last executing test programs: 4m40.710366618s ago: executing program 0 (id=50): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bind$alg(0xffffffffffffffff, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2200c840) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfbfffffa}]}}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x18, 0x5, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a000020095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)) process_mrelease(0xffffffffffffffff, 0x0) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r4}, 0x10) io_uring_setup(0x7bda, &(0x7f0000000080)={0x0, 0x6cdf, 0x2, 0x3, 0x5}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 4m38.242740377s ago: executing program 0 (id=53): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="a0725ce9403b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x60, '\x00', {0x0, 0x6, "fd9063", 0x2, 0x3a, 0x0, @empty, @mcast2}}}}}}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) socket$nl_rdma(0x10, 0x3, 0x14) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2010002, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socket$key(0xf, 0x3, 0x2) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020000300feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce", 0x6c}], 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)={0x34, r4, 0x1, 0x200000, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080001}, 0x4048806) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) 4m33.488597924s ago: executing program 0 (id=59): openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0xeb) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$rose(r1, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @bcast}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x2c, 0x0, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x7c}, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="4d742dbd7000fddbdf250a00000008000300", @ANYRES32=r7, @ANYBLOB="140050800500"], 0x30}, 0x1, 0x0, 0x0, 0x40006095}, 0x40010) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = inotify_init1(0x0) inotify_rm_watch(r8, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40c00, 0x0) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xff7fffff, 0x0, 0x15, "ff00000000000000000000000000000000bf00"}) syz_open_pts(r9, 0x0) 4m32.121656164s ago: executing program 0 (id=61): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) sysinfo(&(0x7f0000000340)=""/193) r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0xee00) keyctl$KEYCTL_RESTRICT_KEYRING(0xb, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0xf, 0x0, 0x103, 0x1, 0x3, 0xffff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffff9, 0x1, 0x1, 0x9, 0x13ec, 0x1}, 0x20) mkdir(&(0x7f00000000c0)='./bus\x00', 0x18e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rmdir(&(0x7f0000000380)='./file0/../file0\x00') 4m28.200742209s ago: executing program 0 (id=78): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, 0x0, 0x0, 0x10004, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x27fff}, 0x94) lseek(r0, 0x7fffffffffffffff, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/668, 0x6) fcntl$addseals(r1, 0x409, 0xc) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r6, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x2a}, 0x91ee, 0x1, 0x1, 0x0, 0x2, 0x80}, &(0x7f00000002c0)=0x20) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000380)={0x0, 0x3}, 0x8) io_uring_setup(0x4aec, &(0x7f0000000140)={0x0, 0x81fa, 0x1000, 0x1, 0x7a}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) 4m27.037874798s ago: executing program 0 (id=69): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x9, 0xc8c8, 0x1) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x7eabfcf2497233c6, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2480, 0x1) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x9}) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x800004, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) 4m11.884104502s ago: executing program 32 (id=69): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x9, 0xc8c8, 0x1) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x7eabfcf2497233c6, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2480, 0x1) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x9}) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x800004, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) 19.941613619s ago: executing program 1 (id=389): openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x20140) r0 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRESHEX=r1], 0x50) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x4f27, 0x0, 0x4, 0x4, 0x5, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e5b, 0x3, 0xe66, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r5, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x70) mkdir(&(0x7f0000000000)='./file0\x00', 0x18a) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) removexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) syz_clone(0x70001400, 0x0, 0x0, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000e40)="a96f1d7b4dd9769cd098ca712fe44e01c165aef383e88501f2637635c93ecb91d6c93279bd209a65d8f7b6b32e2fc3e84495e5a1bd64280fb4af194b4062828f403945130770d6e75bd68786a97391c6082086a701796ea5bf169a24105cdff577a5464e85e2004b11bc251176efe619ce8a5f0aaf348220b35daa8f3b5553924c4854d9d57d2a280db1d291a8a09b1246ae38a389649e1159ae3c030524fef2f72f8b626c2dd8ae28b2848b86ad887df1fdb7a205e39ed8c213da6f3d676558db61f2a89d4021e52eadf88bd31f97bce710b90d7e3603e56a15a37047720ae74b32443849f332867f17d6a02d5980cc1648ebfa6149134832696d202ea8eae4b4f7e4dc8f7939675bad4ec93e499a2d7f672d32d2a1dc3029faa1e8b6a2b3c7b2fe53d9b58392832e5673aeedc682993ca32187f78f1cc2b9184c10ce3e236b9a248a3976eeaa9d73b45ec67d59a74887bac269e4b7c5d46a8e7d89b38f4af654f292508fbccd4318e8ef5ecbd6ebf5fc4dd17808ba97e303e82485ce7f5f9452034c49daec6a1da149be76e1b7cc6887c95a76cfc6f3056a1c316f7fa850760c3fab4dee90c76eaa6c0c309677981a7d6cfbc79d7a6ea9223090b62acccb4c147bca8028296c019a7300bc278ff946c5341dbc3556a1c1b9be38e97029027863e4633721b6dc17b90abd36e80fddbec467d1cd29fbf584cc6a6b3d026f408bb3b11cdd3918ff3f8f8a7b2ec280a2fc4785fed9914ccb81ac62131bf9563be5418b3efd7d1e34604cf0326d4ec817e66b417829abbc58120507fdd51b3dc013f03fc4b506cab9017d749e4174627a7ce39b63378c786a1e82fcd49e2998f351b7a43610435a54966c3400ad6e02910c5c02e5153914bebfa78e1db89d9668c1be2fc68e99a21f6fdbba9c53b49167a42937a40aae02fc1eccbb95fed863460da1ccdd61e7a6ae4fdbf1a2dbe3116e589792e7adc75c36868544911c8d766c10bfc4bb80a99ec68065474107a511e59ad7748579b4ab491f5e44023c117b21458e1a0ef33a5f7eae738c50e1890c3b49269c87ed9cc0c736c5f60dc25be602d5ed4fca3dfb02a91e3751f5f2eb8aed32886b5321c1d7f0c1526afab89527d87e5d3a2d9b1ab231fa2ea4ede63b901222f6fb99bc3480039e75ef617ae059b06318b07ac11dde43d829dca72a2e9c09d75bdc3926fe1913ec6aea95cce95e472e74c777f3b1c6e0c6ccd0c513e7c4c672b8e4d608b11f8a7d900e1db64f21c9430bb0dc9a99cb98ec151b3c0a7f1f2fa465e0b6be1eb665d98828ca6a92d7fc02c8b4701bf9589f6fd22a8112587fabcec76435c119ad7a18de597b566a2e07c34a29e3776a94a04e6e74a25cf3786c695d913dc33b4181c9698acc108605a5389e23be60651ec8eb691dbbe3f3dee3a80fe890ddb92e64e9cba5fcd089d9824889d2ea757d632e71a3d127a439f4017f42e81767b86aabcc4ec70720beb6d701ad53ec7c4b2dd98a35522621478f6d9eb27bf762f1bb74ebb8668d5e0f3d0875065a32ba721198bda832264a89be1774caea7da4bc13630f429519aa9a6e28bd8878b9733efe59a377e519574d8c5a8eb472a1093f7c478c29dfebbf6a22a907fef7e25327e680d66ec37c6b7f6708358584d98857f1de9ef312f05847403320e32996bd88d8b7e24d26693ecd0c54df9e2cecfc946476226ba7c9abab4bd06372fe74791c6e43e74dde06e958fc3a64c5303f1c8b285447dc8b2d40f25b3a2a992420d6655bb15c8305dd81a1eea9ce6f432e6c63613c95a6fe1c93463aeb8574ed4a7883687d3fdb6e80dfe1f73219da717fb1d1b3eab3b534eeb41aa605c044fd69c1057eeb111390cead31a451ae7633cca027944d37cf378f389d69d4fcb8c16e32c1706ae8780948176a4a872f118e47ce7a39485db4b6f582308b9305c3952779a666329a613787053587a0b129dc997a4a2ebfab0d719eae7f260ab8c9e10dbbbc7176753116c5264f7c45a00397b317d42a85f6c6d03d5cc42fca20e5ff46f7679ac9087a9b3d1ff551178ffc1d5095d69cc522cce3f3539d143bc8a715209dc2742a43f230bbb06f72be894849072699a7ecd4f56b94550b223f4614a2cbd9e8241469631996ad6022009f0b4fe23f8dcb3539844e706f599ef17283e05e27c403d00fc028117512f208b3eaaaae6425fd815c9856c4eb0de9ba7d43bee8e945710259285890e12d8610635281c0a5028748549be0a155b2d6dcefd2359432bff080b6558a1b82168111e4e4499e2860265a358d74dad2f1ed931001fb03c432a9aaeb2fdb5a2f77310bd5eedafce0e351328162685745bc0d894e041558e4a824b9f4fe3493e63eecc4bd33c043ff77305d2fdcbf75d46458f24bfa355225286ce82d28ed1ac71adca3950a62a3030bcaaa0c9d9445d88d1d0fa007b5908e932f3f3c07e53a41dff8a3ef3a481e60190a015322ddf025d3197abd802a9d2e0c197e5b9871d714bc1357c4caee2a22cac6c2087c5472deed9442e4c9a10d6b1744ad8360ee8d3d7cad7e8f9f6fddf28b3b253cb789d3bdc1e3557ab15f24cbd369e4cf3a9f401de7484e80ae82da731199b9dee55599833d67b1a98772582600b4e3cc59796242445ca54c3200a1f794fc8527b4711d62bd020686d12fc12190de6535a30d54bbca23066d8181add5781c5c60201e9075d57cf250d2589b025ece634612311588e90dbc0082d1b68079f55b882c8d6d304f13e97d7ea1f20570e118d53924d6e01feb8804da4104cc5f71ca9ce41e704a53aee2662a32dc4a693d650b4324997b5f2ece387ca130dbbd52db4dada694b967e9b06cd04804dad1907f326ae80440a218b97d5534417259920f442bd6ce9b4387343cc410e692bd94cf3ca3b973673005233e011936e307dd677a6654412a51b87526a4bf0da067b67e176d7239422f7f6d9dc4b885bd72bf3dda3acff44b40278f6223795bc29826031df87b03f9a63e07bdf96ab1e5f135ee681ac9e9bbe135ce282c902866fa650c454fc6e73054c5b5f1318094e71f113afe8c68f962a584a14a2b696af2477a7585b8b0ffbefbe6e045d292fd9e89a722fe26b386c85fc5fc8e3516037570faabb112470f84b161f7cec61cc9532bca17a64a13f6c7cdb2fb8900dd0636750a5cf9783e4de77c5f83d0412712bf9b9bbec8739a6a5688e97dd34dd586d8ff7647d981418cd3a62ba6e42d14477b0b2ec05bf2e0bc68989464b3b3a75a6ade41bf3832459ee878e61c3f9f6713f15c67a06cd0e99101853fa52bf491a8c91346196e60a0952022f5a7b06fc31f27aa6909a1f55d980d5ba93dedc861e792d6f01ad64b11e3b15e97eb59514e9c26895a2e7f716b5af18de822d15e06d5c92a9fb84e56a80766695fc46d980a83b4a11fa1c3ce2283a813aa406750554c675004e0759dcc86e0abf3054fcc06dd7c8c01595ada51343d26ad8f68b72ab9fd526d737c7889f5cb2404122f8fd60e9772f621602330a9cd86b8e7c9fd883e5a319100bbb39ecfc0ebd4207d0aadb37e53d26a7c1709b423646faf5629dd29718efee2d0f98923546344e9ffa4045500cd5bfe7466ee71dbe68fa924861f1ab75d2404f980c8c0dc5321983ef4b774b9dca9dea456a290f1975a4d46717bb27d2fc273e4916964f130547821cd246d651cef93c714f55afc09d36278f8739ef1b72a9b7489f99d3a25142792210ad34024e53545ac19ad263992d3af6a37e059bb5996d139e5d28af6b12724ea95eadda6911a1ea398d3591ede85692da6abeb6a20370e360865b32781480420d612be268ede1a449218c6073a5629c828c976a2901e52d6de4bda7b2d6a88d26910aa3340d68e466144d600f32d3fc0b83d08fc7e3b71270a60fe923ba91949916f5d6c6c908c24ad0174458c1e4ce775a0faf9c957222d17c7af0944b481e9267bb318b1fd09838052821a60d31e16a879c6fa790c11bb7673223cdd5e70415072458274ca4e0c77908e8f4faa991cfaeee9c339a357e3a4890d511b2b8e6e843b4e19ed8ae77ffcc0eddbad27c6f753fd6cdb64c81508a1c80028b0b88f8c3fefaa2077858e54466136ce89c8da397c75b282e41e678b4b02250c55d173177e293dc15cc666bbcbe657ca9cdc1bb5925efe24c0007abf38b8f64ec58ef52c4dcd555473c12c6cce15c05d656e10660768e9af41642a2c2744765ef394a777644f52d0d10f90bd31cfd8c29efec88fa8333b4aeb8f2d364dc7ad36c561c649446cdf289e420a93aab274a9d3a3f96f95f8c0624ce12d59aa8eac684bdbeb52c5f12cfb532432746155ed5d99ac6caca224ce218c2d7592794b76872c8f63f5243fecbd1cda2f416543f9da24a75bf87faaa4d782307eeddb387b63afcdb546cf7942bc2eb5ba6097c8ee7c0171546b97f6c94cfbbe8470a2502332c4adcbca4d54cac7d9d82f04797cae90d1d53eafa6f74cce247106561522b45767c8bc92ae35515b6089750a1b3d9980599c43efc9fb5800344158d020bd16ab42bea94023f87bedb887156f1935c2c9b03d8768cb3e857ff0e84b250a093bd584f7901b39488dcfe5871144d94e7d0932a3ffde58be0bab66a349758fbcc58aeac2e95e7985d9cc640a32c50aa6e58cbc2e8e6cf42fd6ff5fac7912f95edaf5f1d7c3cf81541f4e416726c0717195e7be75a4141b3b94bc1aa5fb10bf3bd11bc7227fd6bd4d570ff81a74d7d6504c6ab46b501b332d3c6bf98d013aa264d635843df0ed68dd1611670f542bee4f7d0882fbb42ae6ca720b1350e3d22847d13231835b7be74b0f7b4a044104c3256b8406e3c47444144e44d4eb93a6779cb98cee41168e22ec7ac198727d7de7a3b1040200e4b68198f98afeb76c1994288eb5ace80ac82a1715458a1bc054900d98c4d309b5fd3d8fd3dfb6cd90b6381a5d738140cac757755efd057e3c918640d7c59d5f310c90ebca72ed4d12") r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x3}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0xffffff80, 0x5, 0x6dd3, 0x9d51}, 0x4}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 17.452337642s ago: executing program 1 (id=394): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="02011400b8dc18000e3580009f000114600000060600ac141414e0000003808a89"], 0xdd12}], 0x1, 0x0, 0x0, 0x8050}, 0x20040051) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(r6, 0x0, 0x113800, 0x2) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10018}, [@FRA_DST={0x14, 0x1, @private1}, @FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x44}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000000009010000000040000000010000000500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) prctl$PR_SCHED_CORE(0x4d, 0x1fffffffffffffd, 0x0, 0x3, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000100), 0x3) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) syz_usbip_server_init(0x1) 14.901577495s ago: executing program 3 (id=397): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xfffffffffffffffa, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="cc000000110001002abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="200000000080000024000e0007000000000000000000060000000000000005004d060000000008001c009888e269cc91edb3f522b4471e7265c2da1e7450f19d624630061d756450229a8599c87259fd5e58226d5eeb2b41ee17e84b8ca624d6511eca158f0714b8fe76b8b81fdddbe0d07fc92ba3acc7dc9d1265922431d67ccf79bbbdfdda4f1d68e01138819690097548955a62c303a94181f437051f0f6ac246fc169e44279e53e8e0a2cc6ddb35fb732a6bfb63a19cf222a6467d449006560f32bbe156a464ee9e632dafdbc186494441c0b9615954006b39a05f39335a9761971c5410719cf081c9a6a705d67100907bcc00000000000000", @ANYRES32, @ANYBLOB="08002e0002000000080023000400000068003480140035006d6163766c616e30000000000000000014003500697036746e6c30000000000000000000140035006c6f0000000000000000000000000000140035007465616d300000000000000000000000140035006970766c616e3100000000000000000031ff2800515a0000"], 0xcc}, 0x1, 0x0, 0x0, 0x4040096}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000180)=0x4, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x248) close(r5) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r6, 0x40043d0d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095", @ANYBLOB="e2899d556ca3cedac1bd0443facf89f19a80b1d1a9566ecc3624f9735284c2cc5fe774fcd7af85517bc93adf0ff42f85fc07a78ff84e107214a8db21b3a0ed1eef05b7292e47fc370c46d4b53b647a0fa3015a81465f77907951c8842415f992f843e9d97ec60e8473d347838c3d6b99b310571fdf7a3086c47d80e57cd6679388473e8c946424979d7b856c4899b08296700158b38a983a95357f516a08bc7d5b9ee65888a99e529bdc091e7ec4689e585ebcbc6fd248e87005408d126ec74ad8a5e048", @ANYBLOB="8c413a243d17899a96ccfef22d33522f929de285c8f1a921ad4a3d9f4be85d717019eaa0e1e8f77b32964b60b3d4da91597ebde874d6af21390e0d6890bb486eba7eaa6f8402f11e7d01d5", @ANYRES8=r1, @ANYRES32=r1, @ANYBLOB="aede5014978c3244b275ef0731d0fc3889db9be64efe85929c00cf41d72e973ad1bb02233a9b0e689632fa4aae096b5219df378117ff9cb50377a382d20112146331efbc24b21df50dbfe3a59d8dd6f1bcfeed0271df04938a1b0ebd691fb751a3eccf1369f460897a9535f02d96dedcdadf717531581e197ec34a2ae9357943b96ed7ba10b559b70a4cedede4b45a8e0b1c3e3ea1a28af283f9"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) prctl$PR_GET_NAME(0x10, &(0x7f0000000880)=""/225) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/mdstat\x00', 0x0, 0x0) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 14.899741889s ago: executing program 2 (id=398): syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) clock_nanosleep(0xfffffff2, 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) r5 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmsg$sock(r5, &(0x7f00000001c0)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x4}, 0x80, 0x0}, 0x24000080) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 13.48476694s ago: executing program 3 (id=399): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f00000002c0)={0x2, 0x20, {0x23, 0x5, 0x3, 0x18, 0xfffffffd, 0x60, 0x0, 0x0, 0xffffffffffffffff}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'dh\x00', 0xb, 0x4, 0x72}, 0x2c) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="2c000000070a01020000000000000000020000060900010073797a30000000000900020073797a6404000000"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@remote, 0x4e20, 0x10001, 0xc, 0x2}}, 0x44) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000, 0x6, &(0x7f000097c000/0x2000)=nil) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff7f, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0xfffffffe, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004e090}, 0x4000) r10 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r10, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x11, 0xe0000000, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x29c780}) 13.457850605s ago: executing program 4 (id=400): socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000380)={0x13, 0x10, 0xfa00, {0x0}}, 0x18) sendto$inet6(r5, 0x0, 0x0, 0x20000841, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1c9, 0x12) io_uring_setup(0x7fd0, 0x0) add_key(0x0, 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) r8 = inotify_init1(0x0) r9 = inotify_add_watch(r8, &(0x7f0000000200)='.