last executing test programs: 15m46.274615099s ago: executing program 32 (id=31): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) add_key(0x0, &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xfffffffd, 0x4, 0xb, 0x6}}) open(0x0, 0x64842, 0x389b0d52417bb201) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x7fff, 0x0, {0x1, 0x1}, {0x4a, 0x2}, @cond=[{0xffff, 0x706, 0xfffb, 0x1, 0x100, 0x4}, {0x9, 0x8, 0x4, 0x59, 0x5}]}) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) prlimit64(0x0, 0xb, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x10000000007, 0x0) syz_usb_disconnect(r2) close(r3) 12m49.215468446s ago: executing program 4 (id=254): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x132ba000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xa0) fallocate(r3, 0x0, 0x0, 0x1001f0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) 12m47.58334554s ago: executing program 4 (id=255): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x891b, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[], 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff000000}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xc, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x4}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 12m46.132949077s ago: executing program 4 (id=258): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r4 = syz_open_dev$usbfs(0x0, 0x6f, 0x100) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x5522, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d80672e65a6a0a72e19c2b60bd6276fd8bb6366e9d1ed9a60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d10d1f600"}) 12m44.331428748s ago: executing program 4 (id=264): mkdirat(0xffffffffffffff9c, 0x0, 0x0) 12m44.057016021s ago: executing program 4 (id=265): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, 0x0, 0x0) connect$inet6(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x1, 0x194, &(0x7f0000000640)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) read$FUSE(r4, &(0x7f0000003f00)={0x2020}, 0x2020) 12m42.455386054s ago: executing program 4 (id=267): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0x8000) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b40)=@newtfilter={0x68, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x3c, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'vlan0\x00'}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x68}}, 0x24040084) 12m33.91084793s ago: executing program 33 (id=253): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xf1c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xee8, 0x2, [@TCA_MATCHALL_ACT={0xee4, 0x2, [@m_pedit={0xee0, 0x1, 0x0, 0x0, {{0xa}, {0xeb4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xeb0, 0x4, {{{0x40, 0x9, 0xffffffffffffffff, 0x6, 0x5}, 0xe, 0x70, [{0x0, 0x73, 0xe00000, 0x6, 0x3, 0x10}, {0x10, 0xff, 0x1, 0x5, 0x9, 0x9}, {0x8, 0x1ff, 0x8, 0x40, 0xfffffff7, 0x1}, {0x1, 0x7fff, 0x0, 0x5f648924, 0x9}, {0x3, 0x0, 0xfff, 0x1, 0x1, 0x1}, {0x8001, 0x57, 0xa, 0x0, 0x6, 0x4}]}, [{0x3, 0x7ff, 0x10000, 0x8, 0x5, 0x7}, {0x2, 0x7, 0x6, 0x2, 0x4a9, 0xffffff07}, {0x4, 0x7ff, 0x9, 0x40000000, 0xe, 0x9}, {0x0, 0xf0da66a2, 0x2, 0x4, 0xc851, 0xbc4}, {0xc, 0x193b, 0x9, 0x8000, 0x7, 0x5}, {0x9, 0xfffffffd, 0x3, 0x8, 0x5, 0x9}, {0x4, 0x0, 0x4, 0x5, 0x2, 0xaf9}, {0x0, 0xfffff801, 0xe, 0x0, 0x3, 0x8}, {0x8001, 0xcab, 0x7, 0x7c, 0x0, 0x9}, {0xa, 0x6, 0x0, 0x5505a2a7, 0x7ff, 0x6}, {0xff, 0x1, 0xfff, 0x0, 0x4, 0x1}, {0x2, 0x8, 0x8, 0x10001, 0x5, 0x9}, {0x9, 0x1, 0x7, 0x2, 0xff, 0x3}, {0x5, 0x7, 0xd, 0xa3f, 0x4, 0x2}, {0xffffffff, 0x8001, 0x8, 0x3ff, 0x101, 0x7}, {0x10, 0x8, 0x59, 0x7, 0x8, 0x9}, {0x1, 0xfdd7, 0x400, 0xfffffffc, 0x1000, 0xfffffffb}, {0x80, 0x1, 0x1, 0x7, 0xf, 0x5}, {0xd, 0x3f68, 0x0, 0x2b6, 0x83b, 0xfffffffc}, {0x2, 0x0, 0xd2e9, 0xff, 0x7, 0x82c5}, {0x1, 0x7, 0x4, 0x1, 0x6, 0x6}, {0x8, 0x9, 0x3, 0x8, 0x8, 0x89}, {0x1, 0x6, 0x2, 0x10000, 0x80000000, 0xf}, {0xfffff001, 0x0, 0x3, 0x800, 0x4, 0x8}, {0x7ff, 0xffffffff, 0x3, 0x8001, 0x1, 0x5}, {0x9, 0x9, 0x3, 0x2, 0x8001, 0x9c6}, {0x8000, 0xa, 0x3, 0x6, 0x9, 0x80}, {0x6, 0x1, 0xa5, 0x4, 0x4}, {0x2, 0x7, 0x4, 0x6, 0x8, 0x3}, {0x3ff, 0x0, 0x3ff, 0x7, 0x3, 0xea3}, {0x7, 0x7, 0x4, 0x80000001, 0x8, 0x5249}, {0x8000, 0x10000, 0xc000, 0x2, 0x9, 0x6}, {0x6, 0x2, 0x8, 0x5, 0x4, 0x2}, {0xc, 0x3, 0x55, 0x5, 0x7, 0x7}, {0x0, 0x1, 0x548c, 0x3, 0x5, 0x5}, {0x2, 0x9, 0x7, 0x1, 0x4, 0x7f}, {0x2, 0x1, 0x7, 0x5, 0x200, 0x4}, {0x5, 0x6, 0x5, 0x6, 0x6, 0x7}, {0x1000, 0x7, 0x4, 0x7ff, 0x1, 0x8}, {0x0, 0x2, 0x4, 0x2, 0x5, 0x4}, {0x5, 0x9, 0x9, 0x0, 0x0, 0x400}, {0x3ff, 0xbf, 0xd9, 0x6, 0x58, 0xcf8}, {0x3, 0x34b41e40, 0x800, 0x3, 0x3de, 0x8}, {0x9, 0x2, 0x5, 0xe, 0xe56, 0xf}, {0x8, 0xa, 0x7, 0x2, 0x8000}, {0x1, 0x6, 0x80000000, 0x9a6b}, {0x3, 0x36100, 0x7fffffff, 0x3, 0x1000, 0x8000}, {0x3, 0x3, 0x0, 0xfffffffa, 0x0, 0x2cf}, {0x1ff, 0x2, 0x3ff, 0xf, 0x7fffffff, 0x6}, {0x10001, 0x0, 0xdedb, 0x4, 0x8000, 0x3}, {0x594, 0x9, 0x735, 0x8, 0xfffff800, 0x8}, {0x6, 0x2, 0xffff446d, 0x6, 0xdb8c, 0x8}, {0xf8dd, 0x401, 0x1, 0x8d67, 0x100}, {0x1, 0x4, 0x6, 0x351, 0xd}, {0x80000001, 0x1d7, 0xa1, 0x32, 0x80000000, 0x5d84}, {0x2, 0x5, 0x1, 0xf, 0x3, 0x8}, {0xb0b0, 0x6, 0x1000, 0x4, 0x5, 0xcc}, {0x1, 0x0, 0x1, 0x7, 0x9, 0xfffffc66}, {0x9, 0x0, 0x7, 0x80, 0x4, 0x5}, {0x1, 0x9, 0x0, 0x8, 0xff, 0x240000}, {0x28, 0xfffffff8, 0x80000000, 0x5, 0x8, 0x3ff}, {0xf1, 0x20000000, 0x9, 0xfff, 0x6, 0x7}, {0x4, 0xfff, 0x6, 0xf, 0x4, 0x7fff}, {0x401, 0x36, 0x6, 0x9, 0x4, 0x6a3}, {0x80, 0xd, 0x5, 0x4, 0x3, 0xfffff800}, {0xb0, 0x8, 0x8, 0x1000, 0x8, 0x10}, {0x80000001, 0x0, 0xfffffff7, 0xffff, 0x1, 0x9}, {0x9, 0x80000001, 0x4, 0x9, 0x71b3, 0x4}, {0x2f27, 0x6, 0x7, 0x3, 0x6, 0x3}, {0x7fffffff, 0x46, 0x1, 0x52a, 0x6, 0xd50}, {0xfff, 0x2, 0x200000, 0x1, 0x1, 0xe}, {0x8, 0x200, 0x0, 0x3, 0x80000000, 0x400}, {0x1, 0x800, 0x10, 0xfc, 0xfff, 0x9}, {0x9, 0x5, 0x7, 0x1c00, 0xe, 0x6}, {0x3b88, 0x6, 0x200, 0x3, 0x10001, 0x9}, {0x3ff, 0x3, 0x9, 0x8, 0x2, 0x476}, {0x9, 0x7, 0x6, 0x8, 0x5, 0x8}, {0x1f26, 0x2, 0xffffffff, 0x9, 0x687}, {0x5, 0xc000, 0x7, 0x2f4, 0xff, 0x6}, {0x4, 0x40, 0x1000, 0x6, 0x5, 0x10}, {0x0, 0x0, 0x4, 0x8, 0x9, 0x7f}, {0x2, 0x9, 0xc, 0x81, 0x200, 0x6e}, {0x2, 0x1, 0x4, 0x200, 0x81, 0x5}, {0x2, 0x9, 0x5, 0x8, 0x2, 0x6aaf}, {0x2, 0x25, 0x4, 0x8ca, 0xcb7, 0xc478}, {0x4, 0x5, 0x1, 0x6, 0x3, 0x67}, {0xfffffffd, 0x81, 0x6, 0x9, 0x7, 0x8}, {0x9, 0x0, 0xba62, 0x0, 0x40, 0x6}, {0x7, 0x2, 0x6, 0x60, 0x4, 0x9}, {0x0, 0xbec, 0x80000001, 0x8, 0x1, 0x6299}, {0xeb3, 0xec7c, 0xe, 0x7, 0x0, 0x8}, {0x737e9b18, 0x8, 0xe, 0x2bb4, 0x7, 0x9}, {0x9, 0x4, 0x101, 0x44c27ba, 0x9, 0xfffffffe}, {0x8, 0xfffffffe, 0x200, 0x200, 0x5055, 0x240000}, {0x9, 0x2, 0xfffffffe, 0x1, 0xfffffffc, 0x4}, {0x4, 0x297a, 0x9, 0x9, 0x9, 0x5}, {0x3ff, 0x6, 0xc00000, 0x2, 0xe, 0xfffffffe}, {0x6, 0x5, 0x0, 0x31, 0xa, 0x81}, {0x3, 0x9, 0x6, 0x9, 0x6369, 0x5}, {0x1, 0x4, 0x2, 0x600000, 0x9, 0x7}, {0x2c5, 0xff, 0xfffff6b0, 0x89, 0x7, 0xfffffff8}, {0x4, 0x3ff, 0x10000, 0xd8, 0xffffffae}, {0x587, 0x9, 0x3, 0x5, 0x7, 0xf5a5}, {0x4, 0x7, 0x5, 0x1, 0x9}, {0x1, 0x7f, 0x10001, 0x3, 0x7, 0x4}, {0x5, 0x5c62, 0x4, 0xfffffff9, 0x5bfa, 0x905}, {0xfff, 0xa, 0x2ff, 0x4, 0x5, 0x7fffffff}, {0x2, 0xffffffff, 0x7, 0x9, 0x9, 0x7fffffff}, {0x8, 0x7fff, 0x41, 0xffffff3c, 0x7fff, 0x2}, {0x7, 0x1, 0x9, 0x3, 0x5, 0x2}, {0x6, 0x1000, 0x0, 0x8000, 0x5, 0x3}, {0x4, 0x6, 0x7, 0x8, 0xd7, 0xb}, {0x8, 0x4, 0xffff, 0x9, 0x3, 0x200}, {0x8, 0x4, 0xfffffffb, 0x8, 0x10000, 0x1}, {0xaa3, 0xffff, 0x1a7, 0x4, 0xfffffffe, 0x5}, {0x8a9, 0x5, 0x2, 0x4, 0x40, 0xb891}, {0x2, 0xfffffff7, 0x8001, 0x4ee, 0x6, 0x7}, {0xffffffff, 0x5, 0x6, 0x1, 0x3, 0x4}, {0x5, 0x4, 0x1, 0x7, 0x3, 0x171}, {0x5, 0x9, 0x2, 0x5e, 0x4, 0x3a7}, {0x6, 0xcb, 0x9f, 0x7, 0xad5, 0x400}, {0xffff, 0xfff, 0x2, 0x6, 0x8, 0xdb}, {0x80000000, 0x1, 0x7, 0x400, 0x1, 0x6027}, {0x0, 0xb29, 0x8, 0x6, 0x5, 0x8}, {0x80, 0x57e, 0x7d8, 0x7, 0x2, 0x2}, {0xe, 0x5, 0x400, 0x7, 0x372, 0x7}, {0x74e, 0x401, 0x5, 0x9, 0x101, 0x1}, {0x8002, 0x1, 0x710, 0x800, 0x8, 0xfffffffe}], [{0x4}, {0x5}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {}, {0xf, 0x1}, {0x3}, {0x2}, {0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x4, 0x26a84ce0ea7c6298}, {0x5}, {0x2, 0x1}, {0x3}, {0x3}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x4}, {}, {0x3}, {0x2}, {}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x3}, {0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x4}, {0x3, 0x1}, {0x3}, {0x2}, {0x4}, {0x4}, {0x0, 0x1}, {}, {0x1, 0x1}, {}, {0x4}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x1}, {0x1}, {0x2}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x5}, {0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x973013dc471080f0}, {}, {0x5}, {0x2}, {0x6}, {0x3}, {}, {0x3}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x0, 0xdd79158ea2cc303a}, {0x2}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xf1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r8, 0xc}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000280)="3d2af7cd", 0x4}], 0x2}, 0x4) 12m29.550609159s ago: executing program 34 (id=263): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f00000003c0)="b6", 0x1}], 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x20, r4, 0x333, 0x0, 0x4, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000080)={0x4, 0x5, 0x7, 0x10001, 0x5, "1afa86b62101b58680cdda128ed251c679583d", 0x3f, 0x80000008}) getrlimit(0x3, 0x0) readv(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c00"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4004890}, 0xc080) 12m27.184504078s ago: executing program 35 (id=267): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0x8000) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b40)=@newtfilter={0x68, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x3c, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'vlan0\x00'}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x68}}, 0x24040084) 12m23.065938197s ago: executing program 36 (id=272): prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2, 0x404d3, 0x32}, 0x0, @in=@empty}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0x0, 0x5}}}, 0x24}}, 0x10) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 9m43.213641732s ago: executing program 2 (id=407): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) 9m43.145248072s ago: executing program 2 (id=408): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x788000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES16=0x0], 0xfe, 0x4b1, &(0x7f0000000540)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000100)='./file1\x00', 0x20fdfffffe) 8m55.847916163s ago: executing program 7 (id=285): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0xff, '\x00', 0x4afd, 0x0, 0x0, 0x101}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) 8m55.83731558s ago: executing program 2 (id=415): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x8000) socket$nl_sock_diag(0x10, 0x3, 0x4) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_sctp(0x2, 0x1, 0x84) writev(0xffffffffffffffff, 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) ftruncate(r3, 0x2000000) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x1f, 0x0, 0x1000000}) 8m55.19467839s ago: executing program 6 (id=279): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) shmget$private(0x0, 0x2000, 0x0, &(0x7f00000eb000/0x2000)=nil) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40044160, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x4]}, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 8m53.701396157s ago: executing program 6 (id=409): socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) r3 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x34]}, &(0x7f00000000c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x36, 0x36, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00", 0xfffffffc}, 0x48, 0xfffffffffffffffe) 8m53.701101753s ago: executing program 2 (id=410): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x2e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getsockopt$packet_int(r3, 0x107, 0x14, 0x0, &(0x7f0000000140)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000001a00010028bd7000000800000a000000", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x71d0b8801b5f1c98) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) 8m51.860323943s ago: executing program 6 (id=411): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x12}}, 0x4, 0x0, 0x4}}, 0x2e) setsockopt$inet6_mreq(r3, 0x29, 0x15, 0x0, 0x0) 8m51.660692302s ago: executing program 2 (id=412): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_emit_ethernet(0x13, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) fanotify_init(0x200, 0x0) setfsuid(0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4, 0x82b) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000540)={@multicast2, @dev}, 0x0) fcntl$notify(r3, 0x402, 0x1a) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r4, 0x1, r0, 0x4}) 8m49.990913221s ago: executing program 2 (id=413): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x24000007}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x0, 0x0) preadv2(r6, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000000000000000a000000fbffff"], 0x50) 8m49.41347529s ago: executing program 6 (id=414): socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) ioperm(0x0, 0x2, 0x7e) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r2, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0xac1d}) fcntl$lock(r2, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x8}) socket$igmp(0x2, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) socket(0x10, 0x3, 0x0) 8m40.022245841s ago: executing program 37 (id=285): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0xff, '\x00', 0x4afd, 0x0, 0x0, 0x101}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) 8m34.492762164s ago: executing program 38 (id=413): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x24000007}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x0, 0x0) preadv2(r6, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000000000000000a000000fbffff"], 0x50) 8m33.525699648s ago: executing program 39 (id=414): socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) ioperm(0x0, 0x2, 0x7e) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r2, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0xac1d}) fcntl$lock(r2, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x8}) socket$igmp(0x2, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) socket(0x10, 0x3, 0x0) 6m35.550899569s ago: executing program 8 (id=500): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7fffffff, 0x8b}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) open(&(0x7f0000000080)='.\x00', 0x10000, 0x5b) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0x1}}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x2306, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884d01a507, 0x4008032, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x80) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000630000/0x1000)=nil, 0x1000}, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 6m33.88888322s ago: executing program 8 (id=501): pipe(&(0x7f0000000000)) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket(0x2b, 0x80801, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 6m33.462803732s ago: executing program 8 (id=502): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000002180)={0x1, @pix={0x0, 0x0, 0x32314247}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f02ebbee8, 0x10010, 0xffffffffffffffff, 0xd7513000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r2, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r3, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r5, 0x1) 6m32.403935388s ago: executing program 8 (id=503): bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000100)={'exec ', 'msdos\x00'}, 0xb) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x1200082, &(0x7f00000003c0)={[{@errors_continue}, {@errors_continue}, {@utf8}, {@umask={'umask', 0x3d, 0x2396}}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@discard}, {@allow_utime={'allow_utime', 0x3d, 0x5}}, {@errors_remount}, {@discard}]}, 0x5, 0x1531, &(0x7f0000002f80)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0xfd, 0x0, &(0x7f0000000d40)) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000200)='./file0\x00', 0x10, &(0x7f0000000480)=ANY=[], 0x5, 0xa5a, &(0x7f0000001b40)="$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") open(&(0x7f0000000140)='.\x00', 0xa0180, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) 6m28.71283898s ago: executing program 8 (id=504): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2a00000, &(0x7f00000001c0)={[{@undelete}, {@umask={'umask', 0x3d, 0x6}}, {@undelete}, {@dmode}, {}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {}, {}, {@unhide}, {@uid}]}, 0x1, 0xc76, &(0x7f0000000f40)="$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") socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000000e0c0)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setparam(r2, 0x0) getuid() ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_GPU_INFO(0xffffffffffffffff, 0xc0106440, &(0x7f0000000440)={0x0, 0x8, 0x0}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_default\x00') 6m27.538568201s ago: executing program 8 (id=505): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd27, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xa5bf4861, 0x6, 0x3ff, 0x10001}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x800) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 6m12.316177303s ago: executing program 40 (id=505): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd27, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xa5bf4861, 0x6, 0x3ff, 0x10001}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x800) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 2m45.585988107s ago: executing program 0 (id=585): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x19050) 2m43.881238106s ago: executing program 0 (id=591): r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r0, 0x80044942, 0x0) 2m42.279770695s ago: executing program 0 (id=593): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x11, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmc(0x0, 0x0, 0x101080) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0xc0984124, 0x40944f9c780000) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3d46e48aa31086b8703130000001f00000000000000080003002e000a000d002e009ee517d34460bc24eab556a705251e6182949a3651f60a84c902d1938037e73f07d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x0, 0x0) io_setup(0x4, 0x0) socket(0x22, 0x2, 0x4) 2m40.757120464s ago: executing program 0 (id=595): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x1}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0585609, &(0x7f0000000040)={0x0, 0xa}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m39.621793571s ago: executing program 0 (id=597): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x3e, 0x0, 0x0) getuid() getresgid(&(0x7f0000000440), &(0x7f0000000500), &(0x7f0000000540)) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x0) 2m37.679101475s ago: executing program 0 (id=598): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x82d92b8cfa1cf2b5}, 0x4008081) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x30b, @tick=0x1000, 0x31, {0xfd}}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', 0x0, 