last executing test programs: 8m38.250328659s ago: executing program 4 (id=89): socket$nl_rdma(0x10, 0x3, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000900)=@IORING_OP_MKDIRAT={0x25, 0x6, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa2}) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) r3 = io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f0000000400)=[0xe758, 0xf8de], 0x2) r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xf7fa, 0x3180, 0x8000, 0x15e}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x30) bind$netrom(r2, &(0x7f0000000300)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f0000000280)="1a0000", 0x3) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, 0x0, 0x9) 8m35.478494439s ago: executing program 4 (id=93): r0 = io_uring_setup(0x2a69, &(0x7f0000002240)={0x0, 0x0, 0x2, 0x2}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) 8m33.287553912s ago: executing program 4 (id=96): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x403, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x801, 0x3d047}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) lseek(r2, 0x8, 0x4) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 8m31.865430819s ago: executing program 4 (id=98): r0 = syz_usb_connect(0x4, 0x36, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r1 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0xa) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000869000/0x1000)=nil) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r1, 0xffffffff80000900, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_io_uring_setup(0x7131, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2cf}, &(0x7f0000000500), &(0x7f0000000380)) 8m29.780154541s ago: executing program 4 (id=102): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xc, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0xfffffffffffffbfe, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0xa) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r5 = accept4$alg(r4, 0x0, 0x0, 0x80800) io_setup(0xff, &(0x7f0000000380)=0x0) sendmmsg$inet(r5, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1) io_submit(r6, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r5, &(0x7f0000000340), 0x41}]) 8m25.691846561s ago: executing program 4 (id=105): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) brk(0x689d80000000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, 0x0, 0x0) 8m24.433177381s ago: executing program 32 (id=86): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') read$FUSE(r5, &(0x7f0000003a00)={0x2020}, 0x2020) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x1, 0x2, 0xb3ff, 0x0, 0x0, "71a4b85f10d0554b"}) epoll_create1(0x80000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x100, 0x0) 8m18.201784088s ago: executing program 33 (id=94): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000080)='./file1\x00') 8m10.375335541s ago: executing program 34 (id=105): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) brk(0x689d80000000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, 0x0, 0x0) 7m35.620052492s ago: executing program 5 (id=202): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400"], 0x7c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000007480)={0x3c, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x3c}}, 0x48040) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 7m34.205590234s ago: executing program 5 (id=204): socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\b\x00\x00', &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 7m32.818298438s ago: executing program 5 (id=207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800000000006113500000000000bfa000000000000007000000ee0016055e15010000000000160500000000000069163e0000000000bf07000000000000260507000fff07206706000020000000150600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 7m30.75437633s ago: executing program 5 (id=209): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21891d, &(0x7f0000000500)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e8, &(0x7f0000000f40)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000004840)={0x2020}, 0x2020) 7m29.532035795s ago: executing program 7 (id=115): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000250, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000040)={0x2}) 7m28.593609551s ago: executing program 5 (id=214): r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r1 = dup(r0) r2 = fanotify_init(0x0, 0x40000) fanotify_mark(r2, 0x1, 0x40000010, r1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r4, &(0x7f0000000040)={0x67446698, 0x1, 0x1, 0x2, 0x1}, 0x10) r5 = memfd_create(&(0x7f0000000080), 0x1) splice(r3, 0x0, r5, 0x0, 0x408cd, 0x0) 7m25.717934101s ago: executing program 5 (id=219): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4040004) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x7, 0x93b, 0x6, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x83, 0x4, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x4, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x6, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x73f, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x5, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xdd2, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x2, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0000, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x8001, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x3fe, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff9, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x2, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x2, 0x8, 0x5, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x0, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x2, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0x8, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xffff, 0x3ff, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x630a, 0x5, 0xcff, 0x9, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x800, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x1ff, 0x94, 0x7, 0x8, 0x8001, 0x56f71053, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0xfff, 0x5, 0x197, 0x9, 0x6, 0x8000005, 0x6, 0x7, 0x0, 0xffff, 0x3, 0x1ff, 0x400, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0x2, 0x1e, 0x3a, 0x6, 0x5, 0x18000, 0x2, 0x4000ffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x67c, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0xd, 0x5, 0x7f, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x4, 0x8, 0x87, 0x1, 0x7, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x1b, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0xde, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x0, 0xffffffff, 0x0, 0x3, 0x10000, 0x4, 0x3, 0x8001, 0x8, 0xbb, 0x5, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x676, 0xe67, 0x88, 0x808, 0x560, 0x6db5, 0xa7b, 0x2, 0x4, 0xd, 0x3, 0x4, 0xffffffff, 0x6, 0xed2, 0x24bdaad2, 0x9, 0x5, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd3, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x0, 0x9fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x8, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0x3, 0x2, 0xfffffd67, 0x2, 0x4, 0x5, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x8, 0x2, 0x7, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x5273, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x47, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x80, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0xb26c, 0xb, 0x0, 0x3, 0x8, 0x8, 0x3, 0x6, 0xfd, 0x3, 0x3d, 0x6, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x7, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x10, 0x2, 0x5, 0x10001, 0xc, 0x9e9, 0x53, 0xfffffdd5, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x7, 0x3, 0x2, 0x7, 0x3800000, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x3, 0x5, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x202, 0x6, 0x0, 0xe, 0xc, 0x3, 0x2, 0xd, 0x5, 0xfffff3f2, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x7, 0x7, 0x55f4727b, 0xd, 0x3b, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x80, 0x4, 0xd0000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x0, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0x8, 0x4, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x2d, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x5, 0x7, 0xb, 0x200, 0x40000006, 0x9, 0x7, 0x3, 0x1, 0x7f, 0x9, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x5cb5, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0x9, 0x7, 0x800, 0x8, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x80, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x40, 0xabde, 0x1, 0xb, 0x8, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x100, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa19, 0xc, 0x401, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x7, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x7, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x7fffffff, 0x10, 0x5, 0x9, 0x5, 0x9, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x11, 0x9, 0xfffffffe, 0x40, 0x3, 0x7, 0x0, 0x1, 0x2, 0x6, 0x81, 0x3, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x4, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0xdf, 0x5, 0x7, 0x100, 0x3ac9, 0x10001, 0xae27, 0x80, 0x5, 0x7, 0x7fff, 0x0, 0xb, 0x4, 0x1, 0x1, 0x0, 0x9, 0x331d, 0x5, 0xb9, 0x7, 0x4, 0x4, 0x9, 0x6cf3, 0x8, 0x7, 0xf, 0x9, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x5, 0x100, 0x9, 0x1, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644d, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000005000000090000008400000044010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000a1b543fdf7ac7a1e2e41a0a811178e594a21e4b55d537a4054d2cbc5c2f6ad7885"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000d40), 0x21800, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r6}, 0x38) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), 0x0) timer_create(0x1, 0x0, &(0x7f0000000100)) syz_emit_ethernet(0x2c, &(0x7f0000000240)={@random, @local, @val={@void, {0x8100, 0x3, 0x1, 0x3}}, {@arp={0x806, @generic={0x320, 0x5, 0x6, 0x0, 0x8, @multicast, "", @broadcast, "873f49876f1a"}}}}, 0x0) 7m24.321365925s ago: executing program 35 (id=219): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4040004) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x7, 0x93b, 0x6, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x83, 0x4, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x4, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x6, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x73f, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x5, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xdd2, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x2, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0000, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x8001, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x3fe, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff9, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x2, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x2, 0x8, 0x5, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x0, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x2, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0x8, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xffff, 0x3ff, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x630a, 0x5, 0xcff, 0x9, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x800, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x1ff, 0x94, 0x7, 0x8, 0x8001, 0x56f71053, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0xfff, 0x5, 0x197, 0x9, 0x6, 0x8000005, 0x6, 0x7, 0x0, 0xffff, 0x3, 0x1ff, 0x400, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0x2, 0x1e, 0x3a, 0x6, 0x5, 0x18000, 0x2, 0x4000ffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x67c, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0xd, 0x5, 0x7f, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x4, 0x8, 0x87, 0x1, 0x7, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x1b, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0xde, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x0, 0xffffffff, 0x0, 0x3, 0x10000, 0x4, 0x3, 0x8001, 0x8, 0xbb, 0x5, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x676, 0xe67, 0x88, 0x808, 0x560, 0x6db5, 0xa7b, 0x2, 0x4, 0xd, 0x3, 0x4, 0xffffffff, 0x6, 0xed2, 0x24bdaad2, 0x9, 0x5, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd3, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x0, 0x9fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x8, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0x3, 0x2, 0xfffffd67, 0x2, 0x4, 0x5, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x8, 0x2, 0x7, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x5273, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x47, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x80, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0xb26c, 0xb, 0x0, 0x3, 0x8, 0x8, 0x3, 0x6, 0xfd, 0x3, 0x3d, 0x6, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x7, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x10, 0x2, 0x5, 0x10001, 0xc, 0x9e9, 0x53, 0xfffffdd5, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x7, 0x3, 0x2, 0x7, 0x3800000, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x3, 0x5, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x202, 0x6, 0x0, 0xe, 0xc, 0x3, 0x2, 0xd, 0x5, 0xfffff3f2, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x7, 0x7, 0x55f4727b, 0xd, 0x3b, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x80, 0x4, 0xd0000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x0, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0x8, 0x4, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x2d, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x5, 0x7, 0xb, 0x200, 0x40000006, 0x9, 0x7, 0x3, 0x1, 0x7f, 0x9, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x5cb5, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0x9, 0x7, 0x800, 0x8, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x80, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x40, 0xabde, 0x1, 0xb, 0x8, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x100, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa19, 0xc, 0x401, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x7, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x7, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x7fffffff, 0x10, 0x5, 0x9, 0x5, 0x9, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x11, 0x9, 0xfffffffe, 0x40, 0x3, 0x7, 0x0, 0x1, 0x2, 0x6, 0x81, 0x3, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x4, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0xdf, 0x5, 0x7, 0x100, 0x3ac9, 0x10001, 0xae27, 0x80, 0x5, 0x7, 0x7fff, 0x0, 0xb, 0x4, 0x1, 0x1, 0x0, 0x9, 0x331d, 0x5, 0xb9, 0x7, 0x4, 0x4, 0x9, 0x6cf3, 0x8, 0x7, 0xf, 0x9, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x5, 0x100, 0x9, 