last executing test programs: 18m14.437760889s ago: executing program 32 (id=131): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params]}, 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x4) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r5, &(0x7f0000000080), 0x2000011a) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) 17m23.704981688s ago: executing program 33 (id=322): socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r0, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r0, 0x4) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x40502) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/disk', 0x1, 0x0) io_setup(0x23, &(0x7f0000000280)=0x0) io_submit(r2, 0x1, &(0x7f0000000440)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x4, r1, &(0x7f0000000380)="8799bef58b1c4d7b1ebda07349d4c6d87276b50700", 0x15, 0x4}]) 12m13.65840475s ago: executing program 34 (id=913): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0xc044) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x4, &(0x7f0000ffc000/0x3000)=nil) socket$xdp(0x2c, 0x3, 0x0) unshare(0x2c020400) r4 = syz_clone(0x4a104280, 0x0, 0x0, &(0x7f00000022c0), &(0x7f0000002300), &(0x7f0000002340)) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000002380)={r4}) 11m6.41185431s ago: executing program 35 (id=1022): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = request_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000300)='#\x00', 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, r4) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x8000004, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x1, 0x2}, 0x50) socket$inet(0x2, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000035c0), 0x168003, 0x0) 7m30.37578934s ago: executing program 36 (id=1357): socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc3afe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) capset(&(0x7f0000000240)={0x20080522, r0}, &(0x7f00000001c0)={0x2, 0x7, 0x87, 0x7f, 0x1000, 0x5}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x17f, @dev={0xfe, 0x80, '\x00', 0xb}, 0x9}, r4, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r4}}, 0x18) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000480)=0x10000001, 0x4) sendmsg$nl_route(r5, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) writev(r2, 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x5000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r7 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x4, @loopback}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}], 0x2c) 4m59.601150628s ago: executing program 9 (id=2064): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)='2x', 0x2, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='highspeed\x00', 0xa) shutdown(r0, 0x1) 4m59.377997333s ago: executing program 9 (id=2068): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x599, &(0x7f0000001280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22000002, &(0x7f0000000140)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0xffff}}, {@sysvgroups}, {@jqfmt_vfsold}, {@nouid32}, {@grpjquota, 0x2e}]}, 0x84, 0x46c, &(0x7f00000004c0)="$eJzs3EtvG0UcAPD/rpP0RR6U8ugDaiiIiELSpAV64AICqRckJDjAMaShKnVb1ASJVhUtCJUj4hMARyQ+ASe4IOAE4gp3hFShXggckNHau40TO6njxHWDfz9pk5ndWc/Mzk4yu7PrAPpWOfuRRFQj4teIGK1Hlyco138t3rg8+/eNy7NJVKuv/pnU0v114/JskbTYb1ceGU8j0o+S2N8i3/mLl87MVCpzF/L45MLZdybnL1566vTZmVNzp+bOTR8/fuzo1LPPTD+9KfUczsq67/3zB/aeeOPTl2er8eYPX2XlvSvf3liPurEN51mO8vJjWTNU+/nYhj/9zjLcEE4GelgQ1qUUEVlzDdb6/2iUYqnxRuOlD3taOKCrqtVqdVvT2lIRuFoF/seS6HUJgN4o/tFn17/FchuHHz13/fn6BVBW78V8qW8ZiDT7tb1+xT7cpfzLEfH61X8+y5ZoeR8CAGBzfZONf55sNf4bSe5rSDeSzw2NRcThiNgdEfdExJ6IuDcisrT3R8QD68y/vCLePP75eUdHFWtTNv57Lp/bWj7+S4skY6U8Nlyr/2Dy1unK3JH8mIzH4LYsPrVGHt+++Msnq21rHP9lS5Z/MRbMy/HHwIobdCdnFmY2UudG1z+I2DfQqv7JzZmAJCL2RsS+Dj4/O2ann/jyQBYe2dW8/cAt67+GTZhnqn4R8Xi9/a/GivoXknpOq81PTm6PytyRyeKsaPbjT9deaYwPNoRv3f7dlbX/zpbnf17/ohsU87Xz68/j2m8fr3pN0+n5P5S8VgsP5evem1lYuDAVMZSvWLZ+emnfIl6kz+o/fqhV/UeS3RH/fp7vtz8/Vx+MiIci4mBe9ocj4pGIOLRG/b9/4dG31z5CvW3/k2u1f8RY0jhf30GgdOa7r1fLv732P1YLjedr2vn7124BN3LsAAAAYKtIa8/AJ+nEzXCaTkzUn+HfEzvTyvn5hcPlePfcyfqz8mMxmBZ3ukYb7odO5feGi/j0ivjRiLi79qTRjlp8YvZ8pVtz6kB7dq3S/zO/l3pdOqDr1jWP1vxGG7CFeV8T+pf+D/1L/4f+pf9D/2rV/69ELPagKMBt5v8/9C/9H/qX/g/9S/+HvtT8SnzxdSudvOm/FNh9YkO791Gg1KVPjsYv7ehCINKeH7rOA+mdUIyDeWBbRLS715WutunK8wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDr+y8AAP//BcXhGA==") ftruncate(r1, 0x7) 4m56.576639047s ago: executing program 9 (id=2082): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x1000) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x4, 0x0, 0xc, 0x8001, 0x3, 0x0, 0x3, 0xfffffffc, 0x1}}) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 4m55.445716459s ago: executing program 9 (id=2088): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000340)={[{@utf8no}, {@shortname_winnt}, {@rodir}, {@fat=@discard}, {@fat=@flush}, {@shortname_winnt}, {@fat=@showexec}, {@fat=@dmask={'dmask', 0x3d, 0x100}}, {@fat=@fmask={'fmask', 0x3d, 0x8}}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x554}}, {@shortname_winnt}]}, 0x0, 0x280, &(0x7f0000000800)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) 4m54.976085468s ago: executing program 9 (id=2093): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x183000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000005cc0)={0x0, "f3a12c2752b192e9c35b970ba2b4d6a3"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m54.040334947s ago: executing program 9 (id=2098): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/20, 0x14}, {&(0x7f0000000340)=""/180, 0xb4}], 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 4m52.87627661s ago: executing program 37 (id=2098): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/20, 0x14}, {&(0x7f0000000340)=""/180, 0xb4}], 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 4m7.19814153s ago: executing program 6 (id=2283): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000080)=0x4, 0x4) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000200)='./file0\x00', 0xa00010, &(0x7f0000000840)=ANY=[@ANYBLOB='nodecompose,decompose,nobarrier,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6c733d69736f383835392d310000000072726965722c00bcd0f0b5c4e2957974ff5d7ea3c3dcee087e4983684e8a4c4e4e87b134e30ce77162b12885b964b3506ff3eae0f3599447b17861d19be78079e5dd7bdc7f1eb36e31ac14de48349767164f5f6431bbdeaef96a4f2bce64b5cfa76ce3a2c4302374bc5535d7e2eb8dfb2e5d58a37b7e37836597c21f51bcdf6df4cad825cfd9ef5ee9e89e04b15cd3cea9e152d67b9a7eedc5dfe6d85a3ce7c342da8cc969b552197cb8bcc4a1009f38f4a85b7c742101ba5bc03115feca2b994c699812"], 0x6, 0x635, &(0x7f0000000c80)="$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") listxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m6.068861171s ago: executing program 6 (id=2287): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$unix(0x1, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x8, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0xffeb, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 4m5.536131532s ago: executing program 6 (id=2291): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1ff, 0x4, 0xeeef1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0xeeee8000, 0x2000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m4.303690416s ago: executing program 6 (id=2296): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x2048c5, &(0x7f0000000340)={[{@utf8no}, {@shortname_winnt}, {@rodir}, {@fat=@nfs_nostale_ro}, {@uni_xlateno}, {@uni_xlate}, {@fat=@showexec}, {@fat=@dmask={'dmask', 0x3d, 0x100}}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@fat=@showexec}, {@numtail}]}, 0x0, 0x29f, &(0x7f0000000580)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x120d8c1, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 4m3.990276742s ago: executing program 6 (id=2300): syz_open_dev$sndpcmp(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x38, r0, 0x1, 0x0, 0x0, {0x35}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73}}}]}, 0x38}}, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x40) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x8080583a, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x10000, @local, 0x3}, 0x1c) ftruncate(0xffffffffffffffff, 0xf09) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000000)={@in, 0x0, 0x0, 0x0, 0x0, "d3d87bc1779df0260137ffea3b267abe0be604d99164ceede9ce200eb018abebbf99a8ae25b276a23593abc5bfbcd104244b1bcd3f8dcc8bb1afb8237f33ee41a904e61d65a7bacfec9dc935544d3f64"}, 0xd8) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(r5, 0xffffffffffffffff, 0x0) 4m2.264439766s ago: executing program 6 (id=2306): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x20000004, 0x7f, 0x4233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0x2000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m1.222091806s ago: executing program 38 (id=2306): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x20000004, 0x7f, 0x4233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0x2000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m5.780948556s ago: executing program 1 (id=2457): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) pipe(&(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) fanotify_init(0x200, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xe, 0x3, 0x5, 0x0, 0xd79, 0x9, 0x6, 0x7}, &(0x7f0000000100)={0xd7c, 0xf, 0x7fff, 0x2, 0x4, 0x1, 0x1000, 0x1ff}, 0x0, 0x0, 0x0) 3m2.576940239s ago: executing program 1 (id=2466): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) openat$mice(0xffffffffffffff9c, 0x0, 0x0) 3m1.521457979s ago: executing program 1 (id=2468): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000045c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f00000046c0)={0x0, 0x0, &(0x7f0000004680)={&(0x7f0000004600)={0x3c, r4, 0x40d, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4800) 3m0.302780703s ago: executing program 5 (id=2469): unshare(0x42000000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @local}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(r2) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x2a) 3m0.240955434s ago: executing program 1 (id=2470): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") 2m59.759844093s ago: executing program 1 (id=2475): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@delchain={0x2c, 0x64, 0x425, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x18000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004900) 2m58.522490218s ago: executing program 1 (id=2478): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) r1 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet6_int(r1, 0x29, 0x11, &(0x7f0000000080)=0x4, 0x4) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000200)='./file0\x00', 0xa00010, &(0x7f0000000840)=ANY=[@ANYBLOB='nodecompose,decompose,nobarrier,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6c733d69736f383835392d310000000072726965722c00bcd0f0b5c4e2957974ff5d7ea3c3dcee087e4983684e8a4c4e4e87b134e30ce77162b12885b964b3506ff3eae0f3599447b17861d19be78079e5dd7bdc7f1eb36e31ac14de48349767164f5f6431bbdeaef96a4f2bce64b5cfa76ce3a2c4302374bc5535d7e2eb8dfb2e5d58a37b7e37836597c21f51bcdf6df4cad825cfd9ef5ee9e89e04b15cd3cea9e152d67b9a7eedc5dfe6d85a3ce7c342da8cc969b552197cb8bcc4a1009f38f4a85b7c742101ba5bc03115feca2b994c699812"], 0x6, 0x635, &(0x7f0000000c80)="$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") listxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000001d00000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m58.051889197s ago: executing program 39 (id=2478): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) r1 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet6_int(r1, 0x29, 0x11, &(0x7f0000000080)=0x4, 0x4) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000200)='./file0\x00', 0xa00010, &(0x7f0000000840)=ANY=[@ANYBLOB='nodecompose,decompose,nobarrier,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6c733d69736f383835392d310000000072726965722c00bcd0f0b5c4e2957974ff5d7ea3c3dcee087e4983684e8a4c4e4e87b134e30ce77162b12885b964b3506ff3eae0f3599447b17861d19be78079e5dd7bdc7f1eb36e31ac14de48349767164f5f6431bbdeaef96a4f2bce64b5cfa76ce3a2c4302374bc5535d7e2eb8dfb2e5d58a37b7e37836597c21f51bcdf6df4cad825cfd9ef5ee9e89e04b15cd3cea9e152d67b9a7eedc5dfe6d85a3ce7c342da8cc969b552197cb8bcc4a1009f38f4a85b7c742101ba5bc03115feca2b994c699812"], 0x6, 0x635, &(0x7f0000000c80)="$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") listxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000001d00000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m46.413895794s ago: executing program 5 (id=2496): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendto$inet6(r0, &(0x7f0000000040)="cb", 0x1, 0x24004090, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) msgget$private(0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 2m45.934415143s ago: executing program 3 (id=2499): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) 2m44.902322974s ago: executing program 5 (id=2502): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 2m42.529390009s ago: executing program 5 (id=2503): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) unshare(0x22020400) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") openat$kvm(0xffffffffffffff9c, 0x0, 0x161642, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) 2m42.240656075s ago: executing program 3 (id=2507): r0 = socket$tipc(0x1e, 0x5, 0x0) listen(r0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000"], 0x48) close(0x3) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x6071, 0x0, 0xe7, {[@generic={0x8, 0xa, "09df168a00000000"}]}}}}}}}, 0x0) 2m41.203015385s ago: executing program 3 (id=2510): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) r1 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet6_int(r1, 0x29, 0x11, &(0x7f0000000080)=0x4, 0x4) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000200)='./file0\x00', 0xa00010, &(0x7f0000000840)=ANY=[@ANYBLOB='nodecompose,decompose,nobarrier,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6c733d69736f383835392d310000000072726965722c00bcd0f0b5c4e2957974ff5d7ea3c3dcee087e4983684e8a4c4e4e87b134e30ce77162b12885b964b3506ff3eae0f3599447b17861d19be78079e5dd7bdc7f1eb36e31ac14de48349767164f5f6431bbdeaef96a4f2bce64b5cfa76ce3a2c4302374bc5535d7e2eb8dfb2e5d58a37b7e37836597c21f51bcdf6df4cad825cfd9ef5ee9e89e04b15cd3cea9e152d67b9a7eedc5dfe6d85a3ce7c342da8cc969b552197cb8bcc4a1009f38f4a85b7c742101ba5bc03115feca2b994c699812"], 0x6, 0x635, &(0x7f0000000c80)="$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") listxattr(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m41.162177326s ago: executing program 5 (id=2512): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) userfaultfd(0x801) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000004, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0xffffffffffffffff, 0x9, 0x1000000000003, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m39.648553145s ago: executing program 3 (id=2513): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = fsopen(&(0x7f0000000440)='nfsd\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m37.976687948s ago: executing program 3 (id=2516): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) 2m34.3088825s ago: executing program 3 (id=2519): unshare(0x42000000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @local}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(r2) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x2a) 2m34.29952253s ago: executing program 5 (id=2521): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x200}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x9af33139c2c4eaae}, 0x20) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x1, 0xa, 0xb, '\x00', 0x7}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m33.912991617s ago: executing program 40 (id=2521): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x200}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x9af33139c2c4eaae}, 0x20) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x1, 0xa, 0xb, '\x00', 0x7}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m18.85743115s ago: executing program 41 (id=2519): unshare(0x42000000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @local}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(r2) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x2a) 23.080701921s ago: executing program 0 (id=2712): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) socket$rxrpc(0x21, 0x2, 0xa) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) gettid() r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) write$P9_RGETLOCK(r3, 0x0, 0xffffff6a) 19.246261826s ago: executing program 7 (id=2719): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getuid() setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000580)=0x3, 0x4) sendmsg$nl_generic(r2, 0x0, 0x801) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="2300000001", 0x5) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000010c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@loopback}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) 17.603192098s ago: executing program 7 (id=2721): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_procfs(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(r0, 0x0, 0x0, 0x6) socket$pppoe(0x18, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, 0x0, 0x0) sendto$netrom(r4, 0x0, 0x4, 0x0, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r5 = syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x113a, 0x2, 0x2}, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_enter(r5, 0x0, 0xe38e, 0x5, 0x0, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r6, &(0x7f0000000040)=@target={'target ', {'PCI:', '0', ':', '7', ':', '2', '.', '0'}}, 0x13) 17.45223789s ago: executing program 0 (id=2724): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x801, 0x84) socket$inet(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r3, 0x107, 0x5, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000005c00), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000540)) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 16.400843661s ago: executing program 7 (id=2725): r0 = syz_open_dev$cec(&(0x7f0000000300), 0x0, 0x40000) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00'}, 0x10) r2 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x0, 0x3, 0xf0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'}) io_uring_register$IORING_REGISTER_FILES(r2, 0x20, &(0x7f0000000000)=[r2], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"fbffffff", 0x0, 0x5, 0x4, 0x10, 0x0, "000000ff00070000000900", '\x00', "dc76c8fc", "e86eade4", ["a50000eb5830fff96d8e763a", "00000012184eb81f43d83ba1", "0c000004dd372a9000"]}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x25) 14.350257841s ago: executing program 8 (id=2727): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$TCSETS(0xffffffffffffffff, 0x5433, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000004c0)={'veth0_macvtap\x00'}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x9, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0x40d, 0xffffffffffffffff, 0x102, 0x101, 0x804, 0x4, 0xc000, 0xfffffffc, r7, 0x0, 0x7, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000004300)={0x50, 0x0, r6, {0x7, 0x26, 0x8, 0xffffffffb3abdb0c, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r5, &(0x7f000000a400)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa0, 