\x00', 0x400) r10 = dup(r8) read$FUSE(r10, 0x0, 0x0) inotify_rm_watch(r10, r9) inotify_rm_watch(r7, r9) 11.260516069s ago: executing program 3 (id=401): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x6100, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r6, 0xc038563b, &(0x7f0000000180)={0x0, 0x0, {0xc, 0x7, 0xa4, 0xff}}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0xd, '\x00', @p_u8=&(0x7f0000000040)}}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x421, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88afa5b4, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r10, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)) 11.130227766s ago: executing program 4 (id=402): syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x8}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pipe2(0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) close(r3) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r8, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) syz_emit_ethernet(0x86, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x78, 0x0, 0xe000, 0x8b, 0x11, 0x0, @empty, @empty}, {0x24, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x3, "4bd3985fe13e3b2cf9e5f574d97d9dabe997744e388aacf4c421e77eec6d3c52", "e865081bd433660a1cf980a8d7d82f77", {"a6c5bc0ea08e90567ad54a7c004a26d6", "00ca815c13362287ca5682f383fbb4aa"}}}}}}}, 0x0) 11.033397213s ago: executing program 2 (id=403): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x3, &(0x7f00000002c0)=[{0xfffb, 0x9, 0x0, 0x5}, {0x400, 0x4, 0x7, 0x10000}, {0x9, 0x5, 0x7, 0x5}]}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}]}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$phonet(0x23, 0x2, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) ioctl$int_in(r5, 0x5452, &(0x7f00000000c0)=0xa5) sendto(r5, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) poll(&(0x7f0000000100)=[{r4, 0x302}, {r5, 0x8006}], 0x2, 0xfffffa2b) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0xbf00, 0xbf}) open_by_handle_at(r3, &(0x7f0000000000)=ANY=[], 0x70380) r6 = socket(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) syz_emit_ethernet(0x55, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60000000001f3aff2001000000000000000000f080a2b90000000001fe8800000000000000000000000000000000000001180000000e0024fcaa8fc03e841dd011478e03ba244f60d6a80b192f965a54da1ebc02d29b4bcd17c27b08efcc1050e765d5f11774079f103bb3c5a8e702d6a76f327cc01bb366b1e840e8cc9b280000000000000000"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000004) 8.55210778s ago: executing program 3 (id=404): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = syz_open_dev$loop(&(0x7f00000005c0), 0x10000, 0x109041) ioctl$TUNSETIFINDEX(r2, 0x400454da, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x5, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x82100) r4 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x2}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4a, 0x0, @fd_index=0x6, 0x80, 0x0, 0x6}) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f00000017c0)={0x0, 0x0}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r7, &(0x7f0000000180)=0xfe5f, 0x12) socket$kcm(0x10, 0x2, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r8, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) 8.548929347s ago: executing program 4 (id=405): socket$inet_mptcp(0x2, 0x1, 0x106) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) landlock_create_ruleset(&(0x7f0000000140)={0x407, 0x3, 0x3}, 0x18, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ni\x00'}, 0xffffffffffffffbd) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r3, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x30, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xd}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="01002cbd7000e4dbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x27}, 0x74) r10 = getpid() sched_setaffinity(r10, 0x8, &(0x7f0000000240)=0x2) 8.494358459s ago: executing program 2 (id=406): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x24000041}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0xfffc, 0xbfff, 0x19, "ec28a144f13d7607"}) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffc, 0x0, 0x0, 0x10, "0062ba5d8200"}) r5 = syz_open_pts(r4, 0x20800) dup3(r5, r4, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x44) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000006f3338cd000000000010110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') read$FUSE(r9, &(0x7f00000016c0)={0x2020}, 0xfffffce3) ioctl$TIOCSISO7816(r9, 0xc0285443, &(0x7f0000000000)={0x8, 0x9, 0x10001, 0x8001, 0x5}) rt_sigsuspend(0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 6.648782479s ago: executing program 1 (id=407): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000900)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) r6 = socket(0x1f, 0x80000, 0xffffffff) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}, 0x8a}}, {{0xa, 0x0, 0x10001, @local}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1000}}}, 0x108) sendto$inet6(r4, &(0x7f0000000100), 0x0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) write(r4, &(0x7f0000000180)="a1", 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="000001004f"], 0x9) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r7}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) 6.645087329s ago: executing program 2 (id=408): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$alg(0x26, 0x5, 0x0) socket$phonet(0x23, 0x2, 0x1) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4}) read(0xffffffffffffffff, &(0x7f0000000740)=""/384, 0x200008c0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x400, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0x0, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x20008844) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x401, 0x181, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3fd, 0x4000009, 0x200, 0xe2df, 0x9, 0x1, 0x4, 0x40000, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r3, 0x8028640c, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x2, 0x5000000}]}, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x3e}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x15, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40090}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) 6.642491455s ago: executing program 4 (id=409): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000400)={{&(0x7f0000feb000/0x13000)=nil, 0x13000}, 0x2}) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) read$FUSE(0xffffffffffffffff, &(0x7f0000002400)={0x2020, 0x0, 0x0, 0x0}, 0xfffffec2) read$msr(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000000)=0x2, 0x4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) setresuid(0xee01, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffff0000000008000700263a090914"], 0x44}, 0x1, 0x1000000}, 0x0) keyctl$get_persistent(0x16, r4, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed00efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6342103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033df58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca30ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28defa300"}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@mask_fadd={0x58, 0x118, 0x8, {{0x0, 0x3}, 0x0, 0x0, 0x5c, 0x8}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x6}], 0x70}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$kcm(0x2b, 0x1, 0x0) listen(r9, 0x6) 5.135305443s ago: executing program 1 (id=410): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x6400000c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) setrlimit(0xe, &(0x7f0000000140)={0xf, 0x65bc}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f000000b800)=""/102400, 0x19000) shmget$private(0x0, 0x400000, 0x80, &(0x7f0000bfd000/0x400000)=nil) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0x0, r5, r5) r6 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) flistxattr(r6, &(0x7f0000000200)=""/162, 0xa2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x7) r7 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[]) read$FUSE(r7, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0xfffffffffffffffe, r8, {0x7, 0x1f, 0x0, 0xfe052, 0x5000, 0x0, 0x400000, 0xc}}, 0x50) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000091401"], 0x18}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000010) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0xa0001) 4.908872673s ago: executing program 4 (id=411): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) fcntl$setstatus(r4, 0x4, 0x2000) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x40, 0x1) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) chdir(&(0x7f0000000080)='./file1\x00') r6 = open(&(0x7f00000000c0)='.\x00', 0x800000, 0x0) mkdirat(r6, &(0x7f0000000100)='./file0\x00', 0x0) 3.918237266s ago: executing program 2 (id=412): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYBLOB='iocharset=maciceland,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',zero_size_dir,keep_last_dots,gid=', @ANYRESHEX=0x0, @ANYRES8], 0x1, 0x152a, &(0x7f0000001f80)="$eJzs3AucTtX6OPDnWWvtMSS9TXIZ1lrP5k1imSTJJUkuSZIkSW4JSZMcSUgMuSUNSch1SC5DSC4Tk8b9fr8kJEmTJCG5Jev/Ef7qVL/T+Z1+x/mceb6fz/5Yz6z9rP287/Ne9t6YbzoOqtageuV6RAT/ErzwRxIAxAJAPwC4BgACACgdVzru/Hx2iUn/2kHYX+vh1CtdAbuSuP9ZG/c/a+P+Z23c/6yN+5+1cf+zNu5/1sb9Zywr2zg1/7W8Zd2N7///96vzhzP8/f9fJLPE6C9Wl7i+E0DMn03h/mdt3P//WsGf2Yn7n7Vx/7Oq2CtdAPsPwO//rCDbH85w/7M27j9jWdmVvv98pTeIZO3n4Eq//hhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMZQ2n/GUKAC6Nr3RdjDHGGGOMMcYY++v4bFe6AsYYY4wxxhhjjP3fQxAgQUEAMZANYiE75AABAFdDLrgGInAtxMF1kBuuhzyQF/JBfoiHAlAQNBiwQBBCISgMUbgBisCNUBRugmJQHByUgAS4GUrCLVAKboXScBuUgduhLJSD8lAB7oCKcCdUgrugMtwNVaAqVIPqcA/UgHuhJtwHteB+qA0PQB14EOrCQ1APHob68Ag0gEehITwGjaAxNIGm0Ox/lf8idIWXoBt0hyToAT3hZegFvaEP9IV+8Ar0h1dhALwGyTAQBsHrMBjegCHwJgyFYTAc3oIRMBJGwWgYA2MhBcbBeHgbJsA7MBEmwWSYAqkwFabBuzAdZsBMeA9mwfswG+bAXJgHafABzIcFkA4fwkL4CDJgESyGJbAUlsFyWAErYRWshjWwFtbBetgAG2ETbIYtsBW2wXb4GHbAJ7ATdsFu+BT2wGf/ZP7Jv8vvhICAAgUqVBiDMRiLsZgDc2BOzIm5MBdGMIJxGIe5MTfmwTyYD/NhPMZjQSyIBg0SEhbCQhjFKBbBIlgUi2IxLIYOHSZgApbEW7AUlsLSWBrLYBksi+WwHFbAClgRK2IlrISVsTJWwSpYDavhPXgP9sCaWBNrYS2sjbUv3Z7CelgP62N9bIANsCE2xEbYCJtgE2yGzbA5NscW2AJbYStsja2xDbbBREzEttgW22E7bI/tsQN2wI7YETthZ+yc+WI2wJfwJeyOVUQP7Ik9sRcmZ+uDfbEvvoL98VV8FV/DZByIg/B1fB3fwCF4AofiMByOw7GiGImjcDSSGIspmILjcTxOwAk4ESfhJJyCqTgVp+E0nI4zcAa+h7PwfXwf5+AcnIdpmIbzcQGmYzouxJOYgYtwMS7BpbgMl+IKXIkrcDWuwdW4DtfhBtyAm3ATbsEtuA234ceoAPAT3IW7MBn34B7ci3txH+7D/bgfMzETD+ABPIgH8RAewsN4GI/gUTyGR/E4HscTeBJP4Sk8g2fwLD4f/1X9j29alQziPCWUiBExIlbEihwih8gpcopcIpeIiIiIE3Eit8gt8og8Ip/IJ+JFvCgoCgojjCARxgCAiIqoKCKKiKKiqCgmigknnEgQCaKkKClKiVKitLhNlBG3i7KinGjpKogKoqJo5SqJu0RlUVlUEVVFNVFdVBc1RA1RU9QUtUQtUVvUFnXEg6Ku6IF98GFxvjMNxEBsKAZhI9FYyIufYM3FEGwhWopW4kkxDIdiG9HcJYpnRFsxCtuJv4nR+JzoIMZiR/GC6CQ6iy7iRdFVtHDdRHcxEXuInmIK9hK9RR/RV0zHquI9nJW9mnhNJIuBYpB4XczDN8QQ8aYYKoaJ4eItMUKMFKPEaDFGjBUpYpwYL94WE8Q7YqKYJCaLKSJVTBXTxLtiupghZor3xCzxvpgt5oi5Yp5IEx+I+WKBSBcfioXiI5EhFonFYolYKpaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Cq2ie3iY7FDfCJ2il1it/hU7BGfib3ic7FPfCH2iy9FpvhKHBBfi4PiG3FIfCsOi+/EEXFUHBPfi+PiB3FCnBSnxGlxRvwozoqfxDnhBUiUQkqpZCBjZDYZK7PLHPIqmVMGF5/da2WcvE7mltfLPDKvzCfzy3hZQBaUWhppJclQFpKFZVTeIIvIG2VReZMsJotLJ0vIBHmzLClvkaXkrbK0vE2WkbfLsrKcLC8ryDtkRXmnhMiFY1SRVWU1WV3eI5PgXllT3idryftlbfmArCMflHXlQ7KefFjWl4/IBvJR2VA+JhvJxrKJbCqbycdlc/mEbCFbylbySdlaPiXbyKdlonxGtpX+4kvkOdlBPi87yhdkJ9lZdpE/yXPSy26yu4QeIHvKl2Uv2Vv2kX1lP/mK7C9flQPkazJZDpSD5OtysHxDDpFvyqFymBwu35Ij5Eg5So6WY+RYmSLHyfHybTlBviMnyklyspwiU+VU2efiSjOl/If5b/9O/oCfj75BbpSb5Ga5RW6V2+R2+bHcIXfInXKn3C13yz1yj9wr98p9cp/cL/fLTJkpD8gD8qA8KA/JQ/KwPCyPyKPytPxeHpc/yBPypDwpT8sz8ow8e/E5AIVKKKmUClSMyqZiVXaVQ12lcqqrVS51jYqoa1Wcuk7lVterPCqvyqfyq3hVQBVUWhllFalQFVKFVVTdgBdfMKqYKq6cKqES1M3/TL4qom5URdVNv8q/VF/SH9TXTDVTzVVz1UK1UK1UK9VatVZtVBuVqBJVW9VWtVPtVHvVXnVQHVRH1VF1Up1UF9VFdVVdVTfVTSWpJNVTvax6qd6qj+qr+qlXVH/VXw1QA1SySlaD1CA1WA1WQ9QQNVQNVcPVcDVCjVCj1Cg1Ro1RKSpFjVfj1QQ1QU1UE9VkNVmlqlQ1TU1T09V0NVPNVLPULDVbzVZz1VyVptLUfDVfpat0tVAtVBlqkVqklqglaplaplaoFWqVWqXWqDVqnVqnMtRGtVFtVpvVVrVVbVfb1Q61Q+1UO9VutVvtUXvUXrVX7VP71H61X2WqTHVAHVAH1UF1SB1Sh9VhdUQdUcfUMXVcHVcn1Al1Sp1SZ9QZdVadVefUufOnfYEIRKACFcQEMUFsEBvkCHIEOYOcQa4gVxAJIkFcEBfkDq4P8gR5g3xB/iA+KBAUDHRgAhuIi02PBjcERYIbg6LBTUGxoHjgghJBQnBzUDK4JSgV3BqUDm4LygS3B2WDckH5oEJwR1AxuDOoFNwVVA7uDqoEVYNqQfXgnqBGcG9QM7gvqBXcH9QOHgjqBA8GdYOHgnrBw0H94JGgQfBo0DB4LGgUNA6aBE2DZn/p+t6fyPuE66a76yTdQ/fUL+teurfuo/vqfvoV3V+/qgfo13SyHqgH6df1YP2GHqLf1EP1MD1cv6VH6JF6lB6tx+ixOkWP0+P123qCfkdP1JP0ZD1Fp+qpepp+V0/XM/RM/Z6epd/Xs/UcPVfP02n6Az1fL9Dp+kO9UH+kM/QivVgv0Uv1Mr1cr9Ar9Sq9Wq/Ra/U6vV5v0Bv1Jr1Zb9ECtunt+mO9Q3+id+pderf+VO/Rn+m9+nO9T3+h9+svdab+Sh/QX+uD+ht9SH+rD+vv9BF9VB/T3+vj+gd9Qp/Up/RpfUb/qM/qn/Q57c+f3J//ejfKKBNjYkysiTU5TA6T0+Q0uUwuEzERE2fiTG6T2+QxeUw+k8/Em3hT0BQ055EhU8gUMlETNUVMEVPUFDXFTDHjjDMJJsGUNCVNKVPKlDalTRlTxpQ1ZU15U97cYe4wd5o7zV3mLnO3udtUNVVNdVPd1DA1TE1T09QytUxtU9vUMXVMXVPX1DP1TH1T3zQwDUxD09A0Mo1ME9PENDPNTHPT3LQwLUwr08q0Nq1NG9PGJJpE09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDNJJsn0ND1NL9PL9DF9TD/Tz/Q3/c0AM8Akm2QzyAwyg81gM8QMMUPNMDP8/ImqGWlGmdFmjBlrUkyKGW/GmwlmgploJprJZrJJNalmmplmppvpZqaZaWaZWWa2mW3mmrkmzaSZ+Wa+STfpZqFZaDJMhllsFpulZqlZbpablWalWW1Wm7Ww1qw3681Gs9FsNpvNVrPVbDfbzQ6zw+w0O81us9vsMXvMXrPX7DP7zH6z32SaTHPAHDAHzUFzyBwyh81hc8QcMcfMMXPcHDcnzAlzypwyZ0zei9+X3sTa7DaHvcrmtFfbXPYa+/dxPpvfxtsCtqDVNo/N+6vYWGuL2ptsMVvcOlvCJtibfxOXteVseVvB3mEr2jttpd/ENey9tqa9z9ay99vq9p5fxbXtA7aOfdTWRQSwjW1929Q2sI/ahvYx28g2tk1sU9vaPmXb2Kdton3GtrXP/iaebxfYlXaVXW3X2J12lz1lT9uD9ht7xv5ou9nutp99xfa3r9oB9jWbbAf+Jh5u37Ij7Eg7yo62Y+zY38ST7RSbaqfaafZdO93O+E2cZj+ws2y6nW3n2Ll23s/x+ZrS7Yd2of3IZtgAFtsldqldZpfbFf+/1iV2nV1vN9gd9hO72W6xW+02u/3SibDdZXfbT+0e+5k9YL+2++wXdr89ZDPtVz/H5x/fIfutPWy/s0fsUXvMfm+P2x/Uz7kjewHYH+339id7znoLhAQkSVFAMZSNYik75aCrKCddTbnoGorQtRRH11Fuup7yUF7KR/kpngpQQdJkyBJRSIWoMEXpBrpUXjEqTo5KUALdTCXpFipFt1Jpuo3K0O1UlspReapAd1BFupMq0V1Ume6mKlSVqlF1uodq0L1Uk+6jWnQ/1aYHqA49SHXpIapHD1N9eoQa0KPUkB6jRtSYmlBTakaPU3N6glpQS2pFT1Jreora0NOUSM9QW3qW2tHfqD09Rx3oeepIL1An6kxd6EXqSi9RN+pOSdSDetLL1It6Ux/qS/3oFepPr9IAeo2SaSANotdpML1BQ+hNGkrDaDi9RSNoJI2i0TSGxlIKjaPx9DZNoHdoIk2iyTSFUmkqTaN3aTrNoJn0Hs2i92k2zaG5NI/S6AOaTwsonT6khfQRZdAiWkxLaCkto+W0glbSKlpNa2gtraP1tIE20ibaTFtoK22j7fQx7aBPaCftot30Ke2hz2gvfU776AvaT19SJn1FB+hrOkjf0CH61nen7+gIHaVj9D0dpx/oBJ2kU3SaztCPdJZ+onPkCUIMRShDFQZhTJgtjA2zhznCq8Kc4dVhrvCaMBJeG8aF14W5w+vDPGHeMF+YP4wPC4QFQx2a0IYUhmGhsHAYDW8Ii4Q3hkVDDIuFxUMXlggTwpvDkuEtYanw1rB0eFtYJrw9LBuWCx+9v0J4R1gxvDOsFN4VVg7vDquEVcNqYfXwnrBGeG9YM7wvrBXeH5YKHwjrhA+GdcOHwnrhw2H98JGwQfho2DB8LGwUNg6bhE3DZuHjYfPwibBF2DJsFT4Ztg6fCtuET4eJ4TNh2/DZn+cfWPDH80lhj7Bn+HL4cuj9fXJudF40LfpBdH50QTQ9+mF0YfSjaEZ0UXRxdEl0aXRZdHl0RXRldFV0dXRNdG10XXR9dEPU++rZwKETTjrlAhfjsrlYl93lcFe5nO5ql8td4yLuWhfnrnO53fUuj8vr8rn8Lt4VcAWddsZZRy50hVxhF3U3uCLuRlfU3eSKueLOuRIuwTV1zVwz19w94Vq4lq6Ve9I96Z5yT7mn3dPuGdfWPevaub+59u4518E97553L7hOrrPr4l50Xd24XBfek0mup+vperlero/r4/q5fq6/6+8GuAEu2SW7QW6QG+wGuyFuiBvqhrrhbrgb4Ua4UW6UG+PGuBSX4sa78W6Cm+AmuoluspvsUl2qm+amueluuqs448JRZrvZbq6b69Jcmpvvzp8zpruFbqHLcBlusVvslrqlbrlb7la6lW61W+3WurVuvVvvNrqNbrPb7La6rW672+52uB1up7/mwqJuj9vr9rp9bp/b7750me4rd8B97Q66b9wh96077L5zR9xRd8x97467H9wJd9KdcqfdGfejO+t+cuecdymRcZHxkbcjEyLvRCZGJkUmR6ZEUiNTI9Mi70amR2ZEZkbei8yKvB+ZHZkTmRuZF0mLfBCZH1kQSY98GFkY+SiSEVkUWRxZElkaWRbxvsDm0BfyhX3U3+CL+Bt9UX+TL+aLe+dL+AR/sy/pb/Gl/K2+tL/Nl/G3+7K+nC/vH/ONfGPfxDf1zfzjvrl/wrfwLX0r/6Rv7Z/ybfzTPtE/49v6Z307/zff3j/nO/jnfUf/gu/kO/su/kXf1b/ku/nuPsn38D39y76X7+37+L6+n3/F9/ev+gH+NZ/sB/pB/nU/2L/hh/g3/VA/zA+PecuPuHSJDGN9ih/nx/u3/QT/jp/oJ/nJfopP9VP9NP+un+5n+Jn+PT/Lv+9n+zl+rp/n0/wHfr5f4NP9h36h/8hn+EWXbir75X6FX+lX+dV+jV/r1/n1foPf6Df5zX6L3+q3+e3+Y7/Df+J3+l1+t//U7/Gf+b3+c7/Pf+H3+y99pv/KH/Bf+4P+G3/If+sP++/8EX/UH/Pf++P+B3/Cn/Sn/Gl/xv/oz/qf/Dn+P2uMMcYYY3/KuMtD8euZC7fze/xOjvjFzj0B4Oot+TN/OX/+jHJtngvj3iK+dQQAnune8eFLW5UqSUlJF/fNkBAUngNw6W+CzouBy/EiaAVPQSK0hJK/W39v0fkM/YP1o7cB5PhFTixcji+v/zkAJv3O+o8/OXx+mfBU3P+w/hyAooUv52SHy/EiaPXz/ZWWUOoP6s/b/Jf1x/52/exfpAC0+EVOTrgcX64/AZ6AZyHxV3syxhhjjDHGGGMX9Bbl21+6/rz0Lz5/7/o8Xl3OyQaX4390fc4YY4wxxhhjjLEr77nOXZ5+PDGxZft/flDpf5X1pwcN4f9qZR787sB7gEs/UQDwLy4IcH4g/52PYtO/5VjJF986fz+19LQP4D+jlX/F4Ap/MDHGGGOMMcb+cpdP+n/9c3WlCmKMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxrKgf8evE7vSj5ExxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhi70v5fAAAA//+hiQIT") r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0xffffff31, &(0x7f0000000500)={&(0x7f0000000100)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x25dfdbfb, {{@in6=@private0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x2}, [@offload={0xc, 0x1c, {0x0, 0x4}}]}, 0xc4}}, 0x0) getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000)={[{@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x3, 0x4f1, &(0x7f0000000740)="$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") r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1b0) fdatasync(r7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x882) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0xffffffffffffffff, 0x2, 0x0, 0x2, 0x7}, 0x7f}) write$sndseq(r8, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) 3.27429851s ago: executing program 1 (id=413): openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x2000775) write$binfmt_elf64(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x2, 0x0, 0x0, 0x7fff, 0x2, 0x3e, 0xfffbffed, 0x294, 0x40, 0xcf, 0xf, 0x0, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0xf97, 0x4, 0xd, 0x1c8, 0xe6, 0x4, 0x3}], "", ['\x00']}, 0x178) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socket(0x1d, 0x803, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x1000803, &(0x7f0000002ac0)=ANY=[], 0x2, 0x1fb, &(0x7f0000000b00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, 0x0, 0x0) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) 3.112027562s ago: executing program 4 (id=414): r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") truncate(&(0x7f0000000140)='./file2\x00', 0x6400) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0xe4242, 0x5c) 2.974549522s ago: executing program 3 (id=415): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x5c}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) mmap$binder(&(0x7f00008d6000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x5) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000240)={0x3, @win={{0x7, 0x3, 0x81, 0x7ff}, 0x5, 0x6, &(0x7f00000000c0)={{0x8, 0xd, 0x1f64, 0x4}, &(0x7f0000000040)={{0x4, 0xdea, 0x174c745e, 0x9}}}, 0xf, &(0x7f0000000400)="00c4d4aa8570b5e2ab10b062d69c125b8d38f875aeae98ddb65b10023bab022de349045f3bf4e5a9ac16467420c9b27e6ac292f9323d94f991215edf11b9f9390a92762b1caf68dc9725dc124c2d78b7a3611be4b82fd90b259ca12ecff8fe9f0ad29236f140112ba7d3ee88590343483eba28e6163acd44327c7c89052d528c3e60b46b49ce867274e4468ed0db05c91e651577687716e4411573f207066bc44cb7b24dd3ef2481184a6df2d984670c18b404f29429048c85a2d957c0", 0x6}}) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, 0x0, &(0x7f00000002c0)) r7 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x18\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') socket$inet6(0xa, 0x2, 0x81) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x4}, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="010000002000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi5\x00', 0x400, 0x0) 2.287401144s ago: executing program 2 (id=416): mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prlimit64(0x0, 0x4, 0x0, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="020000000000800080001200080001007674693674"], 0xa0}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) get_mempolicy(0x0, &(0x7f0000000080), 0x1, &(0x7f0000ffe000/0x2000)=nil, 0x4) r2 = socket$kcm(0x29, 0x2, 0x0) socket$inet6(0xa, 0x803, 0x6) syz_pidfd_open(0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) close(r2) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, r5, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x400000000000000, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, 0x0) syz_fuse_handle_req(r4, &(0x7f0000002100)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x18, 0x0, 0x2, {0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_submit(0x0, 0x0, &(0x7f0000000780)) 919.91708ms ago: executing program 1 (id=417): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="ff27070200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0x1000}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) r8 = io_uring_setup(0x7d1, &(0x7f0000000580)={0x0, 0xddf5, 0x8, 0xfffffffe, 0x183}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r9}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) close_range(r8, r8, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c5}, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000), &(0x7f0000000580)={'U-', 