0x0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2000) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(0xffffffffffffffff, 0x2000, 0x0) 2m22.048347719s ago: executing program 41 (id=598): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x82d92b8cfa1cf2b5}, 0x4008081) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x30b, @tick=0x1000, 0x31, {0xfd}}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', 0x0, 0x0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2000) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(0xffffffffffffffff, 0x2000, 0x0) 2m19.896760017s ago: executing program 5 (id=613): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_GET_NAME(0x10, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x400c0) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6) 2m18.584369572s ago: executing program 5 (id=615): r0 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioprio_get$uid(0x3, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x181000, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000440)={'das16m1\x00', [0x4e27, 0x5, 0x3, 0x40300000, 0xe7, 0x8, 0x8, 0xa82, 0xff46, 0x100, 0xcf3, 0xb, 0x1db, 0x2, 0x6, 0x101, 0x10001, 0x10087, 0x3, 0x0, 0x2, 0x80000001, 0xf23, 0x2000007, 0xb, 0xbfd, 0x3c, 0x5, 0x6, 0x0, 0xfffffff8]}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000240)={[{@nombcache}, {@debug}, {@norecovery}, {@grpid}, {@nodelalloc}]}, 0x9, 0x61b, &(0x7f0000000800)="$eJzs3c9rHGUfAPDvTDY/mrzvm7S8vK+92IBIC9qkSVspItjitZT64+YpNmmpTZvSRDS1YAr1oogXD4InD9b/QgtePXj14MWDSCGI9GCl2pXZzKa72Wyy+bG7SfbzgUmemcnO852Eb55nn31mJoCONZx9SSMORsT1JGKwYl8h8p3DSz/34PdbF7IliWLx9d+SuPVBslB5rCT/PpC/+O/BSH5IIw501dY7O3/zysT09NSNfH107ur10dn5m0cvX524NHVp6tr4C+OnTp44eWrs2JbOr1BRPnvn7XcHPzr35ldfPErGvv7pXBKn43EeW3ZeK1/bu6Was9/ZcBSXPHyyNS19PbXFY+8UfwxW/44zycoN7FgX8xzpjoj/x2B0Vfw1B+PDV9saHNBUxSTKbRTQcZL187+7dlNfc4IBWqjcDyi/t1/tfXCttMm9EqAVFs8sDQAs5X53RJTzv7A0Nhh9pbGB/gdJ1ThPEhFbG5lbktXx/Xfn7mRL1BmHA5pj4XZ5lHtl+5+UcnMo+kpr/Q/SqvxPK5Zs+2ubrH94xbr8h9ZZuB0RT+Xtf09sOv/f2mT98h8AAAAAAAC2z70zEfH8avP/0uX5Pz2rzP8ZiIjT21D/+p//pffzQrIN1QEVFs9EvFQz//evytnBQ1355/z/Ls0H6E4vXp6eOhYR/4mII9Hdm62PVR+2aoLw0U8OfF6v/sr5f9mS1V+eC5gf6n5hxYW4kxNzE9tz9tDZFm9HPCzN/z2Ub6me/5O1/0lN+//xK1mCX2+wjgPP3j1fteGXJ/8e1s9/oFmKX0YcXvX6nyfd7WTt+3OMlvoDo+VeQa2n3//0m3r1y39on6z97187/3uTyvv1zG7s+D0RcXy+UKy3f7P9/57kja7y8TPvTczN3RiL6EnO1m4f31jMsFeV86GcL1n+H3lm7fG/5f5/RR7ui4iFBuv83+OBn+vt0/5D+2T5P7l2+z9U3f5vtNAX43eHvs1vMVbjfEPt/4lSm34k32L8DyrV3o+j0QRtS7gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsMulEfGvSNKR5XKajoxEDETEf6M/nZ6ZnXvu4sw71yazfdXP/x9cWk/Kz/8fqlgfX7F+PCL2R8RnXftK6yMXZqYn233yAAAAAAAAAAAAAAAAAAAAsEMMlK75L/auvP4/82tXu6MDmq6Qf5fv0HkKm35lsXdbAwFabvP5D+x2jed/d1PjAFqvfv4/fFQsaWk4QAvp/0Pn2mT++7gA9gDtP3SqBsf0+podB9AODbf/i82NAwAAAAAA2Bb7D937MYmIhRf3lZZMT77PZH/Y29J2BwC0jTm80LkKM+2OAGgX7/GBZLn056oX+9ef/Z80JyAAAAAAAAAAAAAAoMbhg67/h06VRqzxCG9z+2EvW+P6/9WS3+0CYA+p/+iPRtr+RA8BdjHv8YH12nHX/wMAAAAAAAAAAADADtB388rE9PTUjdn53Vd4eWeEsbHCwsSOCGNbC4/X+5nyY+Y3duTuiNgZJ9jqQvkWHG0Mo43/kwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCr/BAAA///kPC2+") 2m16.794806126s ago: executing program 5 (id=616): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x1298c2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x840) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200) 2m15.441759329s ago: executing program 5 (id=618): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) connect$rose(0xffffffffffffffff, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffffe, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast]}, 0x1c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000004c0)=0xff) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0xff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2m12.79358025s ago: executing program 5 (id=620): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000680)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) r2 = socket(0x10, 0x803, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x6, &(0x7f0000001b00)=ANY=[], 0x0, 0x1b7, &(0x7f0000000440)="$eJzsVbtuGkEUPQPLQlIkqaNIFEEJKcI+SKJ0pIr4gLRRsoINQVnyYJFiEMW64j/c8Bsu3Lux5MKSG7uwLbnAcmthzcydZZBcGMsWIM2Rljv3feeyOvsz/hcDwNVk2MAnCNh4ggPGYAEosoywfc5L35ktZYX0E0vKN2TfIjklxP3BryCKwu4DHm72ybmBRSrWKEd37U2+Pl20zlod2B0Wpe95NW6x/MO3rNzj/RS8XPZ1utZKbPX2B6Zb+EsdRLOA2mYG5+JN358MG/zwnViK25ryYXoM/zd3tJjnlnhYFtM0hpMfV14DcHqdv07cH7xtd4JW2Ap/+371g/vOdd/7Tq4dha7zg/8yrYWiKC4593JOfaT5cwAOiWAfQ8OpbKtGIz/TczkPT4mkyy8xh4yWq2Qe22kupYnOX/AKBQD/E8UTfDElUcWCuFIdDFlSPBoXLO1VEI5K40/UHIGBqbQxrLSGd4ScUOzZjNJT/Zgo04hkiWSd5FiKqoorsvlvkSUqHJNWTviIG0Gv1/XsXUrx+FdP2Hxbef1nib4w3vXCnr/cizwMDAwMDAwMDNYM1wEAAP//mBFURQ==") sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40850) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/address_bits', 0x202, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8}, 0x48) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000040)={0x3219, 0xfffffff9, 0x10000, {0x6ee, 0x4}, 0xffffffff, 0xc}) write$P9_RSYMLINK(r3, &(0x7f0000000680)={0x14, 0x11, 0x1, {0x20, 0x7, 0x7}}, 0x14) write$P9_RSYMLINK(r3, 0x0, 0x0) 2m11.420813849s ago: executing program 5 (id=621): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001780)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x2}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x8, 0x8, 0x8, 0xcfe, 0x3, 0x80000000, 0x8a5, 0x6, 0x10, 0x8, 0xb, 0x2, 0xf6cb, 0x6ab, 0x5, 0x9, 0x8, 0x6, 0x0, 0x4, 0x7fffffff, 0x10000, 0x7, 0x0, 0x0, 0x7, 0x6, 0xfffffffe, 0x372b, 0xfffffffe, 0x1000, 0xfffffffa, 0x8, 0xae6, 0x6, 0xfffffffc, 0x1, 0x0, 0x7e, 0x8, 0x9d, 0x3, 0x240, 0x1, 0x7, 0x7, 0x6, 0x1000, 0x2007, 0xb, 0x401, 0x789f, 0x7ff, 0x3, 0x8, 0x800, 0x9, 0x10000, 0x6, 0xff, 0x8, 0x8226, 0x400, 0x401, 0xc709, 0x7, 0x5, 0x3, 0x7, 0x10000, 0x4, 0x40, 0x8, 0xc1, 0x7, 0x3ff, 0x200, 0x1, 0x6, 0x7fffffff, 0xfffffff9, 0x3, 0xa, 0xfffffffc, 0x1, 0x0, 0x9, 0x2, 0x4, 0x2, 0xc, 0x7b, 0xff, 0x800, 0x4, 0x80, 0x5, 0x4, 0x5, 0x1000, 0x5, 0x7, 0x40, 0x4d27, 0x2, 0x6, 0x8226, 0xe, 0x81, 0x3, 0x5, 0x3800000, 0xf12, 0x0, 0x2, 0x8911, 0x9, 0x7f41, 0x9, 0x2, 0x0, 0x3, 0x8, 0x2, 0x2, 0x2, 0xd098, 0x9, 0x8, 0x3, 0xa, 0xf7, 0x4, 0x3, 0x3, 0x0, 0xfffffffc, 0x0, 0x1, 0x81, 0xffff6660, 0x1, 0x3, 0x4, 0x0, 0x9, 0x3, 0x6, 0x5, 0xd7a, 0xfffffff9, 0x3, 0x8, 0x2, 0xfffffffd, 0x3864, 0x4, 0xb, 0x1, 0x4, 0x4c, 0x82ca, 0x4eeb, 0x6, 0xbdd, 0x5fdf, 0xc, 0x3, 0x10000, 0x9, 0x54, 0x8, 0x8, 0x800, 0x1ff, 0x9, 0xccc, 0x1, 0x7, 0x7ff, 0x4, 0xe, 0xc, 0xb, 0x80000001, 0x8001, 0x4, 0x9, 0xfffffffe, 0xfffffffa, 0x6, 0xb, 0x7ff, 0x1, 0x10, 0x2, 0x1, 0x4a0, 0x6, 0x0, 0x3ff, 0x9, 0x7, 0x1, 0x5, 0x7, 0x1, 0xfffffe01, 0x8001, 0x6, 0x3, 0x3, 0x9, 0x2, 0x4, 0x0, 0x1, 0x100, 0x4, 0x3, 0xffffff00, 0x6, 0x4, 0x3, 0x6, 0x5, 0x5c49, 0x7f, 0x7, 0x8cc7, 0x7, 0x0, 0x1, 0xcc99, 0x3, 0xb, 0x0, 0xffff, 0x0, 0xb64, 0x4, 0xf, 0x9, 0x77dc, 0x8, 0x1, 0x4, 0x7ff, 0x676, 0x10, 0x8, 0xffff, 0xfff, 0x8, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r9) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r8, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 1m55.606768833s ago: executing program 42 (id=621): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001780)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x2}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x8, 0x8, 0x8, 0xcfe, 0x3, 0x80000000, 0x8a5, 0x6, 0x10, 0x8, 0xb, 0x2, 0xf6cb, 0x6ab, 0x5, 0x9, 0x8, 0x6, 0x0, 0x4, 0x7fffffff, 0x10000, 0x7, 0x0, 0x0, 0x7, 0x6, 0xfffffffe, 0x372b, 0xfffffffe, 0x1000, 0xfffffffa, 0x8, 0xae6, 0x6, 0xfffffffc, 0x1, 0x0, 0x7e, 0x8, 0x9d, 0x3, 0x240, 0x1, 0x7, 0x7, 0x6, 0x1000, 0x2007, 0xb, 0x401, 0x789f, 0x7ff, 0x3, 0x8, 0x800, 0x9, 0x10000, 0x6, 0xff, 0x8, 0x8226, 0x400, 0x401, 0xc709, 0x7, 0x5, 0x3, 0x7, 0x10000, 0x4, 0x40, 0x8, 0xc1, 0x7, 0x3ff, 0x200, 0x1, 0x6, 0x7fffffff, 0xfffffff9, 0x3, 0xa, 0xfffffffc, 0x1, 0x0, 0x9, 0x2, 0x4, 0x2, 0xc, 0x7b, 0xff, 0x800, 0x4, 0x80, 0x5, 0x4, 0x5, 0x1000, 0x5, 0x7, 0x40, 0x4d27, 0x2, 0x6, 0x8226, 0xe, 0x81, 0x3, 0x5, 0x3800000, 0xf12, 0x0, 0x2, 0x8911, 0x9, 0x7f41, 0x9, 0x2, 0x0, 0x3, 0x8, 0x2, 0x2, 0x2, 0xd098, 0x9, 0x8, 0x3, 0xa, 0xf7, 0x4, 0x3, 0x3, 0x0, 0xfffffffc, 0x0, 0x1, 0x81, 0xffff6660, 0x1, 0x3, 0x4, 0x0, 0x9, 0x3, 0x6, 0x5, 0xd7a, 0xfffffff9, 0x3, 0x8, 0x2, 0xfffffffd, 0x3864, 0x4, 0xb, 0x1, 0x4, 0x4c, 0x82ca, 0x4eeb, 0x6, 0xbdd, 0x5fdf, 0xc, 0x3, 0x10000, 0x9, 0x54, 0x8, 0x8, 0x800, 0x1ff, 0x9, 0xccc, 0x1, 0x7, 0x7ff, 0x4, 0xe, 0xc, 0xb, 0x80000001, 0x8001, 0x4, 0x9, 0xfffffffe, 0xfffffffa, 0x6, 0xb, 0x7ff, 0x1, 0x10, 0x2, 0x1, 0x4a0, 0x6, 0x0, 0x3ff, 0x9, 0x7, 0x1, 0x5, 0x7, 0x1, 0xfffffe01, 0x8001, 0x6, 0x3, 0x3, 0x9, 0x2, 0x4, 0x0, 0x1, 0x100, 0x4, 0x3, 0xffffff00, 0x6, 0x4, 0x3, 0x6, 0x5, 0x5c49, 0x7f, 0x7, 0x8cc7, 0x7, 0x0, 0x1, 0xcc99, 0x3, 0xb, 0x0, 0xffff, 0x0, 0xb64, 0x4, 0xf, 0x9, 0x77dc, 0x8, 0x1, 0x4, 0x7ff, 0x676, 0x10, 0x8, 0xffff, 0xfff, 0x8, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r9) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r8, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 17.864107612s ago: executing program 9 (id=289): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) ioctl$OCFS2_IOC_GROUP_ADD(0xffffffffffffffff, 0x40186f02, &(0x7f00000000c0)={0x3, 0x2, 0x3, 0x1}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x1a) 16.404635674s ago: executing program 9 (id=688): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, &(0x7f0000000300)) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000600)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYBLOB="030026bd7000fcdbdf251500000008000300", @ANYRES32=r5], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 13.209329556s ago: executing program 1 (id=689): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}]}) 13.145879238s ago: executing program 3 (id=690): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r1, 0x3, 0x8, 0x7}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'hsr0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b04200000000000000002000000540004803c0001800a0001006c696d69740000002c0002800c00024000000000"], 0xa8}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000280)={0x3c, r4, 0x1, 0x70bd22, 0x40, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x16}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES8=r4, @ANYRESHEX=r2, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="00001700", @ANYRESHEX=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r11, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r11, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044040}, 0x0) 11.710205583s ago: executing program 9 (id=691): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) pipe2$watch_queue(&(0x7f0000000100), 0x80) socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x5, 0x6e7, &(0x7f0000002a00)="$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") symlink(0x0, 0x0) mknod$loop(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20, 0x0) creat(&(0x7f0000002280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44) r1 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES16=r2, @ANYRES32=r3, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000808) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) 11.528853543s ago: executing program 1 (id=692): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000100)=""/186, &(0x7f00000001c0)=0xba) sendto$packet(r1, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) epoll_create1(0x80000) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001f6c0)=""/102400, 0x19000) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x44040) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 9.622091995s ago: executing program 3 (id=693): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r3, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000000c80)='\v', 0x1}], 0x1}}], 0x1, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcdf, 0x1, 0x0}, &(0x7f00000000c0)=0x40) 6.297095508s ago: executing program 3 (id=694): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) ioctl$KVM_CAP_MEMORY_FAULT_INFO(0xffffffffffffffff, 0x4068aea3, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0xc0c4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x8400, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) write$rfkill(0xffffffffffffffff, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r1, &(0x7f00000011c0)=""/4117, 0x200021d5) socket$nl_rdma(0x10, 0x3, 0x14) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 5.370464595s ago: executing program 1 (id=695): mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, 0x0, 0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, 0x0, 0x8000) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000001080)={{0x0, 0x989680}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, 0x0, 0x4000041) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00), 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x3f000000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000200)={{0x5, 0x0, 0x0, 0x0, 'syz1\x00', 0x800}, 0x0, [0x20000000, 0x0, 0x1, 0x3, 0xab10, 0x2000000, 0x0, 0x0, 0xfffffffffffffeff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xe0000000, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x7fff, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0x80000000, 0x0, 0x0, 0x1, 0x9, 0x4, 0x9, 0x0, 0x0, 0xd09, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x20000000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x203, 0xfffffffffffffff8, 0x4000000, 0x0, 0x0, 0x0, 0x609, 0x4, 0x3, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffc, 0x0, 0x16, 0xfffffffffffffffa, 0x200000000000000, 0x0, 0x0, 0x3fff800, 0x0, 0x8000000000000000, 0x2, 0x20, 0x40, 0x80, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0x8000000000000001, 0x101, 0x0, 0x0, 0x0, 0x4000000000]}) 3.985410806s ago: executing program 3 (id=696): openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) fcntl$dupfd(r0, 0x0, r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket(0x10, 0x3, 0x0) timerfd_create(0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x3, &(0x7f0000000380)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080d0) 3.935960215s ago: executing program 1 (id=697): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) write$binfmt_script(r1, &(0x7f0000000a80), 0x4) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x40000002, 0x0) writev(r1, &(0x7f0000000180), 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000380)="ac", 0x1}], 0x1) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000f40), 0x0, 0x4048841) 3.422311262s ago: executing program 3 (id=698): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000020c0)=0x15) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48200, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$eJzs3E9rXOUaAPDnnCZtb5t7Jxfu4uJKqFih9iRN1a6EiOtCoR+ghslJCDnJhMykNjFg68KFIKgI/ulGv4EbRXBT+h0UwZ2CC0FrGheCi8iZzEx1OpOObdKR+vvBmfO875kzz/vMHF7mwLwTwD/W4+VDEjEWERciotLqTyPicDM6GnF193m3tzar21ub1SR2di7eSsrTmn3t10pa++PRPCX+HxE3RyNOvXZ33vr6xuJMUeSrrfZEY2llor6+cXphaWY+n8+XpyYnz559burZZyb3rdY3X/nkpzc+f/HLD88t/fb8radnk5hu1h1ddeyn3fdkNKa7+pcPItkQJcMeAAAAAym/5x+KiJHmt9RKHGpGAAAAwKNk58gOAAAA8MhLYtgjAAAAAA5W+3cAt7c2q+3tYf7+4McXImL8ztri7U7+keYa4oijMRoRx7aTP61MSHZPgwdy9VpE3Jjucf0nrevv/nWvXLdG+u/nRjn/TPea/9LO/BM95p+R9n8nPKD2/Ld91/x3J/+hPvPfhQFzHFk9+VXf/NciHhvplT/p5E/65H9pwPyfjn3zbb9jOx9HnIze+f+Ya4//h5iYWyjy1mPPHCc+e/XUXvUf65c/2bv+lQHr/+761Hy/uaTM/9SJvT//XvnLa+Kt1jjSiHi7tS/b73TlePLm5Ad71T/bp/57ff4fDVj/F69vfD/gUwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKApjYixSNKsE6dplkUcj4j/xbG0qNUbp+Zqa8uz5bGI8RhN5xaKfDIiKrvtpGyfacZ32lNd7bMR8d+IeLfyr2Y7q9aK2WEXDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMfxiBiLJM0iIo2IXyppmmXDHhUAAACw78aHPQAAAADgwLn/BwAAgEef+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgIbhw/ny57WxvbVbL9uzl9bXF2uXTs3l9MVtaq2bV2upKNl+rzRd5Vq0t3ev1ilpt5Vwsr12ZaOT1xkR9fePSUm1tuXFpYWlmPr+Ujz6UqgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPirxppbkmYRkTbjNM2yiH9HxHiMJnMLRT4ZEf+JiK8ro0fK9plhDxoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB9V1/fWJwpinxVIBAIOsGwZyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIahvr6xOFMU+Wp92CMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABguNIfkogot5OVJ8a6jx5Ofq009xHx8vWL712ZaTRWz5T9P3f6G++3+qeGMX4AAACgW/s+vX0fDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMKj6+sbiTFHkqwcYDLtGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/vweAAD//4rSy1s=") r2 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r2, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x804, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1.875786679s ago: executing program 1 (id=699): sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x1, 0x5, 0x9, 0x10008, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0xffffffff, 0x2, 0x6, 0x7, 0x81, 0x9, 0x79, 0x25713dc3, 0x10000, 0x0, 0x95, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1000, 0xef1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x8, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x7, 0xf1, 0x4, 0x1, 0xffff, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0xfffffffe, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x408, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x4, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0x40bfc, 0x8, 0x5, 0x7f, 0x2a29, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x1, 0x19d86, 0xd, 0xfffffff7, 0x8, 0x6, 0x5396, 0x3, 0x200006, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x8, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x201, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8008, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x10, 0x80000001, 0x3, 0x1, 0xd, 0xefe, 0x0, 0x0, 0x8}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.330894479s ago: executing program 3 (id=700): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000e56000/0x4000)=nil, 0x4000, 0x11) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a05000100"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd844", 0x4d}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 101.053008ms ago: executing program 1 (id=701): socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$igmp6(0xa, 0x3, 0x2) sendto$inet6(r0, &(0x7f00000008c0), 0x0, 0x4000000, 0x0, 0x0) r1 = socket(0x1e, 0x7, 0x0) setsockopt(r1, 0x107, 0x1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4804) 0s ago: executing program 9 (id=702): pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x79df, &(0x7f0000000500)={0x0, 0x72de, 0x800, 0x1, 0x3a8}, &(0x7f0000000340), &(0x7f0000000280), &(0x7f0000000000)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) readv(r3, 0x0, 0x0) prlimit64(r0, 0xd, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) r4 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000d, 0x12, r4, 0x180000000) clock_getres(0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): set [1, 0] type 2 family 0 port 6081 - 0 [ 776.979111][ T9666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.980027][ T159] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.016435][ T159] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.021308][ T9666] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.726767][ T1287] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.726982][ T1287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 778.832190][ T1287] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.835425][ T1287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 778.851812][ T9853] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 