0x1, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644d, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000005000000090000008400000044010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000a1b543fdf7ac7a1e2e41a0a811178e594a21e4b55d537a4054d2cbc5c2f6ad7885"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000d40), 0x21800, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r6}, 0x38) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), 0x0) timer_create(0x1, 0x0, &(0x7f0000000100)) syz_emit_ethernet(0x2c, &(0x7f0000000240)={@random, @local, @val={@void, {0x8100, 0x3, 0x1, 0x3}}, {@arp={0x806, @generic={0x320, 0x5, 0x6, 0x0, 0x8, @multicast, "", @broadcast, "873f49876f1a"}}}}, 0x0) 7m13.815917689s ago: executing program 36 (id=115): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000250, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000040)={0x2}) 6m21.962933509s ago: executing program 8 (id=350): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x50040, &(0x7f00000001c0)={0x11, 0x3, 0x0, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gretap0\x00'}) r2 = syz_open_procfs(0x0, &(0x7f0000000540)='net/route\x00') write(0xffffffffffffffff, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f08000280", 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES32=0x0, @ANYBLOB="ee158f000000000000"], 0x24}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(r2, 0x0, 0x0, 0x2000) sendto$packet(r1, &(0x7f0000000180)="0b031200deff64000200475400f6a13bb1000000086086dd4803", 0x1a, 0x0, 0x0, 0x0) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_SUBDINFO(r7, 0x80486402, &(0x7f00000004c0)) 6m20.299823521s ago: executing program 8 (id=352): r0 = syz_open_procfs(0x0, &(0x7f0000000540)='net/route\x00') pread64(r0, &(0x7f0000000580)=""/102400, 0x19000, 0x2000) 6m19.963300124s ago: executing program 8 (id=354): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0x0, 0x0}, 0x10) 6m18.725911263s ago: executing program 8 (id=356): getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff004) 6m18.42817986s ago: executing program 8 (id=358): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, 0x0, 0x20000081) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mount_setattr(0xffffffffffffff9c, 0x0, 0x9100, &(0x7f0000000140)={0x6, 0x8a, 0x40000}, 0x20) 6m16.143530436s ago: executing program 8 (id=361): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800070003"], 0x3c}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff0180c20000030806000108000604"], 0x0) 5m59.851643678s ago: executing program 37 (id=361): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800070003"], 0x3c}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff0180c20000030806000108000604"], 0x0) 31.830146748s ago: executing program 1 (id=1293): setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x8}, 0x10) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000100)=""/222, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = userfaultfd(0x801) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000000070000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c0002800800140002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) listen(0xffffffffffffffff, 0x8) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 30.518380923s ago: executing program 1 (id=1298): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={r2, 0x401}, 0x8) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x8000, &(0x7f0000001dc0)={0x5, 0x72, 0x20000}, 0x20) 30.146397256s ago: executing program 1 (id=1303): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001240)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {}, {0x7, 0x1}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xc9, 0x8}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) 28.986868233s ago: executing program 1 (id=1309): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x1e) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000480), 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, r4) sendmsg$NBD_CMD_CONNECT(r4, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, r4) getsockopt$inet_udp_int(r3, 0x11, 0x6c, 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x4, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 22.933684109s ago: executing program 9 (id=1335): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r2, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 20.926451662s ago: executing program 9 (id=1340): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000140)={0x3, 0x100000001, 0x82, &(0x7f0000000080)=""/130}) socket$key(0xf, 0x3, 0x2) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x4e22, 0x3, 'dh\x00', 0x1, 0x400000, 0x4}, 0x2c) socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r6, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r6, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 17.688461488s ago: executing program 9 (id=1349): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000840)=ANY=[], 0x4, 0x27a, &(0x7f0000000440)="$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") r4 = creat(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000200)={0x0, 0x2, 0x6, 0x7f}) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') lseek(r7, 0xffffffffffffffff, 0x1) setns(r6, 0x24020000) umount2(0x0, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8840) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) 16.60900872s ago: executing program 9 (id=1355): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000013002f0a2bbd70000000000007006800", @ANYRES32=r1, @ANYBLOB="400900002570020024001a80"], 0x44}, 0x1, 0x0, 0x0, 0x240048d4}, 0x0) 16.140225173s ago: executing program 9 (id=1358): setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x8}, 0x10) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000100)=""/222, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = userfaultfd(0x801) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000000070000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c0002800800140002000000"], 0x3c}}, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) listen(0xffffffffffffffff, 0x8) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 14.586539189s ago: executing program 9 (id=1364): move_pages(0x0, 0x2000000000000007, &(0x7f0000000080)=[&(0x7f0000004000/0x3000)=nil], 0x0, &(0x7f0000000540), 0x0) brk(0x200000ffc000) 11.886273872s ago: executing program 2 (id=1376): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xc, 0xc, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 11.69205852s ago: executing program 2 (id=1378): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000140)={0x3, 0x100000001, 0x82, &(0x7f0000000080)=""/130}) socket$key(0xf, 0x3, 0x2) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x4e22, 0x3, 'dh\x00', 0x1, 0x400000, 0x4}, 0x2c) socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0), 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r7, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r7, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) socket$kcm(0x29, 0x7, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44040) socket$netlink(0x10, 0x3, 0x0) 10.689906203s ago: executing program 6 (id=1382): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) sendmmsg$inet(r0, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a439570d7058351f70a828238fdf90bc5d36c7d614b82552649954e0185662def71e6ccd2b110d28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766", 0x85}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="6f433f8987fc9e72c982b56a37a1c7", 0xf}, {&(0x7f0000002240)="6e2ebb87dca38cb8b3378e86c02cafa0bd62c7a2cddda54f6a0a1c1b92bae9731f4063d80b5110c9d03f91a7a36de1b85a723f5902e290250ad0f1ba3a09733260816749c0336324bd84b178c88fa2d67602e2444a7e61aa569282cd7ce8", 0x5e}], 0x2}}], 0x2, 0x2090) 10.590172717s ago: executing program 2 (id=1383): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f00000001c0)=0xe7, 0x0) r1 = socket(0xf, 0x1, 0x6) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x26}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$bt_hci(r5, 0x0, 0x1, &(0x7f0000000000)=""/204, &(0x7f0000000100)=0xcc) r6 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x80000005, 0x20040) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x1, 0x0, 0x201a, 0x9, 0xa, 0x0, 0x5, 0x1993012db91ab52e}}) 9.134319929s ago: executing program 2 (id=1388): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa5) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x100) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 9.092952123s ago: executing program 6 (id=1389): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) socket$inet_udp(0x2, 0x2, 0x0) pwritev2(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0xe7b, 0x0, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) fdatasync(0xffffffffffffffff) 8.602487656s ago: executing program 2 (id=1393): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) 8.160309988s ago: executing program 2 (id=1394): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x0, 0x41}, 0x28) 7.986006084s ago: executing program 6 (id=1395): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000140)={0x3, 0x100000001, 0x82, &(0x7f0000000080)=""/130}) socket$key(0xf, 0x3, 0x2) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x4e22, 0x3, 'dh\x00', 0x1, 0x400000, 0x4}, 0x2c) socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0), 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r7, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r7, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) socket$kcm(0x29, 0x7, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44040) socket$netlink(0x10, 0x3, 0x0) 7.028338413s ago: executing program 38 (id=1394): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x0, 0x41}, 0x28) 6.702109603s ago: executing program 6 (id=1400): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x8b, 0x100000500) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 6.003366657s ago: executing program 6 (id=1401): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000180)={'macvlan0\x00', {0x2, 0x4e20, @remote}}) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x4, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x80}}, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, @desc1}) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[@ANYBLOB="03020c"], 0xa, 0x0) 5.919262362s ago: executing program 3 (id=1402): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}}) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$BLKRRPART(r0, 0x125f, 0x0) 5.583909108s ago: executing program 0 (id=1403): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}}, 0x0) 5.377486995s ago: executing program 3 (id=1404): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfffffffffffffffc, 0x103141) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000080)={0x3, 0x1}) 5.072073849s ago: executing program 0 (id=1405): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0x12, 0x0, &(0x7f00000008c0)="c1dfb080cd21d308098e000081007e229900", 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.802818672s ago: executing program 3 (id=1406): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) 4.57441342s ago: executing program 0 (id=1407): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_tables_matches\x00') r4 = syz_open_dev$rtc(0x0, 0x4, 0x8000) ioctl$RTC_WIE_OFF(r4, 0x7010) pread64(r3, &(0x7f0000000480)=""/177, 0xb1, 0xa6) socket$vsock_stream(0x28, 0x1, 0x0) 3.520605016s ago: executing program 3 (id=1408): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r0, 0x0, 0xfffffffffffffcee, 0xffffffffffffff0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.122536796s ago: executing program 0 (id=1409): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400"], 0x7c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000007480)={0x3c, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x3c}}, 0x48040) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r7, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 2.942455547s ago: executing program 3 (id=1410): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff1, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 905.853474ms ago: executing program 6 (id=1411): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000140)={0x3, 0x100000001, 0x82, &(0x7f0000000080)=""/130}) socket$key(0xf, 0x3, 0x2) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x4e22, 0x3, 'dh\x00', 0x1, 0x400000, 0x4}, 0x2c) socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0), 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r7, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r7, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) socket$kcm(0x29, 0x7, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x44040) socket$netlink(0x10, 0x3, 0x0) 682.590366ms ago: executing program 0 (id=1412): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x8b, 0x100000500) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 543.585605ms ago: executing program 3 (id=1413): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xf1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x1194}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000880) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[], 0x6df0}, 0x1, 0x0, 0x0, 0x44008010}, 0x8005) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000002640)={@local}, 0x0) sendmmsg$inet(r1, &(0x7f0000005940)=[{{&(0x7f0000000140)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001680)=[{0x0}, {&(0x7f0000000240)="2415f0861c52662a3385a1f5c047cc5d9cfaf72791587db2480cc29242ebb64ceb", 0x21}, {&(0x7f0000000500)="e4f5dab4d01c2fc92b306b46f383e71b15b89c296575fac9a46c2527d4ffbe8f6b0461967ca1ca35dd788cd477cdfbf29d9236ea95790b56db0d89a459bd55f4a23c78703c4c5e4275b309c9fda59a85f11d7f03f9622b1c1e96ea8378645f8376d98ec8ca2b710195b5ba218a346075a25713d8a907a7f68466e8b2b29f9ad633519c84bd", 0x85}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x84) 388.549345ms ago: executing program 1 (id=1309): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x1e) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000480), 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, r4) sendmsg$NBD_CMD_CONNECT(r4, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, r4) getsockopt$inet_udp_int(r3, 0x11, 0x6c, 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x4, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 100.544317ms ago: executing program 1 (id=1414): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RREADLINK(r0, &(0x7f0000000140)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1) select(0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=1415): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x318145a8, 0x0, 0xfffe, 0x2, 0xfffffff6, 0x0, 0x0, 0x8, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) close(r0) kernel console output (not intermixed with test programs): 59.321456][ T6292] syz.0.91: attempt to access beyond end of device [ 159.321456][ T6292] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 161.138062][ T6304] process 'syz.0.91' launched './file2' with NULL argv: empty string added [ 161.160634][ T6292] erofs (device loop0): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 161.245397][ T6292] erofs (device loop0): read error -117 @ 1 of nid 89 [ 161.255060][ T30] audit: type=1800 audit(2000000027.840:157): pid=6292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.91" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 161.266860][ T6304] erofs (device loop0): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 161.375360][ T6304] erofs (device loop0): read error -117 @ 1 of nid 89 [ 161.392654][ T30] audit: type=1800 audit(2000000027.970:158): pid=6304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.91" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 163.678388][ T6323] loop4: detected capacity change from 0 to 512 [ 172.561570][ T6371] loop2: detected capacity change from 0 to 128 [ 172.702869][ T6374] loop5: detected capacity change from 0 to 512 [ 172.790645][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 172.806316][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 172.815644][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 172.826212][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 172.835715][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 172.937820][ T6374] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.960947][ T6375] lo speed is unknown, defaulting to 1000 [ 172.979361][ T6374] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.095898][ T6384] loop1: detected capacity change from 0 to 256 [ 173.241065][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.471466][ T6384] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 174.235824][ T6397] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 175.334882][ T5844] Bluetooth: hci6: command tx timeout [ 175.995008][ T6384] exFAT-fs (loop1): valid_size(150994954) is greater than size(10) [ 176.087247][ T6375] chnl_net:caif_netlink_parms(): no params data found [ 176.276375][ T30] audit: type=1326 audit(2000000298.857:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6402 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b719bf79 code=0x7fc00000 [ 176.954366][ T30] audit: type=1326 audit(2000000299.537:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6402 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f90b719bf79 code=0x7fc00000 [ 177.469385][ T5844] Bluetooth: hci6: command tx timeout [ 177.542398][ T6411] warning: `syz.5.116' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 177.616592][ T5840] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 177.629840][ T5840] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 177.637806][ T5840] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 177.646049][ T5840] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 177.653815][ T5840] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 177.699650][ T6375] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.775533][ T6375] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.782945][ T6375] bridge_slave_0: entered allmulticast mode [ 177.857629][ T6375] bridge_slave_0: entered promiscuous mode [ 178.135350][ T6375] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.142527][ T6375] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.200294][ T6375] bridge_slave_1: entered allmulticast mode [ 178.240844][ T6375] bridge_slave_1: entered promiscuous mode [ 178.451390][ T6375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.568115][ T6375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.686629][ T6417] lo speed is unknown, defaulting to 1000 [ 179.178064][ T6375] team0: Port device team_slave_0 added [ 179.357188][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 179.380260][ T6375] team0: Port device team_slave_1 added [ 179.503077][ T5844] Bluetooth: hci6: command tx timeout [ 179.540118][ T24] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 179.594007][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.635709][ T24] usb 3-1: config 0 has no interface number 0 [ 179.642839][ T24] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 179.653749][ T24] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 179.711766][ T24] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 179.731282][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.751423][ T24] usb 3-1: Product: syz [ 179.755866][ T5844] Bluetooth: hci7: command tx timeout [ 179.772414][ T24] usb 3-1: Manufacturer: syz [ 179.777492][ T24] usb 3-1: SerialNumber: syz [ 180.781234][ T24] usb 3-1: config 0 descriptor?? [ 181.257624][ T5979] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.315242][ T6375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.322351][ T6375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.361170][ T6375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.461928][ T5900] usb 3-1: USB disconnect, device number 2 [ 181.477550][ T5979] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.547863][ T6375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.567829][ T6447] loop5: detected capacity change from 0 to 512 [ 181.572568][ T6375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.600052][ T5844] Bluetooth: hci6: command tx timeout [ 181.629181][ T6447] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 181.652137][ T6375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.670365][ T6447] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.694019][ T6447] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 181.820041][ T5844] Bluetooth: hci7: command tx timeout [ 181.828806][ T5979] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.987074][ T5844] Bluetooth: hci7: command tx timeout [ 184.197850][ T6375] hsr_slave_0: entered promiscuous mode [ 184.227809][ T6375] hsr_slave_1: entered promiscuous mode [ 184.256125][ T6375] debugfs: 'hsr0' already exists in 'hsr' [ 184.261896][ T6375] Cannot create hsr debugfs directory [ 185.395515][ T5979] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.055594][ T5844] Bluetooth: hci7: command tx timeout [ 186.254525][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 186.266131][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 186.282546][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 186.306055][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 186.313847][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 186.840628][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.864836][ T6462] lo speed is unknown, defaulting to 1000 [ 187.304178][ T6417] chnl_net:caif_netlink_parms(): no params data found [ 189.055670][ T5840] Bluetooth: hci0: command tx timeout [ 189.960358][ T6375] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 189.989641][ T6462] chnl_net:caif_netlink_parms(): no params data found [ 190.056403][ T6417] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.065594][ T6417] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.072910][ T6417] bridge_slave_0: entered allmulticast mode [ 190.116599][ T6417] bridge_slave_0: entered promiscuous mode [ 190.160600][ T6417] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.190547][ T6417] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.222274][ T6417] bridge_slave_1: entered allmulticast mode [ 190.257817][ T6417] bridge_slave_1: entered promiscuous mode [ 190.276792][ T5979] bridge_slave_1: left allmulticast mode [ 192.017924][ T5840] Bluetooth: hci0: command tx timeout [ 192.095412][ T5979] bridge_slave_1: left promiscuous mode [ 192.101789][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.207126][ T5979] bridge_slave_0: left allmulticast mode [ 192.226724][ T5979] bridge_slave_0: left promiscuous mode [ 192.232514][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.506986][ T6507] ufs: You didn't specify the type of your ufs filesystem [ 192.506986][ T6507] [ 192.506986][ T6507] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 192.506986][ T6507] [ 192.506986][ T6507] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 192.540060][ T6507] ufs: ufstype=old is supported read-only [ 192.557261][ T6507] ufs: ufs_fill_super(): bad magic number [ 193.020821][ T5979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.050883][ T5979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.072561][ T5979] bond0 (unregistering): Released all slaves [ 193.102477][ T6375] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 193.312526][ T6375] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 193.369363][ T6375] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 195.281669][ T5840] Bluetooth: hci0: command tx timeout [ 195.465500][ T6417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.593455][ T6417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.658223][ T6417] team0: Port device team_slave_0 added [ 196.828118][ T6417] team0: Port device team_slave_1 added [ 196.897452][ T5944] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 196.959633][ T6462] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.990915][ T6462] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.015770][ T6462] bridge_slave_0: entered allmulticast mode [ 197.041792][ T6462] bridge_slave_0: entered promiscuous mode [ 197.082239][ T5944] usb 6-1: config 0 interface 0 altsetting 40 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 197.114377][ T5944] usb 6-1: config 0 interface 0 altsetting 40 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.145224][ T5944] usb 6-1: config 0 interface 0 altsetting 40 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 197.162745][ T5979] hsr_slave_0: left promiscuous mode [ 197.181952][ T5979] hsr_slave_1: left promiscuous mode [ 197.195494][ T5944] usb 6-1: config 0 interface 0 has no altsetting 0 [ 197.203219][ T5979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.212824][ T5944] usb 6-1: New USB device found, idVendor=056a, idProduct=ffff, bcdDevice= 0.00 [ 197.225518][ T5979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.232764][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.239033][ T5979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.262742][ T5944] usb 6-1: config 0 descriptor?? [ 197.265128][ T5979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.317449][ T5979] veth1_macvtap: left promiscuous mode [ 197.326814][ T5979] veth0_macvtap: left promiscuous mode [ 197.332431][ T5979] veth1_vlan: left promiscuous mode [ 197.340382][ T5840] Bluetooth: hci0: command tx timeout [ 197.369387][ T5979] veth0_vlan: left promiscuous mode [ 197.743098][ T5944] wacom 0003:056A:FFFF.0001: unknown main item tag 0x0 [ 197.758357][ T5944] wacom 0003:056A:FFFF.0001: unknown main item tag 0x0 [ 199.606549][ T5944] usb 6-1: USB disconnect, device number 3 [ 201.948781][ T5979] team0 (unregistering): Port device team_slave_1 removed [ 202.029434][ T5979] team0 (unregistering): Port device team_slave_0 removed [ 202.414708][ T6417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.421786][ T6417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.449156][ T6417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.460958][ T6462] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.469741][ T6462] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.477043][ T6462] bridge_slave_1: entered allmulticast mode [ 202.484705][ T6462] bridge_slave_1: entered promiscuous mode [ 202.525040][ T6417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.537696][ T6417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.565661][ T6417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.822030][ T6462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.877757][ T6462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.046941][ T6417] hsr_slave_0: entered promiscuous mode [ 203.065673][ T6417] hsr_slave_1: entered promiscuous mode [ 203.072314][ T6417] debugfs: 'hsr0' already exists in 'hsr' [ 203.117243][ T6417] Cannot create hsr debugfs directory [ 203.197732][ T6462] team0: Port device team_slave_0 added [ 203.388762][ T6462] team0: Port device team_slave_1 added [ 203.599138][ T6610] siw: device registration error -23 [ 203.936457][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.942975][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.187921][ T6613] loop5: detected capacity change from 0 to 1024 [ 204.221985][ T6613] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 204.347446][ T6613] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.436268][ T6462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.443257][ T6462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.554715][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.577528][ T6462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.628023][ T6462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.665440][ T6462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.745117][ T6462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.041249][ T6375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.267601][ T6646] loop5: detected capacity change from 0 to 512 [ 205.310857][ T6646] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 205.331364][ T5979] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.389421][ T6646] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.461145][ T6646] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 205.495491][ T5900] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 205.648892][ T6462] hsr_slave_0: entered promiscuous mode [ 205.656070][ T6462] hsr_slave_1: entered promiscuous mode [ 205.662550][ T6462] debugfs: 'hsr0' already exists in 'hsr' [ 205.669349][ T6462] Cannot create hsr debugfs directory [ 205.695420][ T5900] usb 1-1: Using ep0 maxpacket: 8 [ 205.717835][ T5900] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 205.728250][ T5900] usb 1-1: can't read configurations, error -61 [ 205.736698][ T5979] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.882274][ T5900] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 205.896743][ T5979] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.039398][ T5979] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.052497][ T5900] usb 1-1: Using ep0 maxpacket: 8 [ 206.062844][ T5900] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 206.077939][ T5900] usb 1-1: can't read configurations, error -61 [ 206.093341][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.113550][ T5900] usb usb1-port1: attempt power cycle [ 206.167504][ T6375] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.273672][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.281080][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.380536][ T6442] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.387747][ T6442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.476734][ T5900] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 206.539104][ T5900] usb 1-1: Using ep0 maxpacket: 8 [ 206.567584][ T5900] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 206.586531][ T5900] usb 1-1: can't read configurations, error -61 [ 206.750473][ T5900] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 206.826439][ T5900] usb 1-1: Using ep0 maxpacket: 8 [ 206.854968][ T5900] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 206.878681][ T5900] usb 1-1: can't read configurations, error -61 [ 207.068115][ T6666] siw: device registration error -23 [ 207.514826][ T6417] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 207.523789][ T5900] usb usb1-port1: unable to enumerate USB device [ 207.624534][ T6417] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 207.658645][ T5979] bridge_slave_1: left allmulticast mode [ 207.674661][ T5979] bridge_slave_1: left promiscuous mode [ 207.696307][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.764842][ T5979] bridge_slave_0: left allmulticast mode [ 207.794641][ T5979] bridge_slave_0: left promiscuous mode [ 207.810070][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.025244][ T6676] netlink: 36 bytes leftover after parsing attributes in process `syz.5.171'. [ 208.434412][ T6689] loop0: detected capacity change from 0 to 512 [ 208.518730][ T6689] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.551289][ T6689] ext4 filesystem being mounted at /38/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.702570][ T5979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.734648][ T5979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.770442][ T5979] bond0 (unregistering): Released all slaves [ 209.602702][ T6417] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 210.034362][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.180359][ T6417] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 210.303471][ T6417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.327864][ T6417] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.377798][ T6124] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.384971][ T6124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.411557][ T6124] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.418771][ T6124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.802285][ T6417] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 210.837034][ T6417] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 210.865417][ T924] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 211.049651][ T924] usb 3-1: Using ep0 maxpacket: 32 [ 211.071533][ T924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.145539][ T924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.222322][ T924] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 211.304429][ T924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.378662][ T924] usb 3-1: config 0 descriptor?? [ 211.443394][ T924] hub 3-1:0.0: USB hub found [ 211.658881][ T924] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 211.815789][ T6462] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 211.847579][ T6462] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 211.873016][ T6462] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 211.897990][ T6738] loop5: detected capacity change from 0 to 128 [ 211.899000][ T924] hid-generic 0003:046D:C31C.0002: item fetching failed at offset 0/1 [ 211.935507][ T924] hid-generic 0003:046D:C31C.0002: probe with driver hid-generic failed with error -22 [ 211.936667][ T6462] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 211.969491][ T6738] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 212.049451][ T6738] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 212.086488][ T6741] loop0: detected capacity change from 0 to 512 [ 212.099163][ T5979] hsr_slave_0: left promiscuous mode [ 212.119489][ T5979] hsr_slave_1: left promiscuous mode [ 212.139382][ T5979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.155399][ T5979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.179103][ T5979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.183747][ T6741] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.201398][ T5979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.210194][ T6741] ext4 filesystem being mounted at /44/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.243156][ T5979] veth1_macvtap: left promiscuous mode [ 212.248964][ T5979] veth0_macvtap: left promiscuous mode [ 212.254563][ T5979] veth1_vlan: left promiscuous mode [ 212.259896][ T5979] veth0_vlan: left promiscuous mode [ 212.477192][ T924] usb 3-1: USB disconnect, device number 3 [ 213.983763][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.004037][ T5979] team0 (unregistering): Port device team_slave_1 removed [ 215.045205][ T5979] team0 (unregistering): Port device team_slave_0 removed [ 215.548566][ T6417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.686665][ T6791] loop0: detected capacity change from 0 to 64 [ 217.150900][ T6375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.491309][ T6811] loop0: detected capacity change from 0 to 512 [ 217.671659][ T6462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.722163][ T6811] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.772359][ T6462] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.829623][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.836839][ T5972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.846118][ T6811] ext4 filesystem being mounted at /49/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.949411][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.956630][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.971070][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.984528][ T6417] veth0_vlan: entered promiscuous mode [ 219.009690][ T6417] veth1_vlan: entered promiscuous mode [ 219.416461][ T6417] veth0_macvtap: entered promiscuous mode [ 219.669234][ T6843] siw: device registration error -23 [ 220.119729][ T6417] veth1_macvtap: entered promiscuous mode [ 220.460663][ T6417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.558192][ T6417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.635515][ T3455] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.695187][ T6854] trusted_key: syz.0.203 sent an empty control message without MSG_MORE. [ 221.348178][ T58] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.448839][ T58] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.495609][ T58] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.532759][ T6375] veth0_vlan: entered promiscuous mode [ 222.495469][ T6462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.526156][ T6375] veth1_vlan: entered promiscuous mode [ 223.348227][ T6375] veth0_macvtap: entered promiscuous mode [ 223.372506][ T6375] veth1_macvtap: entered promiscuous mode [ 223.410784][ T6375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.805162][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.130745][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.331109][ T6375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.362691][ T6880] loop5: detected capacity change from 0 to 512 [ 224.416403][ T5972] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.432637][ T5972] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.476993][ T6880] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 224.478950][ T5972] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.517959][ T6880] EXT4-fs (loop5): orphan cleanup on readonly fs [ 224.546810][ T5972] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.567030][ T6880] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4214: comm syz.5.209: Allocating blocks 41-42 which overlap fs metadata [ 224.582994][ T6880] loop5: lost filesystem error report for type 5 error -117 [ 224.599054][ T6880] Quota error (device loop5): write_blk: dquota write failed [ 224.629778][ T6880] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 224.642073][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.670153][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.706326][ T5900] psmouse serio2: Failed to reset mouse on : -5 [ 224.718388][ T6880] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 224.747593][ T6880] EXT4-fs error (device loop5): ext4_acquire_dquot:6996: comm syz.5.209: Failed to acquire dquot type 1 [ 224.759805][ T6880] loop5: lost filesystem error report for type 5 error -117 [ 224.767553][ T6880] EXT4-fs error (device loop5): mb_free_blocks:2034: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 224.795927][ T6880] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.209: corrupted inode contents [ 224.858989][ T6880] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 224.863096][ T6880] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #12: comm syz.5.209: mark_inode_dirty error [ 224.912956][ T6880] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 224.915104][ T6880] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.209: corrupted inode contents [ 224.938990][ T5972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.967256][ T5972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.980218][ T6880] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 224.994356][ T6880] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #12: comm syz.5.209: mark_inode_dirty error [ 225.028235][ T6880] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 225.029217][ T6880] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.209: corrupted inode contents [ 225.085641][ T6880] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 225.087988][ T6880] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 225.120463][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.154921][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.206171][ T6880] loop5: lost filesystem error report for type 5 error -117 [ 225.208542][ T6880] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.209: corrupted inode contents [ 225.256299][ T6462] veth0_vlan: entered promiscuous mode [ 225.307782][ T6880] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 225.308285][ T6880] EXT4-fs error (device loop5): ext4_truncate:4635: inode #12: comm syz.5.209: mark_inode_dirty error [ 225.359697][ T6462] veth1_vlan: entered promiscuous mode [ 225.436814][ T6880] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 225.437316][ T6880] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 225.525543][ T6880] loop5: lost filesystem error report for type 5 error -117 [ 225.533660][ T6880] EXT4-fs (loop5): 1 truncate cleaned up [ 225.535991][ T6462] veth0_macvtap: entered promiscuous mode [ 225.579127][ T6880] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 225.634871][ T6462] veth1_macvtap: entered promiscuous mode [ 225.747127][ T6462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.774226][ T6462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.861154][ T58] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.908352][ T58] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.929178][ T5832] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 225.991207][ T5832] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 226.011554][ T58] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.056277][ T6909] loop2: detected capacity change from 0 to 128 [ 226.109612][ T6909] ext4: Unknown parameter 'hash' [ 226.130883][ T49] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.345477][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.354412][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.702925][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.711728][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.742786][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.136592][ T3455] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.037910][ T3455] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.202293][ T3455] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.406105][ T6945] loop8: detected capacity change from 0 to 256 [ 230.532069][ T6945] exFAT-fs (loop8): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 230.544361][ T5900] misc userio: Buffer overflowed, userio client isn't keeping up [ 230.616156][ T6945] exFAT-fs (loop8): failed to load alloc-bitmap [ 230.622534][ T6945] exFAT-fs (loop8): failed to recognize exfat type [ 231.313370][ T3455] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.530885][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 231.539641][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 231.548157][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 231.556296][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 231.564882][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 231.577344][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 231.583401][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 232.351193][ T6958] netlink: 36 bytes leftover after parsing attributes in process `syz.6.225'. [ 232.545193][ T6952] lo speed is unknown, defaulting to 1000 [ 232.560014][ T6961] netlink: 12 bytes leftover after parsing attributes in process `syz.8.226'. [ 232.742283][ T6961] netlink: 4 bytes leftover after parsing attributes in process `syz.8.226'. [ 232.866972][ T6965] erspan1: entered allmulticast mode [ 233.580420][ T5900] input: PS/2 Generic Mouse as /devices/serio2/input/input7 [ 233.844001][ T5900] psmouse serio2: Failed to enable mouse on [ 233.895562][ T5844] Bluetooth: hci2: command tx timeout [ 234.099598][ T5850] udevd[5850]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 234.217146][ T3455] bridge_slave_1: left allmulticast mode [ 234.222838][ T3455] bridge_slave_1: left promiscuous mode [ 234.253977][ T3455] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.399510][ T3455] bridge_slave_0: left allmulticast mode [ 234.440212][ T3455] bridge_slave_0: left promiscuous mode [ 234.473057][ T3455] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.176536][ T5844] Bluetooth: hci2: command tx timeout [ 239.063335][ T7010] loop8: detected capacity change from 0 to 128 [ 239.312627][ T5844] Bluetooth: hci2: command tx timeout [ 239.868630][ T7013] loop0: detected capacity change from 0 to 4096 [ 239.880047][ T7013] EXT4-fs (loop0): Test dummy encryption mode enabled [ 240.840131][ T7013] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.971020][ T7013] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 241.003712][ T7025] loop8: detected capacity change from 0 to 256 [ 241.335564][ T5844] Bluetooth: hci2: command tx timeout [ 241.402587][ T7025] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 241.736344][ T7025] exFAT-fs (loop8): start_clu is invalid cluster(0xffffffff) [ 242.101986][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.153343][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 242.225557][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 242.233430][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 242.241642][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 242.251940][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 243.342545][ T3455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.462250][ T3455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.503086][ T7052] loop2: detected capacity change