0x25297a43}, 0x16, 0x2) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) 0s ago: executing program 3 (id=418): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeda}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) ptrace$setopts(0x4200, r1, 0x2, 0x3e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_procfs(r1, 0x0) read$FUSE(r2, &(0x7f0000004180)={0x2020}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)}, 0x4048081) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0xfff1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x404c083}, 0x20000050) kernel console output (not intermixed with test programs): ][ T5843] bridge_slave_1: entered promiscuous mode [ 70.710849][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.718119][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.725297][ T5827] bridge_slave_0: entered allmulticast mode [ 70.732272][ T5827] bridge_slave_0: entered promiscuous mode [ 70.739593][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.747012][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.754143][ T5826] bridge_slave_0: entered allmulticast mode [ 70.761368][ T5826] bridge_slave_0: entered promiscuous mode [ 70.794803][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.802166][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.809407][ T5827] bridge_slave_1: entered allmulticast mode [ 70.816412][ T5827] bridge_slave_1: entered promiscuous mode [ 70.823223][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.830791][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.838007][ T5826] bridge_slave_1: entered allmulticast mode [ 70.845007][ T5826] bridge_slave_1: entered promiscuous mode [ 70.867621][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.874942][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.882288][ T5840] bridge_slave_0: entered allmulticast mode [ 70.889408][ T5840] bridge_slave_0: entered promiscuous mode [ 70.922091][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.946148][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.953349][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.960966][ T5840] bridge_slave_1: entered allmulticast mode [ 70.968101][ T5840] bridge_slave_1: entered promiscuous mode [ 71.000124][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.034396][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.047074][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.067974][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.075187][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.082454][ T5835] bridge_slave_0: entered allmulticast mode [ 71.089621][ T5835] bridge_slave_0: entered promiscuous mode [ 71.112714][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.124420][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.144942][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.152357][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.159996][ T5835] bridge_slave_1: entered allmulticast mode [ 71.167134][ T5835] bridge_slave_1: entered promiscuous mode [ 71.176794][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.210454][ T5843] team0: Port device team_slave_0 added [ 71.230245][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.264066][ T5843] team0: Port device team_slave_1 added [ 71.295159][ T5827] team0: Port device team_slave_0 added [ 71.302912][ T5826] team0: Port device team_slave_0 added [ 71.321683][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.344495][ T5827] team0: Port device team_slave_1 added [ 71.352077][ T5826] team0: Port device team_slave_1 added [ 71.371836][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.382783][ T5840] team0: Port device team_slave_0 added [ 71.412156][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.419376][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.452813][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.454381][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.467811][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.475291][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.477440][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.509358][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.516325][ T5844] Bluetooth: hci1: command tx timeout [ 71.534052][ T5840] team0: Port device team_slave_1 added [ 71.592186][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.599682][ T5839] Bluetooth: hci2: command tx timeout [ 71.605755][ T5848] Bluetooth: hci4: command tx timeout [ 71.606375][ T5844] Bluetooth: hci3: command tx timeout [ 71.611648][ T5834] Bluetooth: hci0: command tx timeout [ 71.617244][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.648846][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.660884][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.668029][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.694688][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.707758][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.714822][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.740924][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.753623][ T5835] team0: Port device team_slave_0 added [ 71.771363][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.778447][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.805129][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.826428][ T5835] team0: Port device team_slave_1 added [ 71.832971][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.840089][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.866145][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.904795][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.911947][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.938204][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.972840][ T5843] hsr_slave_0: entered promiscuous mode [ 71.979434][ T5843] hsr_slave_1: entered promiscuous mode [ 72.000666][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.007802][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.033822][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.070203][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.077843][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.103804][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.167475][ T5826] hsr_slave_0: entered promiscuous mode [ 72.173808][ T5826] hsr_slave_1: entered promiscuous mode [ 72.180351][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 72.186365][ T5826] Cannot create hsr debugfs directory [ 72.197538][ T5827] hsr_slave_0: entered promiscuous mode [ 72.203877][ T5827] hsr_slave_1: entered promiscuous mode [ 72.210303][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 72.216183][ T5827] Cannot create hsr debugfs directory [ 72.272195][ T5840] hsr_slave_0: entered promiscuous mode [ 72.278682][ T5840] hsr_slave_1: entered promiscuous mode [ 72.284729][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 72.291534][ T5840] Cannot create hsr debugfs directory [ 72.356537][ T5835] hsr_slave_0: entered promiscuous mode [ 72.362896][ T5835] hsr_slave_1: entered promiscuous mode [ 72.369713][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 72.375502][ T5835] Cannot create hsr debugfs directory [ 72.893136][ T5843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.918668][ T5843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.929123][ T5843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.945854][ T5843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.991870][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.007175][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.033910][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.050992][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.121073][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.132229][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.160076][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.182550][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.261514][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.280701][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.317659][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.329160][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.376335][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.404614][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.421970][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.440015][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.451267][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.493195][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.536375][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.547749][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.554979][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.596429][ T5844] Bluetooth: hci1: command tx timeout [ 73.604281][ T177] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.611435][ T177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.657607][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.675431][ T5848] Bluetooth: hci4: command tx timeout [ 73.676222][ T5839] Bluetooth: hci2: command tx timeout [ 73.680903][ T5834] Bluetooth: hci0: command tx timeout [ 73.691817][ T5844] Bluetooth: hci3: command tx timeout [ 73.711971][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.719111][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.760745][ T3918] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.767949][ T3918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.804731][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.861622][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.878870][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.910479][ T3918] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.917621][ T3918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.943058][ T3918] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.950220][ T3918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.972436][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.009624][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.016850][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.066664][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.073858][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.114913][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.262444][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.313717][ T1303] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.320967][ T1303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.371399][ T3918] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.378611][ T3918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.474629][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.519679][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.634568][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.736585][ T5840] veth0_vlan: entered promiscuous mode [ 74.814565][ T5840] veth1_vlan: entered promiscuous mode [ 74.857907][ T5827] veth0_vlan: entered promiscuous mode [ 74.920621][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.940496][ T5827] veth1_vlan: entered promiscuous mode [ 74.951567][ T5840] veth0_macvtap: entered promiscuous mode [ 75.009892][ T5840] veth1_macvtap: entered promiscuous mode [ 75.082556][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.100263][ T5827] veth0_macvtap: entered promiscuous mode [ 75.124126][ T5827] veth1_macvtap: entered promiscuous mode [ 75.135159][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.166098][ T5826] veth0_vlan: entered promiscuous mode [ 75.177592][ T177] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.194208][ T177] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.204596][ T177] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.214475][ T5843] veth0_vlan: entered promiscuous mode [ 75.223914][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.236051][ T177] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.257329][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.278524][ T5826] veth1_vlan: entered promiscuous mode [ 75.289362][ T5843] veth1_vlan: entered promiscuous mode [ 75.318138][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.370919][ T2132] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.385118][ T2132] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.403501][ T2132] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.419288][ T2132] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.477882][ T177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.489171][ T5826] veth0_macvtap: entered promiscuous mode [ 75.495306][ T177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.500761][ T5826] veth1_macvtap: entered promiscuous mode [ 75.513711][ T5835] veth0_vlan: entered promiscuous mode [ 75.564188][ T5843] veth0_macvtap: entered promiscuous mode [ 75.579243][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.587409][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.603492][ T5843] veth1_macvtap: entered promiscuous mode [ 75.650514][ T5835] veth1_vlan: entered promiscuous mode [ 75.674850][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.682928][ T5844] Bluetooth: hci1: command tx timeout [ 75.700836][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.708919][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.716098][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.733927][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.752742][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.760393][ T5844] Bluetooth: hci2: command tx timeout [ 75.765443][ T5834] Bluetooth: hci0: command tx timeout [ 75.768911][ T5839] Bluetooth: hci4: command tx timeout [ 75.771720][ T5844] Bluetooth: hci3: command tx timeout [ 75.790918][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.802619][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.827548][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.870626][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.907939][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.925043][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.934539][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.962142][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.988925][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.123766][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.155888][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.164197][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.172894][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.181645][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.325373][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 76.385946][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.407106][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.452942][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.470247][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.545618][ T5835] veth0_macvtap: entered promiscuous mode [ 76.618669][ T5835] veth1_macvtap: entered promiscuous mode [ 76.844208][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.870556][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.964698][ T5957] xt_hashlimit: max too large, truncated to 1048576 [ 76.978031][ T5957] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 77.418884][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.437017][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.545588][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.562298][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.597469][ T5959] loop0: detected capacity change from 0 to 128 [ 77.604869][ T5959] ======================================================= [ 77.604869][ T5959] WARNING: The mand mount option has been deprecated and [ 77.604869][ T5959] and is ignored by this kernel. Remove the mand [ 77.604869][ T5959] option from the mount to silence this warning. [ 77.604869][ T5959] ======================================================= [ 77.659022][ T5959] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 77.708003][ T5959] hpfs: filesystem error: improperly stopped [ 77.725317][ T5959] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 77.733168][ T5959] hpfs: You really don't want any checks? You are crazy... [ 77.762256][ T2132] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.772820][ T5844] Bluetooth: hci1: command tx timeout [ 77.776488][ T5959] hpfs: hpfs_map_sector(): read error [ 77.790938][ T2132] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.815503][ T5959] hpfs: code page support is disabled [ 77.835870][ T5844] Bluetooth: hci4: command tx timeout [ 77.845657][ T5839] Bluetooth: hci0: command tx timeout [ 77.846224][ T5834] Bluetooth: hci2: command tx timeout [ 77.851207][ T5844] Bluetooth: hci3: command tx timeout [ 77.917508][ T5959] hpfs: hpfs_map_4sectors(): unaligned read [ 77.924389][ T5959] hpfs: hpfs_map_4sectors(): unaligned read [ 77.961159][ T2132] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.970540][ T5959] hpfs: filesystem error: unable to find root dir [ 78.104202][ T5968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 78.583728][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.669921][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.759804][ T177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.831057][ T177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.889293][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 79.138048][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.170559][ T5959] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.196429][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 79.353182][ T5973] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 79.500854][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.542879][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.242557][ T3535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.258245][ T3535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.470867][ T5959] hpfs: hpfs_map_4sectors(): unaligned read [ 80.853661][ T5997] loop3: detected capacity change from 0 to 164 [ 80.888293][ T5997] ISOFS: unable to read i-node block [ 80.893747][ T5997] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 81.216836][ T5996] warning: `syz.3.10' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.711691][ T6006] loop0: detected capacity change from 0 to 128 [ 81.740614][ T6002] loop4: detected capacity change from 0 to 128 [ 81.747362][ T6006] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 81.848805][ T6002] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 81.873954][ T6006] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 81.972664][ T6002] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 83.675394][ T6019] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 84.412649][ T6023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12'. [ 87.003749][ T778] cfg80211: failed to load regulatory.db [ 88.108833][ T6030] gfs2: not a GFS2 filesystem [ 88.933182][ T6036] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 89.172475][ T5843] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.654864][ T6047] loop1: detected capacity change from 0 to 1024 [ 89.667780][ T6047] EXT4-fs: Ignoring removed oldalloc option [ 89.673807][ T6047] EXT4-fs: Ignoring removed bh option [ 90.920632][ T6048] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 90.964463][ T6047] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.165629][ T6065] loop4: detected capacity change from 0 to 256 [ 91.873622][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.183003][ T6071] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.156540][ T5837] IPVS: starting estimator thread 0... [ 94.355450][ T6085] IPVS: using max 40 ests per chain, 96000 per kthread [ 94.398187][ T6086] QAT: failed to copy from user. [ 95.475750][ T6091] loop4: detected capacity change from 0 to 32768 [ 95.563138][ T6091] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 95.700753][ T6091] XFS (loop4): Ending clean mount [ 97.471527][ T6112] loop0: detected capacity change from 0 to 1024 [ 97.527907][ T6112] EXT4-fs: Ignoring removed i_version option [ 97.533959][ T6112] EXT4-fs: inline encryption not supported [ 97.558378][ T5843] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 97.583401][ T6112] EXT4-fs: Ignoring removed i_version option [ 97.909960][ T6115] loop3: detected capacity change from 0 to 1024 [ 100.500129][ T6133] program syz.4.30 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.855064][ T50] hfsplus: b-tree write err: -5, ino 4 [ 101.592508][ T6127] capability: warning: `syz.0.34' uses deprecated v2 capabilities in a way that may be insecure [ 102.497113][ T6148] bridge0: port 3(team0) entered blocking state [ 102.503444][ T6148] bridge0: port 3(team0) entered disabled state [ 102.509936][ T6148] team0: entered allmulticast mode [ 102.515043][ T6148] team_slave_0: entered allmulticast mode [ 102.520793][ T6148] team_slave_1: entered allmulticast mode [ 102.552071][ T6148] team0: entered promiscuous mode [ 102.557411][ T6148] team_slave_0: entered promiscuous mode [ 102.563223][ T6148] team_slave_1: entered promiscuous mode [ 102.569904][ T6148] bridge0: port 3(team0) entered blocking state [ 102.576336][ T6148] bridge0: port 3(team0) entered forwarding state [ 102.777173][ T6156] Zero length message leads to an empty skb [ 103.307588][ T6158] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.005346][ T6155] loop1: detected capacity change from 0 to 32768 [ 104.119703][ T6155] JBD2: Ignoring recovery information on journal [ 104.236131][ T6155] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 106.842771][ T6179] ptrace attach of ""[6180] was attempted by "./syz-executor exec"[6179] [ 108.065067][ T5826] ocfs2: Unmounting device (7,1) on (node local) [ 110.833428][ T6198] vlan2: entered promiscuous mode [ 110.846707][ T6198] bridge0: entered promiscuous mode [ 111.869755][ T6198] vlan2: entered allmulticast mode [ 111.875016][ T6198] bridge0: entered allmulticast mode [ 111.910341][ T6214] capability: warning: `syz.3.51' uses 32-bit capabilities (legacy support in use) [ 113.161897][ T6231] Cannot find set identified by id 0 to match [ 114.752815][ T6235] loop2: detected capacity change from 0 to 256 [ 115.485857][ T6235] FAT-fs (loop2): Directory bread(block 64) failed [ 115.588896][ T6235] FAT-fs (loop2): Directory bread(block 65) failed [ 115.706613][ T6235] FAT-fs (loop2): Directory bread(block 66) failed [ 115.781044][ T6235] FAT-fs (loop2): Directory bread(block 67) failed [ 115.815845][ T6237] loop3: detected capacity change from 0 to 2048 [ 116.051243][ T6245] netlink: 24 bytes leftover after parsing attributes in process `syz.4.58'. [ 116.420670][ T6235] FAT-fs (loop2): Directory bread(block 68) failed [ 116.620571][ T6235] FAT-fs (loop2): Directory bread(block 69) failed [ 116.758848][ T6235] FAT-fs (loop2): Directory bread(block 70) failed [ 116.788129][ T6235] FAT-fs (loop2): Directory bread(block 71) failed [ 116.794810][ T6235] FAT-fs (loop2): Directory bread(block 72) failed [ 116.806542][ T6235] FAT-fs (loop2): Directory bread(block 73) failed [ 116.830040][ T6237] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.784913][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.59'. [ 118.239875][ T6255] loop4: detected capacity change from 0 to 512 [ 118.287557][ T6255] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 118.388094][ T6255] EXT4-fs (loop4): mount failed [ 118.424183][ T6262] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 118.456251][ T6262] CIFS: Unable to determine destination address [ 118.862638][ T6266] ceph: No mds server is up or the cluster is laggy [ 118.915892][ T6269] vxfs: WRONG superblock magic 00000000 at 1 [ 118.924223][ T6269] vxfs: WRONG superblock magic 00000000 at 8 [ 118.931420][ T6269] vxfs: can't find superblock. [ 119.066093][ T6269] loop3: detected capacity change from 0 to 2048 [ 119.200336][ T6269] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.297963][ T5998] libceph: connect (1)[c::]:6789 error -101 [ 119.309541][ T5998] libceph: mon0 (1)[c::]:6789 connect error [ 120.027629][ T6276] process 'syz.3.65' launched '/dev/fd/8' with NULL argv: empty string added [ 120.676774][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.60'. [ 120.689625][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.60'. [ 121.451984][ T6279] libceph: resolve '. [ 121.451984][ T6279] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 121.451984][ T6279] ' (ret=-3): failed [ 121.590320][ T6288] loop3: detected capacity change from 0 to 128 [ 122.099300][ T6288] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 122.112568][ T6288] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 123.610104][ T5840] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 123.881336][ T6303] ucma_write: process 55 (syz.1.67) changed security contexts after opening file descriptor, this is not allowed. [ 126.155101][ T6315] loop4: detected capacity change from 0 to 32768 [ 126.184249][ T6315] JBD2: Ignoring recovery information on journal [ 126.224203][ T6315] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 126.493752][ T6319] loop3: detected capacity change from 0 to 32768 [ 126.540797][ T5843] ocfs2: Unmounting device (7,4) on (node local) [ 126.555144][ T6319] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 126.967553][ T6319] XFS (loop3): Ending clean mount [ 128.635404][ T5840] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 128.748061][ T6344] netlink: 20 bytes leftover after parsing attributes in process `syz.4.75'. [ 129.355899][ T5998] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 129.413755][ T6351] loop1: detected capacity change from 0 to 16 [ 129.449568][ T6351] erofs (device loop1): mounted with root inode @ nid 36. [ 129.971811][ T30] audit: type=1400 audit(1763649025.167:2): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name="://" pid=6349 comm="syz.1.80" [ 130.233188][ T5998] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 130.428746][ T6362] loop3: detected capacity change from 0 to 164 [ 130.499547][ T6362] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 130.515121][ T6362] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 131.016611][ T5998] usb 3-1: config 0 interface 0 has no altsetting 0 [ 131.050370][ T5998] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 131.087851][ T5998] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 131.129467][ T5998] usb 3-1: Product: syz [ 131.145332][ T5998] usb 3-1: Manufacturer: syz [ 131.168400][ T5998] usb 3-1: SerialNumber: syz [ 131.250023][ T5998] usb 3-1: config 0 descriptor?? [ 131.325026][ T5998] usb 3-1: selecting invalid altsetting 0 [ 131.471487][ T6070] usb 3-1: USB disconnect, device number 2 [ 131.550649][ T5883] udevd[5883]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.774820][ T6366] Cannot find set identified by id 0 to match [ 132.880913][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.887354][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.343892][ T6378] overlayfs: conflicting options: nfs_export=on,index=off [ 133.812433][ T6379] comedi comedi0: Minor 3 specified more than once! [ 134.486404][ T6381] loop1: detected capacity change from 0 to 32768 [ 134.499485][ T6381] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.84 (6381) [ 134.524195][ T6381] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 134.534469][ T6381] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 134.905130][ T6393] program syz.3.85 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.725457][ T5924] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 135.919342][ T5924] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 135.963921][ T6381] BTRFS info (device loop1): enabling ssd optimizations [ 135.971153][ T6381] BTRFS info (device loop1): turning on async discard [ 135.978016][ T6381] BTRFS info (device loop1): enabling free space tree [ 136.005574][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 136.117490][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 136.133165][ T5924] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 136.143138][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.153665][ T5924] usb 4-1: Product: syz [ 136.160465][ T5924] usb 4-1: Manufacturer: syz [ 136.165088][ T5924] usb 4-1: SerialNumber: syz [ 136.182463][ T5924] usb 4-1: config 0 descriptor?? [ 136.648716][ T30] audit: type=1800 audit(1763649031.777:3): pid=6409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.84" name="file2" dev="loop1" ino=261 res=0 errno=0 [ 138.169801][ T5826] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 138.862706][ T6419] loop4: detected capacity change from 0 to 128 [ 138.902940][ T6419] vfat: Unknown parameter '184467440737095516151844674407370955161501777777777777777777777' [ 140.226356][ T6428] o2cb: This node has not been configured. [ 140.233139][ T6428] o2cb: Cluster check failed. Fix errors before retrying. [ 140.241210][ T6428] (syz.4.92,6428,1):user_dlm_register:674 ERROR: status = -22 [ 140.248762][ T6428] (syz.4.92,6428,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 140.263430][ T6428] o2cb: This node has not been configured. [ 140.269333][ T6428] o2cb: Cluster check failed. Fix errors before retrying. [ 140.276643][ T6428] (syz.4.92,6428,1):user_dlm_register:674 ERROR: status = -22 [ 140.284149][ T6428] (syz.4.92,6428,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 140.296945][ T6428] o2cb: This node has not been configured. [ 140.302863][ T6428] o2cb: Cluster check failed. Fix errors before retrying. [ 140.310182][ T6428] (syz.4.92,6428,1):user_dlm_register:674 ERROR: status = -22 [ 140.317765][ T6428] (syz.4.92,6428,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 142.116137][ T6438] loop4: detected capacity change from 0 to 1024 [ 142.262733][ T6438] EXT4-fs: Ignoring removed orlov option [ 142.383891][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 142.397010][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 142.405120][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 142.423815][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 142.431987][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 142.435670][ T6438] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.711949][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.779931][ T5844] Bluetooth: hci5: command tx timeout [ 144.790017][ T6460] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 146.686779][ T6477] tipc: Can't bind to reserved service type 0 [ 146.815438][ T5844] Bluetooth: hci5: command tx timeout [ 146.957727][ T5924] iguanair 4-1:0.0: failed to get version [ 148.044750][ T6483] loop2: detected capacity change from 0 to 512 [ 148.238439][ T6483] EXT4-fs (loop2): Test dummy encryption mode enabled [ 148.245299][ T6483] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 148.258353][ T6483] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 148.550784][ T5924] iguanair 4-1:0.0: probe with driver iguanair failed with error -110 [ 148.587202][ T6483] EXT4-fs (loop2): 1 truncate cleaned up [ 148.599659][ T5924] usb 4-1: USB disconnect, device number 2 [ 148.602658][ T6483] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.689834][ T30] audit: type=1800 audit(1763649043.997:4): pid=6482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.103" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 148.876661][ T5844] Bluetooth: hci5: command tx timeout [ 149.040152][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.072847][ T6489] loop1: detected capacity change from 0 to 256 [ 149.127861][ T6489] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x7b82335c, utbl_chksum : 0xe619d30d) [ 149.723895][ T6495] loop2: detected capacity change from 0 to 2048 [ 149.763211][ T6495] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 149.783006][ T6495] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.217823][ T6146] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.441951][ T6503] bond1: option downdelay: invalid value (18446744073709551615) [ 150.449772][ T6503] bond1: option downdelay: allowed values 0 - 2147483647 [ 150.556555][ T6503] bond1 (unregistering): Released all slaves [ 151.025653][ T5844] Bluetooth: hci5: command tx timeout [ 151.110391][ T6146] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.162711][ T6441] chnl_net:caif_netlink_parms(): no params data found [ 151.336816][ T6517] loop2: detected capacity change from 0 to 8 [ 151.373807][ T5884] udevd[5884]: incorrect cramfs checksum on /dev/loop2 [ 151.375987][ T6517] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 151.547459][ T6146] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.574562][ T5884] udevd[5884]: incorrect cramfs checksum on /dev/loop2 [ 151.881856][ T6523] input: syz0 as /devices/virtual/input/input7 [ 154.677737][ T6146] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.823720][ T6541] program syz.2.113 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.839720][ T6541] tmpfs: Unknown parameter '/dev/loop#' [ 155.566078][ T6543] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 155.975960][ T6441] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.992430][ T6441] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.033372][ T6441] bridge_slave_0: entered allmulticast mode [ 156.041728][ T6441] bridge_slave_0: entered promiscuous mode [ 156.164470][ T6441] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.206991][ T6441] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.239168][ T6441] bridge_slave_1: entered allmulticast mode [ 156.254102][ T6547] loop3: detected capacity change from 0 to 1024 [ 156.266530][ T6547] EXT4-fs: Ignoring removed oldalloc option [ 156.272580][ T6547] EXT4-fs: Ignoring removed bh option [ 157.167339][ T6441] bridge_slave_1: entered promiscuous mode [ 157.517195][ T6547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.647761][ T6565] syz.4.118 uses obsolete (PF_INET,SOCK_PACKET) [ 158.111425][ T6568] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 158.222125][ T6567] vcan0: tx drop: invalid da for name 0x0000000000000800 [ 158.332736][ T6441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.414813][ T6441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.030307][ T6575] loop1: detected capacity change from 0 to 512 [ 159.168751][ T6577] loop2: detected capacity change from 0 to 8 [ 159.190801][ T6577] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 159.390330][ T5979] udevd[5979]: incorrect cramfs checksum on /dev/loop2 [ 159.429045][ T6146] bridge_slave_1: left allmulticast mode [ 159.441504][ T5979] udevd[5979]: incorrect cramfs checksum on /dev/loop2 [ 159.449751][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.467579][ T6146] bridge_slave_1: left promiscuous mode [ 159.517130][ T6146] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.640542][ T6584] binder: 6579:6584 ioctl 40182103 200000000300 returned -22 [ 160.040831][ T6146] bridge_slave_0: left allmulticast mode [ 160.149501][ T6146] bridge_slave_0: left promiscuous mode [ 160.249645][ T6146] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.090967][ T5884] udevd[5884]: incorrect cramfs checksum on /dev/loop2 [ 161.406664][ T6592] loop3: detected capacity change from 0 to 164 [ 161.632264][ T6596] loop4: detected capacity change from 0 to 1024 [ 163.977135][ T6608] loop4: detected capacity change from 0 to 256 [ 164.071634][ T6608] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x7b82335c, utbl_chksum : 0xe619d30d) [ 164.778724][ T6146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.824630][ T6146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.852778][ T6146] bond0 (unregistering): Released all slaves [ 165.561517][ T6612] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 165.589232][ T6615] sch_tbf: burst 14 is lower than device lo mtu (65550) ! [ 165.639081][ T6441] team0: Port device team_slave_0 added [ 165.668562][ T6441] team0: Port device team_slave_1 added [ 166.861376][ T6629] netlink: 'syz.2.129': attribute type 10 has an invalid length. [ 167.222372][ T6633] overlayfs: failed to resolve './file0': -2 [ 168.168688][ T6639] loop1: detected capacity change from 0 to 8 [ 168.192760][ T6639] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 168.301858][ T6640] netlink: 88 bytes leftover after parsing attributes in process `syz.3.131'. [ 168.311240][ T6640] netlink: 48 bytes leftover after parsing attributes in process `syz.3.131'. [ 168.787720][ T6441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.794699][ T6441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.830857][ T5884] udevd[5884]: incorrect cramfs checksum on /dev/loop1 [ 168.896091][ T6441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.012422][ T5884] udevd[5884]: incorrect cramfs checksum on /dev/loop1 [ 169.127768][ T6629] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.167040][ T6629] bond0: (slave team0): Enslaving as an active interface with an up link [ 169.362964][ T6441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.885832][ T6441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.912351][ T6441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.185489][ T6653] loop4: detected capacity change from 0 to 8 [ 170.401818][ T6649] loop3: detected capacity change from 0 to 40427 [ 170.615200][ T6649] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 170.623395][ T6649] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 170.634151][ T6649] F2FS-fs (loop3): invalid crc value [ 170.649188][ T5884] udevd[5884]: incorrect cramfs checksum on /dev/loop4 [ 170.680765][ T6653] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 170.742407][ T6649] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 170.765126][ T6649] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 170.772515][ T6649] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 170.961295][ T5884] udevd[5884]: incorrect cramfs checksum on /dev/loop4 [ 172.505396][ T30] audit: type=1800 