0x0, 0x16, {{0x3, 0x0, 0x4, 0x9, 0xfffffffc, 0x6, {0x0, 0xa8, 0x6, 0x100000008, 0x3, 0x1, 0x1ff, 0xffffff61, 0x0, 0x8000, 0x0, r7, 0xee01, 0xfffffff9, 0x4}}, {0x0, 0x10}}}, 0x0, 0x0}) 14.349439031s ago: executing program 0 (id=2728): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000000a00)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x1}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x47a, &(0x7f0000000ac0)="$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") socket(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x2, 0x3, 0xff) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(0xffffffffffffffff, 0x3) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r3, 0x6, 0xb, 0x0, &(0x7f0000001000)) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x1, 0x2, 0x48000018, 0x1c, 0x10000079, &(0x7f00000004c0)}) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1301", @ANYBLOB], 0x16) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) 14.190521174s ago: executing program 2 (id=2730): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x8b40, 0x0) 14.043992246s ago: executing program 2 (id=2731): r0 = openat(0xffffffffffffff9c, 0x0, 0x60840, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = memfd_secret(0x0) fcntl$setlease(r5, 0x400, 0x0) fremovexattr(r5, &(0x7f00000000c0)=@known='system.posix_acl_access\x00') munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='uni_xlate=1,iocharset=iso8859-5,shortname=winnt,nonumtail=0,uni_xlate=1,utf8=0,iocharset=maccroatian,iocharset=macgaelic,allow_utime=00000000000000000000527,nfs,nonumtail=0,iocharset=cp865,uid=', @ANYRESHEX=0xee00, @ANYRESDEC], 0x1, 0x238, &(0x7f0000000500)="$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") 12.067001395s ago: executing program 0 (id=2733): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x2010) syz_usb_connect$hid(0x6, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x0, 0x5, &(0x7f0000000580)={0x5, 0xf, 0x5}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x24000154}, 0x20000050) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004340)=""/102376, 0x18fe8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, r4, 0x701, 0x0, 0x0, {0x2e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[], 0x58}}, 0x4000) 11.948425418s ago: executing program 2 (id=2734): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) dup(0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x401, 0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44081) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = fcntl$dupfd(r0, 0x0, r6) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDSIGACCEPT(r7, 0x400455c8, 0x9) 11.708925322s ago: executing program 8 (id=2735): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_clone3(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) mknod$loop(0x0, 0x2, 0x1) gettid() sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r3) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x14, r4, 0x50be6fea6f3bdfbb, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000380)={[{@acl}, {@heartbeat_none}, {@err_ro}, {@intr}, {@coherency_full}, {@localflocks}, {@intr}, {@noacl}]}, 0x1, 0x4450, &(0x7f000000cd80)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000) 10.26473106s ago: executing program 4 (id=2736): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x814818, &(0x7f0000000100)={[{@quota}, {@bsdgroups}, {@nobh}, {@nodelalloc}, {@abort}]}, 0x4, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$RTC_AIE_ON(r1, 0x7001) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000240)={0x1, 0x1, {0xa, 0x2e, 0x4, 0x4, 0x7, 0xfe3, 0x0, 0x151, 0xffffffffffffffff}}) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f2, 0x803, 0x70bd29, 0x25dfdbfd, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4841}, 0x4008800) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000)=0x3, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r6, 0x40806685, &(0x7f0000000240)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_READ_VERITY_METADATA(r6, 0xc0286687, 0x0) 9.961480586s ago: executing program 7 (id=2737): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$fuse(0x0, 0x0, 0x0, 0x2018081, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) landlock_restrict_self(r4, 0x0) 8.405388826s ago: executing program 8 (id=2738): socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000000c0)=0x3f9, 0x4) recvmmsg(r3, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 8.404420016s ago: executing program 2 (id=2739): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1}}], 0x1, 0x20004810) close(0x3) 8.403497606s ago: executing program 4 (id=2740): r0 = creat(&(0x7f0000000540)='./file0\x00', 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') semop(0x0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(0x0, &(0x7f0000000300)=[{0x1, 0xbbdd, 0x1000}], 0x1) openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x7d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000200)=0x8001100) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x6]) close(r0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 7.276347238s ago: executing program 7 (id=2741): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x8b40, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) r2 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r2, 0xffff) close(0x3) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000001c0)={r2, 0x1, 0x0, 0x8000}) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x180000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) unlink(0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) 7.240142549s ago: executing program 4 (id=2742): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0xb, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) listen(r2, 0x5) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)=@in={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000200)="b13f300bb3faee71e2be302b87", 0xd}, {&(0x7f0000000240)="720d97638bd2b733ba1d1897a646700b7bc929c679e97ad8cbebd9a3ff15a4bcbcd26fa8fff0dfb6879a9e537b57d0f8affe97db7a56948f6f9d9a8b933f87c6fe1705a70d2d1fa633307712f5da0b216441cef42d97e43eb6d3abc628016a75b1f40679a24eabfa9245f55e539ed59232ec60ea4b0b4686c2d990d44c1c6686e262b350e4cc3f4444a991ac950884270d7b53a5d22baeb2a347a4fab80485c5183655e4bae1331beaa86df57edfdb2c484460cac1428f557f07cf4f41d3f5d80e155e2ece90799ecbb19643882e", 0xce}, {&(0x7f0000000340)="58147e9ed570f702c17f225e62d674e17ad8ba1894871f958f91605b47e958c75cea96b12aa2894b2fabc03c4998c84a", 0x30}, {&(0x7f0000000380)="bb26b5552b59dfb8efad36d50b8b3968d34048b7b8a734c5bf00d33906b9eab868b714a56b7307000000c4deca984d509f1295962ed95041286748f56ec412c0b0d74d5711149239cea37ff2f6251216da990116274d9a0b58ad7ffea7f64382574d18db3e94143b7062ec92370ddff165a3ecddd73b0ff341d12efb6e136a6f419414a740ad05d47a2dbc1d2520173d83eb9c36be85eaea49b868f2b2a878ebb8656901545807d5498ba2482dd139562bf39363ddde6b6645c0976f99a1bd57804cf9c8c5cf1e39f6cf2d694d894f", 0xcf}], 0x4, &(0x7f0000000540)=[@dstaddrv4={0x18, 0x84, 0x7, @empty}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @authinfo={0x18, 0x84, 0x6, {0x8}}], 0x50, 0x41}, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r4) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x80000006) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x2, 0x3, 0x4c, 0x64, 0x0, 0x1, 0x6, 0x0, @remote, @remote, {[@timestamp_addr={0x44, 0x24, 0x17, 0x1, 0x2, [{@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x9}, {@broadcast, 0x40}, {@remote, 0x8002}]}]}}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x6079, 0x0, 0x5}}}}}}, 0x0) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1cb) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x0) userfaultfd(0x1) 6.731880789s ago: executing program 8 (id=2743): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e85"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) open_tree(0xffffffffffffff9c, 0x0, 0x81000) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f0000000000)) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0) recvmmsg(r6, &(0x7f0000007700), 0x318, 0xfc0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 6.554036432s ago: executing program 0 (id=2744): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1c, &(0x7f0000000080)={[{@nombcache}, {@dioread_lock}, {@nodiscard}, {@nomblk_io_submit}, {@noblock_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x44f, &(0x7f00000010c0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f00000001c0)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0xf0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000280)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@dax_always}], [{@obj_user={'obj_user', 0x3d, '/]-/})/'}}, {@seclabel}, {@measure}, {@pcr={'pcr', 0x3d, 0x32}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}]}, 0x1, 0x512, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4H8ggoJPPvki+AcIwzz4B8jAgL6ID6KiiM7og6DOlSQ3TidN2rrTNp3m84HTnHPvzf2ec0NO7o/TewMYWy9FxFsRMRERr0ZEMZ+e5in2uqm93IP77y21UxJZ9s5fk0jyab11tdcxGRFX87dNRcTXvhzxzeRg3ObO7vpirVbdysuVVn2z0tzZvb5WX1ytrlY35ufn3lh4c+H1hdks90TtLPUyP/nS529/+lu/u/Hna99uV+tzH4lC9LXjJHWbXuhsi572Nto6jWAj0PvMC6OuCAAAx9Lex/9gRHyis/9fjInO3lyfiVHUDAAAADgp2Rem499JRAYAAABcWGlETEeSlvOxANORppfycwMfjitprdFsfWqlsb2x3J4XUYpCurJWq87mY4VLUUja5bl8jG2v/FpfeT4inouI7xcvd8rlpUZtecTnPgAAAGBcXO07/v9HMe3kjzbg/wQAAACA86s0tAAAAABcFA75AQAA4OLrP/6/PaJ6AAAAAKfiK2+/3U5Z7/nXy+/ubK833r2+XG2ul+vbS+WlxtZmebXRWO3cs69+1PpqjcbmZ2Jj+2alVW22Ks2d3Rv1xvZG68baY4/ABgAAAM7Qcx+/8+skIvY+e7mTIr8PIMBj/jDqCgAnaWLUFQBGxl28YXwVRl0BYOSSI+YbvAMAAE+/mY8evP7fe/6/cwNwsRnrAwDjx/V/GF8FIwBhrKUR8YFu9plhywy9/v/L40bJsoi7xf1TnF8EAICzNd1JSVrOjwOmI03L5YhnI9JSFJKVtVp1Nj8++FWx8Ey7PNd5Z3LkmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCvLksgAAACACy0i/VPSuZt/xEzxlen+8wOXkn8W44954Ufv/ODmYqu1Ndee/rfOs7wuRUTrh/n014Y+PgwAAAA4acne0Fnd4/T8de5MawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGHhw/72lXjrLuH/5YkSUBsWfjKnO61QUIuLK35OY3Pe+JCImTiD+3q2IeH5Q/CQeZllWymvRHz+NiMunHL/U2TTD4189gfgwzu60+5+3Bn3/0nip8zr4+zeZpyc1vP9L88jPd/q5Qf3fswfWVh8Y44V7P6sMjX8r4oXJwf1Pr/9NhsR/+cDa/pVl2cEY3/j67u6w+NmPI2YG/v4kj8WqtOqblebO7vW1+uJqdbW6MT8/98bCmwuvL8xWVtZq1fzvwBjf+9jPHx7W/isD4v/2N93+97D2vzJspX3+c+/m/Q91s4VB8a+9PPD3dyqGxE/z375P5vn2/Jlefq+b3+/Fn9598bD2Lw/Z/kd9/teO2f5Xv/rd3x9zUQDgDDR3dtcXa7Xq1iGZqWMs8zRmfjF1Lqrxf2ay73Q/ufNSn/ebae+tPprSa9U5qNi+THZmsSbinDT5f5mRdksAAMApeLTTP+qaAAAAAAAAAAAAAAAAAAAAwPg6i9uJ9cfcG01TAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO9d8AAAD//yLg4A8=") sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @private=0xa010100}}, 0x80, 0x0}, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x128d80) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r3, 0x40045402, &(0x7f0000000100)) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @none, 0x7ff}, 0xe) shutdown(r4, 0x1) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') setreuid(0xffffffffffffffff, 0xee00) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='io_uring_register\x00', r5}, 0x10) 6.553082892s ago: executing program 2 (id=2745): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x9a7}], 0x1}}], 0x1, 0x40) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 5.461754393s ago: executing program 7 (id=2746): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x20, 0x3, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x20}}, 0x0) syz_usb_connect(0x3, 0x1c, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x2a, 0x0, 0x190) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r4) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x8, &(0x7f00000001c0)={&(0x7f0000000380)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0x7, 0x2}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x98) 4.396875844s ago: executing program 8 (id=2747): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r5, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) r6 = syz_io_uring_setup(0x10d, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x2, 0x80}, &(0x7f00000002c0)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000400)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000380)=[r1], 0x1, 0x0, 0x1}) acct(0x0) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000018c0)=ANY=[@ANYBLOB="f0000000f4d58430", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xf0}}, 0x800) 4.296461986s ago: executing program 4 (id=2748): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000700)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) shmget(0x0, 0x2000, 0x64, &(0x7f0000ffc000/0x2000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000006140)={0x2020}, 0x2020) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x7, [@union={0x2, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x4, 0x3, 0x2}]}, @typedef={0x8, 0x0, 0x0, 0x8, 0x3}, @datasec={0x6, 0x0, 0x0, 0xf, 0x1, [], "d4"}, @datasec={0x4, 0x0, 0x0, 0xf, 0x3, [], "451ad6"}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x63, 0x0, 0x7b, 0x1}]}, {0x0, [0x5f, 0x5f, 0x4f, 0x5f, 0x0]}}, &(0x7f0000000780)=""/171, 0x6f, 0xab, 0x1, 0x4}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x10, 0x4, 0x2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r5, &(0x7f0000000780), 0x0}, 0x20) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x9, 0x10, 0x200, &(0x7f0000000180)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309000000000000000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413fcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949e496f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff4175b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a2b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6d07002ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7963e43b7f9c03bebfb889c02f484f63520cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) 2.956022633s ago: executing program 8 (id=2749): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x80000c, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRES16, @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030302c6465636f6d706f73652c666f7263652c6e6f6465636f6d706f73652c626172726965722c6e6f6465636f6d706f73652c747970653db029e1c02c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c747970653dd2100d1b2c7529643dd4f81c66210bbcbf82440a104ab956f2ba5e36e41ccb1b040fa8b829b0b87078de654c66ac22aebaa2c653ef127e38e0aa2229f9cf6a8503", @ANYRESDEC, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0x0, @ANYRES8=0x0], 0x2, 0x6ee, &(0x7f0000032440)="$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") syz_open_dev$vbi(0x0, 0x3, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xffffffffffdffffd, 0x0, 0x0, 0x4, 0x9}, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0xc17a) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) 1.936978012s ago: executing program 4 (id=2750): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4}, 0x50) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000280)=""/71, 0x47}], 0x1, 0x191, 0x0) read$FUSE(r0, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setregid(r6, r6) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r7) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) fchdir(0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x80) 1.056910319s ago: executing program 0 (id=2751): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x48) bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0x3, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) mount$binderfs(0x0, &(0x7f0000000700)='./binderfs\x00', 0x0, 0x20, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setrlimit(0x6, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x801, 0x1ffa, 0x8c, 0x10, 0x1, 0xcb02, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x180}, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000080)) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r3, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 7.06088ms ago: executing program 4 (id=2752): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000340)="0a000300010000", 0x7) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000000)=0xd, 0x4) recvmmsg(r2, &(0x7f0000000a40), 0x0, 0x10040, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x4e23, 0x100000, @rand_addr=' \x01\x00'}}}, 0x88) rt_tgsigqueueinfo(0x0, 0x0, 0x10, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) 0s ago: executing program 2 (id=2762): socket$inet6(0xa, 0x3, 0x3c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$TCSETSF(r0, 0x5404, 0xfffffffffffffffe) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)=0x8001) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x2a4400, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) r3 = getpid() syz_pidfd_open(r3, 0x0) ptrace$setregset(0x4205, r3, 0x3, &(0x7f0000000000)={0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x1, 0x70bd2c}, 0x14}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) pselect6(0x40, &(0x7f0000000080)={0x5, 0x0, 0x120000000000, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ange from 0 to 1024 [ 903.112740][T13427] EXT4-fs error (device loop9): ext4_map_blocks:635: inode #15: block 3: comm syz.9.2068: lblock 3 mapped to illegal pblock 3 (length 1) [ 903.326164][T11445] usb 6-1: USB disconnect, device number 12 [ 904.242114][T10674] EXT4-fs (loop9): unmounting filesystem. [ 904.879970][T13487] bridge0: port 3(ip6gretap0) entered blocking state [ 904.962326][T13487] bridge0: port 3(ip6gretap0) entered disabled state [ 905.020144][T13487] device ip6gretap0 entered promiscuous mode [ 905.053079][T13487] bridge0: port 3(ip6gretap0) entered blocking state [ 905.062212][T13487] bridge0: port 3(ip6gretap0) entered forwarding state [ 905.104705][T13495] loop8: detected capacity change from 0 to 1024 [ 905.188279][ T26] audit: type=1800 audit(1757021018.709:164): pid=13495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2084" name="file2" dev="loop8" ino=21 res=0 errno=0 [ 905.232313][T13496] loop5: detected capacity change from 0 to 4096 [ 905.262707][T13496] EXT4-fs: inline encryption not supported [ 905.282094][T13496] EXT4-fs: Ignoring removed mblk_io_submit option [ 905.288972][T13496] EXT4-fs: Invalid commit interval 1576533860, must be smaller than 21474836 [ 905.556182][T13504] loop9: detected capacity change from 0 to 128 [ 905.625285][T13508] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2089'. [ 906.788088][T13529] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 907.047580][ T9593] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.560867][ T9593] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.835563][ T9593] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.019848][ T6766] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 908.046251][ T6766] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 908.060996][ T9593] bond0: (slave netdevsim0): Releasing backup interface [ 908.066975][ T6766] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 908.090343][ T6766] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 908.111075][ T9593] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.116938][ T6766] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 908.151914][ T6766] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 908.184566][ T6766] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 908.211509][ T6766] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 908.238726][ T6766] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 908.263488][ T6766] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 908.298951][ T6766] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 908.327295][ T6766] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 908.349684][ T6766] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 908.373147][ T6766] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 908.398056][ T6766] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 908.429624][ T6766] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 908.486085][ T6766] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 908.512949][ T6766] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 908.541411][ T6766] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 908.576065][ T6766] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 908.595024][ T6766] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 908.617781][ T9593] bridge0: port 3(ip6gretap0) entered disabled state [ 908.623477][ T6766] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 908.656613][ T6766] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 908.680465][ T6766] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 908.709068][ T6766] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 908.727969][ T6766] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 908.741544][ T4283] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 908.764886][ T4283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 908.776231][ T4283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 908.777726][ T9593] device ip6gretap0 left promiscuous mode [ 908.795631][ T6766] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 908.804772][ T6766] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 908.804962][ T4283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 908.820410][ T6766] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 908.828639][ T4283] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 908.836112][ T4283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 908.842575][ T9593] bridge0: port 3(ip6gretap0) entered disabled state [ 908.843323][ T6766] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 908.875300][ T6766] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 908.892236][ T6766] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 908.900054][ T6766] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 908.912688][ T6766] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 908.920966][ T6766] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 908.929032][ T6766] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 908.937214][ T6766] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 908.972240][ T6766] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 908.980076][ T6766] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 909.024804][ T6766] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 909.062273][ T6766] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 909.078576][ T6766] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 909.102215][ T6766] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 909.118076][T13565] lo speed is unknown, defaulting to 1000 [ 909.142527][ T6766] hid-generic 0000:007F:FFFFFFFE.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 909.556948][T13561] loop6: detected capacity change from 0 to 32768 [ 909.642919][T13577] fido_id[13577]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 909.666362][T13561] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 909.832515][T11446] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 909.897780][ T5577] ocfs2: Unmounting device (7,6) on (node local) [ 910.031556][T11446] usb 9-1: Using ep0 maxpacket: 32 [ 910.040910][T11446] usb 9-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 910.080814][T11446] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.121491][T11446] usb 9-1: Product: syz [ 910.156349][T11446] usb 9-1: Manufacturer: syz [ 910.161025][T11446] usb 9-1: SerialNumber: syz [ 910.180782][T11446] usb 9-1: config 0 descriptor?? [ 910.201205][T11446] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 910.395615][T13594] loop5: detected capacity change from 0 to 1024 [ 910.495977][T13565] chnl_net:caif_netlink_parms(): no params data found [ 910.546029][T13594] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 910.564556][T13594] ext4 filesystem being mounted at /365/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 910.737096][T13603] overlayfs: failed to clone upperpath [ 910.912394][ T4283] Bluetooth: hci3: command 0x0409 tx timeout [ 911.057637][ T4815] EXT4-fs (loop5): unmounting filesystem. [ 911.183692][ T14] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 911.305305][T13565] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.319165][T13565] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.338513][T13565] device bridge_slave_0 entered promiscuous mode [ 911.397129][ T14] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 911.422799][ T14] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.440169][ T14] usb 7-1: config 0 descriptor?? [ 911.461092][T13565] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.469957][ T14] cp210x 7-1:0.0: cp210x converter detected [ 911.472544][T13565] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.504082][T13565] device bridge_slave_1 entered promiscuous mode [ 911.538123][ T9593] device hsr_slave_0 left promiscuous mode [ 911.562635][ T9593] device hsr_slave_1 left promiscuous mode [ 911.576308][ T9593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 911.592299][ T9593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 911.609971][ T9593] device bridge_slave_1 left promiscuous mode [ 911.627116][ T9593] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.664083][ T9593] device bridge_slave_0 left promiscuous mode [ 911.672924][ T9593] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.751011][ T26] audit: type=1326 audit(1757021025.269:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13624 comm="syz.5.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6c58ebe9 code=0x7ffc0000 [ 911.840221][ T26] audit: type=1326 audit(1757021025.269:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13624 comm="syz.5.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0a6c58ebe9 code=0x7ffc0000 [ 911.845562][T11446] gspca_ov534_9: reg_r err -71 [ 911.872775][ T14] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 911.906699][ T9593] device veth1_macvtap left promiscuous mode [ 911.919492][ T9593] device veth0_macvtap left promiscuous mode [ 911.930429][ T9593] device veth1_vlan left promiscuous mode [ 911.942533][ T9593] device veth0_vlan left promiscuous mode [ 911.949399][ T14] usb 7-1: cp210x converter now attached to ttyUSB0 [ 911.967019][ T26] audit: type=1326 audit(1757021025.269:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13624 comm="syz.5.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6c58ebe9 code=0x7ffc0000 [ 912.073608][ T26] audit: type=1326 audit(1757021025.269:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13624 comm="syz.5.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f0a6c58ebe9 code=0x7ffc0000 [ 912.109618][ T14] usb 7-1: USB disconnect, device number 14 [ 912.149733][ T14] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 912.152297][ T26] audit: type=1326 audit(1757021025.269:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13624 comm="syz.5.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6c58ebe9 code=0x7ffc0000 [ 912.252314][T11446] gspca_ov534_9: Unknown sensor 0000 [ 912.252394][T11446] ov534_9: probe of 9-1:0.0 failed with error -22 [ 912.268230][ T26] audit: type=1326 audit(1757021025.269:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13624 comm="syz.5.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f0a6c58ebe9 code=0x7ffc0000 [ 912.278672][ T14] cp210x 7-1:0.0: device disconnected [ 912.314870][T11446] usb 9-1: USB disconnect, device number 3 [ 912.365292][ T26] audit: type=1326 audit(1757021025.269:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13624 comm="syz.5.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6c58ebe9 code=0x7ffc0000 [ 912.467095][ T26] audit: type=1326 audit(1757021025.269:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13624 comm="syz.5.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f0a6c58ebe9 code=0x7ffc0000 [ 912.582350][ T26] audit: type=1326 audit(1757021025.269:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13624 comm="syz.5.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6c58ebe9 code=0x7ffc0000 [ 912.992752][ T4283] Bluetooth: hci3: command 0x041b tx timeout [ 913.899985][ T9593] team0 (unregistering): Port device team_slave_1 removed [ 914.014173][ T9593] team0 (unregistering): Port device team_slave_0 removed [ 914.137569][ T9593] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 914.252404][ T9593] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 915.075833][ T4283] Bluetooth: hci3: command 0x040f tx timeout [ 915.100936][ T9593] bond0 (unregistering): Released all slaves [ 915.213477][T13565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 915.227124][T13565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 915.236646][T13657] netlink: 'syz.4.2123': attribute type 4 has an invalid length. [ 915.250384][T13660] netlink: 'syz.4.2123': attribute type 4 has an invalid length. [ 915.303829][T11446] lo speed is unknown, defaulting to 1000 [ 915.416499][T13565] team0: Port device team_slave_0 added [ 915.486412][T13565] team0: Port device team_slave_1 added [ 915.613779][T13565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 915.620789][T13565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 915.701964][T13565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 915.774361][T13565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 915.781524][T13565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 915.828933][T13565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 916.066621][T13565] device hsr_slave_0 entered promiscuous mode [ 916.099727][T13565] device hsr_slave_1 entered promiscuous mode [ 916.136847][T13565] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 916.166768][T13565] Cannot create hsr debugfs directory [ 916.179218][T13715] device veth0_vlan left promiscuous mode [ 916.187351][T13715] device veth0_vlan entered promiscuous mode [ 916.231430][ T7467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 916.263365][ T7467] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 916.292676][ T7467] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 917.152555][ T4283] Bluetooth: hci3: command 0x0419 tx timeout [ 917.952896][T13757] loop8: detected capacity change from 0 to 1024 [ 918.941374][T13759] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 918.976625][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 919.733725][T13793] netlink: 'syz.5.2154': attribute type 4 has an invalid length. [ 919.850326][T13797] netlink: 'syz.5.2154': attribute type 4 has an invalid length. [ 920.110505][T13802] loop8: detected capacity change from 0 to 1024 [ 920.634304][T13565] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 920.825148][T13565] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 920.926382][T13565] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 920.948591][T13565] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 921.519191][T13818] loop6: detected capacity change from 0 to 128 [ 921.588203][T13818] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 921.697332][T13818] ext4 filesystem being mounted at /387/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 921.757515][T13818] EXT4-fs (loop6): shut down requested (1) [ 921.763953][T13565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 921.777570][T13818] fscrypt (loop6, inode 12): Error -5 getting encryption context [ 921.806836][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 921.825516][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 921.871573][T13565] 8021q: adding VLAN 0 to HW filter on device team0 [ 921.913121][ T7467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 921.930573][ T7467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 921.960088][ T7467] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.967292][ T7467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 922.005013][T13827] netlink: 'syz.4.2164': attribute type 10 has an invalid length. [ 922.040886][ T5577] EXT4-fs (loop6): unmounting filesystem. [ 922.069488][T13833] loop8: detected capacity change from 0 to 128 [ 922.112496][T13827] team0: Port device dummy0 added [ 922.121527][T13833] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 922.142917][ T7467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 922.165227][ T7467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 922.198118][T13833] ext4 filesystem being mounted at /129/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 922.306162][ T7467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 922.376968][ T7467] bridge0: port 2(bridge_slave_1) entered blocking state [ 922.384238][ T7467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 922.430902][ T7467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 922.456026][T13831] netlink: 'syz.4.2164': attribute type 10 has an invalid length. [ 922.601299][T13841] loop6: detected capacity change from 0 to 1024 [ 923.098284][T13831] team0: Port device dummy0 removed [ 923.145373][T13831] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 923.161162][ T46] bond0: (slave dummy0): interface is now down [ 923.170361][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 923.213188][ T46] bond0: (slave dummy0): interface is now down [ 923.245753][ T4389] bond0: (slave dummy0): interface is now down [ 923.302514][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 923.385208][ T9567] bond0: (slave dummy0): interface is now down [ 923.749658][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 923.773278][ T9567] bond0: (slave dummy0): interface is now down [ 923.985240][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 923.987319][T10947] EXT4-fs (loop8): unmounting filesystem. [ 923.994890][ T9567] bond0: (slave dummy0): interface is now down [ 924.041650][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 924.070846][ T9567] bond0: (slave dummy0): interface is now down [ 924.085892][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 924.133711][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 924.143371][ T9567] bond0: (slave dummy0): interface is now down [ 924.159139][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 924.169874][ T5079] bond0: (slave dummy0): interface is now down [ 924.199764][T13565] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 924.214243][ T9567] bond0: (slave dummy0): interface is now down [ 924.232643][ T4438] bond0: (slave dummy0): interface is now down [ 924.256814][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 924.263766][ T4438] bond0: (slave dummy0): interface is now down [ 924.271672][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 924.328834][ T4761] bond0: (slave dummy0): interface is now down [ 924.421106][ T4761] bond0: now running without any active interface! [ 925.146513][T13861] loop5: detected capacity change from 0 to 1024 [ 925.222578][T13861] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 925.393483][T13861] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 925.708328][T13880] loop8: detected capacity change from 0 to 1024 [ 926.671848][ T9577] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 926.680764][ T9577] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 926.721473][T13565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 927.031822][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 927.190163][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 927.567248][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 927.617650][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 927.656613][T13565] device veth0_vlan entered promiscuous mode [ 927.682554][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 927.701015][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 927.712456][T13899] overlayfs: failed to clone upperpath [ 927.738745][T13565] device veth1_vlan entered promiscuous mode [ 927.845580][ T7467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 927.867921][ T7467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 927.881401][T13565] device veth0_macvtap entered promiscuous mode [ 927.899469][ T4815] EXT4-fs (loop5): unmounting filesystem. [ 927.930913][T13565] device veth1_macvtap entered promiscuous mode [ 928.008081][T13565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.038857][T13565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.049447][T13565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.062384][T13565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.076148][T13565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.090266][T13565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.107633][T13565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 928.120480][T13904] netlink: 'syz.4.2185': attribute type 4 has an invalid length. [ 928.166773][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 928.180578][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 928.204164][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 928.232561][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 928.244148][T13565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 928.255949][T13565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.270062][T13565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 928.280941][T13565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.292380][T13565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 928.303499][T13565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.323896][T13565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 928.331473][T13903] netlink: 'syz.4.2185': attribute type 4 has an invalid length. [ 928.351027][T11554] lo speed is unknown, defaulting to 1000 [ 928.366108][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 928.383040][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 928.414669][T13565] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.435855][T13565] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.447315][T13565] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.462796][T13565] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.473980][ T6766] lo speed is unknown, defaulting to 1000 [ 928.473998][T11443] lo speed is unknown, defaulting to 1000 [ 928.699961][ T4761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 928.874538][ T6764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 928.913819][ T6764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 928.930423][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 928.935886][ T4761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 929.021964][T13921] loop5: detected capacity change from 0 to 1024 [ 929.507990][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 929.988447][T13930] loop1: detected capacity change from 0 to 4096 [ 930.023359][T13930] EXT4-fs: inline encryption not supported [ 930.029377][T13930] EXT4-fs: Ignoring removed mblk_io_submit option [ 930.043867][T13930] EXT4-fs: Invalid commit interval 