from 0 to 64 [ 243.542622][ T3455] bond0 (unregistering): Released all slaves [ 244.295472][ T5846] Bluetooth: hci3: command tx timeout [ 244.511541][ T7036] lo speed is unknown, defaulting to 1000 [ 245.700682][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 245.885379][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 245.899319][ T9] usb 9-1: config index 0 descriptor too short (expected 46363, got 27) [ 245.926514][ T9] usb 9-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 245.956986][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.012460][ T9] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 190 [ 246.069646][ T9] usb 9-1: New USB device found, idVendor=07c0, idProduct=158a, bcdDevice= 4.2e [ 246.128297][ T6952] chnl_net:caif_netlink_parms(): no params data found [ 246.138754][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.162467][ T9] usb 9-1: Product: syz [ 246.171942][ T9] usb 9-1: Manufacturer: syz [ 246.379364][ T5846] Bluetooth: hci3: command tx timeout [ 246.811094][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a781c00: rx timeout, send abort [ 246.821181][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a781c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 246.846898][ T9] usb 9-1: SerialNumber: syz [ 246.895133][ T9] usb 9-1: config 0 descriptor?? [ 246.995425][ T3455] hsr_slave_0: left promiscuous mode [ 247.042149][ T3455] hsr_slave_1: left promiscuous mode [ 247.094370][ T3455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.112604][ T3455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.146636][ T3455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.154064][ T3455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.159801][ T9] usb 9-1: USB disconnect, device number 2 [ 247.216656][ T7100] loop0: detected capacity change from 0 to 512 [ 247.365625][ T7100] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 247.468246][ T3455] veth1_macvtap: left promiscuous mode [ 247.499638][ T7100] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.514134][ T3455] veth0_macvtap: left promiscuous mode [ 247.520342][ T3455] veth1_vlan: left promiscuous mode [ 247.547396][ T3455] veth0_vlan: left promiscuous mode [ 247.619058][ T7100] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 248.476264][ T5846] Bluetooth: hci3: command tx timeout [ 249.489688][ T7126] loop6: detected capacity change from 0 to 512 [ 250.511694][ T7116] loop2: detected capacity change from 0 to 32768 [ 250.535705][ T5846] Bluetooth: hci3: command tx timeout [ 250.726667][ T7116] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 251.040970][ T7116] XFS (loop2): Ending clean mount [ 251.218414][ T7116] XFS (loop2): Quotacheck needed: Please wait. [ 251.688357][ T7116] XFS (loop2): Quotacheck: Done. [ 251.810878][ T3455] team0 (unregistering): Port device team_slave_1 removed [ 251.837074][ T5827] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 251.882479][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.904259][ T3455] team0 (unregistering): Port device team_slave_0 removed [ 252.571004][ T7149] loop0: detected capacity change from 0 to 256 [ 252.594123][ T7149] exfat: Deprecated parameter 'utf8' [ 252.610937][ T7149] exfat: Deprecated parameter 'namecase' [ 252.634509][ T7149] exfat: Deprecated parameter 'namecase' [ 252.640985][ T7149] exfat: Deprecated parameter 'utf8' [ 252.684651][ T7149] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xf17e4aaa, utbl_chksum : 0xe619d30d) [ 252.714110][ T7149] exFAT-fs (loop0): failed to test first cluster bit of root dir(5) [ 255.469061][ T7165] loop6: detected capacity change from 0 to 128 [ 255.547566][ T7165] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 255.634834][ T7165] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 255.833016][ T6375] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 256.613752][ T7173] loop6: detected capacity change from 0 to 256 [ 256.683219][ T7173] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xecc0b056, utbl_chksum : 0xe619d30d) [ 256.714166][ T7121] syz_tun: entered allmulticast mode [ 257.037426][ T6952] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.068667][ T6952] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.099138][ T6952] bridge_slave_0: entered allmulticast mode [ 257.127536][ T6952] bridge_slave_0: entered promiscuous mode [ 257.330898][ T6952] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.375471][ T6952] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.407482][ T6952] bridge_slave_1: entered allmulticast mode [ 257.439356][ T6952] bridge_slave_1: entered promiscuous mode [ 257.524613][ T7187] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.283'. [ 257.864027][ T6952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.955983][ T6952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.526511][ T6952] team0: Port device team_slave_0 added [ 260.428706][ T3455] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.833198][ T6952] team0: Port device team_slave_1 added [ 260.898167][ T6952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.937780][ T6952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.971086][ T6952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.061316][ T3455] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.135169][ T6952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.144027][ T6952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.199135][ T6952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.232423][ T7036] chnl_net:caif_netlink_parms(): no params data found [ 262.539010][ T7237] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 264.712706][ T7248] binder: BINDER_SET_CONTEXT_MGR already set [ 264.719373][ T7248] binder: 7244:7248 ioctl 4018620d 200000000040 returned -16 [ 265.853659][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.863215][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.760451][ T3455] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.419988][ T3455] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.084699][ T6952] hsr_slave_0: entered promiscuous mode [ 270.202284][ T6952] hsr_slave_1: entered promiscuous mode [ 270.340138][ T6952] debugfs: 'hsr0' already exists in 'hsr' [ 270.374951][ T6952] Cannot create hsr debugfs directory [ 270.874799][ T7283] loop8: detected capacity change from 0 to 8 [ 270.969518][ T7283] SQUASHFS error: zstd decompression error: 10 [ 270.976992][ T7283] SQUASHFS error: zstd decompression failed, data probably corrupt [ 270.985648][ T7283] SQUASHFS error: Failed to read block 0x4ec: -5 [ 270.992138][ T7283] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 270.999605][ T7283] SQUASHFS error: Unable to read inode 0x2011f [ 271.718363][ T7036] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.785664][ T7036] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.811736][ T7036] bridge_slave_0: entered allmulticast mode [ 272.411604][ T7289] loop0: detected capacity change from 0 to 1024 [ 272.419243][ T7289] hfsplus: Unknown parameter './file1' [ 272.787660][ T7036] bridge_slave_0: entered promiscuous mode [ 273.170823][ T7036] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.202394][ T7036] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.258428][ T7036] bridge_slave_1: entered allmulticast mode [ 273.281307][ T7036] bridge_slave_1: entered promiscuous mode [ 274.399468][ T3455] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.528267][ T7036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.577522][ T7036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.578000][ T7313] siw: device registration error -23 [ 276.378324][ T3455] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.466957][ T7036] team0: Port device team_slave_0 added [ 276.492266][ T7036] team0: Port device team_slave_1 added [ 276.763547][ T3455] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.267668][ T7344] No such timeout policy "syz1" [ 279.602840][ T3455] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.913626][ T7036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.745653][ T7036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.832240][ T7036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.248267][ T7036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.255284][ T7036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.387576][ T7036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.506778][ T6952] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 281.563868][ T6952] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 281.687649][ T6952] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 281.790131][ T6952] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 281.969490][ T7036] hsr_slave_0: entered promiscuous mode [ 282.016406][ T7036] hsr_slave_1: entered promiscuous mode [ 282.022598][ T7036] debugfs: 'hsr0' already exists in 'hsr' [ 282.069542][ T7036] Cannot create hsr debugfs directory [ 282.773118][ T3455] bridge_slave_1: left allmulticast mode [ 282.781223][ T3455] bridge_slave_1: left promiscuous mode [ 282.797403][ T3455] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.842408][ T3455] bridge_slave_0: left allmulticast mode [ 282.848239][ T3455] bridge_slave_0: left promiscuous mode [ 282.868695][ T3455] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.914209][ T3455] bridge_slave_1: left allmulticast mode [ 282.932820][ T3455] bridge_slave_1: left promiscuous mode [ 282.942068][ T3455] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.972215][ T3455] bridge_slave_0: left allmulticast mode [ 282.985578][ T3455] bridge_slave_0: left promiscuous mode [ 283.204854][ T3455] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.425966][ T7392] siw: device registration error -23 [ 286.539191][ T7410] netlink: 'syz.2.336': attribute type 4 has an invalid length. [ 286.569739][ T3455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.621482][ T7413] netlink: 'syz.2.336': attribute type 4 has an invalid length. [ 286.673122][ T3455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.709160][ T3455] bond0 (unregistering): Released all slaves [ 287.645029][ T3455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.712346][ T3455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.739697][ T3455] bond0 (unregistering): Released all slaves [ 288.316877][ T7426] ./file0: Can't lookup blockdev [ 289.578207][ T7432] loop8: detected capacity change from 0 to 1024 [ 292.416460][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 292.430547][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 292.486137][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 292.514244][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 292.539551][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 294.619001][ T5846] Bluetooth: hci5: command tx timeout [ 295.988286][ T7446] lo speed is unknown, defaulting to 1000 [ 297.446813][ T5844] Bluetooth: hci5: command tx timeout [ 297.766649][ T7489] evm: overlay not supported [ 298.135685][ T5844] Bluetooth: hci6: command 0x0406 tx timeout [ 299.190706][ T7036] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 299.305109][ T7036] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 299.495903][ T5846] Bluetooth: hci5: command tx timeout [ 299.596122][ T7036] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 300.605506][ T3455] hsr_slave_0: left promiscuous mode [ 300.624078][ T3455] hsr_slave_1: left promiscuous mode [ 300.638483][ T3455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.668358][ T3455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.762858][ T3455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.775742][ T3455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.953368][ T3455] hsr_slave_0: left promiscuous mode [ 302.135421][ T3455] hsr_slave_1: left promiscuous mode [ 302.158122][ T3455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.402999][ T5846] Bluetooth: hci5: command tx timeout [ 302.648448][ T3455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.736976][ T3455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.744416][ T3455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.052876][ T3455] veth1_macvtap: left promiscuous mode [ 303.088940][ T3455] veth0_macvtap: left promiscuous mode [ 303.119430][ T3455] veth1_vlan: left promiscuous mode [ 303.139527][ T3455] veth0_vlan: left promiscuous mode [ 304.297981][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 304.310303][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 304.325513][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 304.345712][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 304.355537][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 304.640872][ T3455] veth1_macvtap: left promiscuous mode [ 304.656766][ T3455] veth0_macvtap: left promiscuous mode [ 304.662581][ T3455] veth1_vlan: left promiscuous mode [ 304.713391][ T7548] netlink: 32 bytes leftover after parsing attributes in process `syz.0.369'. [ 305.294925][ T3455] veth0_vlan: left promiscuous mode [ 306.506160][ T5844] Bluetooth: hci2: command tx timeout [ 307.485754][ T7559] netlink: 'syz.8.361': attribute type 10 has an invalid length. [ 308.585616][ T5844] Bluetooth: hci2: command tx timeout [ 310.625467][ T5844] Bluetooth: hci2: command tx timeout [ 310.874658][ T3455] team0 (unregistering): Port device team_slave_1 removed [ 310.918880][ T3455] team0 (unregistering): Port device team_slave_0 removed [ 312.696979][ T5844] Bluetooth: hci2: command tx timeout [ 314.384386][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 314.918562][ T5844] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 314.928094][ T5844] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 314.936331][ T5844] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 314.988060][ T5844] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 314.996131][ T5844] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 316.758907][ T3455] team0 (unregistering): Port device team_slave_1 removed [ 316.813857][ T3455] team0 (unregistering): Port device team_slave_0 removed [ 317.095599][ T5844] Bluetooth: hci7: command tx timeout [ 317.319597][ T7036] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 317.354340][ T24] lo speed is unknown, defaulting to 1000 [ 317.383821][ T24] infiniband syz0: ib_query_port failed (-19) [ 317.391829][ T7559] syz_tun: entered promiscuous mode [ 317.419848][ T7559] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 318.041415][ T7446] chnl_net:caif_netlink_parms(): no params data found [ 319.191725][ T5844] Bluetooth: hci7: command tx timeout [ 319.940097][ T7559] syz_tun (unregistering): left allmulticast mode [ 319.967742][ T7559] bond0: (slave syz_tun): Releasing backup interface [ 320.193869][ T7446] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.225596][ T7446] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.232894][ T7446] bridge_slave_0: entered allmulticast mode [ 320.267766][ T7446] bridge_slave_0: entered