audit(1763649066.687:5): pid=6664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.133" name="file1" dev="loop3" ino=11 res=0 errno=0 [ 172.556781][ T5840] syz-executor: attempt to access beyond end of device [ 172.556781][ T5840] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 172.944080][ T5840] CPU: 0 UID: 0 PID: 5840 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 172.944105][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 172.944118][ T5840] Call Trace: [ 172.944126][ T5840] [ 172.944133][ T5840] dump_stack_lvl+0x189/0x250 [ 172.944172][ T5840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.944197][ T5840] ? __pfx_queue_work_on+0x10/0x10 [ 172.944218][ T5840] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 172.944242][ T5840] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 172.944286][ T5840] f2fs_handle_critical_error+0x37c/0x540 [ 172.944313][ T5840] f2fs_write_end_io+0x94b/0xc10 [ 172.944353][ T5840] __submit_merged_bio+0x256/0x6a0 [ 172.944369][ T5840] ? up_write+0x1a8/0x430 [ 172.944391][ T5840] __submit_merged_write_cond+0x44c/0x530 [ 172.944426][ T5840] f2fs_sync_node_pages+0x1479/0x15e0 [ 172.944474][ T5840] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 172.944496][ T5840] ? f2fs_write_checkpoint+0xd4c/0x2440 [ 172.944515][ T5840] ? __pfx_hlock_conflict+0x10/0x10 [ 172.944568][ T5840] ? f2fs_write_checkpoint+0xdad/0x2440 [ 172.944594][ T5840] ? up_write+0x1a8/0x430 [ 172.944608][ T5840] ? do_raw_spin_unlock+0x122/0x240 [ 172.944631][ T5840] f2fs_write_checkpoint+0xdde/0x2440 [ 172.944650][ T5840] ? __lock_acquire+0xab9/0xd20 [ 172.944697][ T5840] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 172.944774][ T5840] kill_f2fs_super+0x2cc/0x6d0 [ 172.944800][ T5840] ? __pfx_kill_f2fs_super+0x10/0x10 [ 172.944837][ T5840] ? shrinker_free+0x2ce/0x3e0 [ 172.944862][ T5840] deactivate_locked_super+0xbc/0x130 [ 172.944879][ T5840] cleanup_mnt+0x425/0x4c0 [ 172.944896][ T5840] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.944915][ T5840] task_work_run+0x1d4/0x260 [ 172.944935][ T5840] ? __pfx_task_work_run+0x10/0x10 [ 172.944958][ T5840] ? exit_to_user_mode_loop+0x55/0x4f0 [ 172.944983][ T5840] exit_to_user_mode_loop+0xff/0x4f0 [ 172.945003][ T5840] ? rcu_is_watching+0x15/0xb0 [ 172.945024][ T5840] do_syscall_64+0x2e9/0xfa0 [ 172.945042][ T5840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.945058][ T5840] ? clear_bhb_loop+0x60/0xb0 [ 172.945079][ T5840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.945095][ T5840] RIP: 0033:0x7fc738990a77 [ 172.945116][ T5840] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 172.945129][ T5840] RSP: 002b:00007ffc3177c618 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 172.945146][ T5840] RAX: 0000000000000000 RBX: 00007fc738a13d7d RCX: 00007fc738990a77 [ 172.945157][ T5840] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc3177c6d0 [ 172.945167][ T5840] RBP: 00007ffc3177c6d0 R08: 0000000000000000 R09: 0000000000000000 [ 172.945176][ T5840] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc3177d760 [ 172.945187][ T5840] R13: 00007fc738a13d7d R14: 0000000000029ba4 R15: 00007ffc3177d7a0 [ 172.945221][ T5840] [ 173.262086][ T6671] fuse: Bad value for 'fd' [ 173.266885][ T5840] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 174.488983][ T6441] hsr_slave_0: entered promiscuous mode [ 174.512098][ T6441] hsr_slave_1: entered promiscuous mode [ 174.533907][ T6441] debugfs: 'hsr0' already exists in 'hsr' [ 174.549767][ T6441] Cannot create hsr debugfs directory [ 175.215004][ T6696] loop4: detected capacity change from 0 to 8 [ 175.337051][ T6696] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 175.367875][ T5884] udevd[5884]: incorrect cramfs checksum on /dev/loop4 [ 175.533893][ T5884] udevd[5884]: incorrect cramfs checksum on /dev/loop4 [ 175.676598][ T6146] hsr_slave_0: left promiscuous mode [ 175.729809][ T6708] tmpfs: Bad value for 'mpol' [ 175.781123][ T6146] hsr_slave_1: left promiscuous mode [ 175.826307][ T6146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.835714][ T6146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.890115][ T6146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.951209][ T6146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.846857][ T6146] veth1_macvtap: left promiscuous mode [ 176.882168][ T6146] veth0_macvtap: left promiscuous mode [ 176.891950][ T6146] veth1_vlan: left promiscuous mode [ 176.923773][ T6146] veth0_vlan: left promiscuous mode [ 180.407272][ T6146] team0 (unregistering): Port device team_slave_1 removed [ 180.503464][ T6746] loop4: detected capacity change from 0 to 16 [ 181.072996][ T6746] erofs (device loop4): mounted with root inode @ nid 36. [ 181.157961][ T6746] x_tables: duplicate underflow at hook 1 [ 181.209987][ T6146] team0 (unregistering): Port device team_slave_0 removed [ 182.962359][ T6760] vlan2: entered promiscuous mode [ 182.967741][ T6760] bridge0: entered promiscuous mode [ 183.053320][ T6760] vlan2: entered allmulticast mode [ 183.060508][ T6760] bridge0: entered allmulticast mode [ 184.352099][ T6772] netlink: 28 bytes leftover after parsing attributes in process `syz.2.153'. [ 184.366313][ T6772] binder: 6771:6772 ioctl 4018620d 0 returned -22 [ 185.958060][ T6789] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 185.985396][ T6789] netlink: 20 bytes leftover after parsing attributes in process `syz.4.156'. [ 188.757845][ T6070] libceph: connect (1)[c::]:6789 error -101 [ 188.848657][ T6070] libceph: mon0 (1)[c::]:6789 connect error [ 188.901558][ T6802] loop3: detected capacity change from 0 to 256 [ 189.127675][ T6070] libceph: connect (1)[c::]:6789 error -101 [ 189.134831][ T6804] ceph: No mds server is up or the cluster is laggy [ 189.180228][ T6070] libceph: mon0 (1)[c::]:6789 connect error [ 189.218745][ T6802] FAT-fs (loop3): Directory bread(block 64) failed [ 189.254641][ T6802] FAT-fs (loop3): Directory bread(block 65) failed [ 189.355496][ T6802] FAT-fs (loop3): Directory bread(block 66) failed [ 189.418566][ T6802] FAT-fs (loop3): Directory bread(block 67) failed [ 189.454336][ T6802] FAT-fs (loop3): Directory bread(block 68) failed [ 189.486411][ T6802] FAT-fs (loop3): Directory bread(block 69) failed [ 189.517364][ T6441] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 189.535454][ T6802] FAT-fs (loop3): Directory bread(block 70) failed [ 189.543408][ T6802] FAT-fs (loop3): Directory bread(block 71) failed [ 189.573915][ T6819] loop1: detected capacity change from 0 to 1024 [ 189.580186][ T6441] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 189.601178][ T6802] FAT-fs (loop3): Directory bread(block 72) failed [ 189.616431][ T6819] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 189.655980][ T6802] FAT-fs (loop3): Directory bread(block 73) failed [ 189.656610][ T6441] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 189.687466][ T6819] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 189.706939][ T6441] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 189.714394][ T6819] EXT4-fs (loop1): orphan cleanup on readonly fs [ 189.723120][ T6819] EXT4-fs error (device loop1): ext4_free_blocks:6706: comm syz.1.160: Freeing blocks not in datazone - block = 0, count = 4096 [ 189.936906][ T6819] EXT4-fs (loop1): 1 orphan inode deleted [ 189.951793][ T6819] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 190.861957][ T5839] Bluetooth: hci5: command 0x0405 tx timeout [ 194.633479][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.645369][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.677141][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.236962][ T6441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.271287][ T6441] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.288273][ T3675] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.295505][ T3675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.464475][ T30] audit: type=1326 audit(1763649090.767:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56a78f749 code=0x7ffc0000 [ 195.511704][ T5985] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.535418][ T5985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.536641][ T6859] loop2: detected capacity change from 0 to 128 [ 195.549580][ T6859] adfs: Bad value for 'gid' [ 195.554076][ T6859] adfs: Bad value for 'gid' [ 196.033287][ T30] audit: type=1326 audit(1763649090.767:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56a78f749 code=0x7ffc0000 [ 196.084433][ T6859] loop2: detected capacity change from 0 to 128 [ 196.099840][ T6859] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 196.111291][ T6852] tipc: Started in network mode [ 196.118702][ T6859] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 196.140583][ T6852] tipc: Node identity ac1414aa, cluster identity 4711 [ 196.155496][ T30] audit: type=1326 audit(1763649090.767:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7fd56a78f749 code=0x7ffc0000 [ 196.177798][ T30] audit: type=1326 audit(1763649090.767:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56a78f749 code=0x7ffc0000 [ 196.202289][ T6852] tipc: Enabled bearer , priority 10 [ 196.213322][ T30] audit: type=1326 audit(1763649090.767:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56a78f749 code=0x7ffc0000 [ 196.387650][ T6853] tipc: Enabled bearer , priority 0 [ 196.506835][ T30] audit: type=1326 audit(1763649090.767:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fd56a78f749 code=0x7ffc0000 [ 196.561584][ T6871] loop3: detected capacity change from 0 to 512 [ 196.638279][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 196.715388][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 196.730316][ T30] audit: type=1326 audit(1763649090.847:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56a78f749 code=0x7ffc0000 [ 197.200201][ T30] audit: type=1326 audit(1763649090.847:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56a78f749 code=0x7ffc0000 [ 197.518902][ T6871] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.714311][ T30] audit: type=1326 audit(1763649091.167:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd56a78f749 code=0x7ffc0000 [ 197.785557][ T6871] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.817159][ T6070] tipc: Node number set to 2886997162 [ 198.108542][ T30] audit: type=1326 audit(1763649091.177:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56a78f749 code=0x7ffc0000 [ 198.346331][ T5916] IPVS: starting estimator thread 0... [ 198.465359][ T6882] IPVS: using max 29 ests per chain, 69600 per kthread [ 198.555387][ T6070] IPVS: starting estimator thread 0... [ 198.645328][ T6887] IPVS: using max 31 ests per chain, 74400 per kthread [ 198.809717][ T6892] loop2: detected capacity change from 0 to 512 [ 198.902980][ T6895] loop4: detected capacity change from 0 to 164 [ 198.907574][ T6892] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.945523][ T6892] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.962768][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.035383][ T6441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.953123][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 200.966353][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 200.975052][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 200.983886][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 200.992321][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 201.030476][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.030674][ T6921] loop1: detected capacity change from 0 to 4096 [ 201.283341][ T6927] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 201.851216][ T6934] atomic_op ffff888030b3f998 conn xmit_atomic 0000000000000000 [ 202.748253][ T6933] loop3: detected capacity change from 0 to 4096 [ 202.845504][ T6942] gfs2: not a GFS2 filesystem [ 203.038520][ T5839] Bluetooth: hci1: command tx timeout [ 203.334133][ T6933] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 205.125339][ T5839] Bluetooth: hci1: command tx timeout [ 205.975746][ T6959] loop1: detected capacity change from 0 to 64 [ 206.463080][ T6948] IPVS: set_ctl: invalid protocol: 92 10.1.1.2:20001 [ 206.783296][ T6965] loop2: detected capacity change from 0 to 512 [ 206.836412][ T6966] loop3: detected capacity change from 0 to 128 [ 206.879422][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 206.912615][ T6970] loop1: detected capacity change from 0 to 64 [ 206.920529][ T6966] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 206.938560][ T6966] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 206.973157][ T6965] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.986181][ T6965] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.275901][ T5834] Bluetooth: hci1: command tx timeout [ 208.055196][ T6923] chnl_net:caif_netlink_parms(): no params data found [ 208.409886][ T6978] syz.1.184: attempt to access beyond end of device [ 208.409886][ T6978] loop1: rw=2049, sector=65, nr_sectors = 1 limit=64 [ 208.423493][ T6978] Buffer I/O error on dev loop1, logical block 65, lost async page write [ 208.433044][ T6978] syz.1.184: attempt to access beyond end of device [ 208.433044][ T6978] loop1: rw=2049, sector=66, nr_sectors = 1 limit=64 [ 208.446238][ T6978] Buffer I/O error on dev loop1, logical block 66, lost async page write [ 208.455006][ T6978] syz.1.184: attempt to access beyond end of device [ 208.455006][ T6978] loop1: rw=2049, sector=67, nr_sectors = 1 limit=64 [ 208.468257][ T6978] Buffer I/O error on dev loop1, logical block 67, lost async page write [ 208.478236][ T6978] syz.1.184: attempt to access beyond end of device [ 208.478236][ T6978] loop1: rw=2049, sector=68, nr_sectors = 1 limit=64 [ 208.493094][ T6978] Buffer I/O error on dev loop1, logical block 68, lost async page write [ 208.501684][ T6978] syz.1.184: attempt to access beyond end of device [ 208.501684][ T6978] loop1: rw=2049, sector=72, nr_sectors = 1 limit=64 [ 208.514856][ T6978] Buffer I/O error on dev loop1, logical block 72, lost async page write [ 208.523533][ T6978] syz.1.184: attempt to access beyond end of device [ 208.523533][ T6978] loop1: rw=2049, sector=73, nr_sectors = 1 limit=64 [ 208.537589][ T6978] Buffer I/O error on dev loop1, logical block 73, lost async page write [ 208.546230][ T6978] syz.1.184: attempt to access beyond end of device [ 208.546230][ T6978] loop1: rw=2049, sector=76, nr_sectors = 1 limit=64 [ 208.559569][ T6978] Buffer I/O error on dev loop1, logical block 76, lost async page write [ 208.568104][ T6978] syz.1.184: attempt to access beyond end of device [ 208.568104][ T6978] loop1: rw=2049, sector=77, nr_sectors = 1 limit=64 [ 208.581274][ T6978] Buffer I/O error on dev loop1, logical block 77, lost async page write [ 208.948416][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 208.948433][ T30] audit: type=1800 audit(1763649104.287:57): pid=6976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.183" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 209.279132][ T6989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.182'. [ 209.962995][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.075370][ T5834] Bluetooth: hci1: command tx timeout [ 210.099264][ T5840] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 211.967078][ T7000] veth1_macvtap: left promiscuous mode [ 212.050155][ T7006] IPVS: set_ctl: invalid protocol: 29 172.20.20.187:20000 [ 212.057752][ T7010] loop2: detected capacity change from 0 to 256 [ 214.937245][ T6923] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.952343][ T6923] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.132491][ T6923] bridge_slave_0: entered allmulticast mode [ 215.192387][ T7039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.195'. [ 215.321896][ T6923] bridge_slave_0: entered promiscuous mode [ 215.414580][ T7042] ptrace attach of "./syz-executor exec"[7037] was attempted by "./syz-executor exec"[7042] [ 215.433798][ T7043] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 215.474145][ T6923] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.524872][ T6923] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.617849][ T6923] bridge_slave_1: entered allmulticast mode [ 215.704308][ T6923] bridge_slave_1: entered promiscuous mode [ 216.080196][ T6923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.093146][ T6923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.280562][ T6923] team0: Port device team_slave_0 added [ 218.887919][ T6923] team0: Port device team_slave_1 added [ 220.634078][ T7074] loop4: detected capacity change from 0 to 1024 [ 220.648034][ T7074] EXT4-fs warning (device loop4): ext4_multi_mount_protect:288: Invalid MMP block in superblock [ 221.106324][ T3918] bridge_slave_1: left allmulticast mode [ 221.117814][ T3918] bridge_slave_1: left promiscuous mode [ 221.146712][ T3918] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.199746][ T3918] bridge_slave_0: left allmulticast mode [ 221.240161][ T3918] bridge_slave_0: left promiscuous mode [ 221.352827][ T3918] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.762701][ T7091] loop4: detected capacity change from 0 to 1024 [ 222.583243][ T7104] loop4: detected capacity change from 0 to 8 [ 222.590416][ T7104] cramfs: Unknown parameter '' [ 222.822528][ T7106] loop1: detected capacity change from 0 to 1024 [ 222.876619][ T7106] hfsplus: Unknown parameter ':M1擂5V:' [ 222.928121][ T7108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.206'. [ 223.029927][ T7109] netlink: 'syz.1.208': attribute type 10 has an invalid length. [ 223.056923][ T7109] netlink: 40 bytes leftover after parsing attributes in process `syz.1.208'. [ 224.375676][ T7115] loop1: detected capacity change from 0 to 512 [ 224.442367][ T7115] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.508752][ T7115] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 224.614613][ T7126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.210'. [ 225.165850][ T3918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.196301][ T3918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.215807][ T3918] bond0 (unregistering): Released all slaves [ 225.229379][ T6923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.237095][ T6923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.274980][ T6923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.368541][ T7100] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.570477][ T7130] loop4: detected capacity change from 0 to 40427 [ 225.587051][ T7130] F2FS-fs (loop4): invalid crc value [ 225.671958][ T7130] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 225.682736][ T7130] F2FS-fs (loop4): Start checkpoint disabled! [ 225.697082][ T7130] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 225.707406][ T7130] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 225.736225][ T7108] veth3: entered promiscuous mode [ 225.768555][ C0] Unknown status report in ack skb [ 225.795038][ T6923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.854904][ T6923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.925801][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.944904][ T7130] GUP no longer grows the stack in syz.4.211 (7130): 200000005000-200000008000 (200000004000) [ 225.955587][ T7130] CPU: 0 UID: 0 PID: 7130 Comm: syz.4.211 Not tainted syzkaller #0 PREEMPT(full) [ 225.955601][ T7130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 225.955607][ T7130] Call Trace: [ 225.955612][ T7130] [ 225.955617][ T7130] dump_stack_lvl+0x189/0x250 [ 225.955637][ T7130] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.955651][ T7130] ? __pfx__printk+0x10/0x10 [ 225.955661][ T7130] ? find_vma+0xe7/0x160 [ 225.955678][ T7130] fixup_user_fault+0x64a/0x700 [ 225.955695][ T7130] fault_in_user_writeable+0x72/0xe0 [ 225.955708][ T7130] futex_lock_pi+0x773/0xa90 [ 225.955727][ T7130] ? __pfx_futex_lock_pi+0x10/0x10 [ 225.955756][ T7130] ? __pfx_futex_wake_mark+0x10/0x10 [ 225.955779][ T7130] do_futex+0x292/0x420 [ 225.955794][ T7130] ? __pfx_do_futex+0x10/0x10 [ 225.955805][ T7130] ? blkcg_maybe_throttle_current+0x1ab/0xb40 [ 225.955816][ T7130] ? _raw_spin_unlock_irq+0x23/0x50 [ 225.955834][ T7130] __se_sys_futex+0x36f/0x400 [ 225.955849][ T7130] ? __pfx___se_sys_futex+0x10/0x10 [ 225.955865][ T7130] ? __x64_sys_futex+0x21/0xf0 [ 225.955879][ T7130] do_syscall_64+0xfa/0xfa0 [ 225.955889][ T7130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.955898][ T7130] ? clear_bhb_loop+0x60/0xb0 [ 225.955910][ T7130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.955919][ T7130] RIP: 0033:0x7f3601b8f749 [ 225.955928][ T7130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.955936][ T7130] RSP: 002b:00007f3602acb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 225.955947][ T7130] RAX: ffffffffffffffda RBX: 00007f3601de5fa0 RCX: 00007f3601b8f749 [ 225.955953][ T7130] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 225.955959][ T7130] RBP: 00007f3601c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 225.955965][ T7130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.955970][ T7130] R13: 00007f3601de6038 R14: 00007f3601de5fa0 R15: 00007fff5e7bac98 [ 225.955986][ T7130] [ 226.216216][ T6923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.247498][ T7136] loop3: detected capacity change from 0 to 1024 [ 226.412503][ T7140] loop1: detected capacity change from 0 to 1024 [ 226.421933][ T3918] hsr_slave_0: left promiscuous mode [ 226.431452][ T7141] loop2: detected capacity change from 0 to 512 [ 226.439162][ T3918] hsr_slave_1: left promiscuous mode [ 226.464561][ T3918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.577315][ T7141] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.679581][ T3918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.721988][ T1105] kworker/u8:7: attempt to access beyond end of device [ 226.721988][ T1105] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 226.767458][ T7141] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.826680][ T7151] afs: Bad value for 'source' [ 227.150025][ T1105] CPU: 1 UID: 0 PID: 1105 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 227.150050][ T1105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 227.150061][ T1105] Workqueue: writeback wb_workfn (flush-7:4) [ 227.150086][ T1105] Call Trace: [ 227.150094][ T1105] [ 227.150101][ T1105] dump_stack_lvl+0x189/0x250 [ 227.150132][ T1105] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.150155][ T1105] ? __pfx_queue_work_on+0x10/0x10 [ 227.150176][ T1105] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 227.150200][ T1105] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 227.150238][ T1105] f2fs_handle_critical_error+0x37c/0x540 [ 227.150266][ T1105] f2fs_write_end_io+0x94b/0xc10 [ 227.150308][ T1105] __submit_merged_bio+0x256/0x6a0 [ 227.150336][ T1105] __submit_merged_write_cond+0x255/0x530 [ 227.150371][ T1105] f2fs_write_data_pages+0x2756/0x3290 [ 227.150433][ T1105] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 227.150478][ T1105] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 227.150549][ T1105] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 227.150583][ T1105] ? trace_f2fs_writepages+0x7f/0x200 [ 227.150615][ T1105] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 227.150650][ T1105] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 227.150672][ T1105] do_writepages+0x32e/0x550 [ 227.150706][ T1105] ? reacquire_held_locks+0x127/0x1d0 [ 227.150728][ T1105] ? writeback_sb_inodes+0x3bc/0x1950 [ 227.150760][ T1105] __writeback_single_inode+0x133/0x12f0 [ 227.150792][ T1105] writeback_sb_inodes+0x984/0x1950 [ 227.150852][ T1105] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 227.150927][ T1105] ? rcu_is_watching+0x15/0xb0 [ 227.150954][ T1105] wb_writeback+0x42b/0xb10 [ 227.150986][ T1105] ? queue_io+0x2e1/0x590 [ 227.151011][ T1105] ? __pfx_wb_writeback+0x10/0x10 [ 227.151043][ T1105] ? _raw_spin_unlock_irq+0x23/0x50 [ 227.151073][ T1105] wb_workfn+0x3f9/0xef0 [ 227.151111][ T1105] ? __pfx_wb_workfn+0x10/0x10 [ 227.151136][ T1105] ? __lock_acquire+0xab9/0xd20 [ 227.151170][ T1105] ? process_one_work+0x868/0x15e0 [ 227.151199][ T1105] ? _raw_spin_unlock_irq+0x23/0x50 [ 227.151227][ T1105] ? process_one_work+0x868/0x15e0 [ 227.151246][ T1105] process_one_work+0x93a/0x15e0 [ 227.151265][ T1105] ? __lock_acquire+0xab9/0xd20 [ 227.151313][ T1105] ? __pfx_process_one_work+0x10/0x10 [ 227.151346][ T1105] ? assign_work+0x3a1/0x410 [ 227.151374][ T1105] worker_thread+0x9b0/0xee0 [ 227.151429][ T1105] kthread+0x711/0x8a0 [ 227.151456][ T1105] ? __pfx_worker_thread+0x10/0x10 [ 227.151475][ T1105] ? __pfx_kthread+0x10/0x10 [ 227.151493][ T1105] ? _raw_spin_unlock_irq+0x23/0x50 [ 227.151515][ T1105] ? lockdep_hardirqs_on+0x9c/0x150 [ 227.151530][ T1105] ? __pfx_kthread+0x10/0x10 [ 227.151547][ T1105] ret_from_fork+0x599/0xb30 [ 227.151568][ T1105] ? __pfx_ret_from_fork+0x10/0x10 [ 227.151598][ T1105] ? __switch_to_asm+0x39/0x70 [ 227.151612][ T1105] ? __switch_to_asm+0x33/0x70 [ 227.151624][ T1105] ? __pfx_kthread+0x10/0x10 [ 227.151638][ T1105] ret_from_fork_asm+0x1a/0x30 [ 227.151672][ T1105] [ 227.151679][ T1105] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 228.076669][ T30] audit: type=1800 audit(1763649123.327:58): pid=7164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.214" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 231.295951][ T6020] hfsplus: b-tree write err: -5, ino 4 [ 231.918323][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.233847][ T42] libceph: connect (1)[c::]:6789 error -101 [ 232.240094][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 232.360985][ T7178] ceph: No mds server is up or the cluster is laggy [ 232.516061][ T42] libceph: connect (1)[c::]:6789 error -101 [ 232.614064][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 233.342162][ T3918] team0 (unregistering): Port device team_slave_1 removed [ 233.389896][ T3918] team0 (unregistering): Port device team_slave_0 removed [ 235.757361][ T7201] loop3: detected capacity change from 0 to 1024 [ 236.013363][ T7206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.220'. [ 236.094715][ T7211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.220'. [ 236.216091][ T7211] loop1: detected capacity change from 0 to 1024 [ 236.330723][ T7210] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 237.511817][ T6923] hsr_slave_0: entered promiscuous mode [ 237.601132][ T6923] hsr_slave_1: entered promiscuous mode [ 237.626337][ T6923] debugfs: 'hsr0' already exists in 'hsr' [ 237.632277][ T6923] Cannot create hsr debugfs directory [ 238.985844][ T7231] loop4: detected capacity change from 0 to 1024 [ 240.190447][ T7240] Mount JFS Failure: -5 [ 240.195070][ T7240] jfs_mount failed w/return code = -5 [ 240.335744][ T7243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.227'. [ 244.271039][ T7266] loop4: detected capacity change from 0 to 256 [ 245.134238][ T7284] delete_channel: no stack [ 245.631535][ T7283] loop4: detected capacity change from 0 to 1024 [ 245.926696][ T7287] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 246.169736][ T7296] block nbd1: not configured, cannot reconfigure [ 246.329500][ T7299] Bluetooth: MGMT ver 1.23 [ 248.601305][ T7312] loop1: detected capacity change from 0 to 40427 [ 248.613365][ T7314] loop7: detected capacity change from 0 to 7 [ 248.891121][ T7312] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 248.911847][ T7312] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 248.963414][ T7312] F2FS-fs (loop1): invalid crc value [ 249.325497][ T7312] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 249.348135][ T7312] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 249.355196][ T7312] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 250.225409][ T30] audit: type=1800 audit(1763649145.557:59): pid=7329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.242" name="file1" dev="loop1" ino=11 res=0 errno=0 [ 250.491283][ T7314] Dev loop7: unable to read RDB block 7 [ 250.498889][ T7314] loop7: unable to read partition table [ 250.504663][ T7314] loop7: partition table beyond EOD, truncated [ 250.511138][ T7314] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 251.830533][ T7341] loop4: detected capacity change from 0 to 40427 [ 251.837791][ T7341] F2FS-fs: heap/no_heap options were deprecated [ 251.844349][ T7341] f2fs: Unknown parameter 'grpjquoa' [ 252.179332][ T7345] loop3: detected capacity change from 0 to 128 [ 252.190574][ T7345] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 252.192569][ T6923] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 252.248466][ T7345] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 252.806132][ T7355] hub 9-0:1.0: USB hub found [ 252.814560][ T7355] hub 9-0:1.0: 1 port detected [ 253.533517][ T6923] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 253.776496][ T6923] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 253.921029][ T6923] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 254.139518][ T7369] loop3: detected capacity change from 0 to 1024 [ 254.328750][ T7376] loop1: detected capacity change from 0 to 256 [ 254.341532][ T7376] exfat: Deprecated parameter 'utf8' [ 254.894435][ T7376] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6efbb19, utbl_chksum : 0xe619d30d) [ 255.625748][ T6923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.746507][ T7389] sctp: [Deprecated]: syz.2.249 (pid 7389) Use of struct sctp_assoc_value in delayed_ack socket option. [ 255.746507][ T7389] Use struct sctp_sack_info instead [ 255.777656][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.784152][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.906978][ T6923] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.043654][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.050896][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.084768][ T6985] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.092073][ T6985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.399644][ T7401] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 257.466665][ T7403] loop2: detected capacity change from 0 to 256 [ 257.526324][ T7403] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x7b82335c, utbl_chksum : 0xe619d30d) [ 260.335988][ T7417] ceph: No mds server is up or the cluster is laggy [ 260.355739][ T5946] libceph: connect (1)[c::]:6789 error -101 [ 260.365162][ T5946] libceph: mon0 (1)[c::]:6789 connect error [ 260.635772][ T5946] libceph: connect (1)[c::]:6789 error -101 [ 260.649553][ T5946] libceph: mon0 (1)[c::]:6789 connect error [ 261.715609][ T30] audit: type=1326 audit(1763649156.877:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7429 comm="syz.3.254" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc73898f749 code=0x0 [ 261.987363][ T7435] lo speed is unknown, defaulting to 1000 [ 261.993562][ T7435] lo speed is unknown, defaulting to 1000 [ 262.002394][ T7435] lo speed is unknown, defaulting to 1000 [ 262.015461][ T7435] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 262.032925][ T7435] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 262.242055][ T7435] lo speed is unknown, defaulting to 1000 [ 262.254930][ T7435] lo speed is unknown, defaulting to 1000 [ 262.267453][ T7435] lo speed is unknown, defaulting to 1000 [ 262.280677][ T7435] lo speed is unknown, defaulting to 1000 [ 262.293223][ T7435] lo speed is unknown, defaulting to 1000 [ 262.638044][ T7441] loop1: detected capacity change from 0 to 32768 [ 262.781242][ T7441] (syz.1.255,7441,0):ocfs2_read_virt_blocks:1015 ERROR: Inode #66 contains a hole at offset 0 [ 262.791857][ T7441] (syz.1.255,7441,0):ocfs2_read_dir_block:524 ERROR: status = -5 [ 262.802104][ T7441] (syz.1.255,7441,0):ocfs2_init_global_system_inodes:465 ERROR: status = -22 [ 262.811247][ T7441] (syz.1.255,7441,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 262.811321][ T7441] (syz.1.255,7441,0):ocfs2_init_global_system_inodes:476 ERROR: status = -22 [ 262.832475][ T7441] (syz.1.255,7441,0):ocfs2_initialize_super:2198 ERROR: status = -22 [ 262.841473][ T7441] (syz.1.255,7441,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 263.382114][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 263.392799][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 263.401604][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 263.418811][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 263.426868][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 263.542920][ T7452] lo speed is unknown, defaulting to 1000 [ 264.816429][ T7470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.260'. [ 265.089138][ T7475] netlink: 'syz.1.260': attribute type 33 has an invalid length. [ 265.121968][ T7475] netlink: 152 bytes leftover after parsing attributes in process `syz.1.260'. [ 265.131793][ T7473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.261'. [ 265.147426][ T7470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.260'. [ 265.451860][ T7454] netlink: 'syz.2.256': attribute type 10 has an invalid length. [ 265.459837][ T7454] netlink: 40 bytes leftover after parsing attributes in process `syz.2.256'. [ 265.602265][ T5839] Bluetooth: hci5: command tx timeout [ 266.127788][ T7482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.260'. [ 266.292148][ T7473] bridge_slave_1: left allmulticast mode [ 266.305840][ T7473] bridge_slave_1: left promiscuous mode [ 266.313119][ T7473] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.342906][ T7473] bridge_slave_0: left allmulticast mode [ 266.348765][ T7473] bridge_slave_0: left promiscuous mode [ 266.357222][ T7473] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.572279][ T7454] batadv0: entered promiscuous mode [ 266.577870][ T7454] batadv0: entered allmulticast mode [ 266.583623][ T7454] bridge0: port 3(batadv0) entered blocking state [ 266.594834][ T7494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.263'. [ 266.634255][ T7454] bridge0: port 3(batadv0) entered disabled state [ 266.687020][ T7454] bridge0: port 3(batadv0) entered blocking state [ 266.693672][ T7454] bridge0: port 3(batadv0) entered forwarding state [ 266.906749][ T7491] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 267.735507][ T5839] Bluetooth: hci5: command tx timeout [ 267.958155][ T7168] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 267.967800][ T7168] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 268.157111][ T7494] veth5: entered promiscuous mode [ 268.174365][ T6070] lo speed is unknown, defaulting to 1000 [ 270.465554][ T5839] Bluetooth: hci5: command tx timeout [ 271.221635][ T7518] loop2: detected capacity change from 0 to 128 [ 271.272154][ T7518] qnx6: superblock #1 checksum error [ 272.526467][ T5839] Bluetooth: hci5: command tx timeout [ 272.594262][ T7531] veth1_macvtap: left promiscuous mode [ 272.669703][ T7526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.278'. [ 272.670079][ T7523] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 275.227426][ T7539] loop2: detected capacity change from 0 to 4096 [ 275.335834][ T7539] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 275.494248][ T7539] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 275.507322][ T7539] ntfs3(loop2): Failed to load $BadClus (-22). [ 275.518329][ T7526] veth3: entered promiscuous mode [ 276.677012][ T7549] loop1: detected capacity change from 0 to 2048 [ 276.696066][ T7452] chnl_net:caif_netlink_parms(): no params data found [ 276.717933][ T7549] NILFS (loop1): invalid segment: Magic number mismatch [ 276.725473][ T7549] NILFS (loop1): trying rollback from an earlier position [ 276.753645][ T7549] NILFS (loop1): recovery complete [ 276.763526][ T7553] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 276.937963][ T7552] loop4: detected capacity change from 0 to 32768 [ 276.954608][ T7552] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.273 (7552) [ 277.153091][ T7552] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 277.163405][ T7552] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 277.589109][ T7546] ALSA: mixer_oss: invalid OSS volume 'DIGITAL' [ 278.012828][ T7552] BTRFS info (device loop4): enabling ssd optimizations [ 278.025475][ T7552] BTRFS info (device loop4): turning on async discard [ 278.040936][ T7552] BTRFS info (device loop4): enabling free space tree [ 278.085726][ T5839] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 278.145550][ T5839] CPU: 1 UID: 0 PID: 5839 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) [ 278.145577][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 278.145588][ T5839] Workqueue: hci2 hci_rx_work [ 278.145619][ T5839] Call Trace: [ 278.145627][ T5839] [ 278.145636][ T5839] dump_stack_lvl+0x189/0x250 [ 278.145672][ T5839] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.145717][ T5839] sysfs_create_dir_ns+0x259/0x280 [ 278.145742][ T5839] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 278.145764][ T5839] ? do_raw_spin_unlock+0x122/0x240 [ 278.145788][ T5839] kobject_add_internal+0x59f/0xb70 [ 278.145819][ T5839] kobject_add+0x155/0x220 [ 278.145845][ T5839] ? __pfx_kobject_add+0x10/0x10 [ 278.145865][ T5839] ? _raw_spin_unlock+0x28/0x50 [ 278.145893][ T5839] ? get_device_parent+0x366/0x3a0 [ 278.145923][ T5839] device_add+0x408/0xb80 [ 278.145951][ T5839] hci_conn_add_sysfs+0xd5/0x210 [ 278.145974][ T5839] le_conn_complete_evt+0xf1d/0x1420 [ 278.146008][ T5839] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 278.146029][ T5839] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 278.146045][ T5839] ? __asan_memcpy+0x40/0x70 [ 278.146070][ T5839] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 278.146086][ T5839] ? skb_pull_data+0xfb/0x200 [ 278.146109][ T5839] hci_le_conn_complete_evt+0x187/0x480 [ 278.146140][ T5839] hci_event_packet+0x78f/0x1260 [ 278.146163][ T5839] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 278.146188][ T5839] ? __pfx_hci_event_packet+0x10/0x10 [ 278.146210][ T5839] ? kcov_remote_start+0x4d3/0x810 [ 278.146227][ T5839] ? lockdep_hardirqs_on+0x9c/0x150 [ 278.146248][ T5839] ? hci_send_to_monitor+0xe2/0x590 [ 278.146276][ T5839] hci_rx_work+0x3ee/0x1060 [ 