1576533860, must be smaller than 21474836 [ 930.525160][T13944] netlink: 'syz.4.2195': attribute type 10 has an invalid length. [ 930.580431][T13944] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.667765][T13944] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.675025][T13944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 930.777566][ T4438] bond0: (slave bridge0): interface is now down [ 930.785068][T13944] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 930.829532][ T4438] bond0: (slave bridge0): interface is now down [ 930.853225][ T7467] bond0: (slave bridge0): interface is now down [ 930.875529][ T7467] bond0: now running without any active interface! [ 930.999566][T13952] batadv0: mtu greater than device maximum [ 931.176731][T13931] loop6: detected capacity change from 0 to 32768 [ 931.320010][T13931] XFS (loop6): Mounting V5 Filesystem [ 931.446037][T13931] XFS (loop6): Ending clean mount [ 931.556101][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.578645][T13931] XFS (loop6): Quotacheck needed: Please wait. [ 931.596929][T13969] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 931.810483][T13931] XFS (loop6): Quotacheck: Done. [ 931.869146][T13969] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 931.997840][T13969] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 932.607249][T13969] device bridge_slave_0 left promiscuous mode [ 932.682690][T13969] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.696476][ T5577] XFS (loop6): Unmounting Filesystem [ 932.710969][T13969] device bridge_slave_1 left promiscuous mode [ 932.793373][T13969] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.978156][T13969] bond0: (slave bond_slave_0): Releasing backup interface [ 933.048566][T13969] bond0: (slave bond_slave_1): Releasing backup interface [ 933.381868][T13969] team0: Port device team_slave_0 removed [ 933.458513][T13969] team0: Port device team_slave_1 removed [ 933.486286][T13969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 933.510329][T13969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 933.546814][T13969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 933.567203][T13969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 933.579477][T13956] loop8: detected capacity change from 0 to 32768 [ 933.660562][T13956] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 933.717872][T13956] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 933.798545][T13956] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 933.807566][T13991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2206'. [ 933.831147][T11258] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 933.841823][T11258] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 933.884229][T13991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2206'. [ 933.894711][T13991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2206'. [ 933.904441][T13991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2206'. [ 933.943357][T13991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2206'. [ 933.955396][T13991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2206'. [ 933.974463][T13991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2206'. [ 933.988766][T13991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2206'. [ 934.006343][T13991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2206'. [ 934.019721][T13991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2206'. [ 934.121422][T11258] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 279ms [ 934.151931][T11258] gfs2: fsid=syz:syz.0: jid=0: Done [ 934.171724][T13956] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 934.194867][T13956] gfs2: fsid=syz:syz.0: can't start logd thread: -4 [ 934.333930][T13998] loop6: detected capacity change from 0 to 8192 [ 934.448576][T13998] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 934.543733][T13998] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 934.554248][T13998] REISERFS (device loop6): using ordered data mode [ 934.560812][T13998] reiserfs: using flush barriers [ 934.584698][T13998] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 934.613791][T13998] REISERFS (device loop6): checking transaction log (loop6) [ 934.651052][T13998] REISERFS (device loop6): Using r5 hash to sort names [ 934.685396][T13998] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 934.849075][T14010] loop5: detected capacity change from 0 to 4096 [ 935.039048][T14020] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 935.403456][T14023] loop8: detected capacity change from 0 to 1024 [ 938.381937][T14064] netlink: 'syz.4.2223': attribute type 21 has an invalid length. [ 938.411154][T14064] netlink: 'syz.4.2223': attribute type 4 has an invalid length. [ 938.431508][T14064] netlink: 'syz.4.2223': attribute type 3 has an invalid length. [ 938.567970][T14067] binder: 14066:14067 ioctl c0306201 200000000080 returned -14 [ 938.637028][T14069] netlink: 'syz.4.2225': attribute type 4 has an invalid length. [ 940.179545][T14094] netlink: 'syz.1.2232': attribute type 6 has an invalid length. [ 941.395144][T14119] __nla_validate_parse: 40 callbacks suppressed [ 941.395166][T14119] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2238'. [ 942.050105][T14122] loop8: detected capacity change from 0 to 1024 [ 942.709039][T14129] netlink: 168 bytes leftover after parsing attributes in process `syz.8.2241'. [ 943.479160][T14132] binder_alloc: 14131: binder_alloc_buf size 12280 failed, no address space [ 943.492073][ T4275] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 943.519612][T14132] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192) [ 944.743093][T14156] binder: 14155:14156 ioctl c0306201 200000000080 returned -14 [ 944.939468][T11443] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 944.996546][T11443] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 945.677012][ T26] audit: type=1326 audit(1757021059.199:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14185 comm="syz.4.2256" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f823cb8ebe9 code=0x0 [ 946.114041][T14193] loop5: detected capacity change from 0 to 1024 [ 948.227577][T14206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2260'. [ 948.759626][T14215] loop5: detected capacity change from 0 to 1024 [ 950.019172][T14228] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2264'. [ 954.091335][T14299] loop6: detected capacity change from 0 to 1024 [ 954.114654][ T4275] Bluetooth: hci0: command 0x0406 tx timeout [ 955.003067][T14308] device syz_tun entered promiscuous mode [ 955.020734][T14308] device vlan2 entered promiscuous mode [ 956.580905][T14346] loop6: detected capacity change from 0 to 128 [ 956.787841][T14351] fuse: Bad value for 'fd' [ 958.266173][T14361] loop8: detected capacity change from 0 to 32768 [ 958.281560][T14361] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 scanned by syz.8.2302 (14361) [ 958.321897][T14361] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 958.334163][T14361] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 958.343745][T14361] BTRFS info (device loop8): enabling auto defrag [ 958.351140][T14361] BTRFS info (device loop8): doing ref verification [ 958.361699][T14361] BTRFS warning (device loop8): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 958.372643][T14361] BTRFS info (device loop8): trying to use backup root at mount time [ 958.381545][T14361] BTRFS info (device loop8): max_inline at 4096 [ 958.388529][T14361] BTRFS info (device loop8): enabling ssd optimizations [ 958.397318][T14361] BTRFS info (device loop8): using spread ssd allocation scheme [ 958.405053][T14361] BTRFS info (device loop8): using free space tree [ 959.195635][ T4573] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.244938][ T4573] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 959.267983][T10947] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 959.930867][ T4573] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.965357][ T4573] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 960.451185][ T4573] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.552495][ T4573] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 961.260694][ T4573] bond0: (slave netdevsim0): Releasing backup interface [ 961.274854][ T4573] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.288623][ T4573] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 961.308723][ T4283] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 961.322515][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 961.331726][ T4283] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 961.344924][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 961.390920][ T4283] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 961.398452][ T4283] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 961.629713][T14423] lo speed is unknown, defaulting to 1000 [ 962.964760][T14446] ptrace attach of "./syz-executor exec"[4267] was attempted by " [ 963.472690][ T4275] Bluetooth: hci4: command 0x0409 tx timeout [ 963.663383][ T4573] tipc: Left network mode [ 963.845966][T14423] chnl_net:caif_netlink_parms(): no params data found [ 963.988903][T14462] loop5: detected capacity change from 0 to 1024 [ 965.192831][T14477] loop5: detected capacity change from 0 to 1024 [ 965.634853][ T4275] Bluetooth: hci4: command 0x041b tx timeout [ 967.183403][T14487] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2328'. [ 967.712535][ T4275] Bluetooth: hci4: command 0x040f tx timeout [ 967.846191][T14423] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.862604][T14423] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.883539][T14423] device bridge_slave_0 entered promiscuous mode [ 967.905642][T14423] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.930007][T14423] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.958651][T14423] device bridge_slave_1 entered promiscuous mode [ 968.162090][T14503] binder: 14502:14503 ioctl c0306201 200000000080 returned -14 [ 969.030520][T14517] input: syz1 as /devices/virtual/input/input11 [ 969.756829][T14423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 969.793099][ T4275] Bluetooth: hci4: command 0x0419 tx timeout [ 970.484995][T14423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 971.122913][T14423] team0: Port device team_slave_0 added [ 971.140130][T14423] team0: Port device team_slave_1 added [ 971.821497][T14557] loop5: detected capacity change from 0 to 1024 [ 972.972493][T14423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 972.979688][T14423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 973.091088][T14423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 973.173684][T14423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 973.206219][T14423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 973.301056][T14570] loop5: detected capacity change from 0 to 256 [ 973.330050][T14570] exfat: Deprecated parameter 'utf8' [ 973.337767][T14570] exfat: Deprecated parameter 'utf8' [ 973.344890][T14423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 973.346022][T14570] exfat: Deprecated parameter 'utf8' [ 973.459849][T14570] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 974.010921][T14423] device hsr_slave_0 entered promiscuous mode [ 974.101340][T14423] device hsr_slave_1 entered promiscuous mode [ 974.124854][T14423] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 974.172217][T14423] Cannot create hsr debugfs directory [ 975.404094][T14592] loop1: detected capacity change from 0 to 128 [ 975.589747][T14592] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 975.606030][T14592] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 975.739058][ T4573] device hsr_slave_0 left promiscuous mode [ 975.805816][ T4573] device hsr_slave_1 left promiscuous mode [ 975.830729][ T4573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 975.886802][ T4573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 975.912952][ T4573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 975.920404][ T4573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 976.082924][T13565] EXT4-fs (loop1): unmounting filesystem. [ 976.249004][ T4573] device veth1_macvtap left promiscuous mode [ 976.274951][ T4573] device veth0_macvtap left promiscuous mode [ 976.338486][ T4573] device veth1_vlan left promiscuous mode [ 976.492989][ T4573] device veth0_vlan left promiscuous mode [ 977.583950][T14612] loop5: detected capacity change from 0 to 4096 [ 977.607646][T14612] ntfs: (device loop5): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 977.682726][T14612] ntfs: volume version 3.1. [ 977.794711][T14612] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 977.929107][T14612] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 978.055731][T14612] ntfs: (device loop5): ntfs_cluster_alloc(): Failed to map page. [ 978.088891][ T4573] bond1 (unregistering): (slave vlan2): Releasing active interface [ 978.108035][T14612] ntfs: (device loop5): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 978.188875][T14612] ntfs: (device loop5): ntfs_truncate(): Cannot truncate inode 0x42, attribute type 0x80, because the conversion from resident to non-resident attribute failed with error code -5. [ 978.438724][ T4815] ntfs: (device loop5): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 979.223530][ T4573] bond1 (unregistering): Released all slaves [ 979.706583][T11551] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 979.968871][T11551] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 980.018118][T11551] usb 9-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xC2, skipping [ 980.066311][T11551] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 980.079210][T11551] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.090777][T11551] usb 9-1: Product: syz [ 980.095320][T11551] usb 9-1: Manufacturer: syz [ 980.100207][T11551] usb 9-1: SerialNumber: syz [ 980.157829][T11551] cdc_ncm 9-1:1.0: skipping garbage [ 980.380906][ T4573] team0 (unregistering): Port device team_slave_1 removed [ 980.467352][ T4573] team0 (unregistering): Port device team_slave_0 removed [ 980.555470][ T4573] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 980.579997][T14630] misc userio: Invalid payload size [ 980.632505][ T4573] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 980.932025][ T4573] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 981.226215][T11551] cdc_ncm 9-1:1.0: bind() failure [ 981.246154][T11551] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 981.253356][T11551] cdc_ncm 9-1:1.1: bind() failure [ 981.450822][T11446] usb 9-1: USB disconnect, device number 4 [ 981.554197][ T4573] bond0 (unregistering): Released all slaves [ 981.607505][T14611] lo speed is unknown, defaulting to 1000 [ 983.663743][T14632] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.672785][T14632] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.681800][T14632] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.690973][T14632] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.103220][T14658] binder: 14657:14658 unknown command 0 [ 984.108848][T14658] binder: 14657:14658 ioctl c0306201 200000000080 returned -22 [ 984.149166][T14659] loop1: detected capacity change from 0 to 1024 [ 984.240267][T14659] EXT4-fs error (device loop1): __ext4_fill_super:5404: inode #2: comm syz.1.2370: casefold flag without casefold feature [ 984.293705][T14664] loop8: detected capacity change from 0 to 4096 [ 984.318487][T14659] EXT4-fs (loop1): get root inode failed [ 984.324841][T14664] EXT4-fs (loop8): Test dummy encryption mode enabled [ 984.372402][T14659] EXT4-fs (loop1): mount failed [ 984.395102][T14664] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 984.404141][T14664] System zones: 0-5 [ 984.432763][T14664] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 984.555894][T14664] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 984.995473][T14672] netlink: 'syz.5.2374': attribute type 10 has an invalid length. [ 985.082720][T14672] team0: Port device dummy0 added [ 985.110797][T14674] netlink: 'syz.5.2374': attribute type 10 has an invalid length. [ 985.269934][T14664] fscrypt (loop8): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 985.282977][T14674] team0: Port device dummy0 removed [ 985.329292][T14674] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 985.418462][T14682] fscrypt (loop8): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 985.462939][T14683] fscrypt (loop8): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 985.854928][T10947] EXT4-fs (loop8): unmounting filesystem. [ 986.157271][T14703] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2376'. [ 986.804768][T14744] lo speed is unknown, defaulting to 1000 [ 987.116931][T14753] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2385'. [ 987.191128][T14762] input: syz0 as /devices/virtual/input/input12 [ 987.667143][T14776] Bluetooth: MGMT ver 1.22 [ 991.214450][T14828] fuse: Bad value for 'rootmode' [ 992.994316][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.011820][T14423] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 993.021301][T14812] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2392'. [ 993.040502][T14823] bond0: (slave dummy0): Releasing backup interface [ 993.061491][T14823] bond0: (slave batadv0): Releasing backup interface [ 993.198376][T14423] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 993.199517][T14832] loop1: detected capacity change from 0 to 512 [ 993.223043][T14423] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 993.243354][T14423] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 993.369697][T14832] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 993.410130][T14832] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 993.539371][T14832] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #2: comm syz.1.2398: corrupted inode contents [ 993.606622][T14844] loop8: detected capacity change from 0 to 16 [ 993.631309][T14832] EXT4-fs error (device loop1): ext4_dirty_inode:6119: inode #2: comm syz.1.2398: mark_inode_dirty error [ 993.660562][T14832] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #2: comm syz.1.2398: corrupted inode contents [ 993.673083][T14844] erofs: (device loop8): erofs_superblock_csum_verify: invalid checksum 0xf70f04a3, 0xc32427af expected [ 993.775265][T14850] loop5: detected capacity change from 0 to 1024 [ 994.244023][T14731] udevd[14731]: incorrect erofs checksum on /dev/loop8 [ 994.323634][T14832] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.2398: mark_inode_dirty error [ 994.770883][T13565] EXT4-fs (loop1): unmounting filesystem. [ 995.508054][T14423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 995.532652][T14861] loop5: detected capacity change from 0 to 4096 [ 995.641137][T14423] 8021q: adding VLAN 0 to HW filter on device team0 [ 995.651644][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 995.667693][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 996.405280][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 996.414305][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 996.463184][ T4389] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.470400][ T4389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 996.633108][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 996.741831][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 