promiscuous mode [ 320.335902][ T7446] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.343083][ T7446] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.375525][ T7446] bridge_slave_1: entered allmulticast mode [ 320.417540][ T7446] bridge_slave_1: entered promiscuous mode [ 320.752948][ T7446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.848762][ T7446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.082966][ T7446] team0: Port device team_slave_0 added [ 321.131431][ T7537] chnl_net:caif_netlink_parms(): no params data found [ 321.167208][ T7446] team0: Port device team_slave_1 added [ 321.256340][ T5844] Bluetooth: hci7: command tx timeout [ 321.304650][ T7624] chnl_net:caif_netlink_parms(): no params data found [ 321.428497][ T7446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.442870][ T7446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.479604][ T7446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.663195][ T7446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.678351][ T7446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.715816][ T7446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.891834][ T7537] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.899533][ T7537] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.906861][ T7537] bridge_slave_0: entered allmulticast mode [ 321.915010][ T7537] bridge_slave_0: entered promiscuous mode [ 321.924755][ T7537] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.932023][ T7537] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.939394][ T7537] bridge_slave_1: entered allmulticast mode [ 321.947752][ T7537] bridge_slave_1: entered promiscuous mode [ 321.990109][ T7537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.961104][ T7537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.341606][ T5844] Bluetooth: hci7: command tx timeout [ 323.354112][ T7446] hsr_slave_0: entered promiscuous mode [ 323.361359][ T7446] hsr_slave_1: entered promiscuous mode [ 324.118790][ T7624] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.136463][ T7624] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.143832][ T7624] bridge_slave_0: entered allmulticast mode [ 324.155775][ T7624] bridge_slave_0: entered promiscuous mode [ 324.179616][ T7537] team0: Port device team_slave_0 added [ 324.207210][ T7624] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.214385][ T7624] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.235700][ T7624] bridge_slave_1: entered allmulticast mode [ 324.244255][ T7624] bridge_slave_1: entered promiscuous mode [ 325.746794][ T7537] team0: Port device team_slave_1 added [ 325.967842][ T7624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.063618][ T3455] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.165724][ T7624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.206319][ T7537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.213382][ T7537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.244496][ T7537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.281310][ T3455] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.373224][ T7537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.388437][ T7537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.433637][ T7537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.510656][ T3455] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.522768][ T7752] 9p: Bad value for 'wfdno' [ 326.582183][ T7624] team0: Port device team_slave_0 added [ 326.706944][ T3455] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.772900][ T7624] team0: Port device team_slave_1 added [ 326.795947][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.805600][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.978611][ T7624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.986875][ T7624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.014813][ T7624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.057308][ T7537] hsr_slave_0: entered promiscuous mode [ 327.064119][ T7537] hsr_slave_1: entered promiscuous mode [ 327.106440][ T7537] debugfs: 'hsr0' already exists in 'hsr' [ 327.125408][ T7537] Cannot create hsr debugfs directory [ 327.167344][ T7624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.184752][ T7624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.223415][ T7624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.707730][ T7624] hsr_slave_0: entered promiscuous mode [ 329.743015][ T7624] hsr_slave_1: entered promiscuous mode [ 329.892822][ T7624] debugfs: 'hsr0' already exists in 'hsr' [ 330.002287][ T7624] Cannot create hsr debugfs directory [ 332.352194][ T7817] syz_tun: entered allmulticast mode [ 336.563991][ T7446] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 337.620347][ T7446] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 337.785532][ T7446] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 337.847073][ T7446] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 338.995019][ T7871] netlink: 104 bytes leftover after parsing attributes in process `syz.6.444'. [ 339.280876][ T3455] bridge_slave_1: left allmulticast mode [ 339.309575][ T3455] bridge_slave_1: left promiscuous mode [ 339.326126][ T3455] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.410528][ T3455] bridge_slave_0: left allmulticast mode [ 339.424934][ T3455] bridge_slave_0: left promiscuous mode [ 339.710796][ T30] audit: type=1326 audit(2000000718.149:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.2.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b719bf79 code=0x7ffc0000 [ 339.969905][ T30] audit: type=1326 audit(2000000718.159:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.2.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b719bf79 code=0x7ffc0000 [ 340.062095][ T30] audit: type=1326 audit(2000000718.159:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.2.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f90b719bf79 code=0x7ffc0000 [ 340.124949][ T3455] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.138611][ T30] audit: type=1326 audit(2000000718.159:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.2.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b719bf79 code=0x7ffc0000 [ 340.162782][ T30] audit: type=1326 audit(2000000718.169:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.2.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b719bf79 code=0x7ffc0000 [ 340.188843][ T3455] bridge_slave_1: left allmulticast mode [ 340.205384][ T3455] bridge_slave_1: left promiscuous mode [ 340.210889][ T30] audit: type=1326 audit(2000000718.169:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.2.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90b719bf79 code=0x7ffc0000 [ 340.213500][ T3455] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.241229][ T30] audit: type=1326 audit(2000000718.169:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.2.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b719bf79 code=0x7ffc0000 [ 340.267725][ T3455] bridge_slave_0: left allmulticast mode [ 340.273397][ T3455] bridge_slave_0: left promiscuous mode [ 340.279967][ T3455] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.292663][ T3455] bridge_slave_1: left allmulticast mode [ 340.293879][ T30] audit: type=1326 audit(2000000718.169:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.2.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b719bf79 code=0x7ffc0000 [ 340.322045][ T30] audit: type=1326 audit(2000000718.179:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.2.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90b719bf79 code=0x7ffc0000 [ 340.327447][ T3455] bridge_slave_1: left promiscuous mode [ 340.344680][ T30] audit: type=1326 audit(2000000718.179:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.2.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b719bf79 code=0x7ffc0000 [ 340.355166][ T3455] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.383695][ T3455] bridge_slave_0: left allmulticast mode [ 340.389427][ T3455] bridge_slave_0: left promiscuous mode [ 340.396604][ T3455] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.569339][ T3455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.546048][ T3455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.635661][ T3455] bond0 (unregistering): Released all slaves [ 346.707258][ T3455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.730383][ T3455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.751034][ T3455] bond0 (unregistering): Released all slaves [ 347.315015][ T3455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.329245][ T3455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.205591][ T3455] bond0 (unregistering): Released all slaves [ 351.155444][ T3455] hsr_slave_0: left promiscuous mode [ 351.186102][ T3455] hsr_slave_1: left promiscuous mode [ 351.206550][ T3455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.246918][ T3455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.283056][ T3455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.311497][ T3455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.390169][ T3455] hsr_slave_0: left promiscuous mode [ 351.413777][ T3455] hsr_slave_1: left promiscuous mode [ 351.429093][ T3455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.446814][ T3455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.478931][ T3455] hsr_slave_0: left promiscuous mode [ 351.495681][ T3455] hsr_slave_1: left promiscuous mode [ 351.512103][ T3455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.533503][ T3455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.598993][ T3455] veth1_macvtap: left promiscuous mode [ 351.615043][ T3455] veth0_macvtap: left promiscuous mode [ 351.626853][ T3455] veth1_vlan: left promiscuous mode [ 351.632136][ T3455] veth0_vlan: left promiscuous mode [ 352.621362][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 352.634159][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 352.644925][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 352.661079][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 352.673619][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 352.781590][ T3455] team0 (unregistering): Port device team_slave_1 removed [ 352.823644][ T3455] team0 (unregistering): Port device team_slave_0 removed [ 354.074111][ T3455] team0 (unregistering): Port device team_slave_1 removed [ 354.135215][ T3455] team0 (unregistering): Port device team_slave_0 removed [ 354.493509][ T3455] team0 (unregistering): Port device team_slave_1 removed [ 354.523084][ T3455] team0 (unregistering): Port device team_slave_0 removed [ 354.776354][ T5846] Bluetooth: hci0: command tx timeout [ 354.921486][ T7537] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 355.206143][ T7537] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 355.291270][ T7537] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 355.702558][ T7537] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 357.825004][ T5846] Bluetooth: hci0: command tx timeout [ 358.864739][ T7985] chnl_net:caif_netlink_parms(): no params data found [ 358.919485][ T7537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.339259][ T5846] Bluetooth: hci0: command tx timeout [ 360.790726][ T7624] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 360.925408][ T7624] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 360.949132][ T7624] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 361.000305][ T7624] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 361.046760][ T7985] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.063232][ T7985] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.081923][ T7985] bridge_slave_0: entered allmulticast mode [ 361.097340][ T7985] bridge_slave_0: entered promiscuous mode [ 362.580749][ T5846] Bluetooth: hci0: command tx timeout [ 362.870534][ T7985] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.906323][ T7985] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.913605][ T7985] bridge_slave_1: entered allmulticast mode [ 363.022440][ T7985] bridge_slave_1: entered promiscuous mode [ 363.272008][ T7985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.320509][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 363.347601][ T7985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.386025][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 363.405837][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 363.414750][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 363.426054][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 363.819175][ T7985] team0: Port device team_slave_0 added [ 363.878349][ T7985] team0: Port device team_slave_1 added [ 364.020447][ T7985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.035195][ T7985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.106492][ T7985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.142596][ T7985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.160141][ T7985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.266541][ T7985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.532763][ T5846] Bluetooth: hci3: command tx timeout [ 365.557256][ T8090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.495'. [ 365.964592][ T7985] hsr_slave_0: entered promiscuous mode [ 365.996445][ T7985] hsr_slave_1: entered promiscuous mode [ 366.002717][ T7985] debugfs: 'hsr0' already exists in 'hsr' [ 366.025719][ T7985] Cannot create hsr debugfs directory [ 366.420053][ T7624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.700756][ T7624] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.280541][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.287806][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.359056][ T6948] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.366282][ T6948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.575380][ T5846] Bluetooth: hci3: command tx timeout [ 368.788962][ T3455] bridge_slave_1: left allmulticast mode [ 368.794667][ T3455] bridge_slave_1: left promiscuous mode [ 368.815826][ T3455] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.882220][ T3455] bridge_slave_0: left allmulticast mode [ 368.897789][ T3455] bridge_slave_0: left promiscuous mode [ 368.903587][ T3455] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.015468][ T5846] Bluetooth: hci3: command tx timeout [ 370.354498][ T3455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.423145][ T3455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.446590][ T3455] bond0 (unregistering): Released all slaves [ 371.092930][ T8081] chnl_net:caif_netlink_parms(): no params data found [ 372.075392][ T5846] Bluetooth: hci3: command tx timeout [ 372.231350][ T924] IPVS: starting estimator thread 0... [ 372.292453][ T3455] hsr_slave_0: left promiscuous mode [ 372.305092][ T3455] hsr_slave_1: left promiscuous mode [ 372.323079][ T3455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.343756][ T3455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.358049][ T8160] IPVS: using max 23 ests per chain, 55200 per kthread [ 372.883726][ T3455] team0 (unregistering): Port device team_slave_1 removed [ 373.220084][ T3455] team0 (unregistering): Port device team_slave_0 removed [ 373.904153][ T8081] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.925692][ T8081] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.943658][ T8081] bridge_slave_0: entered allmulticast mode [ 373.957570][ T8081] bridge_slave_0: entered promiscuous mode [ 373.977653][ T8081] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.995501][ T8081] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.012980][ T8081] bridge_slave_1: entered allmulticast mode [ 374.027767][ T8081] bridge_slave_1: entered promiscuous mode [ 374.313552][ T7624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.395209][ T8081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.412885][ T8081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.453451][ T8081] team0: Port device team_slave_0 added [ 375.495767][ T8081] team0: Port device team_slave_1 added [ 375.685278][ T8081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.698226][ T8081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.553191][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 376.563264][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 376.572098][ T8081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.583446][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 376.616057][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 376.624204][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 376.686361][ T8081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.725276][ T8081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.759845][ T8081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.888421][ T8081] hsr_slave_0: entered promiscuous mode [ 377.874010][ T8081] hsr_slave_1: entered promiscuous mode [ 379.529170][ T5844] Bluetooth: hci2: command tx timeout [ 379.609758][ T7985] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 381.058106][ T7985] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 381.110663][ T7985] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 381.201632][ T7985] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 381.575752][ T5844] Bluetooth: hci2: command tx timeout [ 383.342906][ T8184] chnl_net:caif_netlink_parms(): no params data found [ 383.488078][ T3455] bridge_slave_1: left allmulticast mode [ 383.493781][ T3455] bridge_slave_1: left promiscuous mode [ 383.532064][ T3455] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.573409][ T3455] bridge_slave_0: left allmulticast mode [ 383.588211][ T3455] bridge_slave_0: left promiscuous mode [ 383.619630][ T3455] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.655579][ T5844] Bluetooth: hci2: command tx timeout [ 384.633528][ T3455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.646997][ T3455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.659987][ T3455] bond0 (unregistering): Released all slaves [ 384.678290][ T7985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.702805][ T7985] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.914098][ T5979] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.921402][ T5979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.152138][ T8184] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.162344][ T8184] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.169784][ T8184] bridge_slave_0: entered allmulticast mode [ 385.178829][ T8184] bridge_slave_0: entered promiscuous mode [ 385.192100][ T3455] hsr_slave_0: left promiscuous mode [ 385.198697][ T3455] hsr_slave_1: left promiscuous mode [ 385.207037][ T3455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.223974][ T3455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.737516][ T5844] Bluetooth: hci2: command tx timeout [ 388.935903][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.942398][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.707430][ T3455] team0 (unregistering): Port device team_slave_1 removed [ 389.951377][ T3455] team0 (unregistering): Port device team_slave_0 removed [ 392.007925][ T8184] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.016622][ T8184] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.023899][ T8184] bridge_slave_1: entered allmulticast mode [ 392.032733][ T8184] bridge_slave_1: entered promiscuous mode [ 392.757372][ T6948] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.764671][ T6948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.588761][ T8184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.646732][ T8184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.874529][ T8184] team0: Port device team_slave_0 added [ 394.009295][ T8184] team0: Port device team_slave_1 added [ 394.099734][ T24] IPVS: starting estimator thread 0... [ 394.143934][ T8184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.152494][ T8184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.181068][ T8184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.185469][ T8301] IPVS: using max 22 ests per chain, 52800 per kthread [ 394.197636][ T8184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.209166][ T8184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.236218][ T8184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.262927][ T8081] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 394.277548][ T8081] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 394.372891][ T8081] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 394.442292][ T8081] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 394.498055][ T8184] hsr_slave_0: entered promiscuous mode [ 394.515431][ T8184] hsr_slave_1: entered promiscuous mode [ 394.521912][ T8184] debugfs: 'hsr0' already exists in 'hsr' [ 394.527777][ T8184] Cannot create hsr debugfs directory [ 398.444959][ T3455] bridge_slave_1: left allmulticast mode [ 398.480540][ T3455] bridge_slave_1: left promiscuous mode [ 398.500989][ T3455] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.550491][ T3455] bridge_slave_0: left allmulticast mode [ 398.595472][ T3455] bridge_slave_0: left promiscuous mode [ 398.605546][ T3455] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.306100][ T3455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.351766][ T3455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.392109][ T3455] bond0 (unregistering): Released all slaves [ 399.810651][ T3455] hsr_slave_0: left promiscuous mode [ 399.817256][ T3455] hsr_slave_1: left promiscuous mode [ 399.823274][ T3455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.849062][ T3455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.459261][ T3455] team0 (unregistering): Port device team_slave_1 removed [ 400.511743][ T3455] team0 (unregistering): Port device team_slave_0 removed [ 401.498622][ T7985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.582583][ T8081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.603593][ T8081] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.627858][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.635029][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.719627][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.726868][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.158071][ T8184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 403.207042][ T8184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 403.250648][ T8184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 403.279244][ T8184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 403.743783][ T8410] lo speed is unknown, defaulting to 1000 [ 403.746160][ T7985] veth0_vlan: entered promiscuous mode [ 403.767376][ T8410] lo speed is unknown, defaulting to 1000 [ 403.774080][ T7985] veth1_vlan: entered promiscuous mode [ 403.803716][ T8410] lo speed is unknown, defaulting to 1000 [ 403.821344][ T8410] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 403.840606][ T8081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.882478][ T8410] lo speed is unknown, defaulting to 1000 [ 403.921849][ T8410] lo speed is unknown, defaulting to 1000 [ 403.942242][ T8410] lo speed is unknown, defaulting to 1000 [ 403.967525][ T8410] lo speed is unknown, defaulting to 1000 [ 403.975821][ T8410] lo speed is unknown, defaulting to 1000 [ 403.997412][ T8410] lo speed is unknown, defaulting to 1000 [ 405.947262][ T7985] veth0_macvtap: entered promiscuous mode [ 405.975770][ T8081] veth0_vlan: entered promiscuous mode [ 406.010425][ T7985] veth1_macvtap: entered promiscuous mode [ 406.055598][ T8081] veth1_vlan: entered promiscuous mode [ 406.314531][ T8184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.813489][ T8184] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.844581][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.851785][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.061227][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.069227][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.216170][ T7985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.270047][ T7985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.564334][ T8081] veth0_macvtap: entered promiscuous mode [ 408.112282][ T8081] veth1_macvtap: entered promiscuous mode [ 408.133392][ T8081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.145870][ T8081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.239757][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.328933][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.371650][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.438949][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.469130][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.512231][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.527927][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.542963][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.595958][ T5979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.641737][ T5979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.776703][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.793716][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.900360][ T230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.925716][ T230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.060633][ T6124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.083195][ T6124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.271792][ T8184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.937467][ T8499] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 411.505898][ T5921] IPVS: starting estimator thread 0... [ 411.625414][ T8507] IPVS: using max 23 ests per chain, 55200 per kthread [ 411.641263][ T8184] veth0_vlan: entered promiscuous mode [ 411.746306][ T8184] veth1_vlan: entered promiscuous mode [ 411.840597][ T8184] veth0_macvtap: entered promiscuous mode [ 411.863198][ T8184] veth1_macvtap: entered promiscuous mode [ 411.919466][ T7938] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 411.932536][ T8184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.974072][ T8184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.018892][ T5979] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.051713][ T5979] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.105402][ T7938] usb 10-1: Using ep0 maxpacket: 8 [ 412.133943][ T7938] usb 10-1: config index 0 descriptor too short (expected 74, got 45) [ 412.159827][ T7938] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 412.225408][ T7938] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 412.275472][ T7938] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 412.330293][ T7938] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 412.440913][ T5979] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.502361][ T230] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.909905][ T7938] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 412.923208][ T7938] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 412.932392][ T7938] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.147327][ T5920] IPVS: starting estimator thread 0... [ 413.176983][ T7938] usb 10-1: usb_control_msg returned -32 [ 413.182706][ T7938] usbtmc 10-1:16.0: can't read capabilities [ 413.475804][ T8535] IPVS: using max 22 ests per chain, 52800 per kthread [ 413.946441][ T230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.001360][ T230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.203777][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.217263][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.538928][ T7938] usb 10-1: USB disconnect, device number 2 [ 416.479769][ T8560] loop1: detected capacity change from 0 to 4096 [ 416.544734][ T8560] EXT4-fs (loop1): Test dummy encryption mode enabled [ 418.447482][ T8560] EXT4-fs: error -4 creating inode table initialization thread [ 418.475894][ T8560] EXT4-fs (loop1): mount failed [ 420.226673][ T8611] fuse: Bad value for 'fd' [ 431.277602][ T5920] IPVS: starting estimator thread 0... [ 432.855595][ T8731] IPVS: using max 23 ests per chain, 55200 per kthread [ 436.595551][ T8772] loop1: detected capacity change from 0 to 128 [ 436.640831][ T8772] ext4: Unknown parameter 'hash' [ 439.740613][ T7938] IPVS: starting estimator thread 0... [ 439.925926][ T8801] IPVS: using max 24 ests per chain, 57600 per kthread [ 440.026723][ T8806] netlink: 28 bytes leftover after parsing attributes in process `syz.9.658'. [ 449.686263][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.692636][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 454.128114][ T8933] netlink: 28 bytes leftover after parsing attributes in process `syz.6.692'. [ 455.928514][ T8953] loop1: detected capacity change from 0 to 1024 [ 455.948891][ T8956] netlink: 'syz.2.700': attribute type 10 has an invalid length. [ 456.008657][ T8956] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.016404][ T8956] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.062174][ T8956] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.069606][ T8956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.078582][ T8956] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.085880][ T8956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.349898][ T8956] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 457.443742][ T8979] netlink: 28 bytes leftover after parsing attributes in process `syz.9.707'. [ 460.757216][ T9015] netlink: 'syz.1.716': attribute type 10 has an invalid length. [ 460.778196][ T9015] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.786963][ T9015] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.965005][ T9015] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.972282][ T9015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.979793][ T9015] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.986945][ T9015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.517513][ T9015] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 