063382][ T4632] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.195210][ T4632] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.661594][ T4632] bond0 (unregistering): Released all slaves [ 382.784974][ T6475] device hsr_slave_0 entered promiscuous mode [ 382.803141][ T6475] device hsr_slave_1 entered promiscuous mode [ 382.817926][ T6475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.825784][ T6475] Cannot create hsr debugfs directory [ 383.260323][ T14] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 383.600013][ T6661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.830411][ T14] usb 9-1: device descriptor read/64, error -71 [ 384.446755][ T14] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 385.750605][ T14] usb 9-1: device descriptor read/64, error -71 [ 385.874481][ T14] usb usb9-port1: attempt power cycle [ 387.030456][ T14] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 388.003091][ T14] usb 9-1: device descriptor read/8, error -71 [ 388.304268][ T6701] loop8: detected capacity change from 0 to 16 [ 388.332511][ T6701] erofs: (device loop8): mounted with root inode @ nid 36. [ 388.808167][ T6475] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 388.943209][ T6475] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 389.047373][ T6475] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 390.028198][ T6475] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 390.649997][ T6714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.049013][ T4265] Bluetooth: hci5: command 0x0406 tx timeout [ 391.151246][ T27] audit: type=1326 audit(1741594036.768:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6700 comm="syz.2.512" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd9ad18d169 code=0x0 [ 391.572791][ T6475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.641352][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 391.804889][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 391.884575][ T6475] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.929068][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 391.980961][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 391.989553][ T4369] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.996770][ T4369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.120864][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 392.142164][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 392.179766][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 392.228897][ T4632] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.236107][ T4632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.263003][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 392.289105][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 392.357517][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 392.573607][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 393.220940][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 393.224988][ T6744] loop7: detected capacity change from 0 to 128 [ 393.361187][ T6744] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 393.364828][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 393.371523][ T6744] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 393.492391][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 393.517941][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 393.526704][ T6744] EXT4-fs (loop7): re-mounted. Quota mode: none. [ 393.570809][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 393.779088][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 394.104052][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 394.142514][ T6475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 394.161294][ T6753] fscrypt: loop7: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 394.749607][ T5748] EXT4-fs (loop7): unmounting filesystem. [ 398.262138][ T6779] loop2: detected capacity change from 0 to 16 [ 398.334084][ T6779] erofs: (device loop2): mounted with root inode @ nid 36. [ 399.280153][ T4294] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 399.813074][ T4294] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.840652][ T4294] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 399.849870][ T4294] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.858102][ T4294] usb 9-1: Product: syz [ 399.862467][ T4294] usb 9-1: Manufacturer: syz [ 399.867237][ T4294] usb 9-1: SerialNumber: syz [ 399.984776][ T4294] usb 9-1: config 0 descriptor?? [ 400.134263][ T4294] snd-usb-audio: probe of 9-1:0.0 failed with error -22 [ 400.226657][ T6788] udevd[6788]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 400.238070][ T4296] usb 9-1: USB disconnect, device number 6 [ 400.261883][ T6475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.283283][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 400.309408][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 400.346761][ T6797] wlan0 speed is unknown, defaulting to 1000 [ 402.278437][ T6825] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 404.421976][ T6835] loop2: detected capacity change from 0 to 512 [ 404.476527][ T6838] loop8: detected capacity change from 0 to 16 [ 404.483163][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 404.500934][ T6788] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 404.520516][ T6838] erofs: (device loop8): mounted with root inode @ nid 36. [ 404.521358][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 406.778975][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 406.811142][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 406.872709][ T6475] device veth0_vlan entered promiscuous mode [ 406.881336][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 406.905200][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 407.279400][ T6475] device veth1_vlan entered promiscuous