996.807868][ T4389] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.815142][ T4389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 996.983465][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 997.012582][ T4815] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 997.032969][ T4815] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 997.059106][T14882] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 997.088895][T14882] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 997.123020][T14882] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 997.132906][T14882] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 997.168506][T14882] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 997.188183][T14882] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 997.256341][T14882] bond0: (slave bridge0): Releasing backup interface [ 997.292177][T14882] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.387387][T14882] bond0: (slave dummy0): Releasing backup interface [ 997.471387][T14882] device bridge_slave_0 left promiscuous mode [ 997.490784][T14882] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.517082][T14882] device bridge_slave_1 left promiscuous mode [ 997.536382][T14882] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.585966][T14882] bond0: (slave bond_slave_0): Releasing backup interface [ 997.646490][T14882] bond0: (slave bond_slave_1): Releasing backup interface [ 997.777083][T14882] team0: Port device team_slave_0 removed [ 997.827721][T14882] team0: Port device team_slave_1 removed [ 997.839974][T14882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 997.852390][T14882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 997.863952][T14882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 997.871682][T14882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 997.931074][T14882] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 997.948161][T14886] netlink: 'syz.1.2410': attribute type 10 has an invalid length. [ 997.969194][T14886] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 998.020567][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 998.061547][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 998.071002][T14899] netlink: 'syz.8.2414': attribute type 10 has an invalid length. [ 998.150900][T14899] team0: Failed to send options change via netlink (err -105) [ 998.159928][T14899] team0: Port device dummy0 added [ 998.168340][T14900] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2412'. [ 998.187902][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 998.239464][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 998.283174][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 998.315316][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 998.365380][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 998.402549][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 998.411583][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 998.436539][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 998.452071][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 998.471485][T14423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 998.714484][T14925] loop1: detected capacity change from 0 to 512 [ 998.784950][T14925] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 998.841605][T14925] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 998.997200][T14731] udevd[14731]: incorrect jbd checksum on /dev/loop1 [ 999.021629][T14925] EXT4-fs error (device loop1): ext4_dx_csum_verify:502: inode #2: comm syz.1.2418: dir seems corrupt? Run e2fsck -D. [ 999.062453][T11258] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 999.077535][T14925] EXT4-fs (loop1): Remounting filesystem read-only [ 999.112439][T14925] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.2418: Directory index failed checksum [ 999.140662][T14925] EXT4-fs (loop1): Remounting filesystem read-only [ 999.149701][T14936] EXT4-fs error (device loop1): ext4_dx_csum_verify:502: inode #2: comm syz.1.2418: dir seems corrupt? Run e2fsck -D. [ 999.192169][T14936] EXT4-fs (loop1): Remounting filesystem read-only [ 999.198842][T14936] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.2418: Directory index failed checksum [ 999.204454][ T9577] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 999.217832][T14936] EXT4-fs (loop1): Remounting filesystem read-only [ 999.229160][ T9577] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 999.252470][T11258] usb 9-1: Using ep0 maxpacket: 32 [ 999.264437][T11258] usb 9-1: config 0 has an invalid interface number: 89 but max is 0 [ 999.279757][T14423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 999.292654][T14939] EXT4-fs error (device loop1): ext4_dx_csum_verify:502: inode #2: comm syz.1.2418: dir seems corrupt? Run e2fsck -D. [ 999.303240][T11258] usb 9-1: config 0 has no interface number 0 [ 999.313224][T14939] EXT4-fs (loop1): Remounting filesystem read-only [ 999.340720][T11258] usb 9-1: config 0 interface 89 has no altsetting 0 [ 999.349936][T14939] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.2418: Directory index failed checksum [ 999.384478][T14939] EXT4-fs (loop1): Remounting filesystem read-only [ 999.390307][T11258] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 999.422455][T14925] EXT4-fs error (device loop1): ext4_dx_csum_verify:502: inode #2: comm syz.1.2418: dir seems corrupt? Run e2fsck -D. [ 999.431208][T11258] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.457770][ T9577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 999.460755][T11258] usb 9-1: Product: syz [ 999.470537][T11258] usb 9-1: Manufacturer: syz [ 999.476160][T11258] usb 9-1: SerialNumber: syz [ 999.483944][ T9577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 999.501039][T11258] usb 9-1: config 0 descriptor?? [ 999.528435][T11258] em28xx 9-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 999.541574][T11258] em28xx 9-1:0.89: Video interface 89 found: bulk [ 999.568223][T14925] EXT4-fs (loop1): Remounting filesystem read-only [ 999.594402][T14925] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.2418: Directory index failed checksum [ 999.631839][T14423] device veth0_vlan entered promiscuous mode [ 999.687805][T14925] EXT4-fs (loop1): Remounting filesystem read-only [ 999.732621][T14423] device veth1_vlan entered promiscuous mode [ 999.762395][T14936] EXT4-fs error (device loop1): ext4_dx_csum_verify:502: inode #2: comm syz.1.2418: dir seems corrupt? Run e2fsck -D. [ 999.809353][T14945] loop5: detected capacity change from 0 to 40427 [ 999.847489][ T9577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 999.869976][T14936] EXT4-fs (loop1): Remounting filesystem read-only [ 999.877424][T14945] F2FS-fs (loop5): invalid crc value [ 999.878303][ T9577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 999.885277][T14936] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.2418: Directory index failed checksum [ 999.918482][T14945] F2FS-fs (loop5): Found nat_bits in checkpoint [ 999.921287][ T9577] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 999.955216][ T9577] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 999.971880][ T9577] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 999.983177][T14945] F2FS-fs (loop5): Start checkpoint disabled! [ 1000.000389][T14945] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1000.064311][ T9577] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1000.146258][T11258] em28xx 9-1:0.89: unknown em28xx chip ID (0) [ 1000.545217][ T9593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1000.603537][ T9593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1000.649037][T14423] device veth0_macvtap entered promiscuous mode [ 1000.676856][T14423] device veth1_macvtap entered promiscuous mode [ 1000.767672][T14423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1000.812725][T14423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.850661][T14423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1000.882921][ T9577] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1000.900963][ T9577] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1000.978343][ T9577] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1001.020602][ T9577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1001.985277][T14423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.053660][T14423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.093430][T14423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1002.155640][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1002.185295][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1002.226093][T14423] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.227750][T14971] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2426'. [ 1002.262867][T14423] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.271795][T14423] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.332267][T14423] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.358464][ T7467] kworker/u4:18: attempt to access beyond end of device [ 1002.358464][ T7467] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1002.402482][T11258] em28xx 9-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1002.411503][T11258] em28xx 9-1:0.89: board has no eeprom [ 1002.522486][T11258] em28xx 9-1:0.89: Identified as Terratec Grabby (card=67) [ 1002.529797][T11258] em28xx 9-1:0.89: analog set to bulk mode. [ 1002.584168][T11258] usb 9-1: USB disconnect, device number 5 [ 1002.590750][T11258] em28xx 9-1:0.89: Disconnecting em28xx [ 1002.629079][ T9593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.634365][T11443] em28xx 9-1:0.89: Registering V4L2 extension [ 1002.670918][ T9593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1002.751803][ T9577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.772431][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1002.780783][ T9577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1002.827881][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1003.025980][T11443] em28xx 9-1:0.89: Config register raw data: 0xffffffed [ 1003.042682][T11443] em28xx 9-1:0.89: AC97 chip type couldn't be determined [ 1003.082312][T11443] em28xx 9-1:0.89: No AC97 audio processor [ 1003.170901][T11443] usb 9-1: Decoder not found [ 1003.212170][T11443] em28xx 9-1:0.89: failed to create media graph [ 1003.228791][T11443] em28xx 9-1:0.89: V4L2 device video103 deregistered [ 1003.332776][T11443] em28xx 9-1:0.89: Registering snapshot button... [ 1003.356187][T14974] loop1: detected capacity change from 0 to 4096 [ 1003.364987][T11443] input: em28xx snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.89/input/input13 [ 1003.388402][T11443] em28xx 9-1:0.89: Remote control support is not available for this card. [ 1003.397950][T11258] em28xx 9-1:0.89: Closing input extension [ 1003.408159][T11258] em28xx 9-1:0.89: Deregistering snapshot button [ 1003.418195][T14990] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1003.458283][T14974] ntfs: (device loop1): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 1003.533686][T14974] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1003.555988][T14993] loop3: detected capacity change from 0 to 512 [ 1003.624957][T14993] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1003.636887][T14974] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1003.664360][T11258] em28xx 9-1:0.89: Freeing device [ 1003.669625][T14993] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1003.692587][T14974] ntfs: volume version 3.1. [ 1003.701327][T14994] overlayfs: failed to get inode (-116) [ 1003.757068][T14994] overlayfs: failed to get inode (-116) [ 1003.808278][T14993] EXT4-fs (loop3): 1 truncate cleaned up [ 1003.826493][T14993] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1003.931346][T14990] team0: Port device dummy0 removed [ 1003.954294][T14990] device bridge_slave_0 left promiscuous mode [ 1003.960899][T14990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.990356][T14985] ceph: No mds server is up or the cluster is laggy [ 1004.356182][T14423] EXT4-fs (loop3): unmounting filesystem. [ 1004.518361][T14990] device bridge_slave_1 left promiscuous mode [ 1004.548808][T14990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.705324][T15006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2430'. [ 1005.580980][T14990] bond0: (slave bond_slave_0): Releasing backup interface [ 1005.643167][T14990] bond0: (slave bond_slave_1): Releasing backup interface [ 1005.757754][T14990] team0: Port device team_slave_0 removed [ 1005.829926][T14990] team0: Port device team_slave_1 removed [ 1005.853280][T14990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1005.893537][T14990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1005.946306][T14990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1005.985043][T14990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1006.016000][T15019] loop3: detected capacity change from 0 to 1024 [ 1006.111735][T15019] hfsplus: request for non-existent node 3 in B*Tree [ 1006.155469][T15019] hfsplus: request for non-existent node 3 in B*Tree [ 1006.302540][T15005] netlink: 'syz.4.2431': attribute type 6 has an invalid length. [ 1006.877153][T15032] loop8: detected capacity change from 0 to 1024 [ 1007.260738][T15035] fuse: Bad value for 'fd' [ 1007.649366][T15038] loop1: detected capacity change from 0 to 16 [ 1007.684908][T15038] erofs: (device loop1): erofs_superblock_csum_verify: invalid checksum 0xf70f04a3, 0xc32427af expected [ 1007.718727][T14731] udevd[14731]: incorrect erofs checksum on /dev/loop1 [ 1010.062004][T15054] kthread_run failed with err -4 [ 1010.534699][T15070] loop1: detected capacity change from 0 to 1024 [ 1010.795550][T15072] netlink: 'syz.5.2448': attribute type 6 has an invalid length. [ 1010.796520][T15074] [ 1012.435360][T15083] loop8: detected capacity change from 0 to 1024 [ 1014.509014][T15104] lo speed is unknown, defaulting to 1000 [ 1015.313364][T15115] loop8: detected capacity change from 0 to 512 [ 1015.350388][T15115] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1015.413164][T15115] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 1015.496645][T15099] loop5: detected capacity change from 0 to 32768 [ 1015.517574][T15115] EXT4-fs (loop8): Errors on filesystem, clearing orphan list. [ 1015.606762][T15115] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1015.681814][T15099] XFS (loop5): Mounting V5 Filesystem [ 1015.923036][T15099] XFS (loop5): Ending clean mount [ 1016.012182][T15099] XFS (loop5): Quotacheck needed: Please wait. [ 1016.176611][T10947] EXT4-fs (loop8): unmounting filesystem. [ 1016.371286][T15099] XFS (loop5): Quotacheck: Done. [ 1016.749848][ T4815] XFS (loop5): Unmounting Filesystem [ 1016.827440][T11443] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 1017.039849][T11443] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1017.081852][T11443] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.100610][T11443] usb 9-1: Product: syz [ 1017.110854][T11443] usb 9-1: Manufacturer: syz [ 1017.127684][T11443] usb 9-1: SerialNumber: syz [ 1017.155898][T11443] usb 9-1: config 0 descriptor?? [ 1017.381028][T11443] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1017.647527][T15130] 9pnet_fd: Insufficient options for proto=fd [ 1017.892665][T15150] netlink: 'syz.5.2461': attribute type 21 has an invalid length. [ 1017.918577][T15150] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2461'. [ 1017.942254][T15150] netlink: 'syz.5.2461': attribute type 4 has an invalid length. [ 1017.950710][T15150] netlink: 'syz.5.2461': attribute type 3 has an invalid length. [ 1017.970018][T15150] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2461'. [ 1018.393026][T15156] loop3: detected capacity change from 0 to 1024 [ 1018.400461][T15156] EXT4-fs: Ignoring removed oldalloc option [ 1018.406624][T15156] EXT4-fs: Ignoring removed bh option [ 1018.814007][T15163] loop5: detected capacity change from 0 to 1024 [ 1018.904807][T15156] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1019.252561][T11443] dvb_usb_rtl28xxu: probe of 9-1:0.0 failed with error -110 [ 1019.291665][T15156] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1019.336418][ T26] audit: type=1804 audit(1757021132.859:175): pid=15156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2464" name="/newroot/10/file1/bus" dev="loop3" ino=18 res=1 errno=0 [ 1020.639694][ T4323] usb 9-1: USB disconnect, device number 6 [ 1020.691182][T15185] loop1: detected capacity change from 0 to 512 [ 1020.736445][T15187] lo speed is unknown, defaulting to 1000 [ 1020.745252][T14423] EXT4-fs (loop3): unmounting filesystem. [ 1020.834952][T15185] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1020.860388][T15185] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1021.015302][T15194] binder: 15193:15194 ioctl c0306201 2000000002c0 returned -14 [ 1021.025682][T13565] EXT4-fs (loop1): unmounting filesystem. [ 1021.990577][T15207] loop3: detected capacity change from 0 to 512 [ 1022.048857][T15207] EXT4-fs: Ignoring removed orlov option [ 1022.107034][T15207] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1022.299137][T15207] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 1022.359128][T15207] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm syz.3.2476: corrupted in-inode xattr [ 1022.401829][T15207] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.2476: couldn't read orphan inode 15 (err -117) [ 1022.440440][T15207] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1023.431624][T14423] EXT4-fs (loop3): unmounting filesystem. [ 1023.710527][ T4283] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1023.756158][ T4283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1023.766949][ T4283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1023.791430][ T4283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1023.799306][ T4283] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1023.807064][ T4283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1025.548383][T15260] ptrace attach of "./syz-executor exec"[4267] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ  "[15260] [ 1025.922324][ T4275] Bluetooth: hci3: command 0x0409 tx timeout [ 1027.972295][ T4275] Bluetooth: hci3: command 0x041b tx timeout [ 1030.042608][ T4283] Bluetooth: hci3: command 0x040f tx timeout [ 1032.152400][ T4275] Bluetooth: hci3: command 0x0419 tx timeout [ 1034.406903][T15232] lo speed is unknown, defaulting to 1000 [ 1034.427302][ T26] audit: type=1326 audit(1757021147.939:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15309 comm="syz.5.2496" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a6c58ebe9 code=0x0 [ 1034.786996][T15319] binder: 15317:15319 ioctl c0306201 0 returned -14 [ 1034.951446][T15321] loop3: detected capacity change from 0 to 128 [ 1035.418369][T15321] syz.3.2499: attempt to access beyond end of device [ 1035.418369][T15321] loop3: rw=2049, sector=145, nr_sectors = 80 limit=128 [ 1035.856653][T15321] syz.3.2499: attempt to access beyond end of device [ 1035.856653][T15321] loop3: rw=524288, sector=145, nr_sectors = 80 limit=128 [ 1035.953769][T15325] syz.3.2499: attempt to access beyond end of device [ 1035.953769][T15325] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 1036.105786][T15321] syz.3.2499: attempt to access beyond end of device [ 1036.105786][T15321] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 1036.148284][T15325] syz.3.2499: attempt to access beyond end of device [ 1036.148284][T15325] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 1038.556588][T15353] loop5: detected capacity change from 0 to 512 [ 1038.700375][T15232] chnl_net:caif_netlink_parms(): no params data found [ 1038.711857][T15353] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1038.765486][T15353] ext4 filesystem being mounted at /452/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1039.628889][ T4815] EXT4-fs (loop5): unmounting filesystem. [ 1040.637278][T15381] loop3: detected capacity change from 0 to 1024 [ 1043.008005][T15232] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.036744][T15232] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.128598][T15232] device bridge_slave_0 entered promiscuous mode [ 1043.138175][T15232] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.158584][T15232] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.170497][T15232] device bridge_slave_1 entered promiscuous mode [ 1046.429359][T15232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1046.645438][T15232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1046.687799][T15416] lo speed is unknown, defaulting to 1000 [ 1046.834350][T15232] team0: Port device team_slave_0 added [ 1047.053371][T15232] team0: Port device team_slave_1 added [ 1047.218937][T15232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1047.231059][T15232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1047.287364][T15232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1047.377300][T15232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1047.400244][T15232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1047.490430][T15232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1047.518836][ T4275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1047.533131][ T4282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1047.546296][ T4282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1047.560364][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1047.570319][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1047.578603][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1049.632300][ T4283] Bluetooth: hci1: command 0x0409 tx timeout [ 1049.836273][T15451] loop8: detected capacity change from 0 to 8 [ 1049.849998][T15451] Major/Minor mismatch, older Squashfs 0.0 filesystems are unsupported [ 1049.890891][T15357] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1050.752792][T15451] loop8: detected capacity change from 0 to 32768 [ 1051.388224][T15451] XFS (loop8): Mounting V5 Filesystem [ 1051.510583][T15451] XFS (loop8): Ending clean mount [ 1051.521962][T15451] XFS (loop8): Quotacheck needed: Please wait. [ 1051.717680][ T4283] Bluetooth: hci1: command 0x041b tx timeout [ 1051.820749][T15451] XFS (loop8): Quotacheck: Done. [ 1052.876547][T10947] XFS (loop8): Unmounting Filesystem [ 1053.794783][ T4283] Bluetooth: hci1: command 0x040f tx timeout [ 1054.441982][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.888709][ T4283] Bluetooth: hci1: command 0x0419 tx timeout [ 1057.043313][T15232] device hsr_slave_0 entered promiscuous mode [ 1057.065312][T15232] device hsr_slave_1 entered promiscuous mode [ 1057.124960][T15428] lo speed is unknown, defaulting to 1000 [ 1057.420343][T15481] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(9) [ 1057.429059][T15481] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1057.437937][T15481] vhci_hcd vhci_hcd.0: Device attached [ 1057.492393][T15482] vhci_hcd: connection closed [ 1057.493245][ T9567] vhci_hcd: stop threads [ 1057.568210][ T9567] vhci_hcd: release socket [ 1057.614322][ T9567] vhci_hcd: disconnect device [ 1057.680890][T11445] vhci_hcd: vhci_device speed not set [ 1058.690388][T15489] loop8: detected capacity change from 0 to 64 [ 1058.730816][ T7467] device hsr_slave_0 left promiscuous mode [ 1058.772454][ T7467] device hsr_slave_1 left promiscuous mode [ 1060.086756][T15497] tmpfs: Bad value for 'nr_inodes' [ 1062.252169][T11443] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1065.402135][T11443] usb 9-1: Using ep0 maxpacket: 8 [ 1065.454049][T11443] usb 9-1: device descriptor read/all, error -71 [ 1065.637267][ T4283] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1065.654442][ T4283] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1066.057995][ T4283] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1066.071059][ T4283] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1066.085860][ T4283] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1066.097172][ T4283] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1068.195011][ T4283] Bluetooth: hci5: command 0x0409 tx timeout [ 1069.725256][ T7467] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1069.734630][ T7467] bond0 (unregistering): Released all slaves [ 1069.825314][T15535] loop8: detected capacity change from 0 to 1024 [ 1070.003174][T15523] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2547'. [ 1070.028393][T15523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2547'. [ 1070.264916][T15510] lo speed is unknown, defaulting to 1000 [ 1070.272417][ T4283] Bluetooth: hci5: command 0x041b tx timeout [ 1072.352495][ T4283] Bluetooth: hci5: command 0x040f tx timeout [ 1073.748372][T15428] chnl_net:caif_netlink_parms(): no params data found [ 1073.766248][T15510] chnl_net:caif_netlink_parms(): no params data found [ 1074.438874][ T4283] Bluetooth: hci5: command 0x0419 tx timeout [ 1075.018330][T15592] tipc: Enabling of bearer rejected, failed to enable media [ 1075.205435][T15601] loop8: detected capacity change from 0 to 512 [ 1075.413926][T15601] EXT4-fs warning (device loop8): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1075.425971][T15601] EXT4-fs warning (device loop8): dx_probe:881: Enable large directory feature to access it [ 1075.437211][T15601] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.2555: Corrupt directory, running e2fsck is recommended [ 1075.457892][T15601] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 1075.467796][T15601] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2195: inode #15: comm syz.8.2555: corrupted in-inode xattr [ 1075.504099][T15601] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.2555: couldn't read orphan inode 15 (err -117) [ 1075.519594][T15601] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1075.783693][T15428] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.791057][T15428] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.800660][T10947] EXT4-fs (loop8): unmounting filesystem. [ 1075.819173][T15428] device bridge_slave_0 entered promiscuous mode [ 1076.075035][T15428] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.102382][T15428] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.427100][T15428] device bridge_slave_1 entered promiscuous mode [ 1076.884276][T15428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1076.906256][T15510] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.922981][T15510] bridge0: port 1(bridge_slave_0) entered disabled state [ 1076.945853][T15510] device bridge_slave_0 entered promiscuous mode [ 1076.959064][T15510] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.970518][T15510] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.980191][T15510] device bridge_slave_1 entered promiscuous mode [ 1077.003208][T15615] tipc: Started in network mode [ 1077.011023][T15615] tipc: Node identity 080211, cluster identity 4711 [ 1077.019323][T15615] tipc: Enabled bearer , priority 0 [ 1077.036588][T15428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1077.146110][T15618] device syzkaller0 entered promiscuous mode [ 1077.274656][T15615] tipc: Resetting bearer [ 1077.404995][T15428] team0: Port device team_slave_0 added [ 1077.527956][T15510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1077.555367][T15428] team0: Port device team_slave_1 added [ 1077.748442][T15510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1077.821046][ T26] audit: type=1326 audit(1757021191.339:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15629 comm="syz.4.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823cb8ebe9 code=0x7ffc0000 [ 1077.910997][ T26] audit: type=1326 audit(1757021191.339:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15629 comm="syz.4.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823cb8ebe9 code=0x7ffc0000 [ 1077.973044][ T26] audit: type=1326 audit(1757021191.339:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15629 comm="syz.4.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f823cb8ebe9 code=0x7ffc0000 [ 1078.011006][ T26] audit: type=1326 audit(1757021191.349:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15629 comm="syz.4.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823cb8ebe9 code=0x7ffc0000 [ 1078.047224][ T26] audit: type=1326 audit(1757021191.349:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15629 comm="syz.4.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823cb8ebe9 code=0x7ffc0000 [ 1078.111227][ T26] audit: type=1326 audit(1757021191.359:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15629 comm="syz.4.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f823cb8ebe9 code=0x7ffc0000 [ 1078.152376][T11551] tipc: Node number set to 134353152 [ 1078.184249][ T26] audit: type=1326 audit(1757021191.359:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15629 comm="syz.4.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823cb8ebe9 code=0x7ffc0000 [ 1078.231173][ T26] audit: type=1326 audit(1757021191.359:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15629 comm="syz.4.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823cb8ebe9 code=0x7ffc0000 [ 1078.260300][T15510] team0: Port device team_slave_0 added [ 1078.296836][T15428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1078.311796][ T26] audit: type=1326 audit(1757021191.359:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15629 comm="syz.4.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f823cb8ebe9 code=0x7ffc0000 [ 1078.318992][T15428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1078.434689][T15428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1078.526593][T15510] team0: Port device team_slave_1 added [ 1078.547072][T15428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1078.571079][T15428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1078.662142][T15428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1078.755252][T15510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1078.780591][T15510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1078.852179][T15510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1079.023286][T15510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1079.055765][T15510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1079.169160][T15510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1079.235357][T15428] device hsr_slave_0 entered promiscuous mode [ 1079.273957][T15428] device hsr_slave_1 entered promiscuous mode [ 1079.293443][T15428] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1079.322389][T15428] Cannot create hsr debugfs directory [ 1079.363948][T15232] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1079.458816][T15644] lo speed is unknown, defaulting to 1000 [ 1079.485306][T15232] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1079.598795][T15232] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1079.655057][T15510] device hsr_slave_0 entered promiscuous mode [ 1079.713241][T15510] device hsr_slave_1 entered promiscuous mode [ 1079.752503][T15510] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1079.789877][T15510] Cannot create hsr debugfs directory [ 1079.851536][T15232] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1080.298503][ T7467] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.435502][ T7467] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.587940][ T7467] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.635336][T15232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1080.685868][ T9577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1080.695451][ T9577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1080.738045][ T7467] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.768702][T15232] 8021q: adding VLAN 0 to HW filter on device team0 [ 1080.902218][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1080.923731][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1080.943001][ T9567] bridge0: port 1(bridge_slave_0) entered blocking state [ 1080.950539][ T9567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1080.972709][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1080.983677][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1081.001675][ T9567] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.011117][ T9567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1081.030707][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1081.084555][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1081.131988][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1081.160043][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1081.175541][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1081.190499][T15428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1081.223612][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1081.231967][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1081.249892][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1081.263306][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1081.272835][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1081.303588][T15428] 8021q: adding VLAN 0 to HW filter on device team0 [ 1081.316985][T15232] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1081.336328][T15232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1081.366907][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1081.376709][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1081.387238][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1081.401778][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1081.436589][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1081.451901][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1081.470535][ T4760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.478594][ T4760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1081.554066][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1081.603553][T15510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1081.649781][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1081.674008][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1081.691598][ T4760] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.700779][ T4760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1081.721973][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1081.758402][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1081.802932][T15510] 8021q: adding VLAN 0 to HW filter on device team0 [ 1081.812798][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1081.833309][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1081.848110][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1081.878316][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1081.958326][T15428] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1081.991228][T15428] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1082.008689][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1082.032930][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1082.091653][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1082.111342][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1082.123766][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1082.145014][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1082.165061][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1082.185611][ T4760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1082.193617][ T4760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1082.210332][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1082.222271][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1082.231995][ T4760] bridge0: port 2(bridge_slave_1) entered blocking state [ 1082.239852][ T4760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1082.251107][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1082.261975][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1082.275368][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1082.287004][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1082.297875][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1082.307700][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1082.417754][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1082.467062][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1082.497106][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1082.555946][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1082.645279][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1082.664897][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1082.685243][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1082.711119][T15232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1082.797669][ T9584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1082.817786][ T9584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1082.936571][T15510] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1082.961585][T15510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1082.989497][ T9585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1082.999875][ T9585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1083.018880][ T9585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1083.031850][ T9585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1083.159728][ T9584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1083.191975][ T9584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1083.248351][T15428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1083.376102][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1083.398181][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1083.433752][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1083.471268][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1083.494802][T15232] device veth0_vlan entered promiscuous mode [ 1083.570985][T15232] device veth1_vlan entered promiscuous mode [ 1083.869233][ T9577] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1083.882957][ T9577] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1083.895946][ T9577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1083.906739][ T9577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1083.921428][T15232] device veth0_macvtap entered promiscuous mode [ 1084.034793][ T9585] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1084.083031][ T9585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1084.114010][ T9585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1084.159389][T15510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1084.684522][ T4282] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1084.708496][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1084.723544][ T4282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1084.740632][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1084.755359][ T4282] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1084.769922][ T4282] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1084.895558][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1084.962681][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1085.298477][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1085.323623][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1085.350830][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1085.361555][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1085.371547][T15736] lo speed is unknown, defaulting to 1000 [ 1085.391781][T15428] device veth0_vlan entered promiscuous mode [ 1085.460476][ T7467] device hsr_slave_0 left promiscuous mode [ 1085.483722][ T7467] device hsr_slave_1 left promiscuous mode [ 1085.521504][ T7467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1085.541870][ T7467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1085.553523][ T7467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1085.563932][ T7467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1085.574194][ T7467] device bridge_slave_1 left promiscuous mode [ 1085.580654][ T7467] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.595205][ T7467] device bridge_slave_0 left promiscuous mode [ 1085.601985][ T7467] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.669303][ T7467] device veth1_macvtap left promiscuous mode [ 1085.678440][ T7467] device veth0_macvtap left promiscuous mode [ 1085.685314][ T7467] device veth1_vlan left promiscuous mode [ 1085.692857][ T7467] device veth0_vlan left promiscuous mode [ 1086.690847][ T7467] team0 (unregistering): Port device team_slave_1 removed [ 1086.790894][ T7467] team0 (unregistering): Port device team_slave_0 removed [ 1086.883254][ T7467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1086.978275][ T7467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1086.992743][ T4283] Bluetooth: hci4: command 0x0409 tx timeout [ 1088.166755][ T7467] bond0 (unregistering): Released all slaves [ 1088.326584][T15428] device veth1_vlan entered promiscuous mode [ 1088.395076][ T9585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1088.423464][ T9585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1088.518946][ T9585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1088.531752][ T9585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1088.543827][ T9585] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1088.555217][ T9585] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1088.635751][T15510] device veth0_vlan entered promiscuous mode [ 1088.643779][ T9585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1088.654177][ T9585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1088.666764][T15428] device veth0_macvtap entered promiscuous mode [ 1088.690764][T15428] device veth1_macvtap entered promiscuous mode [ 1088.720180][T15510] device veth1_vlan entered promiscuous mode [ 1088.826548][T15428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1088.889580][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1088.900236][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1088.911680][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1088.923319][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1088.935276][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1088.946736][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1088.963056][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1088.975621][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1089.017311][T15428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1089.037351][T15510] device veth0_macvtap entered promiscuous mode [ 1089.056095][ T9584] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1089.066694][ T9584] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1089.073395][ T4283] Bluetooth: hci4: command 0x041b tx timeout [ 1089.080502][ T9584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1089.107125][T15736] chnl_net:caif_netlink_parms(): no params data found [ 1089.122629][T15510] device veth1_macvtap entered promiscuous mode [ 1089.175617][T15510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1089.189275][T15510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.204796][T15510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1089.231140][ T9584] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1089.243426][ T9584] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1089.255292][ T9584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1089.294128][T15510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1089.364190][T15510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.380168][T15510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1089.417665][ T9585] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1089.433790][ T9585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1089.521626][T15736] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.522688][ T7467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.539932][T15736] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.545249][ T7467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.553219][T15736] device bridge_slave_0 entered promiscuous mode [ 1089.572578][T15736] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.581036][T15736] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.594984][T15736] device bridge_slave_1 entered promiscuous mode [ 1089.649926][ T9584] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1089.831902][T15736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1089.843949][ T9569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.856610][ T9569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.910900][T15736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1089.957756][ T7467] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1090.106175][ T9585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.285509][ T9585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1090.312211][T15736] team0: Port device team_slave_0 added [ 1090.464750][T15736] team0: Port device team_slave_1 added [ 1091.271097][ T4282] Bluetooth: hci4: command 0x040f tx timeout [ 1091.396945][T15770] loop7: detected capacity change from 0 to 256 [ 1091.426722][ T9585] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1091.484451][ T7467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1091.485196][T15736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1091.500240][ T7467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1091.529890][T15770] FAT-fs (loop7): Directory bread(block 64) failed [ 1091.553547][T15736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1091.604243][T15770] FAT-fs (loop7): Directory bread(block 65) failed [ 1091.619492][T15770] FAT-fs (loop7): Directory bread(block 66) failed [ 1091.627425][T15736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1091.648786][T15770] FAT-fs (loop7): Directory bread(block 67) failed [ 1091.682428][ T9585] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1091.698963][T15770] FAT-fs (loop7): Directory bread(block 68) failed [ 1091.708661][T15770] FAT-fs (loop7): Directory bread(block 69) failed [ 1091.722936][T15770] FAT-fs (loop7): Directory bread(block 70) failed [ 1091.731423][T15770] FAT-fs (loop7): Directory bread(block 71) failed [ 1091.741031][T15736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1091.752559][T15736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1091.812487][T15770] FAT-fs (loop7): Directory bread(block 72) failed [ 1091.820420][T15770] FAT-fs (loop7): Directory bread(block 73) failed [ 1091.856834][T15736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1092.187244][T15780] loop2: detected capacity change from 0 to 32768 [ 1092.197465][T15780] XFS: ikeep mount option is deprecated. [ 1093.555109][ T4282] Bluetooth: hci4: command 0x0419 tx timeout [ 1093.702449][T15780] XFS (loop2): Mounting V5 Filesystem [ 1093.720164][T15736] device hsr_slave_0 entered promiscuous mode [ 1093.754481][T15736] device hsr_slave_1 entered promiscuous mode [ 1093.762880][T15736] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1093.770892][T15736] Cannot create hsr debugfs directory [ 1093.802637][T15780] XFS (loop2): Ending clean mount [ 1093.811466][T15780] XFS (loop2): Quotacheck needed: Please wait. [ 1093.978032][T15780] XFS (loop2): Quotacheck: Done. [ 1095.782021][T15510] XFS (loop2): Unmounting Filesystem [ 1097.626172][T15838] netlink: 18 bytes leftover after parsing attributes in process `syz.8.2570'. [ 1097.653064][T15831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1100.911728][T15736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1100.946940][T15871] device team_slave_0 entered promiscuous mode [ 1100.956463][T15871] device team_slave_1 entered promiscuous mode [ 1101.001981][T15871] device vlan2 entered promiscuous mode [ 1101.034549][T15871] device team0 entered promiscuous mode [ 1101.322408][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1101.350518][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1102.204675][T15736] 8021q: adding VLAN 0 to HW filter on device team0 [ 1103.351105][ T9560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1103.563203][ T9560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1103.606092][ T9560] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.613948][ T9560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1103.785526][ T9560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1103.809813][ T9560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1103.818885][ T9560] bridge0: port 2(bridge_slave_1) entered blocking state [ 1103.826124][ T9560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1103.834335][ T9560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1104.231429][T15899] loop8: detected capacity change from 0 to 32768 [ 1104.427551][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1104.441898][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1104.952306][T15899] XFS (loop8): Mounting V5 Filesystem [ 1105.119202][T15914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2592'. [ 1105.168097][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1105.182434][T15899] XFS (loop8): Ending clean mount [ 1105.200291][T15899] XFS (loop8): Quotacheck needed: Please wait. [ 1105.251640][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1105.261064][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1105.358074][T15899] XFS (loop8): Quotacheck: Done. [ 1105.474573][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1105.517394][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1105.634100][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1105.682219][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1105.935200][ T9567] device hsr_slave_0 left promiscuous mode [ 1105.948204][ T9567] device hsr_slave_1 left promiscuous mode [ 1105.961921][ T9567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1106.110029][ T9567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1106.363220][T10947] XFS (loop8): Unmounting Filesystem [ 1106.409020][ T9567] device bridge_slave_1 left promiscuous mode [ 1106.419616][ T9567] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.465313][ T9567] device bridge_slave_0 left promiscuous mode [ 1106.477458][ T9567] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.433037][ T9567] device veth0_macvtap left promiscuous mode [ 1107.454218][ T9567] device veth1_vlan left promiscuous mode [ 1107.492559][ T9567] device veth0_vlan left promiscuous mode [ 1107.926008][T15944] loop7: detected capacity change from 0 to 1024 [ 1108.864237][T15944] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1108.873639][T15944] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1109.165657][T15428] EXT4-fs (loop7): unmounting filesystem. [ 1110.623336][T15960] loop7: detected capacity change from 0 to 32768 [ 1110.887087][T15960] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 1111.035980][T15960] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1112.749352][T15428] ocfs2: Unmounting device (7,7) on (node local) [ 1115.875650][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1117.647556][ T9567] team0 (unregistering): Port device team_slave_1 removed [ 1117.747938][ T9567] team0 (unregistering): Port device team_slave_0 removed [ 1117.846061][ T9567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1117.940891][ T9567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1118.982155][ T9567] bond0 (unregistering): Released all slaves [ 1119.117546][T15736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1119.130577][T15736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1119.139969][ T9577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1119.151384][ T9577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1119.174830][T15967] device syzkaller0 entered promiscuous mode [ 1120.628451][T16021] tipc: Enabling of bearer rejected, failed to enable media [ 1120.845718][T16031] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2614'. [ 1121.390387][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1121.406723][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1121.450006][T15736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1125.102151][T16064] loop7: detected capacity change from 0 to 256 [ 1126.079219][T16066] wlan0 speed is unknown, defaulting to 1000 [ 1126.085957][T16066] wlan0 speed is unknown, defaulting to 1000 [ 1126.105676][T16066] wlan0 speed is unknown, defaulting to 1000 [ 1126.174048][T16066] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1126.327787][T16066] wlan0 speed is unknown, defaulting to 1000 [ 1126.335134][T16066] wlan0 speed is unknown, defaulting to 1000 [ 1126.342425][T16066] wlan0 speed is unknown, defaulting to 1000 [ 1126.349555][T16066] wlan0 speed is unknown, defaulting to 1000 [ 1126.357288][T16066] wlan0 speed is unknown, defaulting to 1000 [ 1126.364548][T16066] wlan0 speed is unknown, defaulting to 1000 [ 1128.164634][T16084] loop7: detected capacity change from 0 to 1024 [ 1129.369752][T16100] loop7: detected capacity change from 0 to 16 [ 1129.416525][T16100] erofs: (device loop7): mounted with root inode @ nid 36. [ 1130.592821][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1130.613837][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1130.745248][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1130.793170][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1130.805638][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1130.816175][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1130.832591][T15736] device veth0_vlan entered promiscuous mode [ 1130.859978][T15736] device veth1_vlan entered promiscuous mode [ 1131.103582][T16090] siw: device registration error -23 [ 1131.836788][ T9585] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1131.874187][ T9585] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1131.982308][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1131.991376][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1132.039109][T16129] loop7: detected capacity change from 0 to 1764 [ 1132.079878][T15736] device veth0_macvtap entered promiscuous mode [ 1132.150050][T15736] device veth1_macvtap entered promiscuous mode [ 1132.894903][T16134] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1133.388809][ T26] audit: type=1326 audit(1757021246.489:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16131 comm="syz.4.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823cb8ebe9 code=0x7ffc0000 [ 1133.697619][ T9584] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1133.743268][ T9584] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1133.796586][T15736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1134.832262][ T26] audit: type=1326 audit(1757021246.489:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16131 comm="syz.4.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823cb8ebe9 code=0x7ffc0000 [ 1134.872194][T15736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.030437][T15736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1136.088000][ T26] audit: type=1326 audit(1757021246.489:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16131 comm="syz.4.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f823cb8ebe9 code=0x7ffc0000 [ 1136.274513][T15736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.287682][T15736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1136.311195][T15736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1136.330975][T15736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.529838][ T26] audit: type=1326 audit(1757021246.499:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16131 comm="syz.4.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823cb8ebe9 code=0x7ffc0000 [ 1136.579634][ T26] audit: type=1326 audit(1757021246.499:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16131 comm="syz.4.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823cb8ebe9 code=0x7ffc0000 [ 1136.609034][ T26] audit: type=1326 audit(1757021246.499:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16131 comm="syz.4.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f823cb8ebe9 code=0x7ffc0000 [ 1137.562427][ T26] audit: type=1326 audit(1757021246.499:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16131 comm="syz.4.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823cb8ebe9 code=0x7ffc0000 [ 1137.565304][T15736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1137.750786][ T26] audit: type=1326 audit(1757021246.499:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16131 comm="syz.4.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823cb8ebe9 code=0x7ffc0000 [ 1137.805840][T15736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1137.848853][T15736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1137.888110][T15973] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1137.914123][T15973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1137.952517][T15973] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1138.295033][T15973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1138.302151][ T26] audit: type=1326 audit(1757021246.499:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16131 comm="syz.4.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f823cb8ebe9 code=0x7ffc0000 [ 1138.451212][ T26] audit: type=1326 audit(1757021246.499:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16131 comm="syz.4.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823cb8ebe9 code=0x7ffc0000 [ 1138.500090][T16173] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2644'. [ 1138.522601][ T26] audit: type=1326 audit(1757021246.499:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16131 comm="syz.4.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823cb8ebe9 code=0x7ffc0000 [ 1138.874204][ T26] audit: type=1326 audit(1757021246.509:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16131 comm="syz.4.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f823cb8ebe9 code=0x7ffc0000 [ 1139.666151][ T9569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1139.688144][ T9569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1139.812105][T16187] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 1140.477131][ T9584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1140.492232][ T9584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1140.530045][ T9584] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1140.537866][ T26] audit: type=1326 audit(1757021246.509:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16131 comm="syz.4.