278.146306][ T5839] ? process_one_work+0x868/0x15e0 [ 278.146326][ T5839] process_one_work+0x93a/0x15e0 [ 278.146346][ T5839] ? __lock_acquire+0xab9/0xd20 [ 278.146399][ T5839] ? __pfx_process_one_work+0x10/0x10 [ 278.146431][ T5839] ? assign_work+0x3a1/0x410 [ 278.146463][ T5839] worker_thread+0x9b0/0xee0 [ 278.146513][ T5839] kthread+0x711/0x8a0 [ 278.146534][ T5839] ? __pfx_worker_thread+0x10/0x10 [ 278.146556][ T5839] ? __pfx_kthread+0x10/0x10 [ 278.146575][ T5839] ? _raw_spin_unlock_irq+0x23/0x50 [ 278.146600][ T5839] ? lockdep_hardirqs_on+0x9c/0x150 [ 278.146613][ T5839] ? __pfx_kthread+0x10/0x10 [ 278.146631][ T5839] ret_from_fork+0x599/0xb30 [ 278.146656][ T5839] ? __pfx_ret_from_fork+0x10/0x10 [ 278.146689][ T5839] ? __switch_to_asm+0x39/0x70 [ 278.146705][ T5839] ? __switch_to_asm+0x33/0x70 [ 278.146720][ T5839] ? __pfx_kthread+0x10/0x10 [ 278.146738][ T5839] ret_from_fork_asm+0x1a/0x30 [ 278.146774][ T5839] [ 278.802917][ T5839] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 278.828973][ T5839] Bluetooth: hci2: failed to register connection device [ 279.865836][ T30] audit: type=1800 audit(1763649174.687:61): pid=7594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.273" name="file2" dev="loop4" ino=261 res=0 errno=0 [ 280.031539][ T7595] netlink: 'syz.1.277': attribute type 2 has an invalid length. [ 280.039880][ T7595] netlink: 28 bytes leftover after parsing attributes in process `syz.1.277'. [ 280.419327][ T7452] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.516732][ T5843] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 280.529407][ T7452] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.555638][ T7452] bridge_slave_0: entered allmulticast mode [ 280.564275][ T7452] bridge_slave_0: entered promiscuous mode [ 280.609413][ T7452] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.646371][ T7452] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.766074][ T7452] bridge_slave_1: entered allmulticast mode [ 280.773898][ T7452] bridge_slave_1: entered promiscuous mode [ 282.875302][ T5839] Bluetooth: hci5: command 0x0405 tx timeout [ 282.969252][ T7452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.156402][ T7452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.202328][ T7625] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 284.331271][ T7638] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 284.368794][ T7638] netlink: 20 bytes leftover after parsing attributes in process `syz.3.285'. [ 284.577141][ T7625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.284'. [ 284.955365][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 285.744344][ T12] bridge_slave_1: left allmulticast mode [ 285.775438][ T12] bridge_slave_1: left promiscuous mode [ 285.801727][ T7655] loop3: detected capacity change from 0 to 16 [ 285.806678][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.817439][ T7655] erofs: Unknown parameter '&' [ 285.973556][ T7654] netlink: 56 bytes leftover after parsing attributes in process `syz.4.287'. [ 285.992952][ T7651] loop2: detected capacity change from 0 to 1024 [ 286.006149][ T7651] EXT4-fs: Ignoring removed orlov option [ 286.659747][ T12] bridge_slave_0: left allmulticast mode [ 286.659803][ T12] bridge_slave_0: left promiscuous mode [ 286.660025][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.687366][ T7651] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.372404][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.754563][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.771213][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.792041][ T12] bond0 (unregistering): Released all slaves [ 289.207594][ T7678] loop2: detected capacity change from 0 to 512 [ 289.223585][ T7678] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 289.235806][ T7678] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 289.246031][ T7678] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.291: Corrupt directory, running e2fsck is recommended [ 289.262014][ T7678] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 289.270953][ T7678] EXT4-fs error (device loop2): ext4_iget_extra_inode:5079: inode #15: comm syz.2.291: corrupted in-inode xattr: e_name out of bounds [ 289.287834][ T7678] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.291: couldn't read orphan inode 15 (err -117) [ 289.314239][ T7678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.498472][ T7625] veth5: entered promiscuous mode [ 289.658939][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.585166][ T7452] team0: Port device team_slave_0 added [ 291.795984][ T7452] team0: Port device team_slave_1 added [ 292.847833][ T12] hsr_slave_0: left promiscuous mode [ 292.978582][ T12] hsr_slave_1: left promiscuous mode [ 293.048672][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.564253][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.849200][ T7718] ubi31: attaching mtd0 [ 294.317382][ T7708] loop1: detected capacity change from 0 to 2048 [ 294.459995][ T7708] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.545461][ T7708] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.638204][ T7708] random: crng reseeded on system resumption [ 294.989918][ T7708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.296'. [ 295.268013][ T12] team0 (unregistering): Port device team_slave_1 removed [ 295.358783][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.383050][ T12] team0 (unregistering): Port device team_slave_0 removed [ 296.845454][ T7694] @: renamed from vlan0 (while UP) [ 297.057685][ T7452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.345349][ T7452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.382859][ T7452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.435630][ T7452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.462718][ T7452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.508967][ T7744] loop1: detected capacity change from 0 to 128 [ 297.585414][ T7452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.739498][ T7752] loop3: detected capacity change from 0 to 1024 [ 298.742226][ T30] audit: type=1326 audit(1763649194.057:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7743 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf44b8f749 code=0x7ffc0000 [ 298.800690][ T7746] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 299.775629][ T30] audit: type=1326 audit(1763649194.057:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7743 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf44b8f749 code=0x7ffc0000 [ 300.089959][ T30] audit: type=1326 audit(1763649194.057:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7743 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fbf44b8f749 code=0x7ffc0000 [ 300.218636][ T30] audit: type=1326 audit(1763649194.057:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7743 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf44b8f749 code=0x7ffc0000 [ 300.435747][ T30] audit: type=1326 audit(1763649194.057:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7743 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf44b8f749 code=0x7ffc0000 [ 300.596113][ T30] audit: type=1326 audit(1763649194.057:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7743 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fbf44b8f749 code=0x7ffc0000 [ 300.853615][ T30] audit: type=1326 audit(1763649194.057:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7743 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf44b8f749 code=0x7ffc0000 [ 301.008384][ T7452] hsr_slave_0: entered promiscuous mode [ 301.015206][ T7452] hsr_slave_1: entered promiscuous mode [ 302.208906][ T7770] overlayfs: missing 'lowerdir' [ 302.259310][ T30] audit: type=1326 audit(1763649194.057:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7743 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf44b8f749 code=0x7ffc0000 [ 302.475457][ T7773] Trying to write to read-only block-device nullb0 [ 302.521331][ T7773] F2FS-fs: Conflicting test_dummy_encryption options [ 302.547626][ T7773] overlayfs: overlapping lowerdir path [ 303.218914][ T30] audit: type=1326 audit(1763649194.057:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7743 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbf44b8f749 code=0x7ffc0000 [ 303.242420][ T30] audit: type=1326 audit(1763649194.137:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7743 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf44b8f749 code=0x7ffc0000 [ 303.565207][ T7452] debugfs: 'hsr0' already exists in 'hsr' [ 303.571027][ T7452] Cannot create hsr debugfs directory [ 303.904832][ T7783] loop1: detected capacity change from 0 to 512 [ 304.190443][ T7788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.309'. [ 304.456370][ T7783] EXT4-fs (loop1): Test dummy encryption mode enabled [ 304.544619][ T7783] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 304.678505][ T7783] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.310: bad orphan inode 131083 [ 304.714766][ T7783] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.266733][ T7800] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 307.011706][ T7794] loop3: detected capacity change from 0 to 2048 [ 307.179980][ T7794] UDF-fs: warning (device loop3): udf_fill_super: No partition found (2) [ 307.237759][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.522656][ T7810] hub 1-0:1.0: USB hub found [ 307.532833][ T7810] hub 1-0:1.0: 1 port detected [ 309.352102][ T7808] loop4: detected capacity change from 0 to 256 [ 309.359269][ T7808] exfat: Deprecated parameter 'namecase' [ 309.364931][ T7808] exfat: Deprecated parameter 'utf8' [ 309.384988][ T7808] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 309.924057][ T778] IPVS: starting estimator thread 0... [ 310.045760][ T7832] IPVS: using max 25 ests per chain, 60000 per kthread [ 311.088159][ T7842] Invalid ELF header len 8 [ 314.172828][ T7452] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 314.391339][ T7452] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 314.420285][ T7452] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 314.432100][ T7452] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 315.596641][ T7861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.321'. [ 315.605500][ T7861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.321'. [ 316.711285][ T7862] mmap: syz.1.323 (7862) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 317.525690][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.531984][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.499224][ T7898] loop2: detected capacity change from 0 to 256 [ 318.695564][ T7898] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x7b82335c, utbl_chksum : 0xe619d30d) [ 318.803178][ T7901] loop4: detected capacity change from 0 to 2048 [ 319.577073][ T7901] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 319.590928][ T7452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.987111][ T7452] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.040429][ T6052] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.047682][ T6052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.084446][ T7911] loop3: detected capacity change from 0 to 512 [ 320.551331][ T6052] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.558682][ T6052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.578871][ T7911] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.591620][ T7911] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 321.652368][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.054272][ T7928] input: syz1 as /devices/virtual/input/input10 [ 325.075532][ T7943] loop3: detected capacity change from 0 to 64 [ 325.113023][ T7943] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 325.854360][ T7951] sd 0:0:1:0: device reset [ 325.860947][ T7951] netlink: 144 bytes leftover after parsing attributes in process `syz.2.335'. [ 325.977717][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 325.989073][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 325.997834][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 326.021356][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 326.029559][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 326.089420][ T7952] lo speed is unknown, defaulting to 1000 [ 327.414318][ T7959] loop2: detected capacity change from 0 to 256 [ 327.424808][ T7961] loop4: detected capacity change from 0 to 2048 [ 327.445416][ T7961] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 327.628062][ T7965] netlink: 'syz.3.337': attribute type 10 has an invalid length. [ 327.712062][ T7959] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x7b82335c, utbl_chksum : 0xe619d30d) [ 328.118198][ T5834] Bluetooth: hci1: command tx timeout [ 329.189167][ T7965] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.235704][ T7965] bond0: (slave team0): Enslaving as an active interface with an up link [ 330.182391][ T5834] Bluetooth: hci1: command tx timeout [ 330.448291][ T7983] loop1: detected capacity change from 0 to 16 [ 330.574691][ T7983] erofs: Unknown parameter '&' [ 331.234318][ T7995] loop4: detected capacity change from 0 to 8 [ 331.586209][ T7995] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 332.111032][ T5979] udevd[5979]: incorrect cramfs checksum on /dev/loop4 [ 332.123329][ T7991] tipc: Started in network mode [ 332.255405][ T5834] Bluetooth: hci1: command tx timeout [ 332.356245][ T8004] loop3: detected capacity change from 0 to 32768 [ 332.366378][ T7991] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 332.428089][ T8004] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 332.439063][ T8004] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 332.457063][ T7991] tipc: Enabling of bearer rejected, failed to enable media [ 332.467702][ T5979] udevd[5979]: incorrect cramfs checksum on /dev/loop4 [ 332.517392][ T8004] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 2ms [ 332.537757][ T6060] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 332.544765][ T6060] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 332.553243][ T7952] chnl_net:caif_netlink_parms(): no params data found [ 332.774966][ T6060] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 230ms [ 332.806622][ T6060] gfs2: fsid=syz:syz.0: jid=0: Done [ 332.812965][ T8004] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 333.191224][ T8019] ./file0: Can't open blockdev [ 333.600149][ T8021] loop1: detected capacity change from 0 to 2048 [ 333.608387][ T8021] udf: Unknown parameter 'undelete000000000000000007' [ 333.698659][ T8020] bond0: (slave bond_slave_1): Releasing backup interface [ 334.277912][ T8024] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 334.315314][ T5834] Bluetooth: hci1: command tx timeout [ 334.465787][ T8024] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 335.173344][ T8039] overlay: ./file0 is not a directory [ 340.224486][ T8051] loop4: detected capacity change from 0 to 256 [ 340.254785][ T8051] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x7b82335c, utbl_chksum : 0xe619d30d) [ 340.480379][ T8053] loop1: detected capacity change from 0 to 2048 [ 341.706999][ T8061] loop3: detected capacity change from 0 to 32768 [ 341.730399][ T8061] xfs: Deprecated parameter 'attr2' [ 341.742855][ T8061] XFS: attr2 mount option is deprecated. [ 341.795539][ T8061] xfs: Deprecated parameter 'attr2' [ 341.801008][ T8061] XFS: attr2 mount option is deprecated. [ 341.818164][ T8053] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 341.860726][ T7952] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.933902][ T8061] XFS (loop3): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 341.957316][ T8069] loop4: detected capacity change from 0 to 512 [ 342.081104][ T7952] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.088513][ T7952] bridge_slave_0: entered allmulticast mode [ 342.096729][ T7952] bridge_slave_0: entered promiscuous mode [ 342.105791][ T7952] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.113054][ T7952] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.120359][ T7952] bridge_slave_1: entered allmulticast mode [ 342.128316][ T7952] bridge_slave_1: entered promiscuous mode [ 342.865488][ T8069] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.353: inode has both inline data and extents flags [ 343.593419][ T8069] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.353: couldn't read orphan inode 15 (err -117) [ 343.616958][ T5840] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 343.618241][ T8069] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.719358][ T8086] loop2: detected capacity change from 0 to 2048 [ 343.732697][ T8086] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 343.773557][ T7952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.798691][ T7952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.083149][ T8095] loop3: detected capacity change from 0 to 40427 [ 345.091460][ T8095] F2FS-fs (loop3): Image doesn't support compression [ 345.098238][ T8095] F2FS-fs (loop3): build fault injection rate: 690 [ 345.104762][ T8095] F2FS-fs (loop3): build fault injection type: 0x4 [ 345.112884][ T8095] F2FS-fs (loop3): invalid crc value [ 345.181509][ T8095] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 345.191070][ T8095] F2FS-fs (loop3): Start checkpoint disabled! [ 345.198692][ T8095] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 345.208320][ T8095] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 345.248296][ T7952] team0: Port device team_slave_0 added [ 345.312734][ T7952] team0: Port device team_slave_1 added [ 345.626450][ T8097] overlayfs: failed to resolve './file0/file1': -2 [ 345.629043][ T8101] loop2: detected capacity change from 0 to 2048 [ 345.934176][ T8101] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=66359, location=66359 [ 346.007511][ T8101] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 346.178217][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 346.178235][ T30] audit: type=1804 audit(1763649241.507:101): pid=8101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.359" name="/newroot/84/file0/bus" dev="loop2" ino=1368 res=1 errno=0 [ 346.410407][ T60] bridge_slave_1: left allmulticast mode [ 346.767770][ T60] bridge_slave_1: left promiscuous mode [ 346.773669][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.899844][ T60] bridge_slave_0: left allmulticast mode [ 346.927853][ T60] bridge_slave_0: left promiscuous mode [ 346.933827][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.079743][ T8111] program syz.3.360 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 347.602383][ T8114] loop2: detected capacity change from 0 to 2048 [ 347.698073][ T8114] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 347.884217][ T8114] UDF-fs: unknown compression code (0) [ 347.918092][ T8115] UDF-fs: unknown compression code (0) [ 348.016338][ T8115] UDF-fs: unknown compression code (0) [ 348.044795][ T8115] UDF-fs: unknown compression code (0) [ 348.096420][ T8115] UDF-fs: unknown compression