mode [ 407.663493][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 407.681661][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 407.711315][ T6475] device veth0_macvtap entered promiscuous mode [ 407.751655][ T6475] device veth1_macvtap entered promiscuous mode [ 407.797793][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 407.820899][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 408.075444][ T6475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.144980][ T6475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.235803][ T6475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.300272][ T6475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.320195][ T6475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.385713][ T6475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.416849][ T6475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.460106][ T6475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.517808][ T6475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.600237][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 408.608850][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 408.681475][ T6475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.700831][ T6475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.735663][ T6475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.795642][ T6475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.856135][ T6475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.905490][ T6475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.941561][ T6475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.959664][ T6867] loop7: detected capacity change from 0 to 2048 [ 409.006959][ T6475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.078041][ T6475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.112815][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 409.122446][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 409.149999][ T6788] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 409.173418][ T6475] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.196146][ T6475] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.310243][ T6475] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.350248][ T6475] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.633317][ T4632] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.657005][ T4632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.739773][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 410.780504][ T4313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.813674][ T4313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.880491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 413.479654][ T6906] loop2: detected capacity change from 0 to 16 [ 413.546889][ T6906] erofs: (device loop2): mounted with root inode @ nid 36. [ 413.566941][ T4265] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 413.580605][ T4265] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 413.589837][ T4265] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 413.599647][ T4257] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 413.608693][ T4257] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 413.616324][ T4257] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 413.728317][ T6908] wlan0 speed is unknown, defaulting to 1000 [ 414.705984][ T6921] loop6: detected capacity change from 0 to 2048 [ 414.732712][ T6922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.552'. [ 414.861470][ T6773] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 416.233930][ T4257] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 416.242773][ T4257] Bluetooth: hci4: Injecting HCI hardware error event [ 416.253981][ T4256] Bluetooth: hci0: command 0x0409 tx timeout [ 416.261907][ T4257] Bluetooth: hci4: hardware error 0x00 [ 418.249335][ T6908] chnl_net:caif_netlink_parms(): no params data found [ 418.330340][ T4256] Bluetooth: hci0: command 0x041b tx timeout [ 419.288841][ T6950] Bluetooth: MGMT ver 1.22 [ 419.981931][ T6954] loop8: detected capacity change from 0 to 16 [ 420.000207][ T4257] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 420.074707][ T6954] erofs: (device loop8): mounted with root inode @ nid 36. [ 420.083257][ T4257] Bluetooth: hci3: Invalid handle: 0x7646 > 0x0eff [ 420.416858][ T4256] Bluetooth: hci0: command 0x040f tx timeout [ 421.177054][ T6908] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.203048][ T6908] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.271940][ T6908] device bridge_slave_0 entered promiscuous mode [ 421.537757][ T4363] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.931030][ T4301] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 422.405554][ T6908] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.423242][ T6908] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.464741][ T6908] device bridge_slave_1 entered promiscuous mode [ 422.480324][ T4257] Bluetooth: hci0: command 0x0419 tx timeout [ 422.660234][ T4301] usb 3-1: Using ep0 maxpacket: 32 [ 422.673450][ T4301] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 422.682602][ T4301] usb 3-1: config 0 has no interface number 0 [ 422.699623][ T4301] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 422.708960][ T4301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.738336][ T4301] usb 3-1: Product: syz [ 422.768889][ T4301] usb 3-1: Manufacturer: syz [ 422.844283][ T4301] usb 3-1: SerialNumber: syz [ 423.731207][ T4301] usb 3-1: config 0 descriptor?? [ 423.738254][ T4301] smsc95xx v2.0.0 [ 425.989982][ T4301] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 427.230381][ T4301] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 427.259181][ T4301] usb 3-1: USB disconnect, device number 7 [ 427.344454][ T4363] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.389869][ T7001] loop2: detected capacity change from 0 to 16 [ 427.471060][ T7001] erofs: (device loop2): mounted with root inode @ nid 36. [ 427.520342][ T4257] Bluetooth: hci2: command 0x0406 tx timeout [ 428.473497][ T4363] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.601162][ T6908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.111195][ T6908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.232283][ T4363] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.350825][ T6908] team0: Port device team_slave_0 added [ 429.397760][ T6908] team0: Port device team_slave_1 added [ 429.607553][ T6908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.624382][ T6908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.843189][ T6908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.856288][ T6908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.863495][ T6908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.900129][ T6908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.489726][ T7016] loop6: detected capacity change from 0 to 512 [ 430.576907][ T7016] EXT4-fs: Ignoring removed bh option [ 430.650796][ T7016] EXT4-fs: Ignoring removed mblk_io_submit option [ 430.721377][ T7016] EXT4-fs (loop6): Test dummy encryption mode enabled [ 430.776684][ T6908] device hsr_slave_0 entered promiscuous mode [ 430.820720][ T7016] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 430.864564][ T6908] device hsr_slave_1 entered promiscuous mode [ 430.961545][ T7016] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.567: attempt to clear invalid blocks 2 len 1 [ 430.980951][ T6908] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 431.578694][ T6908] Cannot create hsr debugfs directory [ 431.588926][ T7016] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 431.835859][ T7016] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.567: invalid indirect mapped block 1819239214 (level 0) [ 431.890772][ T7016] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.567: invalid indirect mapped block 1819239214 (level 1) [ 431.959249][ T7016] EXT4-fs (loop6): 1 truncate cleaned up [ 431.983512][ T7016] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 432.880516][ T7015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.622453][ T6475] EXT4-fs (loop6): unmounting filesystem. [ 433.882214][ T6908] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 433.923436][ T6908] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 435.738605][ T6908] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 436.208442][ T6908] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 440.740516][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.746901][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.840155][ T6137] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 440.947320][ T6908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.032142][ T6137] usb 9-1: config 0 has no interfaces? [ 441.040211][ T6137] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 441.089315][ T6137] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.108470][ T6137] usb 9-1: Product: syz [ 441.140785][ T6137] usb 9-1: Manufacturer: syz [ 441.145445][ T6137] usb 9-1: SerialNumber: syz [ 441.211459][ T6137] usb 9-1: config 0 descriptor?? [ 441.679996][ T4363] device hsr_slave_0 left promiscuous mode [ 441.700124][ T4363] device hsr_slave_1 left promiscuous mode [ 441.707909][ T4363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.726051][ T4363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.735327][ T4363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.750398][ T4363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.772303][ T4363] device bridge_slave_1 left promiscuous mode [ 441.778597][ T4363] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.804162][ T4363] device bridge_slave_0 left promiscuous mode [ 441.822734][ T4363] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.002110][ T4363] device veth1_macvtap left promiscuous mode [ 442.043292][ T4363] device veth0_macvtap left promiscuous mode [ 442.055624][ T4363] device veth1_vlan left promiscuous mode [ 442.064169][ T4363] device veth0_vlan left promiscuous mode [ 442.533156][ T14] usb 9-1: USB disconnect, device number 7 [ 446.157702][ T7186] loop7: detected capacity change from 0 to 16 [ 446.210350][ T7186] erofs: (device loop7): mounted with root inode @ nid 36. [ 448.131802][ T4363] team0 (unregistering): Port device team_slave_1 removed [ 448.191358][ T4363] team0 (unregistering): Port device team_slave_0 removed [ 448.261105][ T4363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.340777][ T4363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.719868][ T7195] loop2: detected capacity change from 0 to 512 [ 448.737380][ T7195] EXT4-fs: Ignoring removed nobh option [ 448.819838][ T7195] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 448.839076][ T7195] ext4 filesystem being mounted at /172/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 449.054013][ T4263] EXT4-fs error (device loop2): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /172/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 449.097346][ T4363] bond0 (unregistering): Released all slaves [ 449.207976][ T6908] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.217262][ T7152] netlink: 4 bytes leftover after parsing attributes in process `syz.6.581'. [ 449.218375][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 449.235515][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 449.661680][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 449.747694][ T7208] loop8: detected capacity change from 0 to 2048 [ 449.754658][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 449.775614][ T5469] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.782837][ T5469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.876140][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 449.933679][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 449.938745][ T7208] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 449.942475][ T5469] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.957935][ T5469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.097582][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 450.519471][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 450.600575][ T27] audit: type=1800 audit(1741594096.288:25): pid=7208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.605" name="bus" dev="loop8" ino=1436 res=0 errno=0 [ 450.751976][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 450.781362][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 450.858194][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 450.911133][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 450.933125][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 451.417427][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 451.707303][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 451.757482][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 451.796684][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 451.808420][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 452.860300][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 452.868762][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 453.036008][ T6908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.213647][ T7252] loop6: detected capacity change from 0 to 2048 [ 453.303631][ T6788] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 456.590411][ T7272] overlayfs: missing 'lowerdir' [ 457.196177][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 457.234836][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 457.431724][ T7072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 457.453599][ T7072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 457.502436][ T6908] device veth0_vlan entered promiscuous mode [ 457.513945][ T7072] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 457.631515][ T7072] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 457.670605][ T6908] device veth1_vlan entered promiscuous mode [ 457.821315][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 457.856733][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 457.901018][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 457.931566][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 457.985430][ T6908] device veth0_macvtap entered promiscuous mode [ 458.032414][ T6908] device veth1_macvtap entered promiscuous mode [ 458.127639][ T6908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.159012][ T6908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.213413][ T6908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.250071][ T6908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.290098][ T6908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.353899][ T6908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.400096][ T6908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.234901][ T6908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.246835][ T6908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.272660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 459.291577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 459.326426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 459.346189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 459.418968][ T6908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.495883][ T6908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.700570][ T6908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.711508][ T6908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.723564][ T6908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.760497][ T6908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.771943][ T6908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.838077][ T6908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.938162][ T6908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.000776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 460.070425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 460.123953][ T6908] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.292479][ T6908] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.370232][ T6908] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.378993][ T6908] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.393430][ T7312] loop8: detected capacity change from 0 to 1024 [ 461.404233][ T7188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.461498][ T7188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.528307][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 461.564507][ T4313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.592240][ T4313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.625115][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 463.107090][ T7324] loop8: detected capacity change from 0 to 1024 [ 463.606562][ T9] hfsplus: b-tree write err: -5, ino 4 [ 464.169536][ T7340] loop6: detected capacity change from 0 to 164 [ 464.219178][ T7340] rock: directory entry would overflow storage [ 464.273924][ T7340] rock: sig=0x66, size=4, remaining=3 [ 464.329778][ T7340] rock: directory entry would overflow storage [ 464.370614][ T7340] rock: sig=0x66, size=4, remaining=3 [ 465.253333][ T7355] loop6: detected capacity change from 0 to 16 [ 465.570437][ T7355] erofs: (device loop6): mounted with root inode @ nid 36. [ 467.611004][ T7377] loop6: detected capacity change from 0 to 16 [ 467.902731][ T7377] erofs: (device loop6): mounted with root inode @ nid 36. [ 468.178287][ T4256] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 468.194200][ T4256] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 468.236486][ T4256] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 468.246095][ T4256] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 468.256063][ T7380] loop7: detected capacity change from 0 to 1024 [ 468.269963][ T7383] loop9: detected capacity change from 0 to 1024 [ 468.278185][ T4256] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 468.288381][ T4256] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 468.299885][ T7383] EXT4-fs: Ignoring removed bh option [ 468.314881][ T7199] EXT4-fs (loop2): unmounting filesystem. [ 468.505972][ T7383] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 468.601207][ T4376] hfsplus: b-tree write err: -5, ino 4 [ 468.623451][ T4363] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.235475][ T4363] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.320182][ T4256] Bluetooth: hci1: command 0x0409 tx timeout [ 472.400290][ T4257] Bluetooth: hci1: command 0x041b tx timeout [ 474.480367][ T4256] Bluetooth: hci1: command 0x040f tx timeout [ 476.560145][ T4256] Bluetooth: hci1: command 0x0419 tx timeout [ 482.960132][ T4256] Bluetooth: hci3: command 0x0406 tx timeout [ 539.280133][ T4256] Bluetooth: hci0: command 0x0406 tx timeout [ 574.409997][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 574.416985][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4632/1:b..l [ 574.425333][ C1] (detected by 1, t=10502 jiffies, g=34357, q=245 ncpus=2) [ 574.432620][ C1] task:kworker/u4:16 state:R running task stack:23576 pid:4632 ppid:2 flags:0x00004000 [ 574.444302][ C1] Workqueue: bat_events batadv_nc_worker [ 574.449970][ C1] Call Trace: [ 574.453278][ C1] [ 574.456210][ C1] __schedule+0x143f/0x4570 [ 574.460736][ C1] ? release_firmware_map_entry+0x18b/0x18b [ 574.466642][ C1] ? print_irqtrace_events+0x210/0x210 [ 574.472115][ C1] ? preempt_schedule_irq+0xec/0x1c0 [ 574.477407][ C1] preempt_schedule_irq+0xf7/0x1c0 [ 574.482557][ C1] ? preempt_schedule_notrace+0x140/0x140 [ 574.488311][ C1] irqentry_exit+0x53/0x80 [ 574.492727][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 574.498710][ C1] RIP: 0010:lock_acquire+0x26f/0x5a0 [ 574.504001][ C1] Code: 2b 00 74 08 4c 89 f7 e8 9f 56 77 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 574.523613][ C1] RSP: 0018:ffffc90004f97a80 EFLAGS: 00000206 [ 574.529689][ C1] RAX: 0000000000000001 RBX: 1ffff920009f2f5c RCX: 1ffff920009f2efc [ 574.537660][ C1] RDX: dffffc0000000000 RSI: ffffffff8b0c2ec0 RDI: ffffffff8b5f6f80 [ 574.545627][ C1] RBP: ffffc90004f97be0 R08: dffffc0000000000 R09: fffffbfff225724d [ 574.553614][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920009f2f58 [ 574.561601][ C1] R13: dffffc0000000000 R14: ffffc90004f97ae0 R15: 0000000000000246 [ 574.569589][ C1] ? read_lock_is_recursive+0x10/0x10 [ 574.575001][ C1] ? batadv_nc_worker+0xc7/0x610 [ 574.579959][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 574.585007][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 574.590996][ C1] batadv_nc_worker+0xe8/0x610 [ 574.595941][ C1] ? batadv_nc_worker+0xc7/0x610 [ 574.600879][ C1] ? batadv_nc_worker+0xc7/0x610 [ 574.605858][ C1] ? process_one_work+0x806/0x1260 [ 574.610981][ C1] process_one_work+0x917/0x1260 [ 574.615943][ C1] ? worker_detach_from_pool+0x260/0x260 [ 574.621579][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 574.627120][ C1] ? kthread_data+0x4e/0xc0 [ 574.631632][ C1] ? wq_worker_running+0x97/0x190 [ 574.636653][ C1] worker_thread+0xa47/0x1200 [ 574.641335][ C1] ? _raw_spin_unlock+0x40/0x40 [ 574.646188][ C1] kthread+0x28d/0x320 [ 574.650252][ C1] ? worker_clr_flags+0x190/0x190 [ 574.655274][ C1] ? kthread_blkcg+0xd0/0xd0 [ 574.659902][ C1] ret_from_fork+0x1f/0x30 [ 574.664329][ C1] [ 574.667365][ C1] rcu: rcu_preempt kthread starved for 9752 jiffies! g34357 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 574.678464][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 574.688425][ C1] rcu: RCU grace-period kthread stack dump: [ 574.694434][ C1] task:rcu_preempt state:R running task stack:25592 pid:16 ppid:2 flags:0x00004000 [ 574.705218][ C1] Call Trace: [ 574.708516][ C1] [ 574.711450][ C1] __schedule+0x143f/0x4570 [ 574.715964][ C1] ? _raw_spin_unlock+0x40/0x40 [ 574.720838][ C1] ? release_firmware_map_entry+0x18b/0x18b [ 574.726753][ C1] ? lockdep_softirqs_off+0x420/0x420 [ 574.732131][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 574.738020][ C1] ? _raw_spin_unlock+0x40/0x40 [ 574.742871][ C1] schedule+0xbf/0x180 [ 574.746941][ C1] schedule_timeout+0x1b9/0x300 [ 574.751812][ C1] ? console_conditional_schedule+0x40/0x40 [ 574.757706][ C1] ? update_process_times+0x1b0/0x1b0 [ 574.763096][ C1] ? prepare_to_swait_event+0x329/0x350 [ 574.768648][ C1] rcu_gp_fqs_loop+0x2d2/0x1150 [ 574.773505][ C1] ? do_raw_spin_unlock+0x137/0x8a0 [ 574.778700][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 574.784860][ C1] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 574.790770][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 574.795968][ C1] ? rcu_gp_init+0x15f0/0x15f0 [ 574.800729][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 574.806644][ C1] ? finish_swait+0xcf/0x1e0 [ 574.811241][ C1] rcu_gp_kthread+0xa3/0x3b0 [ 574.815838][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 574.820948][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 574.826846][ C1] ? __kthread_parkme+0x168/0x1c0 [ 574.831879][ C1] kthread+0x28d/0x320 [ 574.835942][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 574.841051][ C1] ? kthread_blkcg+0xd0/0xd0 [ 574.845638][ C1] ret_from_fork+0x1f/0x30 [ 574.850064][ C1] [ 574.853076][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 574.859392][ C1] Sending NMI from CPU 1 to CPUs 0: [ 574.864643][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_idle_do_entry+0x10f/0x340