778.882429][ T9853] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 778.882800][ T1305] bridge_slave_1: left allmulticast mode [ 778.882823][ T1305] bridge_slave_1: left promiscuous mode [ 778.883103][ T1305] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.970534][ T1305] bridge_slave_0: left allmulticast mode [ 778.970555][ T1305] bridge_slave_0: left promiscuous mode [ 778.970707][ T1305] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.033353][ T1305] bridge_slave_1: left allmulticast mode [ 779.033373][ T1305] bridge_slave_1: left promiscuous mode [ 779.033520][ T1305] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.093795][ T1305] bridge_slave_0: left allmulticast mode [ 779.093815][ T1305] bridge_slave_0: left promiscuous mode [ 779.093974][ T1305] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.030253][ T1305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 780.090394][ T1305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 780.131693][ T1305] bond0 (unregistering): Released all slaves [ 780.650379][ T1305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 780.710644][ T1305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 780.736368][ T1305] bond0 (unregistering): Released all slaves [ 780.771702][ T3165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 780.771720][ T3165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.849593][ T9853] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 780.896393][ T9853] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 781.282732][ T9853] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 781.364076][ T9853] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 781.391959][ T9853] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 781.510572][ T9853] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 782.052132][ T8786] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.052152][ T8786] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.266569][T10153] syzkaller0: entered promiscuous mode [ 783.266595][T10153] syzkaller0: entered allmulticast mode [ 783.819341][ T9654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 784.268747][T10160] loop0: detected capacity change from 0 to 2048 [ 785.014886][T10160] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 785.032897][T10160] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 786.312353][T10160] overlayfs: failed index dir cleanup (-512) [ 786.312365][T10160] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 786.389124][ T1305] hsr_slave_0: left promiscuous mode [ 786.420895][ T1305] hsr_slave_1: left promiscuous mode [ 786.421967][ T1305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 786.421982][ T1305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 786.457539][ T9578] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.498981][ T1305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 786.499004][ T1305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 786.800249][ T1305] hsr_slave_0: left promiscuous mode [ 786.955094][T10171] befs: (nullb0): invalid magic header [ 787.671991][ T1305] hsr_slave_1: left promiscuous mode [ 787.675952][ T1305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 787.675980][ T1305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 787.740205][ T1305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 787.740230][ T1305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 787.992380][ T1305] veth1_macvtap: left promiscuous mode [ 787.992444][ T1305] veth0_macvtap: left promiscuous mode [ 787.998470][ T1305] veth1_vlan: left promiscuous mode [ 787.998633][ T1305] veth0_vlan: left promiscuous mode [ 788.690077][ T1305] veth1_macvtap: left promiscuous mode [ 788.690181][ T1305] veth0_macvtap: left promiscuous mode [ 788.690422][ T1305] veth1_vlan: left promiscuous mode [ 788.690577][ T1305] veth0_vlan: left promiscuous mode [ 791.169181][T10187] loop0: detected capacity change from 0 to 512 [ 791.208706][T10187] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 791.208837][T10187] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 792.650529][ T1305] team0 (unregistering): Port device team_slave_1 removed [ 792.664814][ T9578] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 792.743176][ T1305] team0 (unregistering): Port device team_slave_0 removed [ 795.209908][T10204] loop0: detected capacity change from 0 to 32768 [ 795.217316][T10204] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.519 (10204) [ 795.228185][T10204] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 795.228216][T10204] BTRFS info (device loop0): using sha256 checksum algorithm [ 795.279132][ T1305] team0 (unregistering): Port device team_slave_1 removed [ 795.393090][T10204] BTRFS info (device loop0): enabling ssd optimizations [ 795.393108][T10204] BTRFS info (device loop0): turning on async discard [ 795.393117][T10204] BTRFS info (device loop0): enabling free space tree [ 795.397615][ T1305] team0 (unregistering): Port device team_slave_0 removed [ 796.993014][ T9578] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 797.791257][ T9666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 798.578976][ T9883] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 798.843939][ T9883] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 798.991817][ T9883] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 799.033583][ T9883] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 799.151484][T10243] loop0: detected capacity change from 0 to 16 [ 799.831519][T10243] erofs (device loop0): mounted with root inode @ nid 36. [ 799.885766][ T9883] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 799.965039][ T9883] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 800.004889][ T9654] veth0_vlan: entered promiscuous mode [ 800.168600][ T9883] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 800.243195][ T9883] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 800.522713][ T9853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.313918][ T9654] veth1_vlan: entered promiscuous mode [ 801.590468][ T9853] 8021q: adding VLAN 0 to HW filter on device team0 [ 801.612405][ T159] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.612694][ T159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 801.641390][ T9666] veth0_vlan: entered promiscuous mode [ 801.654658][ T1241] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.654792][ T1241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 801.687346][ T9666] veth1_vlan: entered promiscuous mode [ 801.947988][T10272] lo speed is unknown, defaulting to 1000 [ 801.950157][T10272] lo speed is unknown, defaulting to 1000 [ 802.022985][T10272] lo speed is unknown, defaulting to 1000 [ 802.061442][T10272] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 802.061515][T10272] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 802.061586][T10272] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 802.134437][T10272] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 802.357757][T10272] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 802.398142][T10271] loop0: detected capacity change from 0 to 512 [ 802.486123][T10272] lo speed is unknown, defaulting to 1000 [ 802.488687][T10272] lo speed is unknown, defaulting to 1000 [ 802.491170][T10272] lo speed is unknown, defaulting to 1000 [ 802.493622][T10272] lo speed is unknown, defaulting to 1000 [ 802.496076][T10272] lo speed is unknown, defaulting to 1000 [ 803.029321][ T9654] veth0_macvtap: entered promiscuous mode [ 803.100751][ T9654] veth1_macvtap: entered promiscuous mode [ 803.142932][ T9666] veth0_macvtap: entered promiscuous mode [ 804.306477][ T9666] veth1_macvtap: entered promiscuous mode [ 804.330551][ T9654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 804.398678][ T9883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 804.614082][ T9654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 804.652633][ T9666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 804.964594][ T71] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.970070][ T9666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 805.180371][T10303] loop0: detected capacity change from 0 to 8 [ 805.352623][T10303] SQUASHFS error: xz decompression failed, data probably corrupt [ 805.352834][T10303] SQUASHFS error: Failed to read block 0x108: -5 [ 805.352896][T10303] SQUASHFS error: Unable to read metadata cache entry [106] [ 805.352954][T10303] SQUASHFS error: Unable to read inode 0x11f [ 805.868547][ T71] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.890499][ T71] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.972528][ T71] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.986034][ T9883] 8021q: adding VLAN 0 to HW filter on device team0 [ 806.001477][ T159] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.006159][ T159] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.014625][ T159] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.031195][ T159] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.031324][ T159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 806.031959][ T71] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.255988][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.256128][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.710209][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 806.773631][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 806.803109][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 806.806639][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 806.963734][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 807.324392][ T5143] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 807.416231][ T5143] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 807.423244][ T5143] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 807.424699][ T5143] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 807.425448][ T5143] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 807.733560][ T9853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 809.420744][ T61] Bluetooth: hci5: command tx timeout [ 809.478563][T10341] netlink: 68 bytes leftover after parsing attributes in process `syz.0.528'. [ 809.742952][ T61] Bluetooth: hci6: command tx timeout [ 810.324635][T10345] loop0: detected capacity change from 0 to 4096 [ 810.325622][T10345] EXT4-fs: inline encryption not supported [ 810.337335][T10345] EXT4-fs (loop0): Test dummy encryption mode enabled [ 810.369651][T10345] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 810.369787][T10345] System zones: 0-5 [ 810.378356][T10345] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 810.605867][T10313] lo speed is unknown, defaulting to 1000 [ 811.458962][T10318] lo speed is unknown, defaulting to 1000 [ 811.471800][T10351] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 811.559845][ T61] Bluetooth: hci5: command tx timeout [ 811.712142][ T9578] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.808130][ T61] Bluetooth: hci6: command tx timeout [ 813.338809][T10366] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 813.907201][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.907266][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.911634][ T61] Bluetooth: hci5: command tx timeout [ 813.911668][ T61] Bluetooth: hci6: command tx timeout [ 814.104444][T10368] loop0: detected capacity change from 0 to 2048 [ 814.160460][T10368] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 814.160545][T10368] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 814.376224][ T1305] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.706164][ T9578] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.059259][ T5143] Bluetooth: hci6: command tx timeout [ 816.059294][ T5143] Bluetooth: hci5: command tx timeout [ 816.162982][ T1305] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.639656][ T9853] veth0_vlan: entered promiscuous mode [ 816.647809][ T5488] 8021q: adding VLAN 0 to HW filter on device eth17 [ 816.691695][ T9883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 817.364082][T10402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.535'. [ 818.296887][ T1305] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.581888][T10313] chnl_net:caif_netlink_parms(): no params data found [ 818.728522][T10318] chnl_net:caif_netlink_parms(): no params data found [ 819.511698][ T9853] veth1_vlan: entered promiscuous mode [ 820.956272][ T1305] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.261353][T10313] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.261545][T10313] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.261750][T10313] bridge_slave_0: entered allmulticast mode [ 821.264702][T10313] bridge_slave_0: entered promiscuous mode [ 821.294377][T10318] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.294512][T10318] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.294698][T10318] bridge_slave_0: entered allmulticast mode [ 821.298084][T10318] bridge_slave_0: entered promiscuous mode [ 821.321042][T10313] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.321215][T10313] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.321431][T10313] bridge_slave_1: entered allmulticast mode [ 821.323419][T10313] bridge_slave_1: entered promiscuous mode [ 821.342851][T10318] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.342960][T10318] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.343179][T10318] bridge_slave_1: entered allmulticast mode [ 821.348585][T10318] bridge_slave_1: entered promiscuous mode [ 821.526302][T10313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 821.549369][T10318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 821.739310][T10441] loop0: detected capacity change from 0 to 2048 [ 821.770429][T10441] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 821.770523][T10441] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 822.208777][ T5143] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 822.289606][ T5143] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 822.348066][ T5143] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 822.374563][ T5143] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 822.375295][ T5143] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 822.378043][T10313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 822.386300][T10318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 822.438035][ T9578] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.891606][ T61] Bluetooth: hci0: command tx timeout [ 825.155845][T10313] team0: Port device team_slave_0 added [ 825.164179][T10318] team0: Port device team_slave_0 added [ 825.348753][T10313] team0: Port device team_slave_1 added [ 825.364130][T10318] team0: Port device team_slave_1 added [ 826.929550][ T61] Bluetooth: hci0: command tx timeout [ 826.981475][T10313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 826.981492][T10313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 826.981517][T10313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 827.008777][T10318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 827.008793][T10318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 827.008817][T10318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 827.086373][ T5143] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 827.166442][ T5143] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 827.168299][ T5143] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 827.186822][ T5143] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 827.187560][ T5143] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 827.367114][T10313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 827.367129][T10313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 827.367150][T10313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 827.371883][T10318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 827.371898][T10318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 827.371923][T10318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 827.531379][T10445] lo speed is unknown, defaulting to 1000 [ 827.985344][T10467] loop0: detected capacity change from 0 to 8 [ 828.202345][ T1305] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.006686][ T61] Bluetooth: hci0: command tx timeout [ 829.243379][T10313] hsr_slave_0: entered promiscuous mode [ 829.244723][T10313] hsr_slave_1: entered promiscuous mode [ 829.245635][T10313] debugfs: 'hsr0' already exists in 'hsr' [ 829.245657][T10313] Cannot create hsr debugfs directory [ 829.421622][ T61] Bluetooth: hci2: command tx timeout [ 829.439746][ T32] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 829.463412][ T1305] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.517124][T10318] hsr_slave_0: entered promiscuous mode [ 829.517877][T10318] hsr_slave_1: entered promiscuous mode [ 829.518528][T10318] debugfs: 'hsr0' already exists in 'hsr' [ 829.518544][T10318] Cannot create hsr debugfs directory [ 829.573118][T10464] lo speed is unknown, defaulting to 1000 [ 829.616823][ T32] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 829.616854][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.635533][ T32] usb 1-1: config 0 descriptor?? [ 829.692595][ T32] cp210x 1-1:0.0: cp210x converter detected [ 829.839195][ T32] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 829.839336][ T32] cp210x 1-1:0.0: querying part number failed [ 829.948302][ T32] usb 1-1: cp210x converter now attached to ttyUSB0 [ 830.030002][ T1305] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.405534][ T1305] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.975957][T10445] chnl_net:caif_netlink_parms(): no params data found [ 831.081043][ T61] Bluetooth: hci0: command tx timeout [ 831.453440][T10445] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.453558][T10445] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.453746][T10445] bridge_slave_0: entered allmulticast mode [ 831.458138][T10445] bridge_slave_0: entered promiscuous mode [ 831.480021][ T61] Bluetooth: hci2: command tx timeout [ 831.480605][T10464] chnl_net:caif_netlink_parms(): no params data found [ 831.508035][T10445] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.508197][T10445] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.508346][T10445] bridge_slave_1: entered allmulticast mode [ 831.524857][T10445] bridge_slave_1: entered promiscuous mode [ 831.579906][ T1305] bridge_slave_1: left allmulticast mode [ 831.579925][ T1305] bridge_slave_1: left promiscuous mode [ 831.580062][ T1305] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.652179][ T1305] bridge_slave_0: left allmulticast mode [ 831.652201][ T1305] bridge_slave_0: left promiscuous mode [ 831.652346][ T1305] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.713021][ T1305] bridge_slave_1: left allmulticast mode [ 831.713042][ T1305] bridge_slave_1: left promiscuous mode [ 831.713186][ T1305] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.775892][ T1305] bridge_slave_0: left allmulticast mode [ 831.775914][ T1305] bridge_slave_0: left promiscuous mode [ 831.776067][ T1305] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.249784][ T5839] usb 1-1: USB disconnect, device number 6 [ 832.400409][T10485] loop0: detected capacity change from 0 to 2048 [ 832.539985][T10485] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 