462.895015][ T9041] loop3: detected capacity change from 0 to 4096 [ 462.986358][ T9041] EXT4-fs (loop3): Test dummy encryption mode enabled [ 463.019887][ T9047] netlink: 20 bytes leftover after parsing attributes in process `syz.1.726'. [ 463.087137][ T9041] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.711940][ T9072] loop1: detected capacity change from 0 to 128 [ 466.127034][ T9092] netlink: 40 bytes leftover after parsing attributes in process `syz.9.734'. [ 466.137153][ T9092] netlink: 'syz.9.734': attribute type 10 has an invalid length. [ 466.146291][ T9092] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.153982][ T9092] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.202260][ T9092] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.209697][ T9092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.217313][ T9092] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.224467][ T9092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.283445][ T9092] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 466.954556][ T9108] loop9: detected capacity change from 0 to 128 [ 467.432521][ T9108] ext4: Unknown parameter 'hash' [ 469.341411][ T9139] loop9: detected capacity change from 0 to 128 [ 470.041121][ T9139] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 470.135257][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 470.135295][ T30] audit: type=1800 audit(2000000848.709:187): pid=9134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.744" name="file1" dev="loop9" ino=104 res=0 errno=0 [ 472.104645][ T9155] netlink: 40 bytes leftover after parsing attributes in process `syz.6.752'. [ 472.116210][ T9155] netlink: 'syz.6.752': attribute type 10 has an invalid length. [ 472.182616][ T9155] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.190424][ T9155] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.420335][ T9155] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.427564][ T9155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.435135][ T9155] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.442348][ T9155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.439090][ T9155] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 473.925787][ T8081] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.221531][ T9217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.768'. [ 477.614671][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 477.966320][ T9227] netlink: 40 bytes leftover after parsing attributes in process `syz.3.772'. [ 478.060800][ T9228] netlink: 'syz.3.772': attribute type 10 has an invalid length. [ 478.392330][ T9228] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.400092][ T9228] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.479577][ T9228] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.486847][ T9228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.494390][ T9228] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.501626][ T9228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.567164][ T9228] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 480.033554][ T9254] loop3: detected capacity change from 0 to 512 [ 480.101479][ T9254] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 480.139157][ T9254] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 480.167649][ T9254] System zones: 1-2, 4-12, 8-8 [ 480.201474][ T9254] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.778: iget: bad i_size value: 38620345925642 [ 480.302929][ T9254] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 480.303503][ T9254] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.778: couldn't read orphan inode 15 (err -117) [ 480.361452][ T9254] loop3: lost filesystem error report for type 5 error -117 [ 480.489433][ T9254] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.591049][ T36] EXT4-fs error (device loop3): ext4_validate_block_bitmap:431: comm kworker/u8:2: bg 0: block 5: invalid block bitmap [ 481.662469][ T36] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 320 with error 28 [ 481.745513][ T36] EXT4-fs (loop3): This should not happen!! Data will be lost [ 481.745513][ T36] [ 481.755203][ T36] EXT4-fs (loop3): Total free blocks count 0 [ 481.828232][ T36] EXT4-fs (loop3): Free/Dirty block details [ 482.222920][ T36] EXT4-fs (loop3): free_blocks=0 [ 482.312137][ T36] EXT4-fs (loop3): dirty_blocks=320 [ 482.418830][ T36] EXT4-fs (loop3): Block reservation details [ 482.530343][ T36] EXT4-fs (loop3): i_reserved_data_blocks=320 [ 482.754010][ T8081] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.036940][ T9295] netlink: 40 bytes leftover after parsing attributes in process `syz.1.789'. [ 483.079158][ T9295] netlink: 'syz.1.789': attribute type 10 has an invalid length. [ 483.145658][ T9295] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.153102][ T9295] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.702642][ T9317] loop3: detected capacity change from 0 to 128 [ 484.742263][ T9317] ext4: Unknown parameter 'hash' [ 487.633914][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 491.950743][ T9406] siw: device registration error -23 [ 492.171862][ T9411] overlayfs: failed to resolve './file1': -2 [ 492.307318][ T9423] netlink: 12 bytes leftover after parsing attributes in process `syz.6.819'. [ 492.352296][ T9423] netlink: 12 bytes leftover after parsing attributes in process `syz.6.819'. [ 497.616401][ T9468] siw: device registration error -23 [ 500.242033][ T9497] loop9: detected capacity change from 0 to 512 [ 500.347521][ T9497] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 500.437018][ T9497] EXT4-fs (loop9): 1 truncate cleaned up [ 500.467898][ T9497] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.095537][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 503.355867][ T9529] hub 2-0:1.0: USB hub found [ 503.439833][ T9529] hub 2-0:1.0: 1 port detected [ 503.526146][ T9531] siw: device registration error -23 [ 506.969733][ T9562] ./file0: Can't lookup blockdev [ 508.335587][ T7985] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.919690][ T9598] loop9: detected capacity change from 0 to 128 [ 511.121320][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.135488][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.363740][ T9629] loop9: detected capacity change from 0 to 512 [ 512.382065][ T9630] ufs: You didn't specify the type of your ufs filesystem [ 512.382065][ T9630] [ 512.382065][ T9630] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 512.382065][ T9630] [ 512.382065][ T9630] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 512.413684][ T9630] ufs: ufstype=old is supported read-only [ 513.332470][ T9629] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.379163][ T9629] ext4 filesystem being mounted at /40/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 513.642334][ T9644] fuse: Bad value for 'fd' [ 514.534717][ T7985] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.248201][ T9669] netlink: 28 bytes leftover after parsing attributes in process `syz.1.885'. [ 518.070068][ T9690] ufs: You didn't specify the type of your ufs filesystem [ 518.070068][ T9690] [ 518.070068][ T9690] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 518.070068][ T9690] [ 518.070068][ T9690] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 518.159357][ T9690] ufs: ufstype=old is supported read-only [ 518.650140][ T9704] loop3: detected capacity change from 0 to 512 [ 518.712115][ T9707] fuse: Bad value for 'fd' [ 518.799217][ T9704] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.898176][ T9717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.896'. [ 518.905768][ T9704] ext4 filesystem being mounted at /40/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 518.955507][ T9717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.896'. [ 521.155057][ C1] Unknown status report in ack skb [ 521.254146][ T8081] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.865591][ T9758] netlink: 28 bytes leftover after parsing attributes in process `syz.3.902'. [ 527.333194][ T9792] loop3: detected capacity change from 0 to 512 [ 527.572157][ T9792] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 528.166844][ T9792] EXT4-fs (loop3): 1 truncate cleaned up [ 528.249777][ T9792] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 529.492734][ T9802] hub 2-0:1.0: USB hub found [ 529.597251][ T9802] hub 2-0:1.0: 1 port detected [ 533.035689][ T9833] netlink: 28 bytes leftover after parsing attributes in process `syz.6.924'. [ 533.658367][ T9842] loop9: detected capacity change from 0 to 4096 [ 535.908925][ T8081] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.751847][ C1] wlan1: beacon TX faster than countdown (channel/color switch) completion [ 538.160807][ C1] Unknown status report in ack skb [ 538.909259][ T9904] IPVS: dh: FWM 3 0x00000003 - no destination available [ 541.544702][ T9926] loop1: detected capacity change from 0 to 512 [ 541.585451][ T9926] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 541.690313][ T9926] EXT4-fs (loop1): 1 truncate cleaned up [ 541.717870][ T9926] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 542.574695][ T9941] ./file0: Can't lookup blockdev [ 543.861859][ T9955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.953'. [ 543.896046][ T9955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.953'. [ 544.420959][ T9966] hub 2-0:1.0: USB hub found [ 544.426083][ T9966] hub 2-0:1.0: 1 port detected [ 544.992048][ T9972] loop9: detected capacity change from 0 to 256 [ 545.056295][ T8184] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.097740][ T9975] IPVS: dh: FWM 3 0x00000003 - no destination available [ 548.733700][T10028] loop9: detected capacity change from 0 to 512 [ 548.748772][T10030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.969'. [ 548.786044][T10028] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 548.805657][T10030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.969'. [ 548.859749][T10028] EXT4-fs (loop9): 1 truncate cleaned up [ 548.888286][T10028] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 548.985921][ T5846] Bluetooth: hci3: unexpected event for opcode 0x0407 [ 552.360336][ T7985] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.915613][ T5846] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 553.924152][ T5846] Bluetooth: hci3: Injecting HCI hardware error event [ 553.932149][ T5846] Bluetooth: hci3: hardware error 0x00 [ 554.245989][T10088] Unknown status report in ack skb [ 556.905439][ T5846] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 558.810893][T10127] loop1: detected capacity change from 0 to 512 [ 558.855402][T10127] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 558.925640][T10127] EXT4-fs (loop1): 1 truncate cleaned up [ 558.933428][T10127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 560.118227][T10149] hub 2-0:1.0: USB hub found [ 560.123208][T10149] hub 2-0:1.0: 1 port detected [ 560.704201][ T8184] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.855393][ C0] Unknown status report in ack skb [ 561.312587][T10164] siw: device registration error -23 [ 564.962927][T10207] ./file0: Can't lookup blockdev [ 566.064872][T10226] netlink: 'syz.0.1016': attribute type 39 has an invalid length. [ 569.247546][T10267] loop1: detected capacity change from 0 to 128 [ 571.501790][T10277] ./file0: Can't lookup blockdev [ 571.888612][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c931c00: rx timeout, send abort [ 572.396847][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c931c00: abort rx timeout. Force session deactivation [ 572.869842][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.876310][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.894979][T10302] loop1: detected capacity change from 0 to 128 [ 573.955522][T10302] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=2842c028, mo2=0102] [ 573.981099][T10302] System zones: 1-3, 19-19, 35-36 [ 573.997666][T10302] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 574.024221][T10302] ext4 filesystem being mounted at /70/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 574.240014][ T8184] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 579.671419][T10362] loop3: detected capacity change from 0 to 512 [ 579.721593][T10362] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 579.887312][T10362] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.973689][T10362] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 580.050782][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053aea400: rx timeout, send abort [ 580.311354][T10373] loop9: detected capacity change from 0 to 512 [ 580.355909][T10373] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 580.455163][T10373] EXT4-fs (loop9): 1 truncate cleaned up [ 580.488759][T10373] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 580.559082][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053aea400: abort rx timeout. Force session deactivation [ 583.078459][T10394] hub 2-0:1.0: USB hub found [ 583.088579][T10394] hub 2-0:1.0: 1 port detected [ 583.453233][ T8081] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.325586][ T24] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 587.826027][ T24] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 587.845585][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.861109][ T24] usb 4-1: config 0 descriptor?? [ 588.310729][ T7985] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.091227][ T24] pegasus 4-1:0.0: can't reset MAC [ 589.099119][ T24] pegasus 4-1:0.0: probe with driver pegasus failed with error -5 [ 589.147378][ T24] usb 4-1: USB disconnect, device number 2 [ 591.367112][T10474] loop1: detected capacity change from 0 to 16 [ 591.396487][T10474] erofs (device loop1): mounted with root inode @ nid 36. [ 591.421635][T10474] syz.1.1076: attempt to access beyond end of device [ 591.421635][T10474] loop1: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 591.519100][T10474] syz.1.1076: attempt to access beyond end of device [ 591.519100][T10474] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 591.593369][T10474] erofs (device loop1): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 591.647616][T10474] erofs (device loop1): read error -117 @ 1 of nid 89 [ 591.673245][ T30] audit: type=1800 audit(2000000970.259:188): pid=10474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1076" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 595.473616][T10541] overlayfs: failed to resolve './file0': -2 [ 595.558433][T10533] gretap0: entered promiscuous mode [ 595.826770][T10556] fuse: Bad value for 'fd' [ 596.673276][T10573] loop1: detected capacity change from 0 to 512 [ 596.802300][T10573] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 596.903347][T10573] ext4 filesystem being mounted at /80/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 596.927937][T10588] loop3: detected capacity change from 0 to 64 [ 597.117595][ T30] audit: type=1800 audit(2000000975.709:189): