last executing test programs: 17m39.501354365s ago: executing program 2 (id=502): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x2, 0xff, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="c80100", @ANYRES16=r2, @ANYBLOB="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"], 0x1c8}}, 0x0) 17m38.266967028s ago: executing program 2 (id=507): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10b95}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x1}, @IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0xe600}]}}}]}, 0x44}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmctl$IPC_RMID(r3, 0x0) capset(0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f0000000800), 0x0, 0xfff, 0x8) r4 = socket$inet_sctp(0x2, 0x1, 0x84) fsetxattr$security_ima(r4, &(0x7f0000000200), &(0x7f0000000240)=@v1={0x2, "3fb5d85c38d7c255392e1402068ec316d1c6f599"}, 0x15, 0x2) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x10) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @private}}) getrandom(0x0, 0x0, 0x6) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x9c8}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x859}, {0x6, 0x11, 0x45}, {0x8, 0x13, 0x2a5}, {0x5, 0x14, 0x1}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x4000) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffffff7a003e45c, 0x10000000000000) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000008c0), 0x4) socket$kcm(0xa, 0x3, 0x3a) 17m36.44273057s ago: executing program 2 (id=511): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0xc48, 0x11, 0x4, "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"}], 0xc48}, 0x20004085) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 17m35.997858403s ago: executing program 2 (id=515): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1048c, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 17m35.188925283s ago: executing program 2 (id=519): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000001a3c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_POLICE={0x48, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x3, 0x3, 0x2, 0xffff, {0x6, 0x2, 0xa, 0x0, 0xd}, {0x10, 0x2, 0xb, 0x6af, 0x80, 0x2749}, 0x40, 0x8000, 0xe}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}]}]}}]}, 0x7c}}, 0x0) 17m34.705342481s ago: executing program 2 (id=521): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 17m32.139496274s ago: executing program 32 (id=521): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 8m31.03171209s ago: executing program 0 (id=2136): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000100)="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", 0xf01}], 0x1, 0x0, 0x0, 0x20001940}, 0x4004) 8m28.945141847s ago: executing program 0 (id=2141): open(&(0x7f00000002c0)='./file0\x00', 0x14937e, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000000)={[{}], [], 0x2c}) 8m28.422103762s ago: executing program 0 (id=2146): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000840)={&(0x7f0000000540)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000002400)="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", 0xff0}, {0x0}, {&(0x7f0000004400)}], 0x4, &(0x7f0000000580)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x30}, 0x8000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x25, 0x1, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8m28.080771213s ago: executing program 0 (id=2151): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 8m27.58426655s ago: executing program 0 (id=2152): syz_usb_connect(0x3, 0x2d, &(0x7f0000000980)=ANY=[@ANYBLOB="120110034c6b16106d049708966b0102030109021b00020903000a0904"], &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0}) 8m24.849679651s ago: executing program 0 (id=2159): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_open_dev$video(&(0x7f0000000000), 0xc000, 0x0) syz_open_dev$I2C(0x0, 0x80, 0x14000) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = io_uring_setup(0x10d7, &(0x7f00000000c0)={0x0, 0xbfff, 0x400, 0x2, 0x1d}) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback, 0x1}, 0x1c) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f0000000400)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r9, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x40040) 8m23.55007236s ago: executing program 5 (id=2168): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 8m20.064237125s ago: executing program 5 (id=2177): socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x0, 0x0, 0x1, 0x1, 0x4000, 0x1}, 0x20) close(r1) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 8m18.050715786s ago: executing program 5 (id=2183): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000080)={0x7}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$vhost_msg_v2(r2, &(0x7f0000000200)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x2}}, 0x48) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$inet(0x2, 0x2, 0x1) 8m12.949612372s ago: executing program 5 (id=2188): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) unshare(0x22020400) umount2(&(0x7f0000000040)='.\x00', 0x2) 8m9.975993298s ago: executing program 5 (id=2193): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x400000000080803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x40000080806, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000a40)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x98, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x0, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40814}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) 8m9.672138932s ago: executing program 33 (id=2159): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_open_dev$video(&(0x7f0000000000), 0xc000, 0x0) syz_open_dev$I2C(0x0, 0x80, 0x14000) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = io_uring_setup(0x10d7, &(0x7f00000000c0)={0x0, 0xbfff, 0x400, 0x2, 0x1d}) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback, 0x1}, 0x1c) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f0000000400)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r9, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x40040) 8m9.559731622s ago: executing program 5 (id=2196): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) 8m8.72780171s ago: executing program 34 (id=2196): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) 8m1.193858858s ago: executing program 3 (id=2214): syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(0x0, 0x8000002000000, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x88040, 0x0) truncate(0x0, 0xb73d) truncate(0x0, 0xf000) close(r3) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "5c8f020082395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0xe) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c00"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newspdinfo={0x24, 0x24, 0x801, 0x70bd2c, 0x25dfdbfb, 0xc, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x24}}, 0x40) bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 8m0.965071085s ago: executing program 3 (id=2216): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee1, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x0) 7m59.133941947s ago: executing program 3 (id=2218): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x20000010) 7m58.753519156s ago: executing program 3 (id=2219): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) unshare(0x22020400) umount2(&(0x7f0000000040)='.\x00', 0x2) 7m58.292412755s ago: executing program 3 (id=2223): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {0x5}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r7, 0x400448e6, &(0x7f0000000200)='@') ioctl$sock_bt_hci(r7, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r7, 0x400448e7, &(0x7f0000000080)) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000100)) 7m56.477068976s ago: executing program 3 (id=2228): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) symlink(0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 7m55.03738436s ago: executing program 35 (id=2228): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) symlink(0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 5m37.513634255s ago: executing program 4 (id=2557): syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x88040, 0x0) truncate(0x0, 0xb73d) truncate(0x0, 0xf000) close(r3) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "5c8f020082395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0xe) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c00"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newspdinfo={0x24, 0x24, 0x801, 0x70bd2c, 0x25dfdbfb, 0xc, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x24}}, 0x40) bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 5m36.49104674s ago: executing program 4 (id=2561): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000580)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d4a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffff7, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x4, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x8, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x1], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0xc32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x1, 0xe8b, 0x5, 0x80000001, 0x7, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) readv(r3, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) lsm_get_self_attr(0x64, &(0x7f0000000300)={0x0, 0x0, 0x90, 0x70, ""/112}, &(0x7f0000000400)=0x90, 0x0) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) io_submit(r2, 0x0, &(0x7f0000001140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_destroy(0x0) 5m32.458925714s ago: executing program 4 (id=2567): syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) accept4(r4, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {0x5}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5m31.399768511s ago: executing program 4 (id=2571): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) unshare(0x22020400) umount2(0x0, 0x2) 5m30.55464231s ago: executing program 4 (id=2574): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee1, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x200000000) r8 = dup2(r4, r4) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r8, &(0x7f0000004d80)={0x2020}, 0x2020) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f00000002c0)=""/99, 0x63}, {&(0x7f0000006800)=""/4097, 0x1001}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/62, 0x3e}, {&(0x7f0000002580)=""/200, 0xc8}, {&(0x7f0000002680)=""/146, 0x92}, {&(0x7f00000004c0)=""/126, 0x7e}, {&(0x7f0000002740)=""/82, 0x52}], 0x8, &(0x7f0000002840)=""/246, 0xf6}}, {{&(0x7f0000002940)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000029c0)=""/255, 0xff}, {&(0x7f0000000340)=""/23, 0x17}, {&(0x7f0000002ac0)=""/68, 0x44}], 0x3, &(0x7f0000002b40)=""/234, 0xea}, 0x6c}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000002c40)=""/188, 0xbc}, {&(0x7f0000004800)=""/4096, 0x1000}], 0x2, &(0x7f0000002d00)=""/215, 0xd7}, 0xba5}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000005800)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/190, 0xbe}, {&(0x7f0000002ec0)=""/187, 0xbb}, {&(0x7f0000002f80)=""/100, 0x64}], 0x4, &(0x7f0000003040)=""/144, 0x90}, 0x9}], 0x4, 0x0, 0x0) 5m30.099799143s ago: executing program 4 (id=2576): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, 0xffffffffffffffff) r1 = syz_open_dev$media(&(0x7f00000000c0), 0x20, 0x100) r2 = syz_open_dev$media(0x0, 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000080)={0x0, 0xffffff82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000f80)=[{}, {}, {0x0, 0x80000000, 0x0, {0x0}}, {}, {}, {}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f00000007c0)={{0x80000000, r3, 0x0, [0x6, 0x7]}, {0x80000000, 0x0, 0x0, [0x1, 0x6]}, 0x0, [0x637ac06d, 0x4]}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5m28.994220038s ago: executing program 36 (id=2576): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, 0xffffffffffffffff) r1 = syz_open_dev$media(&(0x7f00000000c0), 0x20, 0x100) r2 = syz_open_dev$media(0x0, 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000080)={0x0, 0xffffff82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000f80)=[{}, {}, {0x0, 0x80000000, 0x0, {0x0}}, {}, {}, {}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f00000007c0)={{0x80000000, r3, 0x0, [0x6, 0x7]}, {0x80000000, 0x0, 0x0, [0x1, 0x6]}, 0x0, [0x637ac06d, 0x4]}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5m4.799916195s ago: executing program 9 (id=2626): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6638a, 0x1001}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) unshare(0x2c020400) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r5 = memfd_create(0x0, 0x3) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000080)={r5, 0x2000000, 0x0, 0x8000}) poll(&(0x7f0000000100)=[{r6, 0x201}], 0x1, 0x10ad) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r7, 0xc0045520, &(0x7f0000000080)=0x80000001) syz_emit_ethernet(0xd6, &(0x7f0000000600)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800402800c80066000003219078ac1e0001ac141436014408e0900000000489119c2f8bb6f7a7ffe6d4223f164a650c44145b71ac1414bb000000080000000000000081070f7cffffdeff64010100ffffffff8303eb892b97640101017f000001ac1414aaac1414327f000001640101000a010100e00000010a01010000000000004e2088f40431907800afe31f04c6342d864ecb84eb07fb60829e80094cfd8f94e82e15dd4ff69ebcd65ed64c8becbe870ed1182d770cc40b9eb7a7dde3d7b04cf5abe6209ef55084"], 0x0) syz_usb_disconnect(r0) 5m0.434051331s ago: executing program 9 (id=2633): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x5}, 0x0) r3 = socket(0x25, 0x5, 0x5) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0) accept4$x25(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x12, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone(0x50807100, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/meminfo\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000680)={0x2020}, 0x2020) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) recvmmsg(r4, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x160, 0x0) connect$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) sendmsg$sock(r2, 0x0, 0x20044004) 4m59.086903757s ago: executing program 9 (id=2636): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784c", 0x1f) syz_usb_connect(0x2, 0xbe, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) 4m57.132552804s ago: executing program 9 (id=2640): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@oldalloc}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") unshare(0x8000000) semtimedop(0x0, &(0x7f0000000540)=[{0x4, 0x1, 0x800}], 0x1, 0x0) unshare(0x2c040000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x4}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) ptrace(0x10, r1) ptrace$getregs(0x1a, r1, 0x8, &(0x7f0000000240)=""/199) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) connect$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x20000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000001f0000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xfe49, 0xffffff2e, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000600)={0x23e3, 0x2, 0xd, 0x2}) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="53594e54480a564f4c554d45202753796e746820436170745032b28ff8b26d7f940c263b847572652053776974"], 0xb9) r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r8, r7, 0x0) renameat2(r0, &(0x7f0000000080)='./file1\x00', r3, &(0x7f0000001240)='./file1\x00', 0x3) 4m55.933344074s ago: executing program 9 (id=2644): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) socket(0x10, 0x400000000080803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_emit_ethernet(0x56, &(0x7f00000003c0)=ANY=[], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r2, 0x20000005) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000a40)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x98, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x0, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40814}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r6, 0x0) write$binfmt_script(r6, &(0x7f0000000b40)={'#! ', './file1/file0', [{0x20, '\x89,Qhm\xcd\xc7\xeb\xaf\xcd]y\x9c\x93\xacz\xd2c.\xc9}\xafm\t\x91\xcf\xcc\\N\xeb\x17\xc0\x90\\\x9d\x18\xb2\xbd\x17\x12\x8c{\xa5X\x92\x9b\xed?\xfd\xcb\xa5\xd0\xeduI\xc81w\xa9\x83\x89\xb1h\xe11=\x85\x82\xa2OI\xee\x02[\xf5:[\xb7\xa4l\xa6\xc5~\x8d\t\x00b\xf1\xe8I\x94\x82!\xedW\xb7t+\x02\xfb\xb9\x82\x89\x00\x00\x00\x00\x00'}, {0x20, '\xfe]\xe9a<$\x01)\xa3\x03D%\x06\xf9}iv\xfc\xe0\xc7s\xc1\xa5c\xfd\xb8\xea\xe5\x9a\x82w\xc6\\]\x8cB\xfb\xea\xd1\xe3\x8c@\x8aqX\xcd\xf5?\xe6\xa2z\xbdPF_\x01K5\xbf\xc0\x83=\xa9]S\xe2`\x02j;\xce\x8a\x9fY\xdc\x90L\x1f\x9cS\x83\xb4\xc3\xfb\xe9$\x80\xbd\x85\x8bu-a\x9a\xb3\xb0{\xed\xcc\xdd\xeeG\xeb\x98\xb2\xfa\xc8\xa1\x04\xd5N\x9f\xda\x95\xf8\x8c\x92v\xf3\xf6I\xeb6\xe9`\xcbt\x0f`\xb3dl\x0f\x8e\x93\x10\x97n@\xc4\xcb\xc6\x80\x17O\x8dM#x\xe2\xe9T\xda\x1d\xe6\xb1\x1b\x06\x89\x94Q\xcb\x8f\x92N\xade\xf9l\xc3\x81\xd3\xd1\x84`6\xed\x98\x9a\x90:\x13\xdb\x8f\x87\xd6\xe8w\xfdb\x17}\x14*z\x98\xb3\x96\x9dW\xa7\x81\x0e\x11Q3\xc2\xbfx\x94\xbb\x13\x9b\xd2\xec/\xfac^\xa2\x8e8\xbeM\x11\xcb\x89P\xba\xd9E}\xe4\xa7M~?\xbdiMh\xce\xb2\b\x9d\xf0\xbd\xc5\xa7=4\xc9\xf6\xff\\\x9c\xf0\xaa=\xb7\x83\x80\x01.%\t\xed\xb6\xacP\"\a\xc6\x8a\xf6GB\xd2a\x83\xa4\xa4\x1bRO\x1a\xe2N\xe6\xc8\xf2Cm\xb0\xe7\xeb\xcf\xc3\xba\xbd\xf4\xde\x8aZ@\xcd\xc9\xcbLJi8\x04q+\xf9x\xeas\xb2\xa1D\xd5\xc7\xfa\x919\x93_\xc7/:R2\xc5\xc0\xb4\"\x85\xe8THI$\xe5\xac\xb7\x13\xb2\xa5\x93\xbf\x83g5.