832.540076][T10485] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 832.599177][ T5839] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 832.631218][ T5839] cp210x 1-1:0.0: device disconnected [ 832.907119][ T9578] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 833.641424][ T61] Bluetooth: hci2: command tx timeout [ 835.339955][T10498] tmpfs: Bad value for 'nr_blocks' [ 835.343428][T10498] loop0: detected capacity change from 0 to 128 [ 835.344515][T10498] EXT4-fs: Ignoring removed i_version option [ 835.816806][ T61] Bluetooth: hci2: command tx timeout [ 836.416810][T10498] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0003] [ 836.416922][T10498] System zones: 1-3, 19-19, 35-36 [ 836.454495][T10498] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 836.508695][T10498] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 836.600656][ T1305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 836.712034][ T1305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 836.736307][ T9578] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 836.806070][ T1305] bond0 (unregistering): Released all slaves [ 837.410348][ T1305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 837.470270][ T1305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 837.511792][ T1305] bond0 (unregistering): Released all slaves [ 838.175035][T10507] lo speed is unknown, defaulting to 1000 [ 838.260906][T10508] random: crng reseeded on system resumption [ 838.295340][T10508] Restarting kernel threads ... [ 838.297029][T10508] Done restarting kernel threads. [ 839.009225][T10445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 839.051398][T10445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 839.201753][T10445] team0: Port device team_slave_0 added [ 839.227954][T10445] team0: Port device team_slave_1 added [ 839.230351][T10464] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.230567][T10464] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.230783][T10464] bridge_slave_0: entered allmulticast mode [ 839.235923][T10464] bridge_slave_0: entered promiscuous mode [ 839.271403][T10464] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.271522][T10464] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.271713][T10464] bridge_slave_1: entered allmulticast mode [ 839.274722][T10464] bridge_slave_1: entered promiscuous mode [ 839.412477][T10445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 839.412493][T10445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.412518][T10445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 839.484798][T10445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 839.484816][T10445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.484841][T10445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 839.547123][T10464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 839.577768][T10464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 839.766348][T10464] team0: Port device team_slave_0 added [ 839.807095][T10464] team0: Port device team_slave_1 added [ 839.825576][T10445] hsr_slave_0: entered promiscuous mode [ 839.826941][T10445] hsr_slave_1: entered promiscuous mode [ 839.827884][T10445] debugfs: 'hsr0' already exists in 'hsr' [ 839.827923][T10445] Cannot create hsr debugfs directory [ 839.938065][T10464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 839.938081][T10464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.938106][T10464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 840.020327][T10464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 840.020342][T10464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 840.020368][T10464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 842.934154][T10524] loop0: detected capacity change from 0 to 2048 [ 842.949979][T10524] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 842.950063][T10524] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 843.049611][ T1305] hsr_slave_0: left promiscuous mode [ 843.092547][ T1305] hsr_slave_1: left promiscuous mode [ 843.093591][ T1305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 843.093609][ T1305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 843.131742][ T1305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 843.131766][ T1305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 843.192387][ T9578] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 843.362993][ T1305] hsr_slave_0: left promiscuous mode [ 843.399628][ T1305] hsr_slave_1: left promiscuous mode [ 843.400489][ T1305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 843.400505][ T1305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 843.420590][ T1305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 843.420617][ T1305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 843.534208][ T1305] veth1_macvtap: left promiscuous mode [ 843.534249][ T1305] veth0_macvtap: left promiscuous mode [ 843.534339][ T1305] veth1_vlan: left promiscuous mode [ 843.534415][ T1305] veth0_vlan: left promiscuous mode [ 843.569722][ T1305] veth1_macvtap: left promiscuous mode [ 843.569764][ T1305] veth0_macvtap: left promiscuous mode [ 843.569868][ T1305] veth1_vlan: left promiscuous mode [ 843.569960][ T1305] veth0_vlan: left promiscuous mode [ 844.290308][ T1305] team0 (unregistering): Port device team_slave_1 removed [ 844.350196][ T1305] team0 (unregistering): Port device team_slave_0 removed [ 844.950171][ T1305] team0 (unregistering): Port device team_slave_1 removed [ 844.992114][ T1305] team0 (unregistering): Port device team_slave_0 removed [ 845.156060][T10464] hsr_slave_0: entered promiscuous mode [ 845.156908][T10464] hsr_slave_1: entered promiscuous mode [ 845.157436][T10464] debugfs: 'hsr0' already exists in 'hsr' [ 845.157452][T10464] Cannot create hsr debugfs directory [ 845.204609][T10529] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 848.800559][T10543] random: crng reseeded on system resumption [ 848.817836][T10543] Restarting kernel threads ... [ 848.819056][T10543] Done restarting kernel threads. [ 848.893849][T10542] lo speed is unknown, defaulting to 1000 [ 853.891602][T10313] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 853.925162][T10313] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 853.927366][T10313] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 853.963904][T10313] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 853.965039][T10313] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 854.014514][T10313] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 854.015394][T10313] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 854.057960][T10313] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 854.168453][T10313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 854.205653][T10313] 8021q: adding VLAN 0 to HW filter on device team0 [ 854.312731][ T1287] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.312940][ T1287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 854.351751][ T183] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.351878][ T183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 855.150157][T10313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 855.447029][ T1305] bridge_slave_1: left allmulticast mode [ 855.447054][ T1305] bridge_slave_1: left promiscuous mode [ 855.447265][ T1305] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.530403][ T1305] bridge_slave_0: left allmulticast mode [ 855.530424][ T1305] bridge_slave_0: left promiscuous mode [ 855.530570][ T1305] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.613017][ T1305] bridge_slave_1: left allmulticast mode [ 855.613038][ T1305] bridge_slave_1: left promiscuous mode [ 855.613196][ T1305] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.690611][ T1305] bridge_slave_0: left allmulticast mode [ 855.690632][ T1305] bridge_slave_0: left promiscuous mode [ 855.690778][ T1305] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.540336][ T1305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 856.600160][ T1305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 856.657361][ T1305] bond0 (unregistering): Released all slaves [ 857.130159][ T1305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 857.191138][ T1305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 857.211600][ T1305] bond0 (unregistering): Released all slaves [ 857.740439][T10313] veth0_vlan: entered promiscuous mode [ 857.797742][T10313] veth1_vlan: entered promiscuous mode [ 858.092558][T10313] veth0_macvtap: entered promiscuous mode [ 858.141062][T10313] veth1_macvtap: entered promiscuous mode [ 858.171953][T10313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 858.212417][T10313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 858.507514][ T183] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.514260][ T183] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.514691][ T183] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.515111][ T183] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.444007][ T1305] hsr_slave_0: left promiscuous mode [ 859.501228][ T1305] hsr_slave_1: left promiscuous mode [ 859.502152][ T1305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 859.554406][ T1305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 859.709581][ T1305] hsr_slave_0: left promiscuous mode [ 859.729688][ T1305] hsr_slave_1: left promiscuous mode [ 859.730703][ T1305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 859.770434][ T1305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 859.849830][ T1305] veth1_vlan: left promiscuous mode [ 859.849936][ T1305] veth0_vlan: left promiscuous mode [ 860.300258][ T1305] team0 (unregistering): Port device team_slave_1 removed [ 860.340111][ T1305] team0 (unregistering): Port device team_slave_0 removed [ 860.730693][ T1305] team0 (unregistering): Port device team_slave_1 removed [ 860.771427][ T1305] team0 (unregistering): Port device team_slave_0 removed [ 861.094145][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 861.094165][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 861.343565][ T183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 861.343586][ T183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.188329][T10639] loop5: detected capacity change from 0 to 40427 [ 862.274772][T10641] loop0: detected capacity change from 0 to 16 [ 862.290269][T10641] erofs: Unknown parameter '5‚ser_xattr' [ 862.337456][T10641] cifs: Unknown parameter '5‚ser_xattr' [ 863.061301][T10639] F2FS-fs (loop5): invalid crc value [ 863.304508][T10639] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 863.332884][T10639] F2FS-fs (loop5): Start checkpoint disabled! [ 863.480569][T10639] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 863.482144][T10639] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 863.491700][T10318] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 863.623790][T10318] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 863.768603][T10318] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 864.727534][T10318] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 864.786312][ T5488] 8021q: adding VLAN 0 to HW filter on device eth18 [ 864.936498][T10318] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 865.022837][T10318] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 865.032623][ T71] kworker/u8:5: attempt to access beyond end of device [ 865.032623][ T71] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 865.053637][ T71] CPU: 1 UID: 0 PID: 71 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 865.053665][ T71] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 865.053677][ T71] Workqueue: writeback wb_workfn (flush-7:5) [ 865.053815][ T71] Call Trace: [ 865.053824][ T71] [ 865.053832][ T71] dump_stack_lvl+0xe8/0x150 [ 865.053857][ T71] f2fs_stop_checkpoint+0x383/0x540 [ 865.053948][ T71] f2fs_write_end_io+0x1274/0x1740 [ 865.054013][ T71] __submit_merged_bio+0x256/0x6a0 [ 865.054072][ T71] __submit_merged_write_cond+0x3c9/0x4e0 [ 865.054108][ T71] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 865.054156][ T71] f2fs_write_data_pages+0x287e/0x34f0 [ 865.054209][ T71] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 865.054240][ T71] ? __bfs+0x153/0x290 [ 865.054316][ T71] ? __pfx_hlock_conflict+0x10/0x10 [ 865.054381][ T71] ? __lock_acquire+0x6b5/0x2cf0 [ 865.054441][ T71] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 865.054461][ T71] do_writepages+0x32e/0x550 [ 865.054518][ T71] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 865.054538][ T71] ? reacquire_held_locks+0x104/0x190 [ 865.054564][ T71] ? rt_spin_lock+0x1e0/0x400 [ 865.054595][ T71] __writeback_single_inode+0x133/0x10e0 [ 865.054648][ T71] ? rt_spin_unlock+0x160/0x200 [ 865.054673][ T71] writeback_sb_inodes+0x97f/0x1980 [ 865.054713][ T71] ? lockdep_hardirqs_on+0x7a/0x110 [ 865.054747][ T71] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 865.054809][ T71] ? rcu_is_watching+0x15/0xb0 [ 865.054892][ T71] wb_writeback+0x445/0xb00 [ 865.054917][ T71] ? queue_io+0x2a1/0x440 [ 865.054951][ T71] ? __pfx_wb_writeback+0x10/0x10 [ 865.054989][ T71] wb_workfn+0x3fd/0xf20 [ 865.055014][ T71] ? __lock_acquire+0x6b5/0x2cf0 [ 865.055037][ T71] ? look_up_lock_class+0x57/0x110 [ 865.055078][ T71] ? __pfx_wb_workfn+0x10/0x10 [ 865.055108][ T71] ? do_raw_spin_lock+0x12b/0x2f0 [ 865.055126][ T71] ? lock_acquire+0x106/0x350 [ 865.055151][ T71] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 865.055174][ T71] ? process_scheduled_works+0xa69/0x1910 [ 865.055221][ T71] ? process_scheduled_works+0xa69/0x1910 [ 865.055249][ T71] ? process_scheduled_works+0xa69/0x1910 [ 865.055268][ T71] ? process_scheduled_works+0xa69/0x1910 [ 865.055289][ T71] process_scheduled_works+0xb68/0x1910 [ 865.055341][ T71] ? __pfx_process_scheduled_works+0x10/0x10 [ 865.055368][ T71] ? assign_work+0x3d5/0x5e0 [ 865.055393][ T71] worker_thread+0xa90/0x1040 [ 865.055438][ T71] kthread+0x388/0x470 [ 865.055486][ T71] ? __pfx_worker_thread+0x10/0x10 [ 865.055503][ T71] ? __pfx_kthread+0x10/0x10 [ 865.055528][ T71] ret_from_fork+0x514/0xb70 [ 865.055581][ T71] ? __pfx_ret_from_fork+0x10/0x10 [ 865.055601][ T71] ? __switch_to+0xc79/0x1410 [ 865.055675][ T71] ? __pfx_kthread+0x10/0x10 [ 865.055699][ T71] ret_from_fork_asm+0x1a/0x30 [ 865.055736][ T71] [ 865.097618][ T71] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 865.207097][T10652] loop0: detected capacity change from 0 to 2048 [ 865.368176][T10652] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 865.368268][T10652] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 865.817068][T10318] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 865.995657][T10318] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 866.510281][ T9578] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 866.551924][ T5488] 8021q: adding VLAN 0 to HW filter on device eth9 [ 867.123339][T10685] siw: device registration error -23 [ 867.381768][ T5143] Bluetooth: hci1: command 0x0406 tx timeout [ 867.681742][T10685] loop5: detected capacity change from 0 to 512 [ 868.117523][T10445] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 868.436233][T10445] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 868.464758][T10445] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 868.945812][T10445] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 868.968848][T10445] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 869.037028][T10445] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 869.142991][T10445] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 869.271944][T10445] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 869.647345][ T5143] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 870.620739][ T5143] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 870.638369][ T5143] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 870.684255][ T5143] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 870.697010][ T5143] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 872.764142][ T61] Bluetooth: hci3: command tx timeout [ 872.779988][ T5488] 8021q: adding VLAN 0 to HW filter on device eth10 [ 873.704694][T10696] lo speed is unknown, defaulting to 1000 [ 873.776411][T10738] loop5: detected capacity change from 0 to 40427 [ 873.799241][T10738] F2FS-fs (loop5): invalid crc value [ 873.878649][T10738] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 873.888822][T10738] F2FS-fs (loop5): Start checkpoint disabled! [ 873.945138][T10738] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 873.953511][T10738] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 874.007354][T10741] loop0: detected capacity change from 0 to 2048 [ 874.103923][T10464] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 874.275259][T10741] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 874.275365][T10741] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 874.839497][ T61] Bluetooth: hci3: command tx timeout [ 874.897477][T10464] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 874.949760][T10464] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 875.197783][ T8786] kworker/u8:18: attempt to access beyond end of device [ 875.197783][ T8786] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 875.197839][ T8786] CPU: 1 UID: 0 PID: 8786 Comm: kworker/u8:18 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 875.197861][ T8786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 875.197872][ T8786] Workqueue: writeback wb_workfn (flush-7:5) [ 875.197907][ T8786] Call Trace: [ 875.197913][ T8786] [ 875.197919][ T8786] dump_stack_lvl+0xe8/0x150 [ 875.197941][ T8786] f2fs_stop_checkpoint+0x383/0x540 [ 875.197970][ T8786] f2fs_write_end_io+0x1274/0x1740 [ 875.198006][ T8786] __submit_merged_bio+0x256/0x6a0 [ 875.198037][ T8786] f2fs_submit_merged_write+0x284/0x390 [ 875.198066][ T8786] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 875.198107][ T8786] f2fs_sync_node_pages+0x11fe/0x13c0 [ 875.198157][ T8786] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 875.198189][ T8786] ? __percpu_counter_sum+0x1c2/0x1e0 [ 875.198319][ T8786] ? blk_start_plug+0x51/0x1b0 [ 875.198372][ T8786] f2fs_write_node_pages+0x312/0x700 [ 875.198404][ T8786] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 875.198440][ T8786] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 875.198468][ T8786] do_writepages+0x32e/0x550 [ 875.198496][ T8786] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 875.198516][ T8786] ? reacquire_held_locks+0x104/0x190 [ 875.198543][ T8786] ? rt_spin_lock+0x1e0/0x400 [ 875.198574][ T8786] __writeback_single_inode+0x133/0x10e0 [ 875.198601][ T8786] ? rt_spin_unlock+0x160/0x200 [ 875.198625][ T8786] writeback_sb_inodes+0x97f/0x1980 [ 875.198665][ T8786] ? lockdep_hardirqs_on+0x7a/0x110 [ 875.198697][ T8786] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 875.198755][ T8786] ? rcu_is_watching+0x15/0xb0 [ 875.198790][ T8786] wb_writeback+0x445/0xb00 [ 875.198812][ T8786] ? queue_io+0x2a1/0x440 [ 875.198838][ T8786] ? __pfx_wb_writeback+0x10/0x10 [ 875.198872][ T8786] wb_workfn+0x3fd/0xf20 [ 875.198896][ T8786] ? __lock_acquire+0x6b5/0x2cf0 [ 875.198917][ T8786] ? look_up_lock_class+0x57/0x110 [ 875.198956][ T8786] ? __pfx_wb_workfn+0x10/0x10 [ 875.198985][ T8786] ? do_raw_spin_lock+0x12b/0x2f0 [ 875.199004][ T8786] ? lock_acquire+0x106/0x350 [ 875.199029][ T8786] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 875.199052][ T8786] ? process_scheduled_works+0xa69/0x1910 [ 875.199073][ T8786] ? process_scheduled_works+0xa69/0x1910 [ 875.199099][ T8786] ? process_scheduled_works+0xa69/0x1910 [ 875.199124][ T8786] ? process_scheduled_works+0xa69/0x1910 [ 875.199146][ T8786] process_scheduled_works+0xb68/0x1910 [ 875.199197][ T8786] ? __pfx_process_scheduled_works+0x10/0x10 [ 875.199224][ T8786] ? assign_work+0x3d5/0x5e0 [ 875.199249][ T8786] worker_thread+0xa90/0x1040 [ 875.199302][ T8786] kthread+0x388/0x470 [ 875.199326][ T8786] ? __pfx_worker_thread+0x10/0x10 [ 875.199343][ T8786] ? __pfx_kthread+0x10/0x10 [ 875.199367][ T8786] ret_from_fork+0x514/0xb70 [ 875.199389][ T8786] ? __pfx_ret_from_fork+0x10/0x10 [ 875.199407][ T8786] ? __switch_to+0xc79/0x1410 [ 875.199434][ T8786] ? __pfx_kthread+0x10/0x10 [ 875.199458][ T8786] ret_from_fork_asm+0x1a/0x30 [ 875.199493][ T8786] [ 875.300036][T10464] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 875.321426][ T8786] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 875.321483][ T8786] CPU: 0 UID: 0 PID: 8786 Comm: kworker/u8:18 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 875.321505][ T8786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 875.321517][ T8786] Workqueue: writeback wb_workfn (flush-7:5) [ 875.321555][ T8786] Call Trace: [ 875.321563][ T8786] [ 875.321570][ T8786] dump_stack_lvl+0xe8/0x150 [ 875.321595][ T8786] f2fs_stop_checkpoint+0x383/0x540 [ 875.321628][ T8786] f2fs_write_end_io+0x1274/0x1740 [ 875.321669][ T8786] __submit_merged_bio+0x256/0x6a0 [ 875.321704][ T8786] f2fs_submit_merged_write+0x284/0x390 [ 875.321746][ T8786] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 875.321790][ T8786] f2fs_sync_node_pages+0x11fe/0x13c0 [ 875.321836][ T8786] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 875.321868][ T8786] ? __percpu_counter_sum+0x1c2/0x1e0 [ 875.321928][ T8786] ? blk_start_plug+0x51/0x1b0 [ 875.321952][ T8786] f2fs_write_node_pages+0x312/0x700 [ 875.321986][ T8786] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 875.322026][ T8786] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 875.322054][ T8786] do_writepages+0x32e/0x550 [ 875.322082][ T8786] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 875.322102][ T8786] ? reacquire_held_locks+0x104/0x190 [ 875.322129][ T8786] ? rt_spin_lock+0x1e0/0x400 [ 875.322160][ T8786] __writeback_single_inode+0x133/0x10e0 [ 875.322186][ T8786] ? rt_spin_unlock+0x160/0x200 [ 875.322210][ T8786] writeback_sb_inodes+0x97f/0x1980 [ 875.322250][ T8786] ? lockdep_hardirqs_on+0x7a/0x110 [ 875.322285][ T8786] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 875.322347][ T8786] ? rcu_is_watching+0x15/0xb0 [ 875.322384][ T8786] wb_writeback+0x445/0xb00 [ 875.322408][ T8786] ? queue_io+0x2a1/0x440 [ 875.322437][ T8786] ? __pfx_wb_writeback+0x10/0x10 [ 875.322473][ T8786] wb_workfn+0x3fd/0xf20 [ 875.322499][ T8786] ? __lock_acquire+0x6b5/0x2cf0 [ 875.322520][ T8786] ? look_up_lock_class+0x57/0x110 [ 875.322563][ T8786] ? __pfx_wb_workfn+0x10/0x10 [ 875.322595][ T8786] ? do_raw_spin_lock+0x12b/0x2f0 [ 875.322614][ T8786] ? lock_acquire+0x106/0x350 [ 875.322639][ T8786] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 875.322669][ T8786] ? process_scheduled_works+0xa69/0x1910 [ 875.322691][ T8786] ? process_scheduled_works+0xa69/0x1910 [ 875.322719][ T8786] ? process_scheduled_works+0xa69/0x1910 [ 875.322737][ T8786] ? process_scheduled_works+0xa69/0x1910 [ 875.322759][ T8786] process_scheduled_works+0xb68/0x1910 [ 875.322811][ T8786] ? __pfx_process_scheduled_works+0x10/0x10 [ 875.322838][ T8786] ? assign_work+0x3d5/0x5e0 [ 875.322871][ T8786] worker_thread+0xa90/0x1040 [ 875.322919][ T8786] kthread+0x388/0x470 [ 875.322943][ T8786] ? __pfx_worker_thread+0x10/0x10 [ 875.322961][ T8786] ? __pfx_kthread+0x10/0x10 [ 875.322987][ T8786] ret_from_fork+0x514/0xb70 [ 875.323011][ T8786] ? __pfx_ret_from_fork+0x10/0x10 [ 875.323031][ T8786] ? __switch_to+0xc79/0x1410 [ 875.323063][ T8786] ? __pfx_kthread+0x10/0x10 [ 875.323089][ T8786] ret_from_fork_asm+0x1a/0x30 [ 875.323127][ T8786] [ 875.326354][T10464] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 875.327234][ T8786] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 875.327549][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.327599][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.615419][T10464] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 875.734698][ T5488] 8021q: adding VLAN 0 to HW filter on device eth19 [ 875.735659][T10464] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 875.808091][T10464] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 875.975093][ T9578] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 876.408262][T10767] loop0: detected capacity change from 0 to 2048 [ 876.455168][T10767] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 876.455258][T10767] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 876.929360][T10445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 876.998574][T10445] 8021q: adding VLAN 0 to HW filter on device team0 [ 877.024832][ T61] Bluetooth: hci3: command tx timeout [ 877.676120][ T9578] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 879.081411][ T61] Bluetooth: hci3: command tx timeout [ 881.124853][T10795] loop5: detected capacity change from 0 to 256 [ 881.242949][T10795] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x395e47cf, utbl_chksum : 0xe619d30d) [ 881.715186][T10797] exFAT-fs (loop5): start_clu is invalid cluster(0xffffffff) [ 881.758039][T10797] exFAT-fs (loop5): valid_size(150994954) is greater than size(10) [ 882.515373][ T1287] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.515504][ T1287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 883.308848][T10801] netlink: 68 bytes leftover after parsing attributes in process `syz.5.575'. [ 883.537080][ T5143] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 883.628458][ T5143] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 883.638963][ T5143] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 883.671609][ T5143] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 883.678381][ T5143] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 883.972269][ T5488] 8021q: adding VLAN 0 to HW filter on device eth20 [ 885.527226][T10696] chnl_net:caif_netlink_parms(): no params data found [ 886.031919][ T61] Bluetooth: hci0: command tx timeout [ 887.885131][ T5143] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 887.963739][ T5143] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 887.966901][ T5143] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 887.968074][ T5143] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 887.999804][ T5143] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 888.042648][ T5143] Bluetooth: hci0: command tx timeout [ 888.434429][T10804] lo speed is unknown, defaulting to 1000 [ 888.501209][T10696] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.501301][T10696] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.501482][T10696] bridge_slave_0: entered allmulticast mode [ 888.504604][T10696] bridge_slave_0: entered promiscuous mode [ 888.567551][T10696] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.567686][T10696] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.567882][T10696] bridge_slave_1: entered allmulticast mode [ 888.593036][T10696] bridge_slave_1: entered promiscuous mode [ 889.141387][T10844] lo speed is unknown, defaulting to 1000 [ 889.192230][T10696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 889.211941][T10696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 889.305868][T10696] team0: Port device team_slave_0 added [ 889.331385][T10696] team0: Port device team_slave_1 added [ 889.428432][T10696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 889.428448][T10696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 889.428472][T10696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 889.493026][T10696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 889.493041][T10696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 889.493062][T10696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 889.710709][T10696] hsr_slave_0: entered promiscuous mode [ 889.714121][T10696] hsr_slave_1: entered promiscuous mode [ 889.798939][T10804] chnl_net:caif_netlink_parms(): no params data found [ 890.014300][T10844] chnl_net:caif_netlink_parms(): no params data found [ 890.079346][ T71] bridge_slave_1: left allmulticast mode [ 890.079365][ T71] bridge_slave_1: left promiscuous mode [ 890.080239][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.119848][ T5143] Bluetooth: hci4: command tx timeout [ 890.132237][ T61] Bluetooth: hci0: command tx timeout [ 890.144268][ T71] bridge_slave_0: left allmulticast mode [ 890.144286][ T71] bridge_slave_0: left promiscuous mode [ 890.155759][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.740199][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 890.840392][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 890.902015][ T71] bond0 (unregistering): Released all slaves [ 891.306642][T10804] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.306755][T10804] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.306888][T10804] bridge_slave_0: entered allmulticast mode [ 891.308312][T10804] bridge_slave_0: entered promiscuous mode [ 891.449685][ T71] hsr_slave_0: left promiscuous mode [ 891.471705][ T71] hsr_slave_1: left promiscuous mode [ 891.473619][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 891.510188][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 891.880346][ T71] team0 (unregistering): Port device team_slave_1 removed [ 891.930492][ T71] team0 (unregistering): Port device team_slave_0 removed [ 892.100543][T10804] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.100665][T10804] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.100909][T10804] bridge_slave_1: entered allmulticast mode [ 892.103557][T10804] bridge_slave_1: entered promiscuous mode [ 892.208512][T10844] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.208578][T10844] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.208693][T10844] bridge_slave_0: entered allmulticast mode [ 892.211238][T10844] bridge_slave_0: entered promiscuous mode [ 892.215137][ T5143] Bluetooth: hci4: command tx timeout [ 892.215167][ T5143] Bluetooth: hci0: command tx timeout [ 892.221364][T10804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 892.278939][T10844] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.279029][T10844] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.279258][T10844] bridge_slave_1: entered allmulticast mode [ 892.285251][T10844] bridge_slave_1: entered promiscuous mode [ 892.312063][T10804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 892.630036][T10844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 892.633063][T10804] team0: Port device team_slave_0 added [ 892.635853][T10844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 892.640115][T10804] team0: Port device team_slave_1 added [ 892.727338][T10844] team0: Port device team_slave_0 added [ 892.736122][T10804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 892.736136][T10804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.736156][T10804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 892.776922][T10844] team0: Port device team_slave_1 added [ 892.791345][T10804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 892.791361][T10804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.791385][T10804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 893.088147][T10844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 893.088159][T10844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 893.088173][T10844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 893.122414][T10844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 893.122430][T10844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 893.122456][T10844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 893.231758][T10804] hsr_slave_0: entered promiscuous mode [ 893.232550][T10804] hsr_slave_1: entered promiscuous mode [ 893.233068][T10804] debugfs: 'hsr0' already exists in 'hsr' [ 893.233084][T10804] Cannot create hsr debugfs directory [ 893.891095][T10844] hsr_slave_0: entered promiscuous mode [ 893.891942][T10844] hsr_slave_1: entered promiscuous mode [ 893.892472][T10844] debugfs: 'hsr0' already exists in 'hsr' [ 893.892487][T10844] Cannot create hsr debugfs directory [ 894.316238][ T61] Bluetooth: hci4: command tx timeout [ 895.820485][T10696] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 895.852601][T10696] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 895.854009][ T5488] 8021q: adding VLAN 0 to HW filter on device eth12 [ 895.859348][T10696] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 895.987344][T10696] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 896.201529][T10696] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 896.242307][T10696] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 896.390552][ T61] Bluetooth: hci4: command tx timeout [ 896.450100][T10696] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 896.492266][T10696] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 897.442749][T10696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 897.479013][T10696] 8021q: adding VLAN 0 to HW filter on device team0 [ 897.507266][ T1287] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.507407][ T1287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 897.511434][ T1287] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.511557][ T1287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 898.302174][T10696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 898.322978][ T71] bridge_slave_1: left allmulticast mode [ 898.323003][ T71] bridge_slave_1: left promiscuous mode [ 898.323195][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.401242][ T71] bridge_slave_0: left allmulticast mode [ 898.401270][ T71] bridge_slave_0: left promiscuous mode [ 898.401512][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.482281][ T71] bridge_slave_1: left allmulticast mode [ 898.482301][ T71] bridge_slave_1: left promiscuous mode [ 898.482437][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.560714][ T71] bridge_slave_0: left allmulticast mode [ 898.560746][ T71] bridge_slave_0: left promiscuous mode [ 898.560897][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.100129][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 899.180325][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 899.241605][ T71] bond0 (unregistering): Released all slaves [ 899.730340][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 899.830137][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 899.890994][ T71] bond0 (unregistering): Released all slaves [ 899.944040][ T5488] 8021q: adding VLAN 0 to HW filter on device eth11 [ 900.939672][ T71] hsr_slave_0: left promiscuous mode [ 900.979637][ T71] hsr_slave_1: left promiscuous mode [ 900.980260][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 901.020818][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 901.229703][ T71] hsr_slave_0: left promiscuous mode [ 901.269731][ T71] hsr_slave_1: left promiscuous mode [ 901.270658][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 901.311613][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 901.880286][ T71] team0 (unregistering): Port device team_slave_1 removed [ 901.944502][ T71] team0 (unregistering): Port device team_slave_0 removed [ 902.490248][ T71] team0 (unregistering): Port device team_slave_1 removed [ 902.540114][ T71] team0 (unregistering): Port device team_slave_0 removed [ 902.914913][T10696] veth0_vlan: entered promiscuous mode [ 902.946380][T10696] veth1_vlan: entered promiscuous mode [ 903.342640][T10696] veth0_macvtap: entered promiscuous mode [ 903.347554][T10696] veth1_macvtap: entered promiscuous mode [ 903.430246][T10696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 903.448589][T10696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 903.515227][ T183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.779901][ T183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.782777][ T183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.783351][ T183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.523983][ T8786] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.524003][ T8786] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.328940][ T1189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.328959][ T1189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 908.351541][T11021] loop5: detected capacity change from 0 to 256 [ 910.059119][T10804] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 911.076231][ T61] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 912.049876][T11046] siw: device registration error -23 [ 912.164703][T11046] loop3: detected capacity change from 0 to 512 [ 912.691871][T10804] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 912.853549][T10804] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 913.044232][T10804] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 913.054232][T10804] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 913.157922][T10804] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 913.348012][T10804] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 914.198748][T10804] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 915.974506][ T5488] 8021q: adding VLAN 0 to HW filter on device eth2 [ 916.858016][T11082] netlink: 'syz.0.593': attribute type 46 has an invalid length. [ 916.858115][T11082] netlink: 36 bytes leftover after parsing attributes in process `syz.0.593'. [ 917.701502][T11087] lo speed is unknown, defaulting to 1000 [ 917.715869][ T5839] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 918.459704][ T5839] usb 6-1: Using ep0 maxpacket: 16 [ 918.461739][ T5839] usb 6-1: config index 0 descriptor too short (expected 14385, got 27) [ 918.461772][ T5839] usb 6-1: config 52 has too many interfaces: 52, using maximum allowed: 32 [ 918.461793][ T5839] usb 6-1: config 52 has an invalid descriptor of length 52, skipping remainder of the config [ 918.461812][ T5839] usb 6-1: config 52 has 0 interfaces, different from the descriptor's value: 52 [ 918.464507][ T5839] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 918.464532][ T5839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.464552][ T5839] usb 6-1: Product: syz [ 918.464567][ T5839] usb 6-1: Manufacturer: syz [ 918.464581][ T5839] usb 6-1: SerialNumber: syz [ 919.580541][T11088] netlink: 12 bytes leftover after parsing attributes in process `syz.5.594'. [ 922.536552][T10844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 922.820825][T10844] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 922.879610][T10844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 923.080225][T10844] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 923.787634][T10844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 923.841570][T10844] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 924.035887][T10844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 924.115556][T10844] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 924.638472][T10804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 