code (0) [ 348.114066][ T8115] UDF-fs: unknown compression code (0) [ 348.147585][ T8115] UDF-fs: unknown compression code (0) [ 348.203217][ T8117] loop1: detected capacity change from 0 to 256 [ 348.239796][ T8117] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x7b82335c, utbl_chksum : 0xe619d30d) [ 348.284951][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.450697][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.463563][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.484960][ T60] bond0 (unregistering): Released all slaves [ 350.506346][ T7952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.513577][ T7952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.621019][ T8134] 9pnet_virtio: no channels available for device syz [ 351.493043][ T7952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.622241][ T8136] loop3: detected capacity change from 0 to 164 [ 351.657106][ T8136] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 352.051404][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.366'. [ 352.508259][ T5839] Bluetooth: hci1: command 0x0405 tx timeout [ 352.559861][ T7952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.576433][ T7952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.655537][ T7952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.874137][ T60] hsr_slave_0: left promiscuous mode [ 352.930230][ T60] hsr_slave_1: left promiscuous mode [ 352.957407][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.970824][ T8149] loop2: detected capacity change from 0 to 1024 [ 353.017630][ T8149] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 353.083256][ T8153] loop7: detected capacity change from 0 to 16384 [ 353.093781][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.174189][ T8149] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.207058][ T8151] loop7: detected capacity change from 16384 to 16383 [ 354.138805][ T8169] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.367: missing EA_INODE flag [ 354.205659][ T8169] EXT4-fs (loop2): Remounting filesystem read-only [ 354.216164][ T8169] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 354.259015][ T30] audit: type=1800 audit(1763649249.467:102): pid=8168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.367" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 354.698357][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.512361][ T8173] loop2: detected capacity change from 0 to 131072 [ 355.555463][ T8173] F2FS-fs (loop2): Test dummy encryption mode enabled [ 355.565819][ T8173] F2FS-fs (loop2): invalid crc value [ 355.664388][ T8173] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 355.675733][ T8173] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 356.459074][ T8185] loop1: detected capacity change from 0 to 32768 [ 357.024945][ T8185] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.371 (8185) [ 357.068500][ T8185] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 357.078833][ T8185] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 358.235527][ T8185] BTRFS info (device loop1): enabling ssd optimizations [ 358.242750][ T8185] BTRFS info (device loop1): turning on async discard [ 358.249648][ T8185] BTRFS info (device loop1): enabling free space tree [ 358.877281][ T30] audit: type=1800 audit(1763649254.107:103): pid=8212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.371" name="file2" dev="loop1" ino=261 res=0 errno=0 [ 359.597118][ T5826] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 360.170534][ T8218] netlink: 12 bytes leftover after parsing attributes in process `syz.3.375'. [ 360.967877][ T60] team0 (unregistering): Port device team_slave_1 removed [ 361.655981][ T60] team0 (unregistering): Port device team_slave_0 removed [ 361.807844][ T8231] /dev/sg0: Can't lookup blockdev [ 361.864041][ T8231] ptrace attach of "./syz-executor exec"[5826] was attempted by ""[8231] [ 364.271962][ T778] Process accounting resumed [ 365.433509][ T8252] 9p: Bad value for 'rfdno' [ 365.687027][ T7952] hsr_slave_0: entered promiscuous mode [ 365.693880][ T7952] hsr_slave_1: entered promiscuous mode [ 365.701753][ T7952] debugfs: 'hsr0' already exists in 'hsr' [ 365.909685][ T8256] loop4: detected capacity change from 0 to 2048 [ 366.297480][ T8258] delete_channel: no stack [ 366.665903][ T7952] Cannot create hsr debugfs directory [ 366.753385][ T8256] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 366.780457][ T8256] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 366.790183][ T8256] UDF-fs: error (device loop4): udf_read_inode: (ino 1376) failed !bh [ 366.799289][ T8256] UDF-fs: error (device loop4): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 367.145179][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 368.272252][ T5882] lo speed is unknown, defaulting to 1000 [ 368.279300][ T778] lo speed is unknown, defaulting to 1000 [ 368.521126][ T5882] syz0: Port: 1 Link DOWN [ 369.360650][ T8279] hub 9-0:1.0: USB hub found [ 369.366789][ T8279] hub 9-0:1.0: 1 port detected [ 371.440988][ T8299] loop3: detected capacity change from 0 to 512 [ 372.143778][ T8302] overlayfs: missing 'lowerdir' [ 372.506549][ T8299] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.519161][ T8299] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.580951][ T8305] loop4: detected capacity change from 0 to 2048 [ 372.601005][ T8305] NILFS (loop4): invalid segment: Magic number mismatch [ 372.608199][ T8305] NILFS (loop4): trying rollback from an earlier position [ 372.631079][ T8305] NILFS (loop4): recovery complete [ 372.642493][ T8310] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 372.879168][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.781599][ T30] audit: type=1326 audit(1763649269.117:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8320 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc73898f749 code=0x7ffc0000 [ 374.359700][ T30] audit: type=1326 audit(1763649269.117:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8320 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc73898f749 code=0x7ffc0000 [ 374.408697][ T8330] kAFS: No cell specified [ 374.431613][ T30] audit: type=1326 audit(1763649269.157:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8320 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc73898f749 code=0x7ffc0000 [ 374.501165][ T30] audit: type=1326 audit(1763649269.157:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8320 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc73898f749 code=0x7ffc0000 [ 374.557113][ T30] audit: type=1326 audit(1763649269.157:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8320 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc73898f749 code=0x7ffc0000 [ 375.219306][ T30] audit: type=1326 audit(1763649269.157:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8320 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc73898f749 code=0x7ffc0000 [ 375.242270][ T30] audit: type=1326 audit(1763649269.157:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8320 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc73898f749 code=0x7ffc0000 [ 375.265025][ T30] audit: type=1326 audit(1763649269.187:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8320 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fc73898f749 code=0x7ffc0000 [ 375.428106][ T30] audit: type=1326 audit(1763649269.187:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8320 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc73898f749 code=0x7ffc0000 [ 375.485554][ T8336] netlink: 136 bytes leftover after parsing attributes in process `syz.3.397'. [ 375.810685][ T8340] netlink: 'syz.3.397': attribute type 10 has an invalid length. [ 375.833109][ T9] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 375.941149][ T30] audit: type=1326 audit(1763649269.197:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8320 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fc73898f749 code=0x7ffc0000 [ 376.172369][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 376.214403][ T9] usb 3-1: config 0 has no interface number 0 [ 376.291024][ T9] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 376.374438][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.547932][ T9] usb 3-1: config 0 descriptor?? [ 376.599439][ T9] usb 3-1: selecting invalid altsetting 1 [ 376.624750][ T8332] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 376.631685][ T8332] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 376.649580][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 376.665666][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 376.767325][ T8339] vhci_hcd: connection closed [ 376.995477][ T8332] vhci_hcd vhci_hcd.0: Device attached [ 377.147630][ T8350] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 377.159957][ T8350] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 377.778119][ T9] DVB: Unable to find symbol cx22700_attach() [ 377.785598][ T6070] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 377.796648][ T8344] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 378.510518][ T8359] block device autoloading is deprecated and will be removed. [ 378.658641][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.785578][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.194023][ T9] DVB: Unable to find symbol tda10046_attach() [ 379.375311][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 379.395361][ T9] usb 3-1: USB disconnect, device number 3 [ 379.954350][ T60] vhci_hcd vhci_hcd.1: stop threads [ 379.960627][ T60] vhci_hcd vhci_hcd.1: release socket [ 380.037692][ T60] vhci_hcd vhci_hcd.1: disconnect device [ 380.312349][ T8369] CIFS mount error: No usable UNC path provided in device string! [ 380.312349][ T8369] [ 380.323019][ T8369] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 381.850657][ T7952] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 381.901441][ T7952] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 381.959915][ T7952] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 381.979832][ T7952] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 382.945431][ T6070] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 383.204582][ T8391] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 384.418254][ T8414] bridge0: port 3(batadv0) entered disabled state [ 384.424954][ T8414] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.432233][ T8414] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.456519][ T8390] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 385.668774][ T8425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.410'. [ 386.061388][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 386.075454][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 386.084971][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 386.102505][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 386.111112][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 386.448383][ T8434] autofs: Bad value for 'fd' [ 387.001191][ T8438] loop2: detected capacity change from 0 to 256 [ 387.016180][ T8438] exfat: Bad value for 'gid' [ 387.020824][ T8438] exfat: Bad value for 'gid' [ 387.936857][ T8428] lo speed is unknown, defaulting to 1000 [ 388.297264][ T8452] loop1: detected capacity change from 0 to 16 [ 388.326285][ T5834] Bluetooth: hci5: command tx timeout [ 388.344667][ T8452] erofs (device loop1): mounted with root inode @ nid 36. [ 388.865898][ T8450] can: request_module (can-proto-0) failed. [ 389.408645][ T8449] loop4: detected capacity change from 0 to 512 [ 389.697696][ T8449] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.035417][ T8449] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.334841][ T8455] netlink: 'syz.2.416': attribute type 1 has an invalid length. [ 390.342972][ T8455] netlink: 224 bytes leftover after parsing attributes in process `syz.2.416'. [ 390.408158][ T5834] Bluetooth: hci5: command tx timeout [ 440.083515][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.089916][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 495.395247][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 495.402255][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5946/1:b..l [ 495.411149][ C0] rcu: (detected by 0, t=10502 jiffies, g=24177, q=385 ncpus=2) [ 495.418880][ C0] task:kworker/1:7 state:R running task stack:23528 pid:5946 tgid:5946 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 495.433907][ C0] Workqueue: events_power_efficient gc_worker [ 495.440026][ C0] Call Trace: [ 495.443314][ C0] [ 495.446251][ C0] __schedule+0x1836/0x4ed0 [ 495.450807][ C0] ? __pfx___schedule+0x10/0x10 [ 495.455664][ C0] ? arch_stack_walk+0x11c/0x150 [ 495.460635][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 495.465935][ C0] preempt_schedule_irq+0xb5/0x150 [ 495.471059][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 495.476798][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 495.482615][ C0] irqentry_exit+0x5b5/0x640 [ 495.487214][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 495.493202][ C0] RIP: 0010:seqcount_lockdep_reader_access+0x17e/0x1c0 [ 495.500052][ C0] Code: f8 4d 85 e4 75 16 e8 b1 37 3e f8 eb 15 e8 aa 37 3e f8 e8 55 c9 d7 01 4d 85 e4 74 ea e8 9b 37 3e f8 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 66 43 c7 44 3e 09 00 00 43 c6 44 3e 0b 00 [ 495.519663][ C0] RSP: 0018:ffffc90005367860 EFLAGS: 00000293 [ 495.525735][ C0] RAX: ffffffff89837805 RBX: 0000000000000000 RCX: ffff888024c31e80 [ 495.533712][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 495.541677][ C0] RBP: ffffc90005367910 R08: ffffffff8f7deb77 R09: 1ffffffff1efbd6e [ 495.549647][ C0] R10: dffffc0000000000 R11: fffffbfff1efbd6f R12: 0000000000000200 [ 495.557618][ C0] R13: 1ffff11004986460 R14: 1ffff92000a6cf0c R15: dffffc0000000000 [ 495.565602][ C0] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 495.571859][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 495.578463][ C0] gc_worker+0x308/0x1380 [ 495.582804][ C0] ? gc_worker+0x264/0x1380 [ 495.587333][ C0] ? __pfx_gc_worker+0x10/0x10 [ 495.592104][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 495.597310][ C0] ? process_one_work+0x868/0x15e0 [ 495.602421][ C0] process_one_work+0x93a/0x15e0 [ 495.607361][ C0] ? __lock_acquire+0xab9/0xd20 [ 495.612242][ C0] ? __pfx_process_one_work+0x10/0x10 [ 495.617641][ C0] ? assign_work+0x3a1/0x410 [ 495.622236][ C0] worker_thread+0x9b0/0xee0 [ 495.626862][ C0] kthread+0x711/0x8a0 [ 495.630933][ C0] ? __pfx_worker_thread+0x10/0x10 [ 495.636050][ C0] ? __pfx_kthread+0x10/0x10 [ 495.640638][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 495.645838][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.651032][ C0] ? __pfx_kthread+0x10/0x10 [ 495.655624][ C0] ret_from_fork+0x599/0xb30 [ 495.660226][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 495.665447][ C0] ? __switch_to_asm+0x39/0x70 [ 495.670211][ C0] ? __switch_to_asm+0x33/0x70 [ 495.674978][ C0] ? __pfx_kthread+0x10/0x10 [ 495.679568][ C0] ret_from_fork_asm+0x1a/0x30 [ 495.684350][ C0] [ 495.687395][ C0] rcu: rcu_preempt kthread starved for 10485 jiffies! g24177 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 495.698580][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 495.708549][ C0] rcu: RCU grace-period kthread stack dump: [ 495.714431][ C0] task:rcu_preempt state:R running task stack:27168 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 495.727962][ C0] Call Trace: [ 495.731237][ C0] [ 495.734174][ C0] __schedule+0x1836/0x4ed0 [ 495.738711][ C0] ? __lock_acquire+0xab9/0xd20 [ 495.743564][ C0] ? __pfx___schedule+0x10/0x10 [ 495.748442][ C0] ? schedule+0x91/0x360 [ 495.752696][ C0] schedule+0x165/0x360 [ 495.756861][ C0] schedule_timeout+0x12b/0x270 [ 495.761731][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 495.767106][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 495.773003][ C0] ? __pfx_process_timeout+0x10/0x10 [ 495.778291][ C0] ? prepare_to_swait_event+0x341/0x380 [ 495.783841][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 495.788709][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.793902][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 495.800064][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 495.805357][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 495.810573][ C0] rcu_gp_kthread+0x99/0x390 [ 495.815168][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 495.820371][ C0] ? __kthread_parkme+0x7b/0x200 [ 495.825312][ C0] ? __kthread_parkme+0x1a1/0x200 [ 495.830344][ C0] kthread+0x711/0x8a0 [ 495.834416][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 495.839618][ C0] ? __pfx_kthread+0x10/0x10 [ 495.844204][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 495.849416][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.854605][ C0] ? __pfx_kthread+0x10/0x10 [ 495.859190][ C0] ret_from_fork+0x599/0xb30 [ 495.863795][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 495.868920][ C0] ? __switch_to_asm+0x39/0x70 [ 495.873697][ C0] ? __switch_to_asm+0x33/0x70 [ 495.878457][ C0] ? __pfx_kthread+0x10/0x10 [ 495.883044][ C0] ret_from_fork_asm+0x1a/0x30 [ 495.887821][ C0] [ 495.890838][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 495.897157][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 495.906086][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 495.916140][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 495.921858][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 00 0d 00 f3 0f 1e fa fb f4 48 f1 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 495.941461][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 495.947527][ C0] RAX: 13b79535df372c00 RBX: ffffffff81978747 RCX: 13b79535df372c00 [ 495.955495][ C0] RDX: 0000000000000001 RSI: ffffffff8d78f926 RDI: ffffffff8bbf80e0 [ 495.963464][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b86336db R09: 1ffff110170c66db [ 495.971520][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f7deb70 [ 495.979495][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a60 [ 495.987471][ C0] FS: 0000000000000000(0000) GS:ffff888125eb9000(0000) knlGS:0000000000000000 [ 495.996398][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 496.002980][ C0] CR2: 00007f99cf9f0286 CR3: 000000007e258000 CR4: 00000000003526f0 [ 496.010957][ C0] Call Trace: [ 496.014237][ C0] [ 496.017166][ C0] default_idle+0x13/0x20 [ 496.021505][ C0] default_idle_call+0x73/0xb0 [ 496.026265][ C0] do_idle+0x1e7/0x510 [ 496.030346][ C0] ? __pfx_do_idle+0x10/0x10 [ 496.034954][ C0] cpu_startup_entry+0x44/0x60 [ 496.039723][ C0] rest_init+0x2de/0x300 [ 496.043969][ C0] start_kernel+0x3a7/0x410 [ 496.048482][ C0] x86_64_start_reservations+0x24/0x30 [ 496.053949][ C0] x86_64_start_kernel+0x143/0x1c0 [ 496.059062][ C0] common_startup_64+0x13e/0x147 [ 496.064012][ C0] [ 496.655397][ T5834] Bluetooth: hci5: command tx timeout [ 496.864113][ T8473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.418'. [ 501.522142][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.528553][ T1300] ieee802154 phy1 wpan1: encryption failed: -22