\xb9\xd0\x89\xef\x8f\r\xa2\xfe\x90\x1b\xc8['}, {0x20, '/dev/autofs\x00'}, {}], 0xa, "3d4ef156fa4a7a213d29faddad7ce53706c672b4cef090d64ad4da7025ebf9001656960d4bb6ad3e2e4ff01193d6ee5ea9381db2a8c6911d1c74ba84807f4f7b640d2f82e9c4e4"}, 0x244) ioctl$BLKRRPART(r6, 0x125f, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='uid_map\x00') sendmsg$IPVS_CMD_SET_INFO(r7, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 4m53.990926329s ago: executing program 9 (id=2646): socket$nl_netfilter(0x10, 0x3, 0xc) iopl(0x3) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x7) write$uinput_user_dev(r2, &(0x7f0000000080)={'syz0\x00', {0x0, 0x2}, 0x35, [0x4346, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfff, 0xfffffffc, 0xffffffff, 0x401, 0x5, 0x0, 0x0, 0x60000000, 0x0, 0x20000, 0x0, 0xf, 0x851, 0x0, 0x2, 0x3, 0x0, 0x0, 0x800], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0xa0000000, 0x0, 0x80000001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x2, 0x5, 0xfffffffb, 0x2, 0x8ed7, 0xd5c2], [0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4003, 0x0, 0x2, 0x0, 0x80000000, 0xc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x100, 0x0, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x5, 0xffffffff, 0x0, 0x40, 0x0, 0x1], [0x10, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x5]}, 0x45c) userfaultfd(0x801) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x8080583a, 0x0) r3 = socket(0x25, 0x6, 0xfffffffd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) getresgid(&(0x7f0000001200), 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=@ipv6_newnexthop={0x1c, 0x68, 0x5, 0x70bd2a, 0x0, {0x2}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000017c0)={0xf0, 0x21, 0x800, 0x70bd29, 0x25dfdbfc, {0xe}, [@generic, @nested={0x20, 0x73, 0x0, 0x1, [@nested={0x18, 0x141, 0x0, 0x1, [@nested={0x14, 0xe7, 0x0, 0x1, [@nested={0x4, 0xa}, @typed={0x4, 0x4a}, @nested={0x4, 0x13e}, @nested={0x4, 0xfb}]}]}, @nested={0x4, 0x114}]}, @generic, @generic, @generic="c3c05f47ebdba7f4f01fe3b42ad30ccb8f15233a7977180f927bcb68a79591c3ba10e32578319095685dc193f697bb3aa089fb778828d503b740f603c1acd7cfcd2d66f2b7a78b55fbb00cba174bd5762630f270c6ddeda154f8132a3543e83a77a9c909c9aa45f5901cbd3bf76ab1100a9dd47924af36f5239c12223fc26029b1c0ea0957e36bc5ac41c12aee8bcb617447606e6112ce990e486ea80b8e46631f4ef14ac924c3a65833ddf33452dcdaa97ac23d75ed0d0c470592"]}, 0xf0}, 0x1, 0x0, 0x0, 0x200000a0}, 0x48000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018eaffffff000000e400000000000000020000000000"], 0x0, 0x1a, 0x0, 0x1, 0x9, 0x0, @void, @value}, 0x28) open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0) getgroups(0x0, 0x0) 4m52.652237363s ago: executing program 37 (id=2646): socket$nl_netfilter(0x10, 0x3, 0xc) iopl(0x3) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x7) write$uinput_user_dev(r2, &(0x7f0000000080)={'syz0\x00', {0x0, 0x2}, 0x35, [0x4346, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfff, 0xfffffffc, 0xffffffff, 0x401, 0x5, 0x0, 0x0, 0x60000000, 0x0, 0x20000, 0x0, 0xf, 0x851, 0x0, 0x2, 0x3, 0x0, 0x0, 0x800], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0xa0000000, 0x0, 0x80000001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x2, 0x5, 0xfffffffb, 0x2, 0x8ed7, 0xd5c2], [0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4003, 0x0, 0x2, 0x0, 0x80000000, 0xc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x100, 0x0, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x5, 0xffffffff, 0x0, 0x40, 0x0, 0x1], [0x10, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x5]}, 0x45c) userfaultfd(0x801) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x8080583a, 0x0) r3 = socket(0x25, 0x6, 0xfffffffd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) getresgid(&(0x7f0000001200), 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=@ipv6_newnexthop={0x1c, 0x68, 0x5, 0x70bd2a, 0x0, {0x2}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000017c0)={0xf0, 0x21, 0x800, 0x70bd29, 0x25dfdbfc, {0xe}, [@generic, @nested={0x20, 0x73, 0x0, 0x1, [@nested={0x18, 0x141, 0x0, 0x1, [@nested={0x14, 0xe7, 0x0, 0x1, [@nested={0x4, 0xa}, @typed={0x4, 0x4a}, @nested={0x4, 0x13e}, @nested={0x4, 0xfb}]}]}, @nested={0x4, 0x114}]}, @generic, @generic, @generic="c3c05f47ebdba7f4f01fe3b42ad30ccb8f15233a7977180f927bcb68a79591c3ba10e32578319095685dc193f697bb3aa089fb778828d503b740f603c1acd7cfcd2d66f2b7a78b55fbb00cba174bd5762630f270c6ddeda154f8132a3543e83a77a9c909c9aa45f5901cbd3bf76ab1100a9dd47924af36f5239c12223fc26029b1c0ea0957e36bc5ac41c12aee8bcb617447606e6112ce990e486ea80b8e46631f4ef14ac924c3a65833ddf33452dcdaa97ac23d75ed0d0c470592"]}, 0xf0}, 0x1, 0x0, 0x0, 0x200000a0}, 0x48000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018eaffffff000000e400000000000000020000000000"], 0x0, 0x1a, 0x0, 0x1, 0x9, 0x0, @void, @value}, 0x28) open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0) getgroups(0x0, 0x0) 35.634526873s ago: executing program 8 (id=3237): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r1}, 0x38) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x5c}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000180)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x10, 0x2b, 0x0, @private2, @local, {[@srh={0x0, 0x0, 0x2}], {0x0, 0x0, 0x8}}}}}}, 0x0) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 34.22897296s ago: executing program 8 (id=3240): getpgrp(0xffffffffffffffff) r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x212e, 0x100, 0x3, 0x3de}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x400000080001001, 0x0, 0x0, 0x22}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 30.012669464s ago: executing program 1 (id=3250): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000340)="7415cdcee6f3543ab3af7298981fe3b563e3eb735076cb706a4ab323514adad50330ba8fd09e57a9af55dde622b3e3971d34bee95c43474ecb19db7a1af4010a09ddda1cfb", 0x45}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4c2103a0) 29.338273642s ago: executing program 1 (id=3252): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = fsopen(&(0x7f0000000280)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000200)="d80000002c0081064e81f782db44b904021d080005000300e8fe55a1180005000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbaceadaafc9136e30a3f36d90116d58017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775", 0x95}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r4], 0x20) 28.072577423s ago: executing program 1 (id=3253): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) sendfile(r1, r1, 0x0, 0xffffffff) 28.042664056s ago: executing program 8 (id=3255): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x0, 0x5001) 27.726993759s ago: executing program 1 (id=3257): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, 0x0, 0x0) 27.461321495s ago: executing program 1 (id=3259): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000540), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) fallocate(r2, 0x10, 0xfff, 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000c80)={'filter\x00', 0x5, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0xe8, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x4, 0x3}}}, {{@arp={@multicast1, @loopback, 0xffffffff, 0xffffff00, 0x6, 0xf, {@empty, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x3794, 0x2a1b, 0xc6d3, 0x0, 0x3, 0x2, 'vxcan1\x00', 'vlan0\x00', {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @local, @remote}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) getpeername$inet(r2, &(0x7f0000000300)={0x2, 0x0, @broadcast}, &(0x7f0000000340)=0x10) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fe00000000000000", 0x1c) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, r1, 0x301, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r8, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1ff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 25.209619602s ago: executing program 1 (id=3260): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r1}, 0x38) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x5c}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000180)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x10, 0x2b, 0x0, @private2, @local, {[@srh={0x0, 0x0, 0x2}], {0x0, 0x0, 0x8}}}}}}, 0x0) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 25.153229638s ago: executing program 8 (id=3261): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000340)="7415cdcee6f3543ab3af7298981fe3b563e3eb735076cb706a4ab323514adad50330ba8fd09e57a9af55dde622b3e3971d34bee95c43474ecb19db7a1af4010a09ddda1cfb", 0x45}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4c2103a0) 24.813193783s ago: executing program 8 (id=3262): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) accept4(r4, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {0x5}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 23.771350988s ago: executing program 8 (id=3263): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = fsopen(&(0x7f0000000280)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000200)="d80000002c0081064e81f782db44b904021d080005000300e8fe55a1180005000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbaceadaafc9136e30a3f36d90116d58017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775", 0x95}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r4], 0x20) 20.864596152s ago: executing program 6 (id=3270): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x0, 0x5001) 19.890766279s ago: executing program 6 (id=3271): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000340)="7415cdcee6f3543ab3af7298981fe3b563e3eb735076cb706a4ab323514adad50330ba8fd09e57a9af55dde622b3e3971d34bee95c43474ecb19db7a1af4010a09ddda1cfb", 0x45}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4c2103a0) 19.769026318s ago: executing program 6 (id=3272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0xffffffff, 0xfffffffd}) r1 = syz_io_uring_setup(0x63ab, &(0x7f00000006c0)={0x0, 0x1d11, 0x10000}, &(0x7f0000010080), &(0x7f0000000400)) setrlimit(0x40000000000008, &(0x7f0000000000)={0x0, 0x5}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000004240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_EXPRESSIONS={0x10, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}]}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x20}]}, @NFT_MSG_NEWFLOWTABLE={0x9c, 0x16, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x5c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'sit0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x24c, 0xe, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1dc, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}, {0xa0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @bitwise={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x3}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffff}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7c20000000}, @NFTA_SET_ELEM_EXPR={0x4c, 0x7, 0x0, 0x1, @masq={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, {0xec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x94, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}]}, {0x4}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xeda}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3ac}}, 0x24040000) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0xc0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x16, 0xf, 0x4f, 0x40, 0x100d, 0xcb01, 0x84d1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6d, 0x0, 0x1, 0x74, 0x9a, 0xdc, 0x0, [], [{{0x9, 0x5, 0x1c277d69f7841ba1, 0x3, 0x400, 0x5, 0x2, 0x8}}]}}]}}]}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) 16.760525764s ago: executing program 6 (id=3273): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x560, 0x2, 0x1}, 0x18, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$notify(r3, 0x402, 0xc) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) ioperm(0x2, 0x2, 0x81) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x1c1140, 0x0) landlock_restrict_self(r0, 0x0) socket$unix(0x1, 0x2, 0x0) 15.724001013s ago: executing program 6 (id=3274): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80280, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x808, &(0x7f0000007000/0x4000)=nil) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) mmap(&(0x7f000084a000/0x3000)=nil, 0x3000, 0x2, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) ftruncate(0xffffffffffffffff, 0x2911) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x122, 0x0) 15.073162333s ago: executing program 6 (id=3275): socket(0x840000000002, 0x3, 0xff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x4, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @private0}, {0xa, 0x0, 0x7, @remote}}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r4, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r5, 0x0, 0x0, 0x0) 10.014314064s ago: executing program 38 (id=3260): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r1}, 0x38) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x5c}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000180)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x10, 0x2b, 0x0, @private2, @local, {[@srh={0x0, 0x0, 0x2}], {0x0, 0x0, 0x8}}}}}}, 0x0) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 8.513342925s ago: executing program 39 (id=3263): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = fsopen(&(0x7f0000000280)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000200)="d80000002c0081064e81f782db44b904021d080005000300e8fe55a1180005000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbaceadaafc9136e30a3f36d90116d58017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775", 0x95}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r4], 0x20) 0s ago: executing program 40 (id=3275): socket(0x840000000002, 0x3, 0xff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x4, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @private0}, {0xa, 0x0, 0x7, @remote}}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r4, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r5, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 03] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.884449][T15303] bridge_slave_1: entered allmulticast mode [ 1023.940287][T15303] bridge_slave_1: entered promiscuous mode [ 1024.720493][T15422] loop6: detected capacity change from 0 to 1024 [ 1024.806758][T15422] hfsplus: invalid btree flag [ 1024.818655][T15422] hfsplus: failed to load attributes file [ 1024.884221][T15414] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1024.899741][T15303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1024.940505][T15303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1025.253153][T15303] team0: Port device team_slave_0 added [ 1026.125231][ T5952] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1026.211546][ T6040] bridge_slave_1: left allmulticast mode [ 1026.217232][ T6040] bridge_slave_1: left promiscuous mode [ 1026.230572][ T6040] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.244295][ T6040] bridge_slave_0: left allmulticast mode [ 1026.252863][ T6040] bridge_slave_0: left promiscuous mode [ 1026.282623][ T6040] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.290390][ T5952] usb 7-1: Using ep0 maxpacket: 16 [ 1026.314570][ T5952] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.338319][ T5952] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1026.362944][ T5952] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1026.386509][ T5952] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.417253][ T5952] usb 7-1: Product: syz [ 1026.425177][ T5952] usb 7-1: Manufacturer: syz [ 1026.437794][ T5952] usb 7-1: SerialNumber: syz [ 1026.669906][ T5952] usb 7-1: 0:2 : does not exist [ 1026.683430][ T5952] usb 7-1: unit 6 not found! [ 1026.727880][ T5952] usb 7-1: USB disconnect, device number 9 [ 1026.864426][T15375] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1026.888880][T15375] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1026.907028][T15375] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1026.919296][T15375] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1026.929871][T15375] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1026.941733][T13082] udevd[13082]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1026.985879][ T6040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1027.000011][ T6040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1027.010872][ T6040] bond0 (unregistering): Released all slaves [ 1027.031636][T15303] team0: Port device team_slave_1 added [ 1028.119106][ T6040] hsr_slave_0: left promiscuous mode [ 1028.137942][ T6040] hsr_slave_1: left promiscuous mode [ 1028.143811][ T6040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1028.158850][ T6040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1028.481010][T15453] overlayfs: failed to clone upperpath [ 1028.990209][ T5857] Bluetooth: hci0: command tx timeout [ 1029.717391][ T6040] team0 (unregistering): Port device team_slave_1 removed [ 1029.754773][ T6040] team0 (unregistering): Port device team_slave_0 removed [ 1030.117693][T15303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1030.128544][T15303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1030.156664][T15303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1030.369069][T15448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1030.385995][T15448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1030.486339][T15448] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.495487][T15448] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.511892][T15448] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.525085][T15448] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.031445][T15303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1031.138147][ T5857] Bluetooth: hci0: command tx timeout [ 1031.757004][T15303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1031.783580][T15303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1032.098197][T15471] input: syz1 as /devices/virtual/input/input47 [ 1032.153356][T15303] hsr_slave_0: entered promiscuous mode [ 1032.171337][T15303] hsr_slave_1: entered promiscuous mode [ 1032.193543][T15303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1032.223020][T15303] Cannot create hsr debugfs directory [ 1033.117117][T15188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1033.144907][T15188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1033.181805][T15481] loop6: detected capacity change from 0 to 256 [ 1033.217785][ T5857] Bluetooth: hci0: command tx timeout [ 1033.242020][T15188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1033.303109][T15188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1033.842714][T15432] chnl_net:caif_netlink_parms(): no params data found [ 1034.854735][T15508] loop6: detected capacity change from 0 to 64 [ 1035.022253][T15510] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2669'. [ 1035.297850][ T5857] Bluetooth: hci0: command tx timeout [ 1035.356312][T15510] macvtap1: entered promiscuous mode [ 1035.365639][T15510] dummy0: entered promiscuous mode [ 1035.382969][T15510] macvtap1: entered allmulticast mode [ 1035.388863][T15510] dummy0: entered allmulticast mode [ 1035.866563][T15432] bridge0: port 1(bridge_slave_0) entered blocking state [ 1035.888222][T15432] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.901341][T15432] bridge_slave_0: entered allmulticast mode [ 1035.912046][T15432] bridge_slave_0: entered promiscuous mode [ 1035.925703][T15432] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.935493][T15432] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.946401][T15432] bridge_slave_1: entered allmulticast mode [ 1036.098526][T15432] bridge_slave_1: entered promiscuous mode [ 1036.426838][T15432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1036.463736][T15432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1037.036123][T15432] team0: Port device team_slave_0 added [ 1037.070074][ T6040] bridge_slave_1: left allmulticast mode [ 1037.075766][ T6040] bridge_slave_1: left promiscuous mode [ 1037.119614][ T6040] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.274337][ T6040] bridge_slave_0: left allmulticast mode [ 1037.308903][ T6040] bridge_slave_0: left promiscuous mode [ 1037.360712][ T6040] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.080704][T15544] input: syz1 as /devices/virtual/input/input48 [ 1038.364954][ T6040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1038.377972][ T6040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1038.388581][ T6040] bond0 (unregistering): Released all slaves [ 1038.419393][T15432] team0: Port device team_slave_1 added [ 1038.430693][T15303] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1038.677205][T15551] overlayfs: failed to clone upperpath [ 1038.723451][T15303] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1039.233549][T15432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1039.241557][T15432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1039.267811][T15432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1039.283341][T15432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1039.290594][T15432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1039.320379][T15432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1039.336633][T15188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1039.357194][T15303] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1039.580963][T15303] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1039.659271][T15560] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2681'. [ 1039.675307][ T6040] hsr_slave_0: left promiscuous mode [ 1039.690465][ T6040] hsr_slave_1: left promiscuous mode [ 1039.696556][ T6040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1039.710875][ T6040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1040.502985][ T6040] team0 (unregistering): Port device team_slave_1 removed [ 1040.615991][ T6040] team0 (unregistering): Port device team_slave_0 removed [ 1042.013253][T15580] loop6: detected capacity change from 0 to 40427 [ 1042.030301][T15580] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x3fffff [ 1042.042792][T15580] F2FS-fs (loop6): invalid crc value [ 1042.179523][T15580] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1042.736299][T15588] F2FS-fs (loop6): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x197/0xcc0 [ 1043.273803][T15560] macvtap2: entered promiscuous mode [ 1043.293839][T15560] macvtap2: entered allmulticast mode [ 1043.390624][ T8422] syz-executor: attempt to access beyond end of device [ 1043.390624][ T8422] loop6: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1043.445824][ T8422] CPU: 0 UID: 0 PID: 8422 Comm: syz-executor Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 1043.445860][ T8422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1043.445876][ T8422] Call Trace: [ 1043.445885][ T8422] [ 1043.445896][ T8422] dump_stack_lvl+0x241/0x360 [ 1043.445941][ T8422] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1043.445979][ T8422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.446008][ T8422] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 1043.446049][ T8422] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1043.446090][ T8422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.446118][ T8422] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 1043.446164][ T8422] f2fs_handle_critical_error+0x392/0x5a0 [ 1043.446210][ T8422] f2fs_write_end_io+0x563/0x790 [ 1043.446257][ T8422] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1043.446301][ T8422] ? bio_endio+0x7e4/0x890 [ 1043.446330][ T8422] ? bio_endio+0x82a/0x890 [ 1043.446360][ T8422] __submit_merged_bio+0x2a9/0x710 [ 1043.446390][ T8422] ? f2fs_submit_merged_write_cond+0x101/0x380 [ 1043.446430][ T8422] f2fs_submit_merged_write_cond+0x29f/0x380 [ 1043.446477][ T8422] f2fs_write_data_pages+0x2f99/0x38d0 [ 1043.446559][ T8422] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1043.446654][ T8422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.446683][ T8422] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1043.446737][ T8422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.446765][ T8422] ? __lock_acquire+0xad5/0xd80 [ 1043.446807][ T8422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.446835][ T8422] ? do_raw_spin_lock+0x151/0x370 [ 1043.446874][ T8422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.446903][ T8422] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1043.446938][ T8422] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1043.446979][ T8422] do_writepages+0x366/0x890 [ 1043.447028][ T8422] ? __pfx_do_writepages+0x10/0x10 [ 1043.447059][ T8422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.447088][ T8422] ? __lock_acquire+0xad5/0xd80 [ 1043.447129][ T8422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.447164][ T8422] ? do_raw_spin_lock+0x151/0x370 [ 1043.447209][ T8422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.447236][ T8422] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1043.447277][ T8422] filemap_fdatawrite+0x1f2/0x2a0 [ 1043.447315][ T8422] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1043.447345][ T8422] ? mlock_drain_local+0x79/0x490 [ 1043.447430][ T8422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.447459][ T8422] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1043.447500][ T8422] f2fs_sync_dirty_inodes+0x34f/0x860 [ 1043.447558][ T8422] f2fs_write_checkpoint+0x857/0x1da0 [ 1043.447624][ T8422] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1043.447713][ T8422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.447742][ T8422] ? kfree+0x198/0x430 [ 1043.447763][ T8422] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 1043.447789][ T8422] ? kill_f2fs_super+0x290/0x6d0 [ 1043.447836][ T8422] kill_f2fs_super+0x2b8/0x6d0 [ 1043.447883][ T8422] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1043.447931][ T8422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.447960][ T8422] ? shrinker_free+0x2ca/0x3d0 [ 1043.447987][ T8422] deactivate_locked_super+0xc6/0x130 [ 1043.448023][ T8422] cleanup_mnt+0x422/0x4c0 [ 1043.448051][ T8422] ? lockdep_hardirqs_on+0x9d/0x150 [ 1043.448081][ T8422] task_work_run+0x253/0x310 [ 1043.448123][ T8422] ? __pfx_task_work_run+0x10/0x10 [ 1043.448168][ T8422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.448203][ T8422] syscall_exit_to_user_mode+0x13f/0x340 [ 1043.448234][ T8422] do_syscall_64+0x100/0x210 [ 1043.448268][ T8422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.448292][ T8422] RIP: 0033:0x7ffa7358f497 [ 1043.448314][ T8422] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1043.448335][ T8422] RSP: 002b:00007ffc1e424878 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1043.448362][ T8422] RAX: 0000000000000000 RBX: 00007ffa73610854 RCX: 00007ffa7358f497 [ 1043.448379][ T8422] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc1e424930 [ 1043.448396][ T8422] RBP: 00007ffc1e424930 R08: 0000000000000000 R09: 0000000000000000 [ 1043.448412][ T8422] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc1e4259c0 [ 1043.448429][ T8422] R13: 00007ffa73610854 R14: 00000000000feb00 R15: 00007ffc1e425a00 [ 1043.448468][ T8422] [ 1043.870338][ T8422] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1043.877397][ T8422] CPU: 1 UID: 0 PID: 8422 Comm: syz-executor Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 1043.877429][ T8422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1043.877445][ T8422] Call Trace: [ 1043.877454][ T8422] [ 1043.877464][ T8422] dump_stack_lvl+0x241/0x360 [ 1043.877509][ T8422] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1043.877547][ T8422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.877575][ T8422] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 1043.877614][ T8422] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1043.877654][ T8422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.877682][ T8422] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 1043.877722][ T8422] f2fs_handle_critical_error+0x392/0x5a0 [ 1043.877765][ T8422] f2fs_write_end_io+0x563/0x790 [ 1043.877811][ T8422] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1043.877853][ T8422] ? bio_endio+0x7e4/0x890 [ 1043.877882][ T8422] ? bio_endio+0x82a/0x890 [ 1043.877910][ T8422] __submit_merged_bio+0x2a9/0x710 [ 1043.877946][ T8422] ? f2fs_submit_merged_write_cond+0x101/0x380 [ 1043.877989][ T8422] f2fs_submit_merged_write_cond+0x29f/0x380 [ 1043.878034][ T8422] f2fs_write_data_pages+0x2f99/0x38d0 [ 1043.878114][ T8422] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1043.878209][ T8422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.878238][ T8422] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1043.878289][ T8422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.878317][ T8422] ? __lock_acquire+0xad5/0xd80 [ 1043.878358][ T8422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.878386][ T8422] ? do_raw_spin_lock+0x151/0x370 [ 1043.878424][ T8422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.878452][ T8422] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1043.878486][ T8422] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1043.878526][ T8422] do_writepages+0x366/0x890 [ 1043.878568][ T8422] ? __pfx_do_writepages+0x10/0x10 [ 1043.878597][ T8422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.878625][ T8422] ? __lock_acquire+0xad5/0xd80 [ 1043.878664][ T8422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.878692][ T8422] ? do_raw_spin_lock+0x151/0x370 [ 1043.878734][ T8422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.878761][ T8422] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1043.878801][ T8422] filemap_fdatawrite+0x1f2/0x2a0 [ 1043.878839][ T8422] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1043.878870][ T8422] ? mlock_drain_local+0x79/0x490 [ 1043.878959][ T8422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.878986][ T8422] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1043.879026][ T8422] f2fs_sync_dirty_inodes+0x34f/0x860 [ 1043.879083][ T8422] f2fs_write_checkpoint+0x857/0x1da0 [ 1043.879147][ T8422] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1043.879235][ T8422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.879263][ T8422] ? kfree+0x198/0x430 [ 1043.879284][ T8422] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 1043.879310][ T8422] ? kill_f2fs_super+0x290/0x6d0 [ 1043.879355][ T8422] kill_f2fs_super+0x2b8/0x6d0 [ 1043.879401][ T8422] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1043.879449][ T8422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.879476][ T8422] ? shrinker_free+0x2ca/0x3d0 [ 1043.879503][ T8422] deactivate_locked_super+0xc6/0x130 [ 1043.879537][ T8422] cleanup_mnt+0x422/0x4c0 [ 1043.879566][ T8422] ? lockdep_hardirqs_on+0x9d/0x150 [ 1043.879594][ T8422] task_work_run+0x253/0x310 [ 1043.879635][ T8422] ? __pfx_task_work_run+0x10/0x10 [ 1043.879672][ T8422] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1043.879706][ T8422] syscall_exit_to_user_mode+0x13f/0x340 [ 1043.879740][ T8422] do_syscall_64+0x100/0x210 [ 1043.879772][ T8422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.879796][ T8422] RIP: 0033:0x7ffa7358f497 [ 1043.879817][ T8422] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1043.879838][ T8422] RSP: 002b:00007ffc1e424878 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1043.879864][ T8422] RAX: 0000000000000000 RBX: 00007ffa73610854 RCX: 00007ffa7358f497 [ 1043.879881][ T8422] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc1e424930 [ 1043.879897][ T8422] RBP: 00007ffc1e424930 R08: 0000000000000000 R09: 0000000000000000 [ 1043.879913][ T8422] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc1e4259c0 [ 1043.879936][ T8422] R13: 00007ffa73610854 R14: 00000000000feb00 R15: 00007ffc1e425a00 [ 1043.879975][ T8422] [ 1043.879986][ T8422] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1044.356245][T15432] hsr_slave_0: entered promiscuous mode [ 1044.365953][T15432] hsr_slave_1: entered promiscuous mode [ 1044.376850][T15432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1044.384730][T15432] Cannot create hsr debugfs directory [ 1044.418063][T15188] 8021q: adding VLAN 0 to HW filter on device team0 [ 1045.021807][T14282] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.029011][T14282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1045.212202][T14282] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.219481][T14282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1046.344545][T15603] loop8: detected capacity change from 0 to 32768 [ 1046.396958][T15603] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2693 (15603) [ 1046.461682][T15603] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1046.507210][T15603] BTRFS info (device loop8): using sha256 (sha256-ni) checksum algorithm [ 1046.546157][T15603] BTRFS info (device loop8): using free-space-tree [ 1046.633155][T15303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1046.736525][T15303] 8021q: adding VLAN 0 to HW filter on device team0 [ 1047.158134][ T5857] Bluetooth: hci2: unexpected event for opcode 0x080d [ 1047.212596][ T6043] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.219812][ T6043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1047.263581][ T6043] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.270923][ T6043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1047.344393][T15188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1047.487394][ T6633] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1047.702227][ T6633] usb 9-1: Using ep0 maxpacket: 16 [ 1047.717526][ T6633] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1048.472735][ T6633] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1048.497036][ T6633] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1048.590174][ T6633] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1048.600984][ T6633] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.615582][T15659] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1048.623981][ T6633] usb 9-1: config 0 descriptor?? [ 1048.791283][ T6633] usb 9-1: can't set config #0, error -71 [ 1048.813735][ T6633] usb 9-1: USB disconnect, device number 3 [ 1048.983919][T14147] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1050.941001][T15303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1051.136873][T15692] 9pnet_fd: Insufficient options for proto=fd [ 1051.538156][ T5857] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1051.546930][ T5857] Bluetooth: hci2: Injecting HCI hardware error event [ 1051.556012][ T5857] Bluetooth: hci2: hardware error 0x00 [ 1053.047488][T15713] loop6: detected capacity change from 0 to 16 [ 1053.049888][T15432] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1053.178095][T15432] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1053.241300][T15713] erofs (device loop6): mounted with root inode @ nid 36. [ 1053.327740][T15432] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1053.490315][T15432] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1053.514988][T13062] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1053.528882][T13062] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1053.542584][T13062] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1053.550833][T13062] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1053.558635][T13062] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1053.721782][T15723] lo speed is unknown, defaulting to 1000 [ 1053.728234][T15723] lo speed is unknown, defaulting to 1000 [ 1053.743607][T15723] lo speed is unknown, defaulting to 1000 [ 1053.785119][T15723] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1053.918832][T15723] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1054.075422][T15724] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1054.102018][T15724] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1054.125253][T15724] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 1054.176926][T15723] lo speed is unknown, defaulting to 1000 [ 1054.199350][T15723] lo speed is unknown, defaulting to 1000 [ 1054.220780][T15723] lo speed is unknown, defaulting to 1000 [ 1054.228511][T15723] lo speed is unknown, defaulting to 1000 [ 1054.237486][ T5857] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1054.245217][T15723] lo speed is unknown, defaulting to 1000 [ 1054.253837][T15723] lo speed is unknown, defaulting to 1000 [ 1054.431802][T15303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1054.977825][T15740] input: syz1 as /devices/virtual/input/input50 [ 1056.009251][T15719] lo speed is unknown, defaulting to 1000 [ 1056.283216][T15754] loop8: detected capacity change from 0 to 512 [ 1056.295245][T15754] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1056.344091][T15754] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 1056.434700][T15754] EXT4-fs (loop8): Errors on filesystem, clearing orphan list. [ 1056.488206][T15754] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1056.506359][ T5857] Bluetooth: hci3: command tx timeout [ 1056.580644][T14147] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1057.720758][T15432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1057.869412][T15303] veth0_vlan: entered promiscuous mode [ 1058.511693][T15432] 8021q: adding VLAN 0 to HW filter on device team0 [ 1058.559998][T15303] veth1_vlan: entered promiscuous mode [ 1058.576544][ T5857] Bluetooth: hci3: command tx timeout [ 1058.633218][T15771] loop8: detected capacity change from 0 to 32768 [ 1058.699288][ T5969] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.706491][ T5969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1058.728699][T15771] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2723 (15771) [ 1058.802815][T15719] chnl_net:caif_netlink_parms(): no params data found [ 1058.826594][T15771] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1058.896859][T15771] BTRFS info (device loop8): using sha256 (sha256-ni) checksum algorithm [ 1059.048080][T15771] BTRFS info (device loop8): using free-space-tree [ 1059.065675][ T5969] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.072884][ T5969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1059.564999][ T9632] bridge_slave_1: left allmulticast mode [ 1059.633284][ T9632] bridge_slave_1: left promiscuous mode [ 1059.654739][ T9632] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.741718][ T9632] bridge_slave_0: left allmulticast mode [ 1059.753544][ T9632] bridge_slave_0: left promiscuous mode [ 1059.776998][ T9632] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.799046][ T5970] BTRFS info (device loop8): qgroup scan completed (inconsistency flag cleared) [ 1059.950032][T14147] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1060.431202][ T5857] Bluetooth: hci6: unexpected event for opcode 0x080d [ 1060.656179][ T5857] Bluetooth: hci3: command tx timeout [ 1062.041949][T15861] loop6: detected capacity change from 0 to 4096 [ 1062.144696][ T9632] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1062.163330][ T9632] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1062.174226][ T9632] bond0 (unregistering): Released all slaves [ 1062.391396][T15836] vxcan1: entered allmulticast mode [ 1062.397112][T15839] vxcan1: left allmulticast mode [ 1062.404146][T15844] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1062.738507][ T5857] Bluetooth: hci3: command tx timeout [ 1063.732538][ T9632] hsr_slave_0: left promiscuous mode [ 1064.495945][ T5857] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 1064.504567][ T5857] Bluetooth: hci6: Injecting HCI hardware error event [ 1064.513846][T13062] Bluetooth: hci6: hardware error 0x00 [ 1064.775869][ T9632] hsr_slave_1: left promiscuous mode [ 1064.796380][ T9632] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1064.969882][ T9632] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1065.621758][ T9632] team0 (unregistering): Port device team_slave_1 removed [ 1065.682494][ T9632] team0 (unregistering): Port device team_slave_0 removed [ 1065.750327][ T5857] Bluetooth: hci7: unexpected event for opcode 0x080d [ 1066.580263][T13062] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1067.344281][T15432] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1067.355100][T15432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1067.686625][T15912] vxcan1: entered allmulticast mode [ 1067.693292][T15913] vxcan1: left allmulticast mode [ 1068.193854][T15303] veth0_macvtap: entered promiscuous mode [ 1068.564729][T15719] bridge0: port 1(bridge_slave_0) entered blocking state [ 1068.576438][T15719] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.584055][T15719] bridge_slave_0: entered allmulticast mode [ 1068.593465][T15719] bridge_slave_0: entered promiscuous mode [ 1068.651199][T15719] bridge0: port 2(bridge_slave_1) entered blocking state [ 1068.682606][T15719] bridge0: port 2(bridge_slave_1) entered disabled state [ 1068.704982][T15719] bridge_slave_1: entered allmulticast mode [ 1068.731204][T15719] bridge_slave_1: entered promiscuous mode [ 1068.938175][T15303] veth1_macvtap: entered promiscuous mode [ 1069.082651][T15719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1069.192657][T15719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1069.372922][T15432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1069.550841][T15719] team0: Port device team_slave_0 added [ 1069.583717][T15719] team0: Port device team_slave_1 added [ 1069.628402][T15303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1069.777844][T13062] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 1070.685693][T13062] Bluetooth: hci7: Injecting HCI hardware error event [ 1070.694719][T13062] Bluetooth: hci7: hardware error 0x00 [ 1071.692240][T15951] loop6: detected capacity change from 0 to 32768 [ 1071.760008][T15951] [ 1071.760008][T15951] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1071.760008][T15951] [ 1071.859107][T15953] [ 1071.859107][T15953] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1071.859107][T15953] [ 1071.875533][T15953] [ 1071.875533][T15953] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1071.875533][T15953] [ 1072.985735][T15719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1072.992728][T15719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1073.118870][T15719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1073.169305][T15719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1073.195374][T15719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1073.312359][T15719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1074.105595][T13062] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 1075.384878][T15719] hsr_slave_0: entered promiscuous mode [ 1075.412308][T15719] hsr_slave_1: entered promiscuous mode [ 1075.428090][T15719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1075.450617][T15719] Cannot create hsr debugfs directory [ 1075.521366][T15984] vxcan1: entered allmulticast mode [ 1075.550101][T15988] vxcan1: left allmulticast mode [ 1075.753044][T15992] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1076.027606][T13062] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1076.041407][T13062] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1076.060689][T13062] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1076.074506][T13062] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1076.084484][T13062] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1076.346106][T15432] veth0_vlan: entered promiscuous mode [ 1076.405210][T15998] lo speed is unknown, defaulting to 1000 [ 1077.954618][T15432] veth1_vlan: entered promiscuous mode [ 1078.182460][T13062] Bluetooth: hci1: command tx timeout [ 1078.395920][T16029] hugetlbfs: syz.6.2770 (16029): Using mlock ulimits for SHM_HUGETLB is obsolete [ 1079.144693][T16035] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1080.122677][T15432] veth0_macvtap: entered promiscuous mode [ 1080.256576][T13062] Bluetooth: hci1: command tx timeout [ 1080.658760][T15432] veth1_macvtap: entered promiscuous mode [ 1081.093680][T16053] loop6: detected capacity change from 0 to 32768 [ 1081.224205][ T30] audit: type=1800 audit(1745146710.627:134): pid=16051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2774" name="file1" dev="loop6" ino=4 res=0 errno=0 [ 1081.531863][T15432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.599782][T15432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.643079][T15432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1082.246142][T15432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1082.334961][T13062] Bluetooth: hci1: command tx timeout [ 1082.526175][T15432] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.550848][T15432] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.594892][T15432] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.603639][T15432] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.672159][T15998] chnl_net:caif_netlink_parms(): no params data found [ 1084.040644][T16082] syz.6.2780 (16082) used greatest stack depth: 18672 bytes left [ 1084.415033][T13062] Bluetooth: hci1: command tx timeout [ 1084.999523][ T5969] bridge_slave_1: left allmulticast mode [ 1085.012845][ T5969] bridge_slave_1: left promiscuous mode [ 1085.023650][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.159546][ T5969] bridge_slave_0: left allmulticast mode [ 1085.199413][ T5969] bridge_slave_0: left promiscuous mode [ 1085.271881][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.893141][ T5969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1087.939301][ T5969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1088.053663][ T5969] bond0 (unregistering): Released all slaves [ 1088.163139][T16108] loop8: detected capacity change from 0 to 32768 [ 1088.459101][T15719] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1088.470901][T16108] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2785 (16108) [ 1088.542000][T15719] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1088.546093][T16108] BTRFS info (device loop8): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1088.583588][T16108] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm [ 1088.638477][T16108] BTRFS info (device loop8): using free-space-tree [ 1088.766145][ T5857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1088.775215][ T5857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1088.786173][ T5857] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1088.807707][ T5857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1088.818164][ T5857] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1088.828255][T15998] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.860405][T15998] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.892093][T15998] bridge_slave_0: entered allmulticast mode [ 1088.908941][T15998] bridge_slave_0: entered promiscuous mode [ 1089.271013][ T5969] hsr_slave_0: left promiscuous mode [ 1089.334589][ T5969] hsr_slave_1: left promiscuous mode [ 1089.355645][ T5969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1089.390376][ T5969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1089.481703][ T5969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1089.550695][T14147] BTRFS info (device loop8): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1089.863084][ T5969] veth1_macvtap: left promiscuous mode [ 1089.915823][ T5969] veth0_macvtap: left promiscuous mode [ 1089.922252][ T5969] veth1_vlan: left promiscuous mode [ 1090.011009][ T5969] veth0_vlan: left promiscuous mode [ 1091.240286][T13062] Bluetooth: hci4: command tx timeout [ 1093.294526][ T5857] Bluetooth: hci4: command tx timeout [ 1093.804250][ T5969] team0 (unregistering): Port device team_slave_1 removed [ 1093.881502][ T5969] team0 (unregistering): Port device team_slave_0 removed [ 1094.511969][T15719] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1094.530148][T15719] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1094.553687][T15998] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.563686][T15998] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.577749][T15998] bridge_slave_1: entered allmulticast mode [ 1094.599915][T15998] bridge_slave_1: entered promiscuous mode [ 1095.378114][ T5857] Bluetooth: hci4: command tx timeout [ 1095.422154][T15998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1096.034802][T15998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1096.211764][T16122] lo speed is unknown, defaulting to 1000 [ 1096.303291][T15998] team0: Port device team_slave_0 added [ 1096.365686][T15998] team0: Port device team_slave_1 added [ 1096.557351][T15998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1096.588583][T15998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1096.687987][T15998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1096.723791][T15998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1096.731399][T15998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1096.757960][T15998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1097.764357][ T5857] Bluetooth: hci4: command tx timeout [ 1097.766467][T15998] hsr_slave_0: entered promiscuous mode [ 1097.825594][T15998] hsr_slave_1: entered promiscuous mode [ 1097.831938][T15998] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1097.883889][T15998] Cannot create hsr debugfs directory [ 1097.919609][T16232] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1098.367239][T16240] ip6t_srh: unknown srh match flags 5294 [ 1100.562898][T15719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1100.820982][ T5969] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.007327][T15719] 8021q: adding VLAN 0 to HW filter on device team0 [ 1102.675421][ T6043] bridge0: port 1(bridge_slave_0) entered blocking state [ 1102.682592][ T6043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1102.789640][ T5969] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.868718][ T6043] bridge0: port 2(bridge_slave_1) entered blocking state [ 1102.875900][ T6043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1102.917306][T16294] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1103.107179][ T5969] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.347525][T16301] loop6: detected capacity change from 0 to 128 [ 1103.364090][T16122] chnl_net:caif_netlink_parms(): no params data found [ 1103.379857][T16301] EXT4-fs warning (device loop6): ext4_init_metadata_csum:4624: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 1103.420712][T16301] EXT4-fs (loop6): Encoding requested by superblock is unknown [ 1103.467672][T16301] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1103.533978][ T5969] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.086381][T15719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1105.110381][T16314] ip6t_srh: unknown srh match flags 5294 [ 1105.297183][T16122] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.314938][T16122] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.322221][T16122] bridge_slave_0: entered allmulticast mode [ 1105.357300][T16122] bridge_slave_0: entered promiscuous mode [ 1105.391302][T16122] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.412757][T16122] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.424791][T16122] bridge_slave_1: entered allmulticast mode [ 1105.432838][T16122] bridge_slave_1: entered promiscuous mode [ 1105.762624][T16330] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2832'. [ 1106.106954][T16122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1106.161289][T16122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1106.603144][T16320] loop6: detected capacity change from 0 to 32768 [ 1107.002412][ T5969] bridge_slave_1: left allmulticast mode [ 1107.008657][ T5969] bridge_slave_1: left promiscuous mode [ 1107.015469][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.039019][ T5969] bridge_slave_0: left allmulticast mode [ 1107.045089][ T5969] bridge_slave_0: left promiscuous mode [ 1107.051017][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.231552][T16320] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 1107.231552][T16320] allowing incompatible features above 0.0: (unknown version) [ 1107.299146][T16320] bcachefs (loop6): recovering from clean shutdown, journal seq 10 [ 1107.310937][T16320] bcachefs (loop6): Version upgrade required: [ 1107.310937][T16320] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 1107.310937][T16320] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 1107.310937][T16320] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 1107.394363][T16320] bcachefs (loop6): dropping and reconstructing all alloc info [ 1107.418683][T16320] bcachefs (loop6): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 1107.431910][T16320] bcachefs (loop6): bcachefs (loop6): error validating btree node on loop6 at btree deleted_inodes level 0/0 [ 1107.431941][T16320] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key 0:150994944:0 durability: 1 ptr: 0:42:0 gen 0 [ 1107.431962][T16320] node offset 0/8: incorrect min_key: got POS_MIN should be 0:150994944:0, btree topology error: [ 1107.474634][T16320] bcachefs (loop6): flagging btree deleted_inodes lost data [ 1107.483753][T16320] bcachefs (loop6): running explicit recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 1107.499097][T16320] bcachefs (loop6): error reading btree root btree=deleted_inodes level=0: btree_node_read_error, fixing [ 1107.522411][T16320] bcachefs (loop6): scan_for_btree_nodes... [ 1107.719134][T16320] bcachefs (loop6): btree node scan found 7 nodes after overwrites [ 1107.744908][T16350] ip6t_srh: unknown srh match flags 5294 [ 1107.792812][T16320] done [ 1107.804868][T16320] bcachefs (loop6): check_topology... [ 1107.806177][T16320] bcachefs (loop6): btree root deleted_inodes unreadable, must recover from scan [ 1107.858703][T16320] bcachefs (loop6): bch2_get_scanned_nodes(): recovery btree=deleted_inodes level=0 POS_MIN - SPOS_MAX [ 1107.872286][T16320] bcachefs (loop6): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key POS_MIN durability: 1 ptr: 0:42:0 gen 0 [ 1107.949073][T16320] done [ 1107.964767][T16320] bcachefs (loop6): accounting_read... done [ 1107.972893][T16320] bcachefs (loop6): alloc_read... done [ 1108.001738][T16320] bcachefs (loop6): snapshots_read... done [ 1108.031070][T16320] bcachefs (loop6): Fixed errors, running fsck a second time to verify fs is clean [ 1108.070274][T16320] bcachefs (loop6): done starting filesystem [ 1108.246656][ T8422] bcachefs (loop6): shutting down [ 1108.343729][ T8422] bcachefs (loop6): shutdown complete [ 1108.729890][ T5969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1108.783184][ T5969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1108.802834][ T5969] bond0 (unregistering): Released all slaves [ 1109.147694][T16368] siw: device registration error -23 [ 1109.980219][T15998] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1110.048795][T16122] team0: Port device team_slave_0 added [ 1110.243794][T16122] team0: Port device team_slave_1 added [ 1110.375538][T15998] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1110.441821][ T5969] hsr_slave_0: left promiscuous mode [ 1110.497157][ T5969] hsr_slave_1: left promiscuous mode [ 1110.513540][ T5969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1110.521789][ T5969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1110.537016][ T5969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1110.549162][ T5969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1110.794804][ T5969] veth1_macvtap: left promiscuous mode [ 1110.800396][ T5969] veth0_macvtap: left promiscuous mode [ 1110.807020][ T5969] veth1_vlan: left promiscuous mode [ 1110.812358][ T5969] veth0_vlan: left promiscuous mode [ 1112.111404][T13062] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1112.137198][T13062] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1112.146903][T13062] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1112.168177][T13062] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1112.183634][T13062] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1112.608710][ T5969] team0 (unregistering): Port device team_slave_1 removed [ 1112.678369][ T5969] team0 (unregistering): Port device team_slave_0 removed [ 1113.290188][T16397] ip6t_srh: unknown srh match flags 5294 [ 1113.436653][T16399] 9pnet_fd: Insufficient options for proto=fd [ 1114.112416][T16411] overlayfs: failed to clone upperpath [ 1114.491942][T13062] Bluetooth: hci0: command tx timeout [ 1115.565891][T16122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1115.630576][T16122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1115.714972][T16122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1115.733421][T15998] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1115.763168][T15719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1115.773970][T16380] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.2847'. [ 1115.838152][T16423] ip6t_srh: unknown srh match flags 5294 [ 1115.965414][T16122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1116.010034][T16122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1116.112145][T16122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1116.133337][T16427] 9pnet_fd: Insufficient options for proto=fd [ 1116.350798][T15998] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1116.476723][T16122] hsr_slave_0: entered promiscuous mode [ 1116.483161][T16122] hsr_slave_1: entered promiscuous mode [ 1116.531144][T16122] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1116.563218][T16122] Cannot create hsr debugfs directory [ 1116.574496][T13062] Bluetooth: hci0: command tx timeout [ 1116.792913][T16383] lo speed is unknown, defaulting to 1000 [ 1117.666243][T15998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1117.706854][T16431] loop8: detected capacity change from 0 to 32768 [ 1118.654958][ T5857] Bluetooth: hci0: command tx timeout [ 1118.955161][T16431] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 1118.955161][T16431] allowing incompatible features above 0.0: (unknown version) [ 1119.040915][T16431] bcachefs (loop8): initializing new filesystem [ 1119.058480][T16431] bcachefs (loop8): going read-write [ 1119.155075][T16451] lo speed is unknown, defaulting to 1000 [ 1119.328436][T16431] bcachefs (loop8): marking superblocks [ 1119.492718][T15998] 8021q: adding VLAN 0 to HW filter on device team0 [ 1119.810304][T16431] bcachefs (loop8): initializing freespace [ 1120.196189][T16431] bcachefs (loop8): done initializing freespace [ 1120.277993][T16431] bcachefs (loop8): reading snapshots table [ 1120.316615][T16431] bcachefs (loop8): reading snapshots done [ 1120.333457][T16461] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.2873'. [ 1120.374621][T16464] 9pnet_fd: Insufficient options for proto=fd [ 1120.419782][T16431] bcachefs (loop8): bch2_rebalance_start(): error creating rebalance thread EINTR [ 1120.460345][T16431] bcachefs (loop8): error starting rebalance thread [ 1120.471470][T16431] bcachefs (loop8): bch2_fs_start(): error starting filesystem EINTR [ 1120.514612][T16431] bcachefs (loop8): shutting down [ 1120.519693][T16431] bcachefs (loop8): going read-only [ 1120.525791][T16431] bcachefs (loop8): finished waiting for writes to stop [ 1120.533655][T16431] bcachefs (loop8): flushing journal and stopping allocators, journal seq 3 [ 1120.604606][T16431] bcachefs (loop8): flushing journal and stopping allocators complete, journal seq 3 [ 1120.622926][T16383] chnl_net:caif_netlink_parms(): no params data found [ 1120.639400][T16457] bch-reclaim/loo (16457) used greatest stack depth: 15376 bytes left [ 1120.680252][T16431] bcachefs (loop8): clean shutdown complete, journal seq 4 [ 1120.735363][ T5857] Bluetooth: hci0: command 0x0419 tx timeout [ 1120.758275][T16431] bcachefs (loop8): marking filesystem clean [ 1120.807022][ T5994] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.814221][ T5994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1121.745941][T16431] bcachefs (loop8): shutdown complete [ 1121.999150][T14162] bridge0: port 2(bridge_slave_1) entered blocking state [ 1122.006330][T14162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1122.814620][ T5857] Bluetooth: hci0: command 0x0419 tx timeout [ 1123.100042][T15998] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1123.114232][T16484] ip6t_srh: unknown srh match flags 5294 [ 1123.120816][T15998] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1123.831153][T16383] bridge0: port 1(bridge_slave_0) entered blocking state [ 1123.839462][T16383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.874645][T16383] bridge_slave_0: entered allmulticast mode [ 1123.889301][T16383] bridge_slave_0: entered promiscuous mode [ 1123.942529][T16497] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2884'. [ 1123.967393][T16496] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2884'. [ 1123.994910][T16383] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.065192][T16383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.072473][T16383] bridge_slave_1: entered allmulticast mode [ 1124.083735][T16383] bridge_slave_1: entered promiscuous mode [ 1124.249657][T16383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1124.309075][T16122] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1124.330622][T16122] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1124.666757][T16383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1124.685259][ T5969] bridge_slave_1: left allmulticast mode [ 1124.690910][ T5969] bridge_slave_1: left promiscuous mode [ 1124.704902][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.721382][ T5969] bridge_slave_0: left allmulticast mode [ 1124.727585][ T5969] bridge_slave_0: left promiscuous mode [ 1124.735691][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.646256][T16431] bcachefs: bch2_fs_get_tree() error: EINTR [ 1126.737787][T16431] syz.8.2865 (16431) used greatest stack depth: 14576 bytes left [ 1127.488972][ T5969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1127.554976][ T5969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1127.577005][ T5969] bond0 (unregistering): Released all slaves [ 1127.674597][T16122] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1127.698700][T16122] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1127.913800][T16383] team0: Port device team_slave_0 added [ 1127.923531][T16383] team0: Port device team_slave_1 added [ 1128.227510][T16540] loop8: detected capacity change from 0 to 40427 [ 1128.236613][T16540] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 1128.246095][T16540] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1128.265017][T16540] F2FS-fs (loop8): invalid crc value [ 1128.360749][T16540] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 1128.368016][T16540] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1128.677837][ T5969] hsr_slave_0: left promiscuous mode [ 1128.784582][ T5969] hsr_slave_1: left promiscuous mode [ 1128.790884][ T5969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1128.839728][ T5969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1130.240217][ T5969] team0 (unregistering): Port device team_slave_1 removed [ 1130.311028][T16562] loop8: detected capacity change from 0 to 64 [ 1130.326583][ T5969] team0 (unregistering): Port device team_slave_0 removed [ 1130.371242][T16562] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. leaving read-only. [ 1132.371410][T16572] loop8: detected capacity change from 0 to 512 [ 1133.057132][T16575] loop8: detected capacity change from 0 to 32768 [ 1133.108124][T16575] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1133.213536][T16575] XFS (loop8): Ending clean mount [ 1133.357324][T16559] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1133.390940][T16559] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1133.410450][T16559] veth0_to_bridge: entered allmulticast mode [ 1133.420908][T16559] veth0_to_bridge: entered promiscuous mode [ 1133.510704][T16383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1133.538603][T16383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1133.619671][T16383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1133.644941][T14147] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1133.657883][T16383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1133.673504][T16383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1133.702129][T16383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1134.208232][T16383] hsr_slave_0: entered promiscuous mode [ 1134.305124][T16383] hsr_slave_1: entered promiscuous mode [ 1134.325095][T16383] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1134.332692][T16383] Cannot create hsr debugfs directory [ 1135.107701][T13062] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1135.118844][T13062] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1135.127654][T13062] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1135.137963][T13062] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1135.146733][T13062] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1136.078226][T16609] loop6: detected capacity change from 0 to 16 [ 1136.115987][T16609] erofs (device loop6): mounted with root inode @ nid 36. [ 1136.372178][T16597] lo speed is unknown, defaulting to 1000 [ 1137.334399][T13062] Bluetooth: hci1: command tx timeout [ 1137.788056][T16122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1138.343545][T16122] 8021q: adding VLAN 0 to HW filter on device team0 [ 1138.502746][ T6154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1138.509984][ T6154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1138.528321][ T6154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1138.535597][ T6154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1139.377949][ T5857] Bluetooth: hci1: command tx timeout [ 1140.822550][T16122] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1140.833454][T16122] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1141.010310][T16597] chnl_net:caif_netlink_parms(): no params data found [ 1141.122745][T16383] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1141.505943][ T5857] Bluetooth: hci1: command tx timeout [ 1142.224947][T16660] macvtap3: entered allmulticast mode [ 1142.230350][T16660] veth0_macvtap: entered allmulticast mode [ 1142.405735][T16383] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1142.456054][T16383] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1142.495502][T16383] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1142.542123][T16675] ip6t_srh: unknown srh match flags 5294 [ 1142.758736][ T5969] bridge_slave_1: left allmulticast mode [ 1142.769124][ T5969] bridge_slave_1: left promiscuous mode [ 1142.781800][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state [ 1143.544557][ T5857] Bluetooth: hci1: command tx timeout [ 1143.563309][ T5969] bridge_slave_0: left allmulticast mode [ 1143.584316][ T5969] bridge_slave_0: left promiscuous mode [ 1143.590111][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state [ 1147.142957][ T5969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1147.402941][ T5969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1147.465840][ T5969] bond0 (unregistering): Released all slaves [ 1148.707031][T16597] bridge0: port 1(bridge_slave_0) entered blocking state [ 1148.725077][T16597] bridge0: port 1(bridge_slave_0) entered disabled state [ 1148.758023][T16597] bridge_slave_0: entered allmulticast mode [ 1148.774152][T16597] bridge_slave_0: entered promiscuous mode [ 1148.792316][T13062] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1148.812701][T13062] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1148.821901][T13062] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1148.833343][T13062] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1148.842534][T13062] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1148.887240][T16727] ip6t_srh: unknown srh match flags 5294 [ 1148.974848][ T5969] hsr_slave_0: left promiscuous mode [ 1148.981578][ T5969] hsr_slave_1: left promiscuous mode [ 1148.990277][ T5969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1149.785950][ T5969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1150.140873][T16738] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2952'. [ 1150.264625][ T6633] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1150.411526][ T5969] team0 (unregistering): Port device team_slave_1 removed [ 1150.439218][ T6633] usb 7-1: config index 0 descriptor too short (expected 32804, got 36) [ 1150.456989][ T6633] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1150.479090][ T6633] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1150.492794][ T6633] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1150.493782][ T5969] team0 (unregistering): Port device team_slave_0 removed [ 1150.539333][ T6633] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1150.548795][ T6633] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.569565][ T6633] usb 7-1: Product: syz [ 1150.573777][ T6633] usb 7-1: Manufacturer: syz [ 1150.578573][ T6633] usb 7-1: SerialNumber: syz [ 1150.593834][ T6633] usb 7-1: config 0 descriptor?? [ 1150.611019][T16736] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1150.620820][ T6633] usb 7-1: ucan: probing device on interface #0 [ 1150.628835][ T6633] usb 7-1: ucan: invalid EP count (1) [ 1150.634866][ T6633] usb 7-1: ucan: probe failed; try to update the device firmware [ 1150.894425][ T5857] Bluetooth: hci3: command tx timeout [ 1150.986859][T16597] bridge0: port 2(bridge_slave_1) entered blocking state [ 1150.994661][T16597] bridge0: port 2(bridge_slave_1) entered disabled state [ 1151.002059][T16597] bridge_slave_1: entered allmulticast mode [ 1151.015839][T16597] bridge_slave_1: entered promiscuous mode [ 1151.239253][T16597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1151.292417][T16597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1151.569762][T16725] lo speed is unknown, defaulting to 1000 [ 1151.759671][T16597] team0: Port device team_slave_0 added [ 1151.811631][T16597] team0: Port device team_slave_1 added [ 1152.999586][ T5857] Bluetooth: hci3: command tx timeout [ 1153.728374][T14052] usb 7-1: USB disconnect, device number 10 [ 1153.737212][T16597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1153.753447][T16597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1153.988104][T16597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1154.001872][T16597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1154.009774][T16597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1154.036025][T16597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1154.049156][T16765] ip6t_srh: unknown srh match flags 5294 [ 1155.054831][ T5857] Bluetooth: hci3: command tx timeout [ 1155.791631][T16597] hsr_slave_0: entered promiscuous mode [ 1155.805649][T16597] hsr_slave_1: entered promiscuous mode [ 1155.812879][T16597] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1155.822206][T16597] Cannot create hsr debugfs directory [ 1157.039634][T16383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1157.135509][ T5857] Bluetooth: hci3: command tx timeout [ 1157.337440][T16799] ip6t_srh: unknown srh match flags 5294 [ 1157.614136][T16383] 8021q: adding VLAN 0 to HW filter on device team0 [ 1158.625693][ T6039] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.632902][ T6039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1158.677956][ T6039] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.685165][ T6039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1158.966150][T16383] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1158.994405][T16383] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1159.747366][T16725] chnl_net:caif_netlink_parms(): no params data found [ 1159.841177][T16819] loop8: detected capacity change from 0 to 32768 [ 1160.274034][T16383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1160.353858][T16819] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 1160.353858][T16819] allowing incompatible features above 0.0: (unknown version) [ 1160.398583][ T5969] bridge_slave_1: left allmulticast mode [ 1160.404858][ T5969] bridge_slave_1: left promiscuous mode [ 1160.410612][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.422166][ T5969] bridge_slave_0: left allmulticast mode [ 1160.428692][ T5969] bridge_slave_0: left promiscuous mode [ 1160.435148][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.444125][T16819] bcachefs (loop8): initializing new filesystem [ 1160.455304][T16819] bcachefs (loop8): going read-write [ 1160.483688][T16819] bcachefs (loop8): marking superblocks [ 1160.521104][T16819] bcachefs (loop8): initializing freespace [ 1160.563503][T16819] bcachefs (loop8): done initializing freespace [ 1160.583124][T16819] bcachefs (loop8): reading snapshots table [ 1160.599378][T16819] bcachefs (loop8): reading snapshots done [ 1160.651851][T16819] bcachefs (loop8): done starting filesystem [ 1161.144823][ T5969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1161.199015][ T5969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1161.236710][ T5969] bond0 (unregistering): Released all slaves [ 1161.577596][ T5969] hsr_slave_0: left promiscuous mode [ 1161.593659][ T5969] hsr_slave_1: left promiscuous mode [ 1161.606263][ T5969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1161.645564][ T5969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1161.663767][T16819] syz.8.2977 (16819) used greatest stack depth: 14416 bytes left [ 1161.733472][T14147] bcachefs (loop8): shutting down [ 1161.753513][T14147] bcachefs (loop8): going read-only [ 1161.770438][T14147] bcachefs (loop8): finished waiting for writes to stop [ 1161.802255][T14147] bcachefs (loop8): flushing journal and stopping allocators, journal seq 2 [ 1161.882497][T14147] bcachefs (loop8): flushing journal and stopping allocators complete, journal seq 3 [ 1161.898080][T14147] bcachefs (loop8): clean shutdown complete, journal seq 4 [ 1161.951876][T14147] bcachefs (loop8): marking filesystem clean [ 1162.044998][T14147] bcachefs (loop8): shutdown complete [ 1162.229415][ T5969] team0 (unregistering): Port device team_slave_1 removed [ 1162.301840][ T5969] team0 (unregistering): Port device team_slave_0 removed [ 1163.537129][T16725] bridge0: port 1(bridge_slave_0) entered blocking state [ 1163.544617][T16725] bridge0: port 1(bridge_slave_0) entered disabled state [ 1163.551887][T16725] bridge_slave_0: entered allmulticast mode [ 1163.567168][T16725] bridge_slave_0: entered promiscuous mode [ 1163.581981][T16725] bridge0: port 2(bridge_slave_1) entered blocking state [ 1163.610126][T16725] bridge0: port 2(bridge_slave_1) entered disabled state [ 1163.623340][T16725] bridge_slave_1: entered allmulticast mode [ 1163.637847][T16725] bridge_slave_1: entered promiscuous mode [ 1163.776576][T16725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1163.842261][T16597] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1163.879610][T16725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1163.953146][T16597] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1164.857297][T16597] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1165.331089][T16597] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1165.363152][T16725] team0: Port device team_slave_0 added [ 1165.391447][T16725] team0: Port device team_slave_1 added [ 1165.414220][T16383] veth0_vlan: entered promiscuous mode [ 1165.582853][T16725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1165.650398][T16725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1165.677508][T16725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1165.691606][T16725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1165.699656][T16725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1165.762613][T16725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1165.811376][T16383] veth1_vlan: entered promiscuous mode [ 1166.050754][T16725] hsr_slave_0: entered promiscuous mode [ 1166.060684][T16725] hsr_slave_1: entered promiscuous mode [ 1166.070981][T16725] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1166.081723][T16725] Cannot create hsr debugfs directory [ 1166.669794][T16885] lo speed is unknown, defaulting to 1000 [ 1167.267203][T16383] veth0_macvtap: entered promiscuous mode [ 1167.352700][T16891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2997'. [ 1167.482008][T16383] veth1_macvtap: entered promiscuous mode [ 1167.556691][T16894] loop8: detected capacity change from 0 to 512 [ 1167.788833][T16894] EXT4-fs error (device loop8): ext4_orphan_get:1390: inode #15: comm syz.8.2985: casefold flag without casefold feature [ 1167.814191][T16894] EXT4-fs error (device loop8): ext4_orphan_get:1395: comm syz.8.2985: couldn't read orphan inode 15 (err -117) [ 1167.869772][T16894] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1167.885369][T16383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1167.939397][T16597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1168.080374][T16383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1168.141248][T16597] 8021q: adding VLAN 0 to HW filter on device team0 [ 1168.168394][T16383] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.198434][T16383] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.207334][T16383] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.428530][T16383] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.733724][ T6039] bridge0: port 1(bridge_slave_0) entered blocking state [ 1169.740927][ T6039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1169.903283][T14147] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1170.425920][ T6039] bridge0: port 2(bridge_slave_1) entered blocking state [ 1170.433089][ T6039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1171.013662][T16918] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.3003'. [ 1171.034961][T16915] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.3003'. [ 1171.419464][T14162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1171.474620][T14162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1171.599066][T16725] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1171.716941][T16725] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1171.780595][T16725] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1171.874901][T16725] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1172.277996][T14052] IPVS: starting estimator thread 0... [ 1172.524386][T16939] IPVS: using max 24 ests per chain, 57600 per kthread [ 1172.884228][T16597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1173.087399][T16950] Bluetooth: MGMT ver 1.23 [ 1173.138630][T16950] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3010'. [ 1173.186483][T16950] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3010'. [ 1173.293161][T16725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1173.391452][T16725] 8021q: adding VLAN 0 to HW filter on device team0 [ 1173.521101][ T6039] bridge0: port 1(bridge_slave_0) entered blocking state [ 1173.528321][ T6039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1173.670150][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state [ 1173.677386][ T5970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1174.345304][T16964] loop6: detected capacity change from 0 to 512 [ 1174.434816][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1174.461907][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1174.481140][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1174.497118][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1174.510947][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1174.543415][T16964] EXT4-fs error (device loop6): ext4_orphan_get:1390: inode #15: comm syz.6.3012: casefold flag without casefold feature [ 1174.590901][T16964] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.3012: couldn't read orphan inode 15 (err -117) [ 1174.649081][T16725] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1174.666451][T16964] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1174.820722][ T6154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.907409][T16965] lo speed is unknown, defaulting to 1000 [ 1175.828809][ T6154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.060256][T13062] Bluetooth: hci0: command tx timeout [ 1178.352683][T10561] IPVS: starting estimator thread 0... [ 1178.649277][ T8422] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1178.694583][T17007] IPVS: using max 25 ests per chain, 60000 per kthread [ 1178.780991][T17011] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3021'. [ 1178.797832][ T6154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.799414][T17011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3021'. [ 1178.922672][T16597] veth0_vlan: entered promiscuous mode [ 1178.960658][T16597] veth1_vlan: entered promiscuous mode [ 1179.036184][ T6154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.159918][T13062] Bluetooth: hci0: command tx timeout [ 1180.064903][T16725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1180.153217][T16725] veth0_vlan: entered promiscuous mode [ 1180.166402][T16725] veth1_vlan: entered promiscuous mode [ 1180.311378][T16725] veth0_macvtap: entered promiscuous mode [ 1181.046016][T16725] veth1_macvtap: entered promiscuous mode [ 1181.136178][T17039] 9pnet_fd: Insufficient options for proto=fd [ 1181.144176][T16597] veth0_macvtap: entered promiscuous mode [ 1181.198117][T16597] veth1_macvtap: entered promiscuous mode [ 1181.218296][T16597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1181.229075][T13062] Bluetooth: hci0: command tx timeout [ 1181.263811][T16597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1181.291689][T16597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1181.412238][T16725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1181.422774][T16725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1181.432763][T16725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1181.443264][T16725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1182.199311][T16725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1182.253630][T16597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1182.305118][T16597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1182.316961][T16597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1183.314932][T13062] Bluetooth: hci0: command tx timeout [ 1184.004872][T16725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1184.053627][T16725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1184.076241][T16725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1184.114422][T16725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1184.168486][T16725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1184.221264][T16965] chnl_net:caif_netlink_parms(): no params data found [ 1184.308415][T16597] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.524776][T16597] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.552245][T16597] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.324594][T16597] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.464909][T16725] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.502326][T16725] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.519233][T16725] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.551849][T16725] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.304976][T17102] overlayfs: failed to resolve './file0': -2 [ 1188.160898][ T6154] bridge_slave_1: left allmulticast mode [ 1188.202895][ T6154] bridge_slave_1: left promiscuous mode [ 1188.243408][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1188.365758][ T6154] bridge_slave_0: left allmulticast mode [ 1188.378985][ T6154] bridge_slave_0: left promiscuous mode [ 1188.474313][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1192.319183][ T6154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1192.364115][ T6154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1192.392391][ T6154] bond0 (unregistering): Released all slaves [ 1192.708414][ T5970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1192.708494][T16637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1192.752442][ T5970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1192.834389][T16637] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1194.475423][T16965] bridge0: port 1(bridge_slave_0) entered blocking state [ 1194.482620][T16965] bridge0: port 1(bridge_slave_0) entered disabled state [ 1194.534669][T16965] bridge_slave_0: entered allmulticast mode [ 1194.561030][T16965] bridge_slave_0: entered promiscuous mode [ 1194.587016][T16965] bridge0: port 2(bridge_slave_1) entered blocking state [ 1194.594161][T16965] bridge0: port 2(bridge_slave_1) entered disabled state [ 1194.676869][T16965] bridge_slave_1: entered allmulticast mode [ 1194.710527][T16965] bridge_slave_1: entered promiscuous mode [ 1195.087314][T17184] overlayfs: failed to resolve './file1': -2 [ 1197.404232][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1197.428060][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1197.440937][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1197.449465][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1197.458061][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1198.378468][ T6154] hsr_slave_0: left promiscuous mode [ 1198.406640][ T6154] hsr_slave_1: left promiscuous mode [ 1198.448756][ T6154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1198.479180][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1198.597326][ T6154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1198.980632][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1199.534867][ T5857] Bluetooth: hci1: command tx timeout [ 1199.807926][T17218] loop8: detected capacity change from 0 to 128 [ 1199.855339][T17218] EXT4-fs: Ignoring removed bh option [ 1199.897189][T17218] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1199.932086][ T6154] veth1_macvtap: left promiscuous mode [ 1199.939987][ T6154] veth0_macvtap: left promiscuous mode [ 1199.948313][ T6154] veth1_vlan: left promiscuous mode [ 1199.955718][ T6154] veth0_vlan: left promiscuous mode [ 1200.736140][T17218] EXT4-fs: error -4 creating inode table initialization thread [ 1200.754983][T17218] EXT4-fs (loop8): mount failed [ 1200.808515][T17231] overlayfs: failed to resolve './file1': -2 [ 1201.618969][ T5857] Bluetooth: hci1: command tx timeout [ 1203.173413][ T6154] team0 (unregistering): Port device team_slave_1 removed [ 1203.433107][ T6154] team0 (unregistering): Port device team_slave_0 removed [ 1203.704859][ T5857] Bluetooth: hci1: command tx timeout [ 1205.774710][ T5857] Bluetooth: hci1: command tx timeout [ 1206.172040][T16965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1206.191088][T16965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1206.201422][ T6043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1206.231446][ T6043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1207.528139][T17296] overlayfs: failed to resolve './file1': -2 [ 1208.597386][T16965] team0: Port device team_slave_0 added [ 1208.833817][T16965] team0: Port device team_slave_1 added [ 1209.965275][T17206] lo speed is unknown, defaulting to 1000 [ 1210.950824][T16965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1210.967069][T16965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1211.204821][T16965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1211.359584][T16965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1211.436446][T13062] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1211.444756][T16965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1211.503895][T13062] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1211.513951][T16965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1211.525476][T13062] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1211.534201][T13062] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1211.552332][T13062] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1212.188977][T16965] hsr_slave_0: entered promiscuous mode [ 1212.267074][T16965] hsr_slave_1: entered promiscuous mode [ 1212.335521][T16965] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1212.518567][T16965] Cannot create hsr debugfs directory [ 1212.534222][T17329] lo speed is unknown, defaulting to 1000 [ 1213.614554][ T5857] Bluetooth: hci4: command tx timeout [ 1214.564660][T14164] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1214.924185][T14164] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1214.990388][T14164] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1215.276826][T14164] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1215.317562][T14164] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.373295][T17351] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1215.466974][T14164] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1215.698623][ T5857] Bluetooth: hci4: command tx timeout [ 1215.866845][ T52] usb 9-1: USB disconnect, device number 4 [ 1217.767049][T17378] udevd[17378]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1217.783293][ T5857] Bluetooth: hci4: command tx timeout [ 1218.787292][ T6154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.874644][ T5857] Bluetooth: hci4: command tx timeout [ 1220.572659][ T6154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.359798][T17406] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3098'. [ 1221.850249][ T6154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.371887][T17206] chnl_net:caif_netlink_parms(): no params data found [ 1224.696232][T17443] loop8: detected capacity change from 0 to 512 [ 1224.766868][T17443] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 1224.798993][T17443] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1224.802009][ T6154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.859346][T17443] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:517: comm syz.8.3106: Block bitmap for bg 0 marked uninitialized [ 1224.938147][T17443] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 1224.975416][T17443] EXT4-fs (loop8): 1 orphan inode deleted [ 1224.983508][T17443] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1225.883812][T17206] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.912257][T14147] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1225.938388][T17206] bridge0: port 1(bridge_slave_0) entered disabled state [ 1225.954572][T17206] bridge_slave_0: entered allmulticast mode [ 1225.971181][T17206] bridge_slave_0: entered promiscuous mode [ 1226.581437][T17206] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.306184][T17206] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.313513][T17206] bridge_slave_1: entered allmulticast mode [ 1227.360602][T17206] bridge_slave_1: entered promiscuous mode [ 1228.516837][T17329] chnl_net:caif_netlink_parms(): no params data found [ 1228.769496][T17497] loop8: detected capacity change from 0 to 1764 [ 1228.781404][T17497] iso9660: Unknown parameter 'mverriderockperm' [ 1229.744115][T17206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1230.123108][T17206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1231.302740][ T6154] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.516263][T17206] team0: Port device team_slave_0 added [ 1232.026485][ T6154] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.140687][T17206] team0: Port device team_slave_1 added [ 1232.296113][T17329] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.313539][T17329] bridge0: port 1(bridge_slave_0) entered disabled state [ 1232.331455][T17329] bridge_slave_0: entered allmulticast mode [ 1232.346391][T17329] bridge_slave_0: entered promiscuous mode [ 1232.397087][ T6154] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.535854][T17206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1232.538028][T17533] netlink: 'syz.6.3122': attribute type 1 has an invalid length. [ 1232.557035][T17206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1233.189850][T17206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1233.546831][T17329] bridge0: port 2(bridge_slave_1) entered blocking state [ 1233.554024][T17329] bridge0: port 2(bridge_slave_1) entered disabled state [ 1233.582929][T17329] bridge_slave_1: entered allmulticast mode [ 1233.636521][T17329] bridge_slave_1: entered promiscuous mode [ 1233.846638][T17533] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1234.092993][T17206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1234.884469][T17206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1234.942845][T17206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1234.950991][T13062] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1234.966046][T13062] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1234.982856][T13062] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1234.998192][T13062] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1235.011714][T13062] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1235.631101][ T6154] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.734192][T17329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1235.759507][T17329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1237.205536][ T5857] Bluetooth: hci3: command tx timeout [ 1237.715178][T17569] loop8: detected capacity change from 0 to 512 [ 1237.804605][T17569] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 1238.223374][T17569] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1238.279859][T17206] hsr_slave_0: entered promiscuous mode [ 1238.337774][T17569] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:517: comm syz.8.3130: Block bitmap for bg 0 marked uninitialized [ 1238.427374][T17206] hsr_slave_1: entered promiscuous mode [ 1238.529179][T17206] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1238.562740][T17569] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 1238.600643][T17206] Cannot create hsr debugfs directory [ 1238.657926][T17569] EXT4-fs (loop8): 1 orphan inode deleted [ 1238.730745][T17569] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1239.053590][T17569] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 1239.121533][T17569] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1239.215342][ T5857] Bluetooth: hci3: command tx timeout [ 1239.364828][T17329] team0: Port device team_slave_0 added [ 1239.423002][T14147] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1239.604040][T17549] lo speed is unknown, defaulting to 1000 [ 1239.625926][T17329] team0: Port device team_slave_1 added [ 1240.368909][T17329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1240.400696][T17329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1240.481075][T17329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1240.526166][T17329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1240.574676][T17329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1240.687924][T17329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1241.324471][ T5857] Bluetooth: hci3: command tx timeout [ 1241.484828][ T6154] bridge_slave_1: left allmulticast mode [ 1241.519545][ T6154] bridge_slave_1: left promiscuous mode [ 1241.563462][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1241.653790][ T6154] bridge_slave_0: left allmulticast mode [ 1241.698389][ T6154] bridge_slave_0: left promiscuous mode [ 1241.704203][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1241.773382][ T6154] bridge_slave_1: left allmulticast mode [ 1241.796410][ T6154] bridge_slave_1: left promiscuous mode [ 1241.814645][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1241.837542][ T6154] bridge_slave_0: left allmulticast mode [ 1241.853419][ T6154] bridge_slave_0: left promiscuous mode [ 1241.868974][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.982817][ T6154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1243.001756][ T6154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1243.013369][ T6154] bond0 (unregistering): Released all slaves [ 1243.136892][ T6154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1243.148635][ T6154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1243.159498][ T6154] bond0 (unregistering): Released all slaves [ 1243.374522][ T5857] Bluetooth: hci3: command tx timeout [ 1244.445737][T17649] overlayfs: failed to clone upperpath [ 1245.099349][T17329] hsr_slave_0: entered promiscuous mode [ 1245.157219][T17329] hsr_slave_1: entered promiscuous mode [ 1245.163604][T17329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1245.270603][T17329] Cannot create hsr debugfs directory [ 1246.734538][T17549] chnl_net:caif_netlink_parms(): no params data found [ 1248.217417][T17693] overlayfs: failed to clone upperpath [ 1248.613294][ T6154] hsr_slave_0: left promiscuous mode [ 1248.684645][ T6154] hsr_slave_1: left promiscuous mode [ 1248.690794][ T6154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1248.746405][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1248.798194][ T6154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1248.832308][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1248.888208][ T6154] hsr_slave_0: left promiscuous mode [ 1249.707244][ T6154] hsr_slave_1: left promiscuous mode [ 1249.734921][ T6154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1249.758004][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1249.785551][ T6154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1249.810915][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1250.024576][ T6154] veth1_macvtap: left promiscuous mode [ 1250.054568][ T6154] veth0_macvtap: left promiscuous mode [ 1250.063755][ T6154] veth1_vlan: left promiscuous mode [ 1250.088777][ T6154] veth0_vlan: left promiscuous mode [ 1250.516257][ T6154] veth1_macvtap: left promiscuous mode [ 1250.636848][ T6154] veth0_macvtap: left promiscuous mode [ 1250.653475][ T6154] veth1_vlan: left promiscuous mode [ 1250.663751][ T6154] veth0_vlan: left promiscuous mode [ 1251.387864][T14164] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1251.429584][T17743] overlayfs: workdir and upperdir must reside under the same mount [ 1251.614703][T14164] usb 9-1: Using ep0 maxpacket: 32 [ 1251.631053][T14164] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1251.659939][T14164] usb 9-1: config 128 has an invalid interface number: 127 but max is 3 [ 1251.670012][T14164] usb 9-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1251.688657][T14164] usb 9-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1251.698043][T14164] usb 9-1: config 128 has no interface number 0 [ 1251.705108][T14164] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1251.716924][T14164] usb 9-1: config 128 interface 127 has no altsetting 0 [ 1251.726838][T14164] usb 9-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1251.736240][T14164] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.744934][T14164] usb 9-1: Product: syz [ 1251.749301][T14164] usb 9-1: Manufacturer: syz [ 1251.753976][T14164] usb 9-1: SerialNumber: syz [ 1252.142855][T14164] usb 9-1: USB disconnect, device number 5 [ 1253.330453][ T6154] team0 (unregistering): Port device team_slave_1 removed [ 1253.484970][ T6154] team0 (unregistering): Port device team_slave_0 removed [ 1255.509281][ T6154] team0 (unregistering): Port device team_slave_1 removed [ 1255.582898][ T6154] team0 (unregistering): Port device team_slave_0 removed [ 1256.530260][T17774] loop6: detected capacity change from 0 to 22 [ 1256.546427][T17774] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 1256.719778][T17774] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1257.601202][T13062] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1257.613468][T13062] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1257.633080][T13062] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1257.643408][T13062] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1257.654569][T13062] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1257.814530][T14164] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1257.989456][T14164] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1258.015306][T14164] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1258.047688][T14164] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1258.074380][T14164] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.116389][T17784] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1258.127802][T14164] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1258.230095][T17549] bridge0: port 1(bridge_slave_0) entered blocking state [ 1258.256845][T17549] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.278778][T17549] bridge_slave_0: entered allmulticast mode [ 1258.308072][T17549] bridge_slave_0: entered promiscuous mode [ 1258.317443][T17549] bridge0: port 2(bridge_slave_1) entered blocking state [ 1258.334892][T17549] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.344111][T17549] bridge_slave_1: entered allmulticast mode [ 1258.352476][T17549] bridge_slave_1: entered promiscuous mode [ 1258.392072][T10561] usb 9-1: USB disconnect, device number 6 [ 1258.513993][T17549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1258.593370][T17549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1258.727701][T17374] udevd[17374]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1258.967068][T17781] lo speed is unknown, defaulting to 1000 [ 1259.016913][T17380] udevd[17380]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1259.081312][T17549] team0: Port device team_slave_0 added [ 1259.288783][T17806] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3185'. [ 1259.694417][T13062] Bluetooth: hci0: command tx timeout [ 1260.775720][T17549] team0: Port device team_slave_1 added [ 1261.775656][T13062] Bluetooth: hci0: command tx timeout [ 1262.158775][T17549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1262.209027][T17549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1262.234953][ C1] vkms_vblank_simulate: vblank timer overrun [ 1262.317572][T17549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1262.481599][T17549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1262.496042][T17549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1262.521952][ C1] vkms_vblank_simulate: vblank timer overrun [ 1262.528266][T17815] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3189'. [ 1262.594279][T17549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1262.631512][T17818] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3189'. [ 1262.882131][T17549] hsr_slave_0: entered promiscuous mode [ 1262.891629][T17821] loop8: detected capacity change from 0 to 22 [ 1262.915538][T17821] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 1262.924850][T17549] hsr_slave_1: entered promiscuous mode [ 1262.946114][T17821] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1262.966912][T17549] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1262.984366][T17549] Cannot create hsr debugfs directory [ 1263.854404][T13062] Bluetooth: hci0: command tx timeout [ 1264.328079][T17329] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1264.690345][T17329] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1264.717126][T17329] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1264.836752][T17329] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1264.913801][T17781] chnl_net:caif_netlink_parms(): no params data found [ 1266.014667][T13062] Bluetooth: hci0: command tx timeout [ 1266.402476][T17873] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3202'. [ 1266.565937][T17882] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3202'. [ 1266.890124][T17781] bridge0: port 1(bridge_slave_0) entered blocking state [ 1266.901535][T17781] bridge0: port 1(bridge_slave_0) entered disabled state [ 1267.366425][T17890] loop6: detected capacity change from 0 to 4096 [ 1267.455183][T17890] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512). [ 1267.529106][T17781] bridge_slave_0: entered allmulticast mode [ 1267.615400][T17781] bridge_slave_0: entered promiscuous mode [ 1267.648399][T17781] bridge0: port 2(bridge_slave_1) entered blocking state [ 1267.673603][T17781] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.730333][T17781] bridge_slave_1: entered allmulticast mode [ 1267.752813][T17781] bridge_slave_1: entered promiscuous mode [ 1268.166569][T17781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1268.218020][T17781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1268.486828][T17781] team0: Port device team_slave_0 added [ 1268.586347][T17781] team0: Port device team_slave_1 added [ 1268.613773][T17549] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1268.817034][T14164] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1269.776327][T14164] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1269.811266][T14164] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1269.823372][ T6154] bridge_slave_1: left allmulticast mode [ 1269.830407][ T6154] bridge_slave_1: left promiscuous mode [ 1269.841030][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.856811][T14164] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1269.906433][T14164] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.949766][T17908] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1269.973147][ T6154] bridge_slave_0: left allmulticast mode [ 1269.978530][T14164] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1270.013560][ T6154] bridge_slave_0: left promiscuous mode [ 1270.026905][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.090292][ T6154] bridge_slave_1: left allmulticast mode [ 1270.111450][ T6154] bridge_slave_1: left promiscuous mode [ 1270.124577][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.193534][ T6154] bridge_slave_0: left allmulticast mode [ 1270.198706][T14164] usb 9-1: USB disconnect, device number 7 [ 1270.224490][ T6154] bridge_slave_0: left promiscuous mode [ 1270.230294][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.302340][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1270.320450][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1270.328957][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1270.338299][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1270.346103][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1270.564264][T17937] loop6: detected capacity change from 0 to 16 [ 1270.581096][T17937] erofs (device loop6): mounted with root inode @ nid 36. [ 1270.789763][T17942] overlayfs: failed to clone upperpath [ 1271.000914][T17949] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1271.011044][T17949] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1271.052442][T17949] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 1271.193552][T17953] Set syz0 is full, maxelem 0 reached [ 1271.638357][ T6154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1271.746013][ T6154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1271.785748][T17948] loop8: detected capacity change from 0 to 512 [ 1272.592935][T17948] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1272.601966][ T5857] Bluetooth: hci1: command tx timeout [ 1272.710417][T17948] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 1272.744820][T17948] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e11c, mo2=0002] [ 1272.748631][ T6154] bond0 (unregistering): Released all slaves [ 1272.752901][T17948] System zones: 0-1, 15-15, 18-18, 34-34 [ 1272.823045][ T6154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1272.846872][T17948] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1272.853343][T17948] Quota error (device loop8): v2_read_header: Failed header read: expected=8 got=0 [ 1272.879764][ T6154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1272.896856][ T6154] bond0 (unregistering): Released all slaves [ 1272.930321][T17948] EXT4-fs warning (device loop8): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1273.013719][T17948] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 1273.023831][T17549] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1273.066509][T17948] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3213: bg 0: block 40: padding at end of block bitmap is not set [ 1273.096388][T17549] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1273.219928][T17948] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 1273.303224][T17948] EXT4-fs (loop8): 1 truncate cleaned up [ 1273.337673][T17948] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1273.847265][T17781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1273.865319][T17781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1273.900235][T17781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1273.920545][T17781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1273.929703][T17781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1273.971801][T17781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1273.991237][T17549] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1274.117632][T14147] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1274.242148][T17781] hsr_slave_0: entered promiscuous mode [ 1274.267141][T17781] hsr_slave_1: entered promiscuous mode [ 1274.293954][T17781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1274.323417][T17781] Cannot create hsr debugfs directory [ 1274.384006][ T6154] hsr_slave_0: left promiscuous mode [ 1274.424470][ T6154] hsr_slave_1: left promiscuous mode [ 1274.441134][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1274.475465][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1274.548334][ T6154] hsr_slave_0: left promiscuous mode [ 1274.573015][ T6154] hsr_slave_1: left promiscuous mode [ 1274.597601][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1274.645095][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1274.655499][ T5857] Bluetooth: hci1: command tx timeout [ 1276.734374][ T5857] Bluetooth: hci1: command tx timeout [ 1276.736214][T17988] loop8: detected capacity change from 0 to 32768 [ 1276.856785][T17988] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1277.019400][ T6154] team0 (unregistering): Port device team_slave_1 removed [ 1277.047804][T17988] XFS (loop8): Ending clean mount [ 1277.110982][ T6154] team0 (unregistering): Port device team_slave_0 removed [ 1277.112296][T17988] XFS (loop8): Quotacheck needed: Please wait. [ 1277.200052][T17988] XFS (loop8): Quotacheck: Done. [ 1277.486345][T14147] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1278.368242][T18049] siw: device registration error -23 [ 1278.525858][T18051] input: syz1 as /devices/virtual/input/input51 [ 1278.658272][ T6154] team0 (unregistering): Port device team_slave_1 removed [ 1278.779742][ T6154] team0 (unregistering): Port device team_slave_0 removed [ 1278.814347][ T5857] Bluetooth: hci1: command tx timeout [ 1280.235078][T17929] lo speed is unknown, defaulting to 1000 [ 1280.929195][T17549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1281.582344][T17549] 8021q: adding VLAN 0 to HW filter on device team0 [ 1282.106108][ T6043] bridge0: port 1(bridge_slave_0) entered blocking state [ 1282.113304][ T6043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1282.166313][ T6043] bridge0: port 2(bridge_slave_1) entered blocking state [ 1282.173481][ T6043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1282.257379][T17929] chnl_net:caif_netlink_parms(): no params data found [ 1282.978238][T18115] md2: using deprecated bitmap file support [ 1282.994353][T18115] md2: error: failed to get bitmap file [ 1283.174755][T18115] md2: using deprecated bitmap file support [ 1283.181178][T18115] md2: error: bitmap file must be a regular file [ 1283.373753][T17929] bridge0: port 1(bridge_slave_0) entered blocking state [ 1283.414552][T17929] bridge0: port 1(bridge_slave_0) entered disabled state [ 1283.458907][T17929] bridge_slave_0: entered allmulticast mode [ 1283.491601][T17929] bridge_slave_0: entered promiscuous mode [ 1283.528507][T17929] bridge0: port 2(bridge_slave_1) entered blocking state [ 1283.618297][T17929] bridge0: port 2(bridge_slave_1) entered disabled state [ 1283.831516][T17929] bridge_slave_1: entered allmulticast mode [ 1283.851447][T17929] bridge_slave_1: entered promiscuous mode [ 1284.265188][T18136] loop6: detected capacity change from 0 to 16 [ 1284.280725][T18136] erofs (device loop6): mounted with root inode @ nid 36. [ 1284.295903][T18131] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.3237'. [ 1284.314701][T18128] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.3237'. [ 1284.582140][T18137] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1284.591684][T18137] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1284.601573][T18137] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 1284.748382][T17929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1284.960984][T17929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1285.300230][T17781] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1285.485420][T17781] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1285.605005][T17929] team0: Port device team_slave_0 added [ 1285.628381][T17781] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1285.704963][T17781] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1285.786077][T17929] team0: Port device team_slave_1 added [ 1285.797794][T17549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1286.163240][T17929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1286.199743][T17929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1286.297214][T18168] loop6: detected capacity change from 0 to 2048 [ 1286.313832][T17929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1286.357197][T18168] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1286.399076][T17929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1286.428371][T17929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1286.540637][T18173] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1286.563964][T17929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1287.907340][T18180] overlayfs: failed to clone upperpath [ 1289.458565][T18188] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3249'. [ 1289.482118][T18187] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3249'. [ 1289.578499][T17929] hsr_slave_0: entered promiscuous mode [ 1289.625786][T17929] hsr_slave_1: entered promiscuous mode [ 1289.633091][T17929] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1289.672484][T17929] Cannot create hsr debugfs directory [ 1290.769244][T17549] veth0_vlan: entered promiscuous mode [ 1290.994117][ T6154] bridge_slave_1: left allmulticast mode [ 1291.018422][ T6154] bridge_slave_1: left promiscuous mode [ 1291.024283][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.083164][ T6154] bridge_slave_0: left allmulticast mode [ 1291.101493][ T6154] bridge_slave_0: left promiscuous mode [ 1291.123504][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.267319][ T6154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1293.348034][ T6154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1293.483620][ T6154] bond0 (unregistering): Released all slaves [ 1294.032652][ T6154] hsr_slave_0: left promiscuous mode [ 1294.049654][ T6154] hsr_slave_1: left promiscuous mode [ 1294.079741][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1294.146669][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1295.386716][T13062] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1295.395970][T13062] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1295.405602][T13062] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1295.419432][T13062] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1295.427822][T13062] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1296.840069][T18275] loop6: detected capacity change from 0 to 32768 [ 1297.454662][ T5857] Bluetooth: hci4: command tx timeout [ 1297.980306][T18312] loop6: detected capacity change from 0 to 24 [ 1298.004027][T18312] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 1298.013156][T18312] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1298.036879][T18312] overlayfs: fs on './file0/../file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1299.434499][T15649] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1299.544429][ T5857] Bluetooth: hci4: command tx timeout [ 1299.591105][T15649] usb 7-1: config 0 has an invalid interface number: 109 but max is 0 [ 1299.599442][T15649] usb 7-1: config 0 has no interface number 0 [ 1299.605844][T15649] usb 7-1: config 0 interface 109 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1299.617868][T15649] usb 7-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1 [ 1299.627122][T15649] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.614552][ T5857] Bluetooth: hci4: command tx timeout [ 1303.694494][ T5857] Bluetooth: hci4: command tx timeout [ 1309.206376][T13062] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1309.216948][T13062] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1309.224810][T13062] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1309.236884][T13062] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1309.246465][T13062] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1310.695344][T13062] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1310.703940][T13062] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1310.712504][T13062] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1310.722053][T13062] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1310.729971][T13062] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1311.296042][ T5857] Bluetooth: hci3: command tx timeout [ 1312.824398][ T5857] Bluetooth: hci5: command tx timeout [ 1313.374468][ T5857] Bluetooth: hci3: command tx timeout [ 1314.895060][ T5857] Bluetooth: hci5: command tx timeout [ 1315.454701][ T5857] Bluetooth: hci3: command tx timeout [ 1316.974390][ T5857] Bluetooth: hci5: command tx timeout [ 1317.018646][T13062] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1317.029774][T13062] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1317.038127][T13062] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1317.047408][T13062] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1317.056631][T13062] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1317.534633][T13062] Bluetooth: hci3: command tx timeout [ 1319.054495][T13062] Bluetooth: hci5: command tx timeout [ 1319.134396][T13062] Bluetooth: hci8: command tx timeout [ 1319.229078][ T5857] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1319.238053][ T5857] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1319.246087][ T5857] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1319.260860][ T5857] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1319.271614][ T5857] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1321.216888][T13062] Bluetooth: hci8: command tx timeout [ 1321.294349][T13062] Bluetooth: hci9: command tx timeout [ 1323.294435][T13062] Bluetooth: hci8: command tx timeout [ 1323.374609][T13062] Bluetooth: hci9: command tx timeout [ 1325.374619][T13062] Bluetooth: hci8: command tx timeout [ 1325.454349][T13062] Bluetooth: hci9: command tx timeout [ 1327.534462][T13062] Bluetooth: hci9: command tx timeout [ 1329.720719][ T5857] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1329.733754][ T5857] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1329.745259][ T5857] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1329.757235][ T5857] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1329.766412][ T5857] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1331.865277][T13062] Bluetooth: hci10: command tx timeout [ 1333.934592][T13062] Bluetooth: hci10: command tx timeout [ 1336.014457][T13062] Bluetooth: hci10: command tx timeout [ 1338.094560][T13062] Bluetooth: hci10: command tx timeout [ 1354.371039][ T5857] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1354.380080][ T5857] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1354.388427][ T5857] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1354.397703][ T5857] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1354.405794][ T5857] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1356.494900][ T5857] Bluetooth: hci11: command tx timeout [ 1358.574446][ T5857] Bluetooth: hci11: command tx timeout [ 1360.654551][ T5857] Bluetooth: hci11: command tx timeout [ 1362.734433][ T5857] Bluetooth: hci11: command tx timeout [ 1369.794757][T13062] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1369.804661][T13062] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1369.814484][T13062] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1369.823125][T13062] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1369.831167][T13062] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1370.804761][T13062] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1370.816327][T13062] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1370.827364][T13062] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1370.836312][T13062] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1370.844592][T13062] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1371.854460][ T5857] Bluetooth: hci12: command tx timeout [ 1372.894532][ T5857] Bluetooth: hci13: command tx timeout [ 1373.934660][ T5857] Bluetooth: hci12: command tx timeout [ 1374.974376][ T5857] Bluetooth: hci13: command tx timeout [ 1376.014316][ T5857] Bluetooth: hci12: command tx timeout [ 1377.054420][ T5857] Bluetooth: hci13: command tx timeout [ 1378.104627][ T5857] Bluetooth: hci12: command tx timeout [ 1378.220936][T13062] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1378.230875][T13062] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1378.240097][T13062] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1378.250749][T13062] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1378.260940][T13062] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1379.134990][T13062] Bluetooth: hci13: command tx timeout [ 1379.323211][ T5857] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1379.334129][ T5857] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1379.343820][ T5857] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1379.353010][ T5857] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1379.360962][ T5857] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1380.334454][ T5857] Bluetooth: hci14: command tx timeout [ 1381.374419][ T5857] Bluetooth: hci15: command tx timeout [ 1382.424685][T13062] Bluetooth: hci14: command tx timeout [ 1383.454620][T13062] Bluetooth: hci15: command tx timeout [ 1383.534420][T13062] Bluetooth: hci0: command 0x0406 tx timeout [ 1384.494560][ T5857] Bluetooth: hci14: command tx timeout [ 1385.534352][ T5857] Bluetooth: hci15: command tx timeout [ 1386.587398][ T5857] Bluetooth: hci14: command tx timeout [ 1387.624498][ T5857] Bluetooth: hci15: command tx timeout [ 1390.931279][T13062] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1390.941648][T13062] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1390.951319][T13062] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1390.960548][T13062] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1390.969386][T13062] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1393.054510][T13062] Bluetooth: hci16: command tx timeout [ 1393.774322][T13062] Bluetooth: hci1: command 0x0406 tx timeout [ 1395.134507][ T5857] Bluetooth: hci16: command tx timeout [ 1397.214455][ T5857] Bluetooth: hci16: command tx timeout [ 1399.296614][ T5857] Bluetooth: hci16: command tx timeout [ 1415.560586][T13062] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1415.573136][T13062] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1415.581548][T13062] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1415.592119][T13062] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1415.605984][T13062] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1417.694363][ T5857] Bluetooth: hci17: command tx timeout [ 1419.774281][ T5857] Bluetooth: hci17: command tx timeout [ 1421.864466][ T5857] Bluetooth: hci17: command tx timeout [ 1423.934473][ T5857] Bluetooth: hci17: command tx timeout [ 1429.614435][ T5857] Bluetooth: hci4: command 0x0406 tx timeout [ 1429.892448][ T5857] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1429.902678][ T5857] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1429.912366][ T5857] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1429.920695][ T5857] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1429.929320][ T5857] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1430.887911][T13062] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 1430.897379][T13062] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 1430.908654][T13062] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 1430.917026][T13062] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 1430.929941][T13062] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 1432.014348][ T5857] Bluetooth: hci18: command tx timeout [ 1432.974325][T18390] Bluetooth: hci19: command tx timeout [ 1434.094644][T18390] Bluetooth: hci18: command tx timeout [ 1434.744896][T18390] Bluetooth: hci3: command 0x0406 tx timeout [ 1434.745917][T15375] Bluetooth: hci5: command 0x0406 tx timeout [ 1435.054558][T18369] Bluetooth: hci19: command tx timeout [ 1436.174397][T18369] Bluetooth: hci18: command tx timeout [ 1436.504659][ T31] INFO: task kworker/1:5:10561 blocked for more than 143 seconds. [ 1436.512538][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 1436.522136][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1436.531004][ T31] task:kworker/1:5 state:D stack:24272 pid:10561 tgid:10561 ppid:2 task_flags:0x4288060 flags:0x00004000 [ 1436.543122][ T31] Workqueue: md_misc mddev_delayed_delete [ 1436.548949][ T31] Call Trace: [ 1436.552253][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1436.555231][ T31] __schedule+0x1b88/0x5240 [ 1436.560610][ T31] ? try_to_wake_up+0xa27/0x15d0 [ 1436.567706][ T31] ? __pfx_try_to_wake_up+0x10/0x10 [ 1436.572945][ T31] ? schedule+0x163/0x360 [ 1436.582789][ T31] ? __pfx___schedule+0x10/0x10 [ 1436.622395][ T31] ? preempt_schedule+0xe4/0xf0 [ 1436.629037][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1436.660334][ T31] ? schedule+0x90/0x360 [ 1436.665655][ T31] ? schedule+0x90/0x360 [ 1436.669964][ T31] schedule+0x163/0x360 [ 1436.681526][ T31] schedule_timeout+0xb1/0x2b0 [ 1436.686708][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1436.692139][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1436.697834][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 1436.703054][ T31] ? wait_for_completion+0x2d4/0x600 [ 1436.708470][ T31] wait_for_completion+0x32f/0x600 [ 1436.713599][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1436.719302][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 1436.725145][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1436.730806][ T31] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1436.736135][ T31] devtmpfs_delete_node+0x217/0x300 [ 1436.741356][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1436.747140][ T31] ? __pfx_devtmpfs_delete_node+0x10/0x10 [ 1436.752934][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1436.758772][ T31] ? sysfs_remove_group+0x23b/0x2c0 [ 1436.764003][ T31] device_del+0x334/0x9b0 [ 1436.768479][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1436.774516][ T31] ? __pfx_device_del+0x10/0x10 [ 1436.779378][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1436.785121][ T31] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1436.790370][ T31] ? pm_runtime_set_memalloc_noio+0x1f2/0x260 [ 1436.796491][ T31] del_gendisk+0x798/0xad0 [ 1436.800938][ T31] ? __pfx_del_gendisk+0x10/0x10 [ 1436.805997][ T31] ? kernfs_put+0x43e/0x460 [ 1436.810523][ T31] md_kobj_release+0xaf/0xd0 [ 1436.815186][ T31] kobject_put+0x231/0x480 [ 1436.819625][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 1436.825447][ T31] process_scheduled_works+0xac5/0x18e0 [ 1436.831041][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1436.837094][ T31] ? assign_work+0x367/0x3d0 [ 1436.841716][ T31] worker_thread+0x870/0xd50 [ 1436.846392][ T31] ? __kthread_parkme+0x1a8/0x200 [ 1436.851440][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1436.856614][ T31] kthread+0x7b9/0x940 [ 1436.860728][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1436.865905][ T31] ? __pfx_kthread+0x10/0x10 [ 1436.870509][ T31] ? __pfx_kthread+0x10/0x10 [ 1436.875162][ T31] ? __pfx_kthread+0x10/0x10 [ 1436.879777][ T31] ? __pfx_kthread+0x10/0x10 [ 1436.884438][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1436.890103][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 1436.895646][ T31] ? __pfx_kthread+0x10/0x10 [ 1436.900255][ T31] ret_from_fork+0x4d/0x80 [ 1436.904742][ T31] ? __pfx_kthread+0x10/0x10 [ 1436.909381][ T31] ret_from_fork_asm+0x1a/0x30 [ 1436.914256][ T31] [ 1436.917374][ T31] [ 1436.917374][ T31] Showing all locks held in the system: [ 1436.926970][ T31] 2 locks held by kdevtmpfs/26: [ 1436.931814][ T31] #0: ffff88801c2d8950 (&type->i_mutex_dir_key/1){+.+.}-{4:4}, at: __kern_path_locked+0x1ca/0x430 [ 1436.942615][ T31] #1: ffffffff8f48cb48 (major_names_lock){+.+.}-{4:4}, at: blk_request_module+0x38/0x2a0 [ 1436.952730][ T31] 1 lock held by khungtaskd/31: [ 1436.957628][ T31] #0: ffffffff8ed3df20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180 [ 1436.967665][ T31] 2 locks held by dhcpcd/5500: [ 1436.972443][ T31] #0: ffff88807eb596d0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0x119/0x790 [ 1436.983055][ T31] #1: ffffffff900fd5c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x99/0x200 [ 1436.991994][ T31] 2 locks held by getty/5586: [ 1436.996725][ T31] #0: ffff888031ab60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1437.006589][ T31] #1: ffffc900033362f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x5bb/0x1700 [ 1437.016792][ T31] 6 locks held by kworker/u8:10/5994: [ 1437.022190][ T31] 4 locks held by kworker/u8:14/6154: [ 1437.027666][ T31] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 1437.038676][ T31] #1: ffffc9000b467c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 1437.049393][ T31] #2: ffffffff900f0a90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 [ 1437.059230][ T31] #3: ffffffff900fd5c8 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xde/0x880 [ 1437.069415][ T31] 3 locks held by kworker/u8:16/9632: [ 1437.074868][ T31] #0: ffff8880312a1948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 1437.086610][ T31] #1: ffffc9000fe4fc60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 1437.099514][ T31] #2: ffffffff900fd5c8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x110/0x16a0 [ 1437.109230][ T31] 2 locks held by kworker/1:5/10561: [ 1437.114564][ T31] #0: ffff8881446f0148 ((wq_completion)md_misc){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 1437.125747][ T31] #1: ffffc9000de17c60 ((work_completion)(&mddev->del_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 1437.138278][ T31] 3 locks held by kworker/u8:2/14162: [ 1437.143684][ T31] #0: ffff88801b081148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 1437.144362][T18369] Bluetooth: hci19: command tx timeout [ 1437.155458][ T31] #1: ffffc900038f7c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 1437.155560][ T31] #2: ffffffff900fd5c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1437.155634][ T31] 3 locks held by kworker/1:8/15649: [ 1437.155651][ T31] #0: ffff8881446d7548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 1437.155737][ T31] #1: ffffc90004137c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 1437.155822][ T31] #2: ffff888144b34198 (&dev->mutex){....}-{4:4}, at: hub_event+0x200/0x50f0 [ 1437.155908][ T31] 1 lock held by syz-executor/17549: [ 1437.155925][ T31] #0: ffffffff900fd5c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 1437.233184][ T31] 1 lock held by syz-executor/17781: [ 1437.238565][ T31] #0: ffffffff900fd5c8 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x831/0x11b0 [ 1437.248269][ T31] 2 locks held by syz-executor/17929: [ 1437.253632][ T31] #0: ffffffff8f865e20 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250 [ 1437.263259][ T31] #1: ffffffff900fd5c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xd68/0x1fe0 [ 1437.272424][ T31] 2 locks held by syz.1.3260/18249: [ 1437.277914][ T31] #0: ffff88805d3456d0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0x119/0x790 [ 1437.288375][ T31] #1: ffffffff900fd5c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x99/0x200 [ 1437.297473][ T31] 1 lock held by syz.8.3263/18256: [ 1437.302605][ T31] #0: ffffffff900fd5c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 1437.311886][ T31] 1 lock held by syz-executor/18258: [ 1437.317796][ T31] #0: ffffffff900fd5c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40 [ 1437.327734][ T31] 1 lock held by syz.6.3275/18329: [ 1437.332866][ T31] #0: ffffffff900fd5c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xd70 [ 1437.342385][ T31] 1 lock held by syz-executor/18334: [ 1437.347706][ T31] #0: ffffffff900fd5c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40 [ 1437.357241][ T31] 1 lock held by syz-executor/18339: [ 1437.362529][ T31] #0: ffffffff900fd5c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40 [ 1437.372016][ T31] 1 lock held by syz-executor/18342: [ 1437.377365][ T31] #0: ffffffff900fd5c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40 [ 1437.386857][ T31] 1 lock held by syz-executor/18346: [ 1437.392145][ T31] #0: ffffffff900fd5c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40 [ 1437.401651][ T31] 1 lock held by syz-executor/18350: [ 1437.406969][ T31] #0: ffffffff900fd5c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40 [ 1437.416544][ T31] 1 lock held by syz-executor/18354: [ 1437.421851][ T31] #0: ffffffff900fd5c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40 [ 1437.431346][ T31] 1 lock held by syz-executor/18358: [ 1437.436716][ T31] #0: ffffffff900fd5c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40 [ 1437.446280][ T31] 1 lock held by syz-executor/18362: [ 1437.451585][ T31] #0: ffffffff900fd5c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40 [ 1437.461136][ T31] 1 lock held by syz-executor/18366: [ 1437.466476][ T31] #0: ffffffff900fd5c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40 [ 1437.476026][ T31] 1 lock held by syz-executor/18371: [ 1437.481323][ T31] #0: ffffffff900fd5c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40 [ 1437.490810][ T31] 1 lock held by syz-executor/18375: [ 1437.496161][ T31] #0: ffffffff900fd5c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40 [ 1437.505680][ T31] 1 lock held by syz-executor/18380: [ 1437.510965][ T31] #0: ffffffff900fd5c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40 [ 1437.520486][ T31] 1 lock held by syz-executor/18385: [ 1437.525799][ T31] #0: ffffffff900fd5c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40 [ 1437.535455][ T31] 1 lock held by syz-executor/18388: [ 1437.540743][ T31] #0: ffffffff900fd5c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x406/0x1c40 [ 1437.550286][ T31] [ 1437.552615][ T31] ============================================= [ 1437.552615][ T31] [ 1437.562092][ T31] NMI backtrace for cpu 0 [ 1437.562107][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 1437.562128][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1437.562139][ T31] Call Trace: [ 1437.562146][ T31] [ 1437.562154][ T31] dump_stack_lvl+0x241/0x360 [ 1437.562187][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1437.562215][ T31] ? __pfx__printk+0x10/0x10 [ 1437.562252][ T31] nmi_cpu_backtrace+0x4ab/0x4e0 [ 1437.562286][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1437.562310][ T31] ? _printk+0xd5/0x120 [ 1437.562336][ T31] ? __wake_up_klogd+0xcc/0x110 [ 1437.562360][ T31] ? __pfx__printk+0x10/0x10 [ 1437.562389][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1437.562409][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1437.562439][ T31] watchdog+0x1058/0x10a0 [ 1437.562465][ T31] ? watchdog+0x1ea/0x10a0 [ 1437.562494][ T31] ? __pfx_watchdog+0x10/0x10 [ 1437.562518][ T31] kthread+0x7b9/0x940 [ 1437.562542][ T31] ? __pfx_watchdog+0x10/0x10 [ 1437.562567][ T31] ? __pfx_kthread+0x10/0x10 [ 1437.562586][ T31] ? __pfx_kthread+0x10/0x10 [ 1437.562607][ T31] ? __pfx_kthread+0x10/0x10 [ 1437.562627][ T31] ? __pfx_kthread+0x10/0x10 [ 1437.562649][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1437.562670][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 1437.562688][ T31] ? __pfx_kthread+0x10/0x10 [ 1437.562710][ T31] ret_from_fork+0x4d/0x80 [ 1437.562728][ T31] ? __pfx_kthread+0x10/0x10 [ 1437.562749][ T31] ret_from_fork_asm+0x1a/0x30 [ 1437.562781][ T31] [ 1437.562788][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1437.723764][ C1] NMI backtrace for cpu 1 [ 1437.723784][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 1437.723811][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1437.723825][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1437.723853][ C1] Code: 7e af e0 f4 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 53 7e 18 00 f3 0f 1e fa fb f4 53 af e0 f4 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1437.723873][ C1] RSP: 0018:ffffc90000197dc0 EFLAGS: 00000286 [ 1437.723894][ C1] RAX: 0d6aaefb1e6e7100 RBX: ffffffff8197272e RCX: ffffffff8c2fb89c [ 1437.723911][ C1] RDX: 0000000000000001 RSI: ffffffff8e6497f7 RDI: ffffffff8ca1b680 [ 1437.723928][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732b5b R09: 1ffff110170e656b [ 1437.723945][ C1] R10: dffffc0000000000 R11: ffffed10170e656c R12: 1ffff92000032fd2 [ 1437.723963][ C1] R13: 1ffff11003adcb40 R14: 0000000000000001 R15: dffffc0000000000 [ 1437.723982][ C1] FS: 0000000000000000(0000) GS:ffff88812509a000(0000) knlGS:0000000000000000 [ 1437.724001][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1437.724017][ C1] CR2: 00007ffc6f0dad28 CR3: 000000000eb38000 CR4: 0000000000350ef0 [ 1437.724035][ C1] Call Trace: [ 1437.724044][ C1] [ 1437.724052][ C1] default_idle+0x13/0x20 [ 1437.724078][ C1] default_idle_call+0x74/0xb0 [ 1437.724111][ C1] do_idle+0x22e/0x5d0 [ 1437.724143][ C1] ? __pfx_do_idle+0x10/0x10 [ 1437.724182][ C1] cpu_startup_entry+0x42/0x60 [ 1437.724206][ C1] start_secondary+0xfe/0x100 [ 1437.724227][ C1] common_startup_64+0x13e/0x147 [ 1437.724273][ C1] [ 1437.724755][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1437.724774][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 1437.724804][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1437.724819][ T31] Call Trace: [ 1437.724838][ T31] [ 1437.724849][ T31] dump_stack_lvl+0x241/0x360 [ 1437.724893][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1437.724931][ T31] ? __pfx__printk+0x10/0x10 [ 1437.724973][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1437.725002][ T31] ? vscnprintf+0x5d/0x90 [ 1437.725041][ T31] panic+0x349/0x880 [ 1437.725074][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 1437.725115][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1437.725153][ T31] ? __pfx_panic+0x10/0x10 [ 1437.725183][ T31] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1437.725211][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1437.725245][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1437.725273][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1437.725303][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1437.725338][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1437.725377][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1437.725406][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1437.725446][ T31] watchdog+0x1097/0x10a0 [ 1437.725482][ T31] ? watchdog+0x1ea/0x10a0 [ 1437.725522][ T31] ? __pfx_watchdog+0x10/0x10 [ 1437.725555][ T31] kthread+0x7b9/0x940 [ 1437.725588][ T31] ? __pfx_watchdog+0x10/0x10 [ 1437.725622][ T31] ? __pfx_kthread+0x10/0x10 [ 1437.725649][ T31] ? __pfx_kthread+0x10/0x10 [ 1437.725678][ T31] ? __pfx_kthread+0x10/0x10 [ 1437.725706][ T31] ? __pfx_kthread+0x10/0x10 [ 1437.725735][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1437.725764][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 1437.725789][ T31] ? __pfx_kthread+0x10/0x10 [ 1437.725821][ T31] ret_from_fork+0x4d/0x80 [ 1437.725850][ T31] ? __pfx_kthread+0x10/0x10 [ 1437.725880][ T31] ret_from_fork_asm+0x1a/0x30 [ 1437.725924][ T31] [ 1438.082683][ T31] Kernel Offset: disabled [ 1438.087001][ T31] Rebooting in 86400 seconds..