924.810929][T10804] 8021q: adding VLAN 0 to HW filter on device team0 [ 924.897497][ T1287] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.900033][ T1287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 924.959228][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.959371][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 925.255962][ T5839] usb 6-1: USB disconnect, device number 2 [ 926.650771][T10844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 927.195020][T11148] loop5: detected capacity change from 0 to 512 [ 927.218904][T11148] EXT4-fs (loop5): orphan cleanup on readonly fs [ 927.220054][T11148] Quota error (device loop5): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 927.220313][T11148] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 927.229877][T11148] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 927.249223][T11148] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.601: bg 0: block 248: padding at end of block bitmap is not set [ 927.249261][T11148] loop5: lost filesystem error report for type 5 error -117 [ 927.263663][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 927.263687][ C1] EXT4-fs (loop5): last error at time 1776111375: ext4_validate_block_bitmap:441 [ 927.334854][T11148] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 927.334886][T11148] loop5: lost filesystem error report for type 5 error -117 [ 927.342432][T11148] EXT4-fs (loop5): 1 orphan inode deleted [ 927.345216][T11148] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 927.409955][T10844] 8021q: adding VLAN 0 to HW filter on device team0 [ 927.486247][ T7825] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.486446][ T7825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 927.615207][ T3165] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.615430][ T3165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 927.891952][T10313] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 929.005789][T10804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 929.048519][T10844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 930.682635][ T5488] 8021q: adding VLAN 0 to HW filter on device eth1 [ 930.778937][T11178] loop5: detected capacity change from 0 to 512 [ 930.795989][T11178] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 930.796007][T11178] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 930.838170][T11178] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.604: bad orphan inode 131083 [ 930.838202][T11178] loop5: lost filesystem error report for type 5 error -117 [ 930.852190][ C1] EXT4-fs (loop5): initial error at time 1776111379: ext4_orphan_get:1423 [ 930.852221][ C1] EXT4-fs (loop5): last error at time 1776111379: ext4_orphan_get:1423 [ 930.950505][T11178] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 932.280782][ T37] audit: type=1800 audit(1776111380.346:30): pid=11194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.604" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 932.628825][T10844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 932.735110][T10313] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 934.169540][ T5143] Bluetooth: hci5: command 0x0406 tx timeout [ 934.190976][T10804] veth0_vlan: entered promiscuous mode [ 934.293761][T10804] veth1_vlan: entered promiscuous mode [ 935.693656][T10804] veth0_macvtap: entered promiscuous mode [ 935.697358][T11231] loop5: detected capacity change from 0 to 512 [ 935.716467][T10804] veth1_macvtap: entered promiscuous mode [ 935.859331][T10844] veth0_vlan: entered promiscuous mode [ 935.859952][T11231] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 935.860089][T11231] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 936.509865][T10844] veth1_vlan: entered promiscuous mode [ 936.677332][ T5143] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 936.746568][ T5143] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 936.820329][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.820386][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.872361][ T5143] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 936.902471][ T5143] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 936.943323][ T5143] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 937.100191][T10804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 937.317494][T10804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 937.389826][ T5488] 8021q: adding VLAN 0 to HW filter on device eth3 [ 937.392566][ T43] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.396925][ T43] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.399166][T11231] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 937.431798][ T43] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.462629][ T43] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.462944][T11241] lo speed is unknown, defaulting to 1000 [ 937.745555][T10313] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 937.754365][T10844] veth0_macvtap: entered promiscuous mode [ 938.294678][T11246] comedi comedi1: rti800: I/O base address or length out of range [ 938.786110][T11250] program syz.5.613 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 938.792321][T11250] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 939.534128][ T61] Bluetooth: hci2: command tx timeout [ 939.641875][T10844] veth1_macvtap: entered promiscuous mode [ 939.938854][T11253] loop3: detected capacity change from 0 to 512 [ 940.218226][T11258] comedi comedi3: das16m1: I/O base address or length out of range [ 940.344252][T11258] loop5: detected capacity change from 0 to 1024 [ 940.927549][T11258] EXT4-fs: Mount option(s) incompatible with ext3 [ 941.302033][T11253] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 941.302174][T11253] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 941.568232][ T61] Bluetooth: hci2: command tx timeout [ 941.791882][T10696] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 944.297787][ T61] Bluetooth: hci2: command tx timeout [ 944.465199][T10844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 944.548667][T11269] netlink: 'syz.5.618': attribute type 4 has an invalid length. [ 944.617320][T11265] [U] ÿÿ [ 944.713837][T10844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 945.277689][ T7825] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.684192][T11295] cgroup: fork rejected by pids controller in /syz3 [ 946.643727][T11292] loop5: detected capacity change from 0 to 8 [ 946.649088][ T61] Bluetooth: hci2: command tx timeout [ 946.676280][T11292] SQUASHFS error: zstd decompression error: 10 [ 946.676297][T11292] SQUASHFS error: zstd decompression failed, data probably corrupt [ 946.676310][T11292] SQUASHFS error: Failed to read block 0x4ec: -5 [ 946.676319][T11292] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 946.676327][T11292] SQUASHFS error: Unable to read inode 0x2011f [ 947.090924][ T5143] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 947.165478][ T5143] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 947.233234][ T5143] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 947.236047][ T5143] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 947.265442][ T5143] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 947.928966][ T5488] 8021q: adding VLAN 0 to HW filter on device eth4 [ 948.114341][T11399] syzkaller0: entered promiscuous mode [ 948.114368][T11399] syzkaller0: entered allmulticast mode [ 948.562146][ T7825] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.345198][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 949.497782][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 949.654106][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 949.663514][ T61] Bluetooth: hci0: command tx timeout [ 949.738271][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 949.739171][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 951.719634][ T5143] Bluetooth: hci0: command tx timeout [ 953.643950][ T5143] Bluetooth: hci1: command tx timeout [ 954.213086][ T5143] Bluetooth: hci0: command tx timeout [ 955.777463][ T5143] Bluetooth: hci1: command tx timeout [ 956.279570][ T5143] Bluetooth: hci0: command tx timeout [ 957.800159][ T5143] Bluetooth: hci1: command tx timeout [ 957.994546][T12184] loop3: detected capacity change from 0 to 64 [ 959.898001][ T5143] Bluetooth: hci1: command tx timeout [ 960.130688][ T3165] kworker/u8:14: attempt to access beyond end of device [ 960.130688][ T3165] loop3: rw=1, sector=4172, nr_sectors = 1 limit=64 [ 960.130877][ T3165] Buffer I/O error on dev loop3, logical block 4172, lost async page write [ 960.132990][ T3165] kworker/u8:14: attempt to access beyond end of device [ 960.132990][ T3165] loop3: rw=1, sector=4173, nr_sectors = 16 limit=64 [ 960.133261][ T3165] kworker/u8:14: attempt to access beyond end of device [ 960.133261][ T3165] loop3: rw=1, sector=4189, nr_sectors = 1 limit=64 [ 960.133276][ T3165] Buffer I/O error on dev loop3, logical block 4189, lost async page write [ 960.133319][ T3165] kworker/u8:14: attempt to access beyond end of device [ 960.133319][ T3165] loop3: rw=1, sector=4190, nr_sectors = 1 limit=64 [ 960.133330][ T3165] Buffer I/O error on dev loop3, logical block 4190, lost async page write [ 960.133370][ T3165] kworker/u8:14: attempt to access beyond end of device [ 960.133370][ T3165] loop3: rw=1, sector=4191, nr_sectors = 1 limit=64 [ 960.133381][ T3165] Buffer I/O error on dev loop3, logical block 4191, lost async page write [ 960.133420][ T3165] kworker/u8:14: attempt to access beyond end of device [ 960.133420][ T3165] loop3: rw=1, sector=4192, nr_sectors = 1 limit=64 [ 960.133432][ T3165] Buffer I/O error on dev loop3, logical block 4192, lost async page write [ 960.133479][ T3165] kworker/u8:14: attempt to access beyond end of device [ 960.133479][ T3165] loop3: rw=1, sector=4193, nr_sectors = 1 limit=64 [ 960.133491][ T3165] Buffer I/O error on dev loop3, logical block 4193, lost async page write [ 960.133531][ T3165] kworker/u8:14: attempt to access beyond end of device [ 960.133531][ T3165] loop3: rw=1, sector=4196, nr_sectors = 1 limit=64 [ 960.133542][ T3165] Buffer I/O error on dev loop3, logical block 4196, lost async page write [ 960.133581][ T3165] kworker/u8:14: attempt to access beyond end of device [ 960.133581][ T3165] loop3: rw=1, sector=4197, nr_sectors = 1 limit=64 [ 960.133592][ T3165] Buffer I/O error on dev loop3, logical block 4197, lost async page write [ 960.133640][ T3165] kworker/u8:14: attempt to access beyond end of device [ 960.133640][ T3165] loop3: rw=1, sector=4198, nr_sectors = 1 limit=64 [ 960.133651][ T3165] Buffer I/O error on dev loop3, logical block 4198, lost async page write [ 960.134515][ T3165] Buffer I/O error on dev loop3, logical block 4359, lost async page write [ 961.613111][T12390] loop3: detected capacity change from 0 to 4096 [ 963.196632][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 963.357377][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 964.074634][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 964.158841][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 964.170343][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 966.375160][T12705] loop3: detected capacity change from 0 to 40427 [ 966.461575][T12705] F2FS-fs (loop3): invalid crc value [ 966.505174][ T5143] Bluetooth: hci4: command tx timeout [ 966.658860][T12705] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 966.671743][T12705] F2FS-fs (loop3): Start checkpoint disabled! [ 966.773527][T12705] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 966.776372][T12705] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 967.718054][ T1189] bio_check_eod: 46 callbacks suppressed [ 967.718067][ T1189] kworker/u8:10: attempt to access beyond end of device [ 967.718067][ T1189] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 967.727216][ T1189] CPU: 0 UID: 0 PID: 1189 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 967.727242][ T1189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 967.727254][ T1189] Workqueue: writeback wb_workfn (flush-7:3) [ 967.727295][ T1189] Call Trace: [ 967.727302][ T1189] [ 967.727310][ T1189] dump_stack_lvl+0xe8/0x150 [ 967.727336][ T1189] f2fs_stop_checkpoint+0x383/0x540 [ 967.727367][ T1189] f2fs_write_end_io+0x1274/0x1740 [ 967.727407][ T1189] __submit_merged_bio+0x256/0x6a0 [ 967.727441][ T1189] __submit_merged_write_cond+0x3c9/0x4e0 [ 967.727483][ T1189] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 967.727531][ T1189] f2fs_write_data_pages+0x287e/0x34f0 [ 967.727583][ T1189] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 967.727614][ T1189] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 967.727674][ T1189] ? __lock_acquire+0x6b5/0x2cf0 [ 967.727711][ T1189] ? __lock_acquire+0x6b5/0x2cf0 [ 967.727754][ T1189] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 967.727775][ T1189] do_writepages+0x32e/0x550 [ 967.727802][ T1189] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 967.727822][ T1189] ? reacquire_held_locks+0x104/0x190 [ 967.727848][ T1189] ? rt_spin_lock+0x1e0/0x400 [ 967.727878][ T1189] __writeback_single_inode+0x133/0x10e0 [ 967.727903][ T1189] ? rt_spin_unlock+0x160/0x200 [ 967.727926][ T1189] writeback_sb_inodes+0x97f/0x1980 [ 967.727965][ T1189] ? lockdep_hardirqs_on+0x7a/0x110 [ 967.727997][ T1189] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 967.728055][ T1189] ? rcu_is_watching+0x15/0xb0 [ 967.728090][ T1189] wb_writeback+0x445/0xb00 [ 967.728114][ T1189] ? queue_io+0x2a1/0x440 [ 967.728141][ T1189] ? __pfx_wb_writeback+0x10/0x10 [ 967.728177][ T1189] wb_workfn+0x3fd/0xf20 [ 967.728201][ T1189] ? __lock_acquire+0x6b5/0x2cf0 [ 967.728222][ T1189] ? look_up_lock_class+0x57/0x110 [ 967.728262][ T1189] ? __pfx_wb_workfn+0x10/0x10 [ 967.728286][ T1189] ? finish_task_switch+0x15f/0xbe0 [ 967.728417][ T1189] ? lock_acquire+0x106/0x350 [ 967.728442][ T1189] ? do_raw_spin_lock+0x12b/0x2f0 [ 967.728466][ T1189] ? lock_acquire+0x106/0x350 [ 967.728490][ T1189] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 967.728514][ T1189] ? process_scheduled_works+0xa69/0x1910 [ 967.728534][ T1189] ? process_scheduled_works+0xa69/0x1910 [ 967.728559][ T1189] ? process_scheduled_works+0xa69/0x1910 [ 967.728577][ T1189] ? process_scheduled_works+0xa69/0x1910 [ 967.728598][ T1189] process_scheduled_works+0xb68/0x1910 [ 967.728647][ T1189] ? __pfx_process_scheduled_works+0x10/0x10 [ 967.728672][ T1189] ? assign_work+0x3d5/0x5e0 [ 967.728696][ T1189] worker_thread+0xa90/0x1040 [ 967.728741][ T1189] kthread+0x388/0x470 [ 967.728765][ T1189] ? __pfx_worker_thread+0x10/0x10 [ 967.728781][ T1189] ? __pfx_kthread+0x10/0x10 [ 967.728803][ T1189] ret_from_fork+0x514/0xb70 [ 967.728825][ T1189] ? __pfx_ret_from_fork+0x10/0x10 [ 967.728844][ T1189] ? __switch_to+0xc79/0x1410 [ 967.728869][ T1189] ? __pfx_kthread+0x10/0x10 [ 967.728889][ T1189] ret_from_fork_asm+0x1a/0x30 [ 967.728925][ T1189] [ 967.728955][ T1189] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 968.508081][ T6037] IPVS: starting estimator thread 0... [ 968.526540][ T5143] Bluetooth: hci4: command tx timeout [ 968.639684][T12812] IPVS: using max 15 ests per chain, 36000 per kthread [ 970.602695][ T5143] Bluetooth: hci4: command tx timeout [ 972.679606][ T5143] Bluetooth: hci4: command tx timeout [ 982.733966][T14154] loop3: detected capacity change from 0 to 32768 [ 982.735020][T14154] btrfs: Deprecated parameter 'usebackuproot' [ 982.735041][T14154] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 982.743052][T14154] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.656 (14154) [ 982.844150][T14154] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 982.844196][T14154] BTRFS info (device loop3): using crc32c checksum algorithm [ 983.142829][ T43] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 983.142987][T14154] BTRFS error (device loop3): failed to load root extent [ 983.143026][T14154] BTRFS warning (device loop3): try to load backup roots slot 1 [ 983.146744][ T43] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 983.146887][T14154] BTRFS warning (device loop3): couldn't read tree root [ 983.146907][T14154] BTRFS warning (device loop3): try to load backup roots slot 2 [ 983.147314][ T43] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 983.147417][T14154] BTRFS warning (device loop3): couldn't read tree root [ 983.147434][T14154] BTRFS warning (device loop3): try to load backup roots slot 3 [ 983.223775][T14154] BTRFS info (device loop3): rebuilding free space tree [ 983.461297][T14154] BTRFS info (device loop3): checking UUID tree [ 983.463504][T14154] BTRFS info (device loop3): enabling ssd optimizations [ 983.463528][T14154] BTRFS info (device loop3): turning on async discard [ 983.463544][T14154] BTRFS info (device loop3): enabling free space tree [ 983.463559][T14154] BTRFS info (device loop3): force clearing of disk cache [ 983.463576][T14154] BTRFS info (device loop3): trying to use backup root at mount time [ 983.463595][T14154] BTRFS info (device loop3): force zlib compression, level 3 [ 984.654613][T10696] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 988.925765][ T32] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 989.126173][ T32] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 989.126201][ T32] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 989.126220][ T32] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 989.126262][ T32] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 989.126286][ T32] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 989.126311][ T32] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 989.127879][ T32] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 989.127907][ T32] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 989.127926][ T32] usb 4-1: Product: syz [ 989.127939][ T32] usb 4-1: Manufacturer: syz [ 989.272599][ T32] cdc_wdm 4-1:1.0: skipping garbage [ 989.272612][ T32] cdc_wdm 4-1:1.0: skipping garbage [ 989.350562][ T32] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 989.350583][ T32] cdc_wdm 4-1:1.0: Unknown control protocol [ 989.508535][T14587] cdc_wdm 4-1:1.0: Error submitting int urb - -90 [ 989.519589][T14589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 989.520201][T14589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 989.574179][T14587] cdc_wdm 4-1:1.0: Error submitting int urb - -90 [ 990.342034][T10548] usb 4-1: USB disconnect, device number 2 [ 993.719170][T15006] loop3: detected capacity change from 0 to 128 [ 993.819011][T15006] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 993.820346][T15006] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 994.145216][T10696] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 995.407681][ T61] Bluetooth: hci3: command 0x0406 tx timeout [ 996.721344][ T7825] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.079159][T11241] chnl_net:caif_netlink_parms(): no params data found [ 997.213539][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 997.266654][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 997.268477][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 997.285285][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 997.286109][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 998.187193][ T7825] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.224484][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.224526][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.275740][T11302] lo speed is unknown, defaulting to 1000 [ 998.849207][T11437] lo speed is unknown, defaulting to 1000 [ 998.876928][T12493] lo speed is unknown, defaulting to 1000 [ 999.330715][T15221] lo speed is unknown, defaulting to 1000 [ 999.480221][ T5143] Bluetooth: hci5: command tx timeout [ 1001.009811][ T55] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1001.161151][ T55] usb 4-1: Using ep0 maxpacket: 8 [ 1001.179070][ T55] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1001.179090][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.179101][ T55] usb 4-1: Product: syz [ 1001.179109][ T55] usb 4-1: Manufacturer: syz [ 1001.179117][ T55] usb 4-1: SerialNumber: syz [ 1001.271780][ T55] usb 4-1: config 0 descriptor?? [ 1001.329176][ T55] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1001.329229][ T55] pctv452e: pctv452e_power_ctrl: 1 [ 1001.329229][ T55] [ 1001.329275][ T55] usb 4-1: selecting invalid altsetting 3 [ 1001.329289][ T55] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1001.329289][ T55] [ 1001.383909][ T55] dvb-usb: bulk message failed: -22 (5/0) [ 1001.564591][ T5143] Bluetooth: hci5: command tx timeout [ 1001.651844][ T55] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1001.652784][ T55] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1001.652851][ T55] usb 4-1: media controller created [ 1001.706553][ T55] dvb-usb: bulk message failed: -22 (8/0) [ 1001.706574][ T55] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1001.706672][ T55] dvb-usb: MAC address reading failed. [ 1001.707916][ T7825] bridge_slave_1: left allmulticast mode [ 1001.707941][ T7825] bridge_slave_1: left promiscuous mode [ 1001.708300][ T7825] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.804963][ T55] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1001.964927][ T7825] bridge_slave_0: left allmulticast mode [ 1001.964958][ T7825] bridge_slave_0: left promiscuous mode [ 1001.965238][ T7825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.008207][ T55] DVB: Unable to find symbol stb0899_attach() [ 1002.008223][ T55] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1002.129841][ T55] rc_core: IR keymap rc-tt-1500 not found [ 1002.129861][ T55] Registered IR keymap rc-empty [ 1002.162834][ T55] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 1002.211923][ T55] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input7 [ 1002.261058][ T55] dvb-usb: schedule remote query interval to 100 msecs. [ 1002.261078][ T55] pctv452e: pctv452e_power_ctrl: 0 [ 1002.261078][ T55] [ 1002.261090][ T55] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1002.357025][ T55] usb 4-1: USB disconnect, device number 3 [ 1003.658282][ T5143] Bluetooth: hci5: command tx timeout [ 1004.156273][ T55] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1004.580217][ T7825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1004.660988][ T7825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1004.681568][ T7825] bond0 (unregistering): Released all slaves [ 1004.725018][T11302] chnl_net:caif_netlink_parms(): no params data found [ 1005.015904][T11437] chnl_net:caif_netlink_parms(): no params data found [ 1005.025076][T12493] chnl_net:caif_netlink_parms(): no params data found [ 1005.548270][T15221] chnl_net:caif_netlink_parms(): no params data found [ 1005.656202][T11302] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.656329][T11302] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.656495][T11302] bridge_slave_0: entered allmulticast mode [ 1005.657941][T11302] bridge_slave_0: entered promiscuous mode [ 1005.719696][ T5143] Bluetooth: hci5: command tx timeout [ 1005.995692][T11302] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.995804][T11302] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.995993][T11302] bridge_slave_1: entered allmulticast mode [ 1005.997472][T11302] bridge_slave_1: entered promiscuous mode [ 1006.170724][T11437] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.170846][T11437] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.171188][T11437] bridge_slave_0: entered allmulticast mode [ 1006.172602][T11437] bridge_slave_0: entered promiscuous mode [ 1006.206397][T12493] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.206530][T12493] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.206680][T12493] bridge_slave_0: entered allmulticast mode [ 1006.208144][T12493] bridge_slave_0: entered promiscuous mode [ 1006.211504][T11437] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.211713][T11437] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.211911][T11437] bridge_slave_1: entered allmulticast mode [ 1006.216493][T11437] bridge_slave_1: entered promiscuous mode [ 1006.229060][T11302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1006.265554][T12493] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.265665][T12493] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.265925][T12493] bridge_slave_1: entered allmulticast mode [ 1006.268532][T12493] bridge_slave_1: entered promiscuous mode [ 1006.409671][ T7825] hsr_slave_0: left promiscuous mode [ 1006.449566][ T7825] hsr_slave_1: left promiscuous mode [ 1006.450271][ T7825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1006.450289][ T7825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1006.490575][ T7825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1006.490603][ T7825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1006.573263][ T7825] veth1_macvtap: left promiscuous mode [ 1006.573335][ T7825] veth0_macvtap: left promiscuous mode [ 1006.573467][ T7825] veth1_vlan: left promiscuous mode [ 1006.573573][ T7825] veth0_vlan: left promiscuous mode [ 1007.361187][ T7825] team0 (unregistering): Port device team_slave_1 removed [ 1007.410478][ T7825] team0 (unregistering): Port device team_slave_0 removed [ 1007.635490][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1007.763357][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1007.768876][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1007.780900][ T1165] smbdirect: ib_dev[syz0] removed [ 1007.819228][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1007.824344][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1007.883616][T11302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1008.032061][ T55] lo speed is unknown, defaulting to 1000 [ 1008.032092][ T55] infiniband syz0: ib_query_port failed (-19) [ 1008.190050][T11437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1008.193263][T15221] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.193476][T15221] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.193679][T15221] bridge_slave_0: entered allmulticast mode [ 1008.196353][T15221] bridge_slave_0: entered promiscuous mode [ 1008.247224][T12493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1008.251665][T11437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1008.253611][T15221] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.253742][T15221] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.253933][T15221] bridge_slave_1: entered allmulticast mode [ 1008.256328][T15221] bridge_slave_1: entered promiscuous mode [ 1008.356619][T12493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1008.632963][T15221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1008.781972][T12493] team0: Port device team_slave_0 added [ 1008.785247][T15221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1009.332579][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1009.333838][T12493] team0: Port device team_slave_1 added [ 1009.502381][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1009.504668][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1009.575086][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1009.576569][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1010.039712][ T5143] Bluetooth: hci2: command tx timeout [ 1010.252743][T15221] team0: Port device team_slave_0 added [ 1010.260316][T12493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1010.260328][T12493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1010.260343][T12493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1010.303801][T15221] team0: Port device team_slave_1 added [ 1010.315449][T12493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1010.315460][T12493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1010.315475][T12493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1010.399981][T15221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1010.399998][T15221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1010.400022][T15221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1010.461504][T15221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1010.461521][T15221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1010.461545][T15221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1010.608084][T12493] hsr_slave_0: entered promiscuous mode [ 1010.608930][T12493] hsr_slave_1: entered promiscuous mode [ 1010.621163][T12493] debugfs: 'hsr0' already exists in 'hsr' [ 1010.621183][T12493] Cannot create hsr debugfs directory [ 1010.789944][T15221] hsr_slave_0: entered promiscuous mode [ 1010.791253][T15221] hsr_slave_1: entered promiscuous mode [ 1010.791781][T15221] debugfs: 'hsr0' already exists in 'hsr' [ 1010.791799][T15221] Cannot create hsr debugfs directory [ 1011.719793][ T5143] Bluetooth: hci0: command tx timeout [ 1012.065849][ T159] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.119709][ T5143] Bluetooth: hci2: command tx timeout [ 1012.282736][T15609] chnl_net:caif_netlink_parms(): no params data found [ 1012.932469][ T159] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.597187][ T159] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.810063][ T5143] Bluetooth: hci0: command tx timeout [ 1013.894476][T15609] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.894652][T15609] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.894876][T15609] bridge_slave_0: entered allmulticast mode [ 1013.896368][T15609] bridge_slave_0: entered promiscuous mode [ 1013.899122][T15614] chnl_net:caif_netlink_parms(): no params data found [ 1013.912667][T15609] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.912826][T15609] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.913078][T15609] bridge_slave_1: entered allmulticast mode [ 1013.915608][T15609] bridge_slave_1: entered promiscuous mode [ 1014.087754][ T159] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.199689][ T5143] Bluetooth: hci2: command tx timeout [ 1014.414994][T15609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1014.454952][T15609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1014.881953][T15609] team0: Port device team_slave_0 added [ 1014.907674][T15609] team0: Port device team_slave_1 added [ 1014.914318][T15614] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.914429][T15614] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.914669][T15614] bridge_slave_0: entered allmulticast mode [ 1014.917767][T15614] bridge_slave_0: entered promiscuous mode [ 1014.962737][T15614] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.964235][T15614] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.964475][T15614] bridge_slave_1: entered allmulticast mode [ 1014.966577][T15614] bridge_slave_1: entered promiscuous mode [ 1015.107085][T15609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1015.107097][T15609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1015.107113][T15609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1015.250551][T15609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1015.250570][T15609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1015.250594][T15609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1015.353953][T15614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1015.395158][T15614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1015.606449][T15614] team0: Port device team_slave_0 added [ 1015.909829][ T5143] Bluetooth: hci0: command tx timeout [ 1016.053225][T15614] team0: Port device team_slave_1 added [ 1016.110546][T15609] hsr_slave_0: entered promiscuous mode [ 1016.111425][T15609] hsr_slave_1: entered promiscuous mode [ 1016.111997][T15609] debugfs: 'hsr0' already exists in 'hsr' [ 1016.112013][T15609] Cannot create hsr debugfs directory [ 1016.258135][T15614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1016.258152][T15614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1016.258174][T15614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1016.289678][ T5143] Bluetooth: hci2: command tx timeout [ 1016.552304][T15614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1016.552315][T15614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1016.552331][T15614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1017.821136][T15614] hsr_slave_0: entered promiscuous mode [ 1017.822004][T15614] hsr_slave_1: entered promiscuous mode [ 1017.822536][T15614] debugfs: 'hsr0' already exists in 'hsr' [ 1017.822551][T15614] Cannot create hsr debugfs directory [ 1017.999859][ T5143] Bluetooth: hci0: command tx timeout [ 1019.204435][T12493] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1019.252786][T12493] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1019.300975][T12493] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1019.357187][T12493] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1019.635421][T15609] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.717971][T12493] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1019.732365][T12493] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1019.847016][T12493] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1019.883309][T12493] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1020.135066][T15609] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.496623][T15609] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.744882][T12493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1021.015326][T15609] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.062192][T12493] 8021q: adding VLAN 0 to HW filter on device team0 [ 1021.095876][ T3165] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.096002][ T3165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1021.109935][ T1287] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.110127][ T1287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1021.631639][ T159] bridge_slave_1: left allmulticast mode [ 1021.631670][ T159] bridge_slave_1: left promiscuous mode [ 1021.631923][ T159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.761062][ T159] bridge_slave_0: left allmulticast mode [ 1021.761090][ T159] bridge_slave_0: left promiscuous mode [ 1021.763617][ T159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.842374][ T159] bridge_slave_1: left allmulticast mode [ 1021.842395][ T159] bridge_slave_1: left promiscuous mode [ 1021.842543][ T159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.931174][ T159] bridge_slave_0: left allmulticast mode [ 1021.931221][ T159] bridge_slave_0: left promiscuous mode [ 1021.931371][ T159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.994178][ T159] bridge_slave_1: left allmulticast mode [ 1021.994198][ T159] bridge_slave_1: left promiscuous mode [ 1021.994351][ T159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.070546][ T159] bridge_slave_0: left allmulticast mode [ 1022.070567][ T159] bridge_slave_0: left promiscuous mode [ 1022.070728][ T159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.132458][ T159] bridge_slave_1: left allmulticast mode [ 1022.132479][ T159] bridge_slave_1: left promiscuous mode [ 1022.132625][ T159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.190802][ T159] bridge_slave_0: left allmulticast mode [ 1022.190822][ T159] bridge_slave_0: left promiscuous mode [ 1022.190969][ T159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.262961][ T159] bridge_slave_1: left allmulticast mode [ 1022.262982][ T159] bridge_slave_1: left promiscuous mode [ 1022.263126][ T159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.321525][ T159] bridge_slave_0: left allmulticast mode [ 1022.321547][ T159] bridge_slave_0: left promiscuous mode [ 1022.321699][ T159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.000585][ T159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1023.080477][ T159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1023.142170][ T159] bond0 (unregistering): Released all slaves [ 1023.280226][ T159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1023.400458][ T159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1023.477132][ T159] bond0 (unregistering): Released all slaves [ 1023.552595][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1023.605078][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1023.606948][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1023.665934][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1023.666630][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1023.735433][ T159] bond0 (unregistering): Released all slaves [ 1024.261060][ T159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1024.345291][ T159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1024.370829][ T159] bond0 (unregistering): Released all slaves [ 1024.910393][ T159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1025.010173][ T159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1025.051575][ T159] bond0 (unregistering): Released all slaves [ 1025.540267][ T159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1025.620242][ T159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1025.642643][ T159] bond0 (unregistering): Released all slaves [ 1025.820362][ T5143] Bluetooth: hci1: command tx timeout [ 1027.776462][T15221] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1027.806331][T15221] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1027.885695][T15221] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1027.904454][ T5143] Bluetooth: hci1: command tx timeout [ 1027.971625][T15221] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1028.621814][T15221] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1028.642304][T15221] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1028.700663][T15221] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1028.794911][T15221] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1029.631474][T15655] chnl_net:caif_netlink_parms(): no params data found [ 1029.975588][ T5143] Bluetooth: hci1: command tx timeout [ 1030.252744][T15655] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.252944][T15655] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.253219][T15655] bridge_slave_0: entered allmulticast mode [ 1030.256330][T15655] bridge_slave_0: entered promiscuous mode [ 1030.269803][T15655] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.269988][T15655] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.270255][T15655] bridge_slave_1: entered allmulticast mode [ 1030.273430][T15655] bridge_slave_1: entered promiscuous mode [ 1030.458283][ T159] hsr_slave_0: left promiscuous mode [ 1030.489739][ T159] hsr_slave_1: left promiscuous mode [ 1030.490445][ T159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1030.490462][ T159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1030.530286][ T159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1030.530313][ T159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1030.689646][ T159] hsr_slave_0: left promiscuous mode [ 1030.709636][ T159] hsr_slave_1: left promiscuous mode [ 1030.710395][ T159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1030.710413][ T159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1030.750692][ T159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1030.750719][ T159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1030.889686][ T159] hsr_slave_0: left promiscuous mode [ 1030.929657][ T159] hsr_slave_1: left promiscuous mode [ 1030.930417][ T159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1030.930434][ T159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1030.950659][ T159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1030.950685][ T159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1031.087444][ T159] veth1_macvtap: left promiscuous mode [ 1031.087508][ T159] veth0_macvtap: left promiscuous mode [ 1031.087639][ T159] veth1_vlan: left promiscuous mode [ 1031.087731][ T159] veth0_vlan: left promiscuous mode [ 1031.199797][ T159] veth1_macvtap: left promiscuous mode [ 1031.199860][ T159] veth0_macvtap: left promiscuous mode [ 1031.199991][ T159] veth1_vlan: left promiscuous mode [ 1031.200128][ T159] veth0_vlan: left promiscuous mode [ 1031.221390][ T159] veth1_macvtap: left promiscuous mode [ 1031.221492][ T159] veth0_macvtap: left promiscuous mode [ 1031.221729][ T159] veth1_vlan: left promiscuous mode [ 1031.221896][ T159] veth0_vlan: left promiscuous mode [ 1032.039741][ T5143] Bluetooth: hci1: command tx timeout [ 1032.461945][ T159] team0 (unregistering): Port device team_slave_1 removed [ 1032.520381][ T159] team0 (unregistering): Port device team_slave_0 removed [ 1033.140080][ T159] team0 (unregistering): Port device team_slave_1 removed [ 1033.180187][ T159] team0 (unregistering): Port device team_slave_0 removed [ 1033.840558][ T159] team0 (unregistering): Port device team_slave_1 removed [ 1033.880278][ T159] team0 (unregistering): Port device team_slave_0 removed [ 1034.069082][T15655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1034.147609][T15655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1034.417743][T15655] team0: Port device team_slave_0 added [ 1034.429509][T15655] team0: Port device team_slave_1 added [ 1034.527476][T15655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1034.527494][T15655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1034.527519][T15655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1034.591689][T15655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1034.591705][T15655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1034.591727][T15655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1034.967161][T15655] hsr_slave_0: entered promiscuous mode [ 1034.967968][T15655] hsr_slave_1: entered promiscuous mode [ 1034.968485][T15655] debugfs: 'hsr0' already exists in 'hsr' [ 1034.968500][T15655] Cannot create hsr debugfs directory [ 1035.101310][T15221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1035.370784][T15609] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1035.412555][T15609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1035.480841][T15609] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1035.616826][T15609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1035.640036][T15609] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1035.804769][T15609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1035.848940][T15609] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1035.882046][T15609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1036.400261][T15221] 8021q: adding VLAN 0 to HW filter on device team0 [ 1036.661762][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.661956][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1036.796299][ T7825] bridge0: port 2(bridge_slave_1) entered blocking state [ 1036.796503][ T7825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1037.182916][T15614] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1037.213612][T15614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1037.264758][T15614] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1037.315581][T15614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1037.376215][T15614] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1037.418808][T15614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1038.041348][T15614] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1038.073073][T15614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1039.393255][T15609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1039.916126][T15609] 8021q: adding VLAN 0 to HW filter on device team0 [ 1039.938453][ T183] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.938651][ T183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1039.993305][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.993472][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1040.060261][T15614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1040.422171][T15221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1040.426805][T15614] 8021q: adding VLAN 0 to HW filter on device team0 [ 1040.510227][ T170] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.510450][ T170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1040.628814][ T3165] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.628889][ T3165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1041.148151][T15221] veth0_vlan: entered promiscuous mode [ 1041.250310][T15221] veth1_vlan: entered promiscuous mode [ 1041.621227][T15609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1041.665788][T15221] veth0_macvtap: entered promiscuous mode [ 1041.693871][T15221] veth1_macvtap: entered promiscuous mode [ 1041.746889][T15221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1041.772697][T15221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1042.009594][ T71] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.035273][ T71] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.287143][ T71] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.331632][ T71] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.258569][T15614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1043.608900][ T170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1043.608921][ T170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1043.773570][T15655] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1043.915126][T15655] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1043.954190][T15655] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1044.121857][T15655] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1044.202535][T15655] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1044.248559][T15655] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1044.464641][T15655] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1044.496782][T15655] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1044.517044][T15609] veth0_vlan: entered promiscuous mode [ 1044.518130][ T1287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1044.518148][ T1287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1044.685960][T15609] veth1_vlan: entered promiscuous mode [ 1044.917459][T15614] veth0_vlan: entered promiscuous mode [ 1044.918875][T15609] veth0_macvtap: entered promiscuous mode [ 1045.000561][T15609] veth1_macvtap: entered promiscuous mode [ 1045.056566][T15614] veth1_vlan: entered promiscuous mode [ 1045.218536][T15609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1045.326865][T15609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1045.355365][T15828] loop3: detected capacity change from 0 to 32768 [ 1045.468802][T15828] JBD2: Ignoring recovery information on journal [ 1045.646438][T15828] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1045.711902][ T1287] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.090380][ T1287] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.115190][ T1287] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.139020][ T1287] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.191091][ T159] bridge_slave_1: left allmulticast mode [ 1046.191119][ T159] bridge_slave_1: left promiscuous mode [ 1046.191424][ T159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.260488][ T159] bridge_slave_0: left allmulticast mode [ 1046.260516][ T159] bridge_slave_0: left promiscuous mode [ 1046.260701][ T159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.582260][T15832] loop1: detected capacity change from 0 to 40427 [ 1047.085284][T15832] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1047.085305][T15832] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1047.116589][T15832] F2FS-fs (loop1): invalid crc value [ 1047.195475][T10696] ocfs2: Unmounting device (7,3) on (node local) [ 1048.018006][T15832] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1048.085593][T15832] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1048.085626][T15832] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1048.391799][ T159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1048.496704][ T159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1048.530296][ T159] bond0 (unregistering): Released all slaves [ 1048.592096][T15614] veth0_macvtap: entered promiscuous mode [ 1048.706927][T15655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1048.960943][T15614] veth1_macvtap: entered promiscuous mode [ 1049.665816][ T159] hsr_slave_0: left promiscuous mode [ 1049.715698][ T159] hsr_slave_1: left promiscuous mode [ 1049.742928][ T159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1050.937957][ T159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1051.288367][T15965] loop3: detected capacity change from 0 to 128 [ 1053.080384][ T159] team0 (unregistering): Port device team_slave_1 removed [ 1053.162012][ T159] team0 (unregistering): Port device team_slave_0 removed [ 1054.760937][T15655] 8021q: adding VLAN 0 to HW filter on device team0 [ 1055.094375][T15614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1055.248559][ T1287] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.248759][ T1287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1055.296349][ T170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1055.296371][ T170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1055.335240][ T1287] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.336412][ T1287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1055.957382][T15614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1056.435802][ T1287] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.552801][ T7825] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.555888][ T4339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1056.555908][ T4339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1056.684371][ T1189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.709338][ T3165] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.278049][T16189] tipc: Started in network mode [ 1057.278091][T16189] tipc: Node identity 0655e6c9df8c, cluster identity 4711 [ 1057.299607][T16189] tipc: Enabled bearer , priority 0 [ 1057.300692][T16197] syzkaller0: entered promiscuous mode [ 1057.300707][T16197] syzkaller0: entered allmulticast mode [ 1057.589145][T15655] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1058.452754][T16192] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) ! [ 1058.555873][T16187] tipc: Resetting bearer [ 1059.266447][T16187] tipc: Disabling bearer [ 1059.702766][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.702823][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.288051][ T6037] tipc: Node number set to 3654936265 [ 1061.813579][T16520] loop1: detected capacity change from 0 to 16 [ 1062.580970][T16522] loop3: detected capacity change from 0 to 2048 [ 1065.548516][ T1189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1065.548538][ T1189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1066.055496][T16540] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1066.055691][T16540] overlayfs: failed to set xattr on upper [ 1066.055723][T16540] overlayfs: ...falling back to redirect_dir=nofollow. [ 1066.055753][T16540] overlayfs: ...falling back to index=off. [ 1066.055760][T16540] overlayfs: ...falling back to uuid=null. [ 1066.079526][T16538] netlink: 24 bytes leftover after parsing attributes in process `syz.3.690'. [ 1066.132353][T16539] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 1067.315152][T16646] loop9: detected capacity change from 0 to 1024 [ 1071.420219][T15655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1074.891346][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1075.025779][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1075.057642][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1075.095855][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1075.132592][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1077.248560][ T5143] Bluetooth: hci4: command tx timeout [ 1078.239571][ T21] ------------[ cut here ]------------ [ 1078.239584][ T21] ODEBUG: free active (active state 0) object: ffff8880442bc218 object type: timer_list hint: delayed_sync_fs+0x0/0xf0 [ 1078.239726][ T21] WARNING: lib/debugobjects.c:632 at debug_check_no_obj_freed+0x405/0x550, CPU#0: rcuc/0/21 [ 1078.239796][ T21] Modules linked in: [ 1078.239835][ T21] CPU: 0 UID: 0 PID: 21 Comm: rcuc/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1078.239856][ T21] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1078.239869][ T21] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 1078.239896][ T21] Code: 89 44 24 20 e8 87 10 7a fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 a0 3d a8 8b 48 c7 c2 20 43 a8 8b 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 1078.239912][ T21] RSP: 0018:ffffc900001a7ae8 EFLAGS: 00010246 [ 1078.239928][ T21] RAX: ffffffff82a40b70 RBX: ffffffff99ab0ff8 RCX: 0000000000000000 [ 1078.239942][ T21] RDX: ffffffff8ba84320 RSI: ffffffff8ba83da0 RDI: ffffffff8f979410 [ 1078.239956][ T21] RBP: ffffffff8b4f5520 R08: ffff8880442bc218 R09: ffffffff8b4f68a0 [ 1078.239970][ T21] R10: dffffc0000000000 R11: ffffffff81b0f700 R12: ffff8880442bc400 [ 1078.239984][ T21] R13: ffffffff8f979410 R14: ffff8880442bc000 R15: ffff8880442bc218 [ 1078.239998][ T21] FS: 0000000000000000(0000) GS:ffff8881260c2000(0000) knlGS:0000000000000000 [ 1078.240014][ T21] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1078.240027][ T21] CR2: 00007f7221a8cff8 CR3: 0000000071a60000 CR4: 00000000003526f0 [ 1078.240044][ T21] Call Trace: [ 1078.240052][ T21] [ 1078.240059][ T21] ? __pfx_delayed_sync_fs+0x10/0x10 [ 1078.240097][ T21] kfree+0x13e/0x6c0 [ 1078.240176][ T21] ? rcu_cpu_kthread+0x99e/0x1470 [ 1078.240235][ T21] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1078.240263][ T21] ? __pfx_delayed_free+0x10/0x10 [ 1078.240291][ T21] rcu_cpu_kthread+0x99e/0x1470 [ 1078.240324][ T21] ? rcu_cpu_kthread+0x205/0x1470 [ 1078.240359][ T21] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 1078.240386][ T21] ? schedule+0x90/0x360 [ 1078.240415][ T21] ? smpboot_thread_fn+0x4d/0xa50 [ 1078.240465][ T21] smpboot_thread_fn+0x541/0xa50 [ 1078.240490][ T21] ? smpboot_thread_fn+0x4d/0xa50 [ 1078.240518][ T21] kthread+0x388/0x470 [ 1078.240548][ T21] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1078.240566][ T21] ? __pfx_kthread+0x10/0x10 [ 1078.240590][ T21] ret_from_fork+0x514/0xb70 [ 1078.240617][ T21] ? __pfx_ret_from_fork+0x10/0x10 [ 1078.240636][ T21] ? __switch_to+0xc79/0x1410 [ 1078.240672][ T21] ? __pfx_kthread+0x10/0x10 [ 1078.240698][ T21] ret_from_fork_asm+0x1a/0x30 [ 1078.240737][ T21] [ 1078.240754][ T21] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1078.240769][ T21] CPU: 0 UID: 0 PID: 21 Comm: rcuc/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1078.240789][ T21] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1078.240800][ T21] Call Trace: [ 1078.240807][ T21] [ 1078.240815][ T21] vpanic+0x56c/0xa60 [ 1078.240836][ T21] ? __pfx__printk+0x10/0x10 [ 1078.240861][ T21] ? __pfx_vpanic+0x10/0x10 [ 1078.240880][ T21] ? is_bpf_text_address+0x292/0x2b0 [ 1078.240934][ T21] ? is_bpf_text_address+0x26/0x2b0 [ 1078.240965][ T21] panic+0xc5/0xd0 [ 1078.240986][ T21] ? __pfx_panic+0x10/0x10 [ 1078.241016][ T21] ? ret_from_fork_asm+0x1a/0x30 [ 1078.241043][ T21] __warn+0x315/0x4c0 [ 1078.241063][ T21] ? debug_check_no_obj_freed+0x405/0x550 [ 1078.241090][ T21] ? debug_check_no_obj_freed+0x405/0x550 [ 1078.241117][ T21] __report_bug+0x29a/0x540 [ 1078.241143][ T21] ? __pfx_stack_trace_save+0x10/0x10 [ 1078.241194][ T21] ? debug_check_no_obj_freed+0x405/0x550 [ 1078.241220][ T21] ? __pfx___report_bug+0x10/0x10 [ 1078.241250][ T21] ? kfree+0x1c5/0x6c0 [ 1078.241273][ T21] ? rcu_cpu_kthread+0x99e/0x1470 [ 1078.241295][ T21] ? smpboot_thread_fn+0x541/0xa50 [ 1078.241314][ T21] ? kthread+0x388/0x470 [ 1078.241340][ T21] ? __lock_acquire+0x6b5/0x2cf0 [ 1078.241375][ T21] report_bug_entry+0x19a/0x290 [ 1078.241402][ T21] ? debug_check_no_obj_freed+0x44a/0x550 [ 1078.241425][ T21] ? debug_check_no_obj_freed+0x44f/0x550 [ 1078.241449][ T21] handle_bug+0xce/0x200 [ 1078.241472][ T21] exc_invalid_op+0x1a/0x50 [ 1078.241491][ T21] asm_exc_invalid_op+0x1a/0x20 [ 1078.241508][ T21] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 1078.241532][ T21] Code: 89 44 24 20 e8 87 10 7a fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 a0 3d a8 8b 48 c7 c2 20 43 a8 8b 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 1078.241548][ T21] RSP: 0018:ffffc900001a7ae8 EFLAGS: 00010246 [ 1078.241564][ T21] RAX: ffffffff82a40b70 RBX: ffffffff99ab0ff8 RCX: 0000000000000000 [ 1078.241578][ T21] RDX: ffffffff8ba84320 RSI: ffffffff8ba83da0 RDI: ffffffff8f979410 [ 1078.241592][ T21] RBP: ffffffff8b4f5520 R08: ffff8880442bc218 R09: ffffffff8b4f68a0 [ 1078.241606][ T21] R10: dffffc0000000000 R11: ffffffff81b0f700 R12: ffff8880442bc400 [ 1078.241620][ T21] R13: ffffffff8f979410 R14: ffff8880442bc000 R15: ffff8880442bc218 [ 1078.241639][ T21] ? __pfx_timer_debug_hint+0x10/0x10 [ 1078.241693][ T21] ? __pfx_delayed_sync_fs+0x10/0x10 [ 1078.241725][ T21] ? __pfx_delayed_sync_fs+0x10/0x10 [ 1078.241762][ T21] kfree+0x13e/0x6c0 [ 1078.241784][ T21] ? rcu_cpu_kthread+0x99e/0x1470 [ 1078.241807][ T21] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1078.241835][ T21] ? __pfx_delayed_free+0x10/0x10 [ 1078.241860][ T21] rcu_cpu_kthread+0x99e/0x1470 [ 1078.241891][ T21] ? rcu_cpu_kthread+0x205/0x1470 [ 1078.241926][ T21] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 1078.241951][ T21] ? schedule+0x90/0x360 [ 1078.241980][ T21] ? smpboot_thread_fn+0x4d/0xa50 [ 1078.241999][ T21] smpboot_thread_fn+0x541/0xa50 [ 1078.242022][ T21] ? smpboot_thread_fn+0x4d/0xa50 [ 1078.242044][ T21] kthread+0x388/0x470 [ 1078.242059][ T21] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1078.242070][ T21] ? __pfx_kthread+0x10/0x10 [ 1078.242085][ T21] ret_from_fork+0x514/0xb70 [ 1078.242098][ T21] ? __pfx_ret_from_fork+0x10/0x10 [ 1078.242109][ T21] ? __switch_to+0xc79/0x1410 [ 1078.242126][ T21] ? __pfx_kthread+0x10/0x10 [ 1078.242140][ T21] ret_from_fork_asm+0x1a/0x30 [ 1078.242161][ T21] [ 1078.242692][ T21] Kernel Offset: disabled