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823cb8ebe9 code=0x7ffc0000 [ 1140.721366][ T4283] Bluetooth: hci4: link tx timeout [ 1140.727515][ T4283] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1140.740369][ T4283] Bluetooth: hci4: link tx timeout [ 1140.745665][ T4283] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1140.754552][ T4283] Bluetooth: hci4: link tx timeout [ 1140.761983][ T4283] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1140.769882][ T4283] Bluetooth: hci4: link tx timeout [ 1140.775329][ T4283] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1141.236014][ T26] audit: type=1326 audit(1757021246.509:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16131 comm="syz.4.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823cb8ebe9 code=0x7ffc0000 [ 1141.245612][ T9584] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1141.976426][T16202] loop8: detected capacity change from 0 to 24 [ 1141.986230][T16202] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 1142.544849][T16202] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1142.862837][ T4283] Bluetooth: hci4: command 0x0406 tx timeout [ 1146.756364][T16240] loop8: detected capacity change from 0 to 64 [ 1146.811227][T16240] hfs: unable to open catalog tree [ 1146.850948][T16246] loop0: detected capacity change from 0 to 16 [ 1146.870354][T16240] hfs: can't find a HFS filesystem on dev loop8 [ 1146.905865][T16246] erofs: (device loop0): mounted with root inode @ nid 36. [ 1148.051976][T16254] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 1149.450456][T16262] loop0: detected capacity change from 0 to 32768 [ 1150.609124][T16274] tipc: Failed to remove unknown binding: 66,1,1/0:3115476161/3115476163 [ 1150.760603][T16262] XFS (loop0): Mounting V5 Filesystem [ 1150.830160][T16274] tipc: Failed to remove unknown binding: 66,1,1/0:3115476161/3115476163 [ 1150.883108][T16274] tipc: Failed to remove unknown binding: 66,1,1/0:3115476161/3115476163 [ 1151.269265][T16262] XFS (loop0): Ending clean mount [ 1151.278298][T16262] XFS (loop0): Quotacheck needed: Please wait. [ 1152.662788][T16262] XFS (loop0): Quotacheck: Done. [ 1153.809104][T15736] XFS (loop0): Unmounting Filesystem [ 1154.406944][T16304] loop2: detected capacity change from 0 to 512 [ 1154.433739][T16304] EXT4-fs: Ignoring removed orlov option [ 1154.474855][T16311] mmap: syz.4.2673 (16311) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1154.492208][T16304] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 1154.538112][T16304] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 1154.590479][T16304] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.2672: corrupted in-inode xattr [ 1154.640886][T16304] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.2672: couldn't read orphan inode 15 (err -117) [ 1154.662527][T16304] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1155.950148][T15510] EXT4-fs (loop2): unmounting filesystem. [ 1158.735585][T16345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2681'. [ 1158.766572][T16345] device vlan2 entered promiscuous mode [ 1158.805316][T16345] device batadv0 entered promiscuous mode [ 1159.790016][T16359] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1159.810450][T16359] ubi: mtd0 is already attached to ubi31 [ 1160.784284][T16363] loop0: detected capacity change from 0 to 4096 [ 1160.869450][T16363] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 1161.689861][T16363] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1165.230412][T16404] loop7: detected capacity change from 0 to 256 [ 1165.824370][T16404] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1165.933613][T16404] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 1165.980206][T16404] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012112, chksum : 0xbf1871ed, utbl_chksum : 0xe619d30d) [ 1168.097357][T16426] loop7: detected capacity change from 0 to 512 [ 1168.106726][T16425] loop8: detected capacity change from 0 to 1024 [ 1168.127972][T16426] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 1170.379011][T16436] tipc: Failed to remove unknown binding: 66,1,1/134353152:2562132245/2562132247 [ 1170.954482][T16436] tipc: Failed to remove unknown binding: 66,1,1/134353152:2562132245/2562132247 [ 1170.972390][T16436] tipc: Failed to remove unknown binding: 66,1,1/134353152:2562132245/2562132247 [ 1172.132814][T16449] device bond_slave_0 entered promiscuous mode [ 1172.139889][T16449] device bond_slave_1 entered promiscuous mode [ 1172.146609][T16449] device macsec1 entered promiscuous mode [ 1172.152454][T16449] device bond0 entered promiscuous mode [ 1172.640010][T16456] loop8: detected capacity change from 0 to 512 [ 1172.748227][T16456] EXT4-fs: Ignoring removed nobh option [ 1173.324302][T16456] EXT4-fs error (device loop8): ext4_do_update_inode:5254: inode #3: comm syz.8.2704: corrupted inode contents [ 1173.353045][T16456] EXT4-fs error (device loop8): ext4_dirty_inode:6119: inode #3: comm syz.8.2704: mark_inode_dirty error [ 1173.440813][T16456] EXT4-fs error (device loop8): ext4_do_update_inode:5254: inode #3: comm syz.8.2704: corrupted inode contents [ 1173.541235][T16456] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #3: comm syz.8.2704: mark_inode_dirty error [ 1173.632657][T16456] Quota error (device loop8): write_blk: dquota write failed [ 1173.674261][T16456] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 1173.708996][T16456] EXT4-fs error (device loop8): ext4_acquire_dquot:6816: comm syz.8.2704: Failed to acquire dquot type 0 [ 1176.152432][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 1176.390569][T16456] EXT4-fs error (device loop8): ext4_do_update_inode:5254: inode #16: comm syz.8.2704: corrupted inode contents [ 1176.527292][T16456] EXT4-fs error (device loop8): ext4_dirty_inode:6119: inode #16: comm syz.8.2704: mark_inode_dirty error [ 1177.007008][T16456] EXT4-fs error (device loop8): ext4_do_update_inode:5254: inode #16: comm syz.8.2704: corrupted inode contents [ 1177.316618][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.331003][T16456] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #16: comm syz.8.2704: mark_inode_dirty error [ 1177.496003][T16486] loop2: detected capacity change from 0 to 1764 [ 1177.759158][T16456] EXT4-fs error (device loop8): ext4_do_update_inode:5254: inode #16: comm syz.8.2704: corrupted inode contents [ 1178.152326][T16456] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 1178.161451][T16456] EXT4-fs error (device loop8): ext4_do_update_inode:5254: inode #16: comm syz.8.2704: corrupted inode contents [ 1179.085772][T16456] EXT4-fs error (device loop8): ext4_truncate:4312: inode #16: comm syz.8.2704: mark_inode_dirty error [ 1179.201260][T16456] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 1179.288077][T16456] EXT4-fs (loop8): 1 truncate cleaned up [ 1179.315868][T16456] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1179.468227][T16456] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1180.335830][ T9569] Bluetooth: hci3: Frame reassembly failed (-84) [ 1181.194854][T10947] EXT4-fs (loop8): unmounting filesystem. [ 1182.222461][T16526] overlayfs: failed to clone lowerpath [ 1182.272429][ T4282] Bluetooth: hci3: command 0x1003 tx timeout [ 1182.283888][ T4283] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1184.987122][T16543] loop8: detected capacity change from 0 to 256 [ 1185.023495][T16543] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1185.051526][T16543] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 1185.102721][T16543] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1186.651104][T16562] loop0: detected capacity change from 0 to 512 [ 1186.814505][T16562] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.2728: bad orphan inode 15 [ 1186.916443][T16562] ext4_test_bit(bit=14, block=5) = 0 [ 1186.921832][T16562] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1188.012190][T16577] loop2: detected capacity change from 0 to 256 [ 1188.710052][T15736] EXT4-fs (loop0): unmounting filesystem. [ 1188.879307][T16588] overlayfs: failed to clone lowerpath [ 1190.192445][ T4282] Bluetooth: hci5: command 0x0406 tx timeout [ 1190.284577][ T4282] Bluetooth: hci4: command 0x2016 tx timeout [ 1191.700632][T16605] loop8: detected capacity change from 0 to 32768 [ 1191.762796][T16605] (syz.8.2735,16605,0):ocfs2_load_local_alloc:338 ERROR: inconsistent detected, clean journal with unrecovered local alloc, please run fsck.ocfs2! [ 1191.762796][T16605] found = 0, set = 0, taken = 0, off = 1280 [ 1191.783796][T16605] (syz.8.2735,16605,0):ocfs2_load_local_alloc:355 ERROR: status = -22 [ 1191.792480][T16605] (syz.8.2735,16605,0):ocfs2_check_volume:2461 ERROR: status = -22 [ 1191.800393][T16605] (syz.8.2735,16605,0):ocfs2_check_volume:2489 ERROR: status = -22 [ 1191.808357][T16605] (syz.8.2735,16605,0):ocfs2_mount_volume:1821 ERROR: status = -22 [ 1191.836080][T16605] (syz.8.2735,16605,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 1192.192615][ T4282] Bluetooth: hci3: command 0xfc11 tx timeout [ 1192.204087][ T4283] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 1195.131851][T16631] loop0: detected capacity change from 0 to 512 [ 1195.139206][T16631] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1195.147130][T16631] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1195.368000][T16631] EXT4-fs (loop0): 1 truncate cleaned up [ 1195.542211][T16631] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1195.590732][T16641] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2743'. [ 1195.600953][T16641] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2743'. [ 1195.610300][T16641] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2743'. [ 1195.621399][T16641] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2743'. [ 1195.630521][T16641] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2743'. [ 1198.867894][T16660] loop8: detected capacity change from 0 to 1024 [ 1198.902735][T16662] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2746'. [ 1199.072278][ T4283] Bluetooth: hci4: command 0x0405 tx timeout [ 1200.005193][T15736] EXT4-fs (loop0): unmounting filesystem. [ 1201.436051][ C1] ------------[ cut here ]------------ [ 1201.442747][ C1] WARNING: CPU: 1 PID: 0 at net/mac80211/tx.c:4944 __ieee80211_beacon_get+0x1952/0x1f50 [ 1201.452728][ C1] Modules linked in: [ 1201.456823][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 1201.464048][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1201.474297][ C1] RIP: 0010:__ieee80211_beacon_get+0x1952/0x1f50 [ 1201.480791][ C1] Code: ff ff ff e8 e0 32 e4 f7 0f 0b 48 8b 7c 24 20 e8 e4 a5 7f fe e9 dd e9 ff ff e8 ca 32 e4 f7 0f 0b e9 f1 ee ff ff e8 be 32 e4 f7 <0f> 0b e9 61 f2 ff ff e8 b2 32 e4 f7 48 c7 c7 30 7c fa 8d 4c 89 f6 [ 1201.500754][ C1] RSP: 0018:ffffc900001e08a0 EFLAGS: 00010246 [ 1201.506979][ C1] RAX: ffffffff899c9d62 RBX: 0000000000000000 RCX: ffff888017739dc0 [ 1201.515166][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1201.523313][ C1] RBP: ffffc900001e0aa8 R08: ffff888017739dc0 R09: 0000000000000003 [ 1201.531577][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: 1ffff9200003c12c [ 1201.539737][ C1] R13: dffffc0000000000 R14: ffff88802ab76258 R15: ffff88807c1a9200 [ 1201.547896][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1201.557032][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1201.563769][ C1] CR2: 00007fd82fb73f98 CR3: 000000007e6bc000 CR4: 00000000003506e0 [ 1201.571904][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1201.580059][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1201.588194][ C1] Call Trace: [ 1201.591576][ C1] [ 1201.594539][ C1] ? verify_lock_unused+0x140/0x140 [ 1201.599871][ C1] ? __ieee80211_beacon_get+0xad/0x1f50 [ 1201.605572][ C1] ? ieee80211_beacon_get_template+0x40/0x40 [ 1201.611722][ C1] ieee80211_beacon_get_tim+0x5b/0x4d0 [ 1201.617331][ C1] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 1201.623045][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1201.628562][ C1] __iterate_interfaces+0x243/0x500 [ 1201.633906][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 1201.640290][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 1201.647666][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 1201.654065][ C1] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 1201.661257][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 1201.666607][ C1] __hrtimer_run_queues+0x554/0xd60 [ 1201.671946][ C1] ? hw_scan_work+0xf30/0xf30 [ 1201.676771][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1201.682035][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 1201.688265][ C1] hrtimer_run_softirq+0x183/0x2a0 [ 1201.693529][ C1] handle_softirqs+0x2a1/0x920 [ 1201.698445][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 1201.703528][ C1] ? do_softirq+0x200/0x200 [ 1201.708147][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 1201.713507][ C1] __irq_exit_rcu+0x12f/0x220 [ 1201.718316][ C1] ? irq_exit_rcu+0x20/0x20 [ 1201.722992][ C1] irq_exit_rcu+0x5/0x20 [ 1201.727342][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1201.733222][ C1] [ 1201.736329][ C1] [ 1201.739342][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1201.745499][ C1] RIP: 0010:default_idle+0xb/0x10 [ 1201.750655][ C1] Code: 48 89 df e8 47 a2 af f7 e9 4c ff ff ff e8 fd 07 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 87 53 65 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 1201.770614][ C1] RSP: 0018:ffffc90000177de8 EFLAGS: 000002c6 [ 1201.776826][ C1] RAX: 1dbf91f5ab8a1a00 RBX: ffffffff8a214f27 RCX: 1dbf91f5ab8a1a00 [ 1201.784966][ C1] RDX: 0000000000000001 RSI: ffffffff8a8c0300 RDI: ffffffff8adefae0 [ 1201.793120][ C1] RBP: ffffc90000177f20 R08: dffffc0000000000 R09: ffffed10171e6af6 [ 1201.801250][ C1] R10: ffffed10171e6af6 R11: 1ffff110171e6af5 R12: 0000000000000001 [ 1201.809423][ C1] R13: dffffc0000000000 R14: ffff888017739dc0 R15: 1ffffffff1c3ee8e [ 1201.817571][ C1] ? default_idle_call+0x77/0xc0 [ 1201.822660][ C1] default_idle_call+0x84/0xc0 [ 1201.827555][ C1] do_idle+0x1fc/0x570 [ 1201.831743][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 1201.837101][ C1] ? schedule_idle+0x57/0x90 [ 1201.841808][ C1] ? do_idle+0x55c/0x570 [ 1201.846184][ C1] cpu_startup_entry+0x3f/0x60 [ 1201.851079][ C1] start_secondary+0xe4/0xf0 [ 1201.855843][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 1201.861902][ C1] [ 1201.865039][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1201.872341][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 1201.879391][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1201.889477][ C1] Call Trace: [ 1201.892786][ C1] [ 1201.895676][ C1] dump_stack_lvl+0x168/0x22e [ 1201.900391][ C1] ? memcpy+0x3c/0x60 [ 1201.904411][ C1] ? show_regs_print_info+0x12/0x12 [ 1201.909638][ C1] ? load_image+0x3b0/0x3b0 [ 1201.914191][ C1] panic+0x2c9/0x710 [ 1201.918131][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 1201.922675][ C1] ? secondary_startup_64_no_verify+0xcf/0xdb [ 1201.928783][ C1] __warn+0x2f8/0x4f0 [ 1201.932802][ C1] ? __ieee80211_beacon_get+0x1952/0x1f50 [ 1201.938565][ C1] ? __ieee80211_beacon_get+0x1952/0x1f50 [ 1201.944323][ C1] report_bug+0x2ba/0x4f0 [ 1201.948711][ C1] ? __ieee80211_beacon_get+0x1952/0x1f50 [ 1201.954566][ C1] handle_bug+0x3a/0x70 [ 1201.958763][ C1] exc_invalid_op+0x16/0x40 [ 1201.963298][ C1] asm_exc_invalid_op+0x16/0x20 [ 1201.968184][ C1] RIP: 0010:__ieee80211_beacon_get+0x1952/0x1f50 [ 1201.974549][ C1] Code: ff ff ff e8 e0 32 e4 f7 0f 0b 48 8b 7c 24 20 e8 e4 a5 7f fe e9 dd e9 ff ff e8 ca 32 e4 f7 0f 0b e9 f1 ee ff ff e8 be 32 e4 f7 <0f> 0b e9 61 f2 ff ff e8 b2 32 e4 f7 48 c7 c7 30 7c fa 8d 4c 89 f6 [ 1201.994277][ C1] RSP: 0018:ffffc900001e08a0 EFLAGS: 00010246 [ 1202.000372][ C1] RAX: ffffffff899c9d62 RBX: 0000000000000000 RCX: ffff888017739dc0 [ 1202.008372][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1202.016367][ C1] RBP: ffffc900001e0aa8 R08: ffff888017739dc0 R09: 0000000000000003 [ 1202.024372][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: 1ffff9200003c12c [ 1202.032372][ C1] R13: dffffc0000000000 R14: ffff88802ab76258 R15: ffff88807c1a9200 [ 1202.040384][ C1] ? __ieee80211_beacon_get+0x1952/0x1f50 [ 1202.046177][ C1] ? verify_lock_unused+0x140/0x140 [ 1202.051413][ C1] ? __ieee80211_beacon_get+0xad/0x1f50 [ 1202.057017][ C1] ? ieee80211_beacon_get_template+0x40/0x40 [ 1202.063064][ C1] ieee80211_beacon_get_tim+0x5b/0x4d0 [ 1202.068670][ C1] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 1202.074279][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1202.079700][ C1] __iterate_interfaces+0x243/0x500 [ 1202.084939][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 1202.091224][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 1202.098476][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 1202.104754][ C1] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 1202.111825][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 1202.117057][ C1] __hrtimer_run_queues+0x554/0xd60 [ 1202.122298][ C1] ? hw_scan_work+0xf30/0xf30 [ 1202.127021][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1202.132169][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 1202.138274][ C1] hrtimer_run_softirq+0x183/0x2a0 [ 1202.143422][ C1] handle_softirqs+0x2a1/0x920 [ 1202.148230][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 1202.153131][ C1] ? do_softirq+0x200/0x200 [ 1202.157679][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 1202.162925][ C1] __irq_exit_rcu+0x12f/0x220 [ 1202.167917][ C1] ? irq_exit_rcu+0x20/0x20 [ 1202.172484][ C1] irq_exit_rcu+0x5/0x20 [ 1202.176859][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1202.182538][ C1] [ 1202.185503][ C1] [ 1202.188458][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1202.194474][ C1] RIP: 0010:default_idle+0xb/0x10 [ 1202.199535][ C1] Code: 48 89 df e8 47 a2 af f7 e9 4c ff ff ff e8 fd 07 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 87 53 65 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 1202.219173][ C1] RSP: 0018:ffffc90000177de8 EFLAGS: 000002c6 [ 1202.225275][ C1] RAX: 1dbf91f5ab8a1a00 RBX: ffffffff8a214f27 RCX: 1dbf91f5ab8a1a00 [ 1202.233278][ C1] RDX: 0000000000000001 RSI: ffffffff8a8c0300 RDI: ffffffff8adefae0 [ 1202.241274][ C1] RBP: ffffc90000177f20 R08: dffffc0000000000 R09: ffffed10171e6af6 [ 1202.249302][ C1] R10: ffffed10171e6af6 R11: 1ffff110171e6af5 R12: 0000000000000001 [ 1202.257312][ C1] R13: dffffc0000000000 R14: ffff888017739dc0 R15: 1ffffffff1c3ee8e [ 1202.265415][ C1] ? default_idle_call+0x77/0xc0 [ 1202.270415][ C1] default_idle_call+0x84/0xc0 [ 1202.275229][ C1] do_idle+0x1fc/0x570 [ 1202.279344][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 1202.284586][ C1] ? schedule_idle+0x57/0x90 [ 1202.289211][ C1] ? do_idle+0x55c/0x570 [ 1202.293580][ C1] cpu_startup_entry+0x3f/0x60 [ 1202.298379][ C1] start_secondary+0xe4/0xf0 [ 1202.303005][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 1202.308943][ C1] [ 1202.312214][ C1] Kernel Offset: disabled [ 1202.316633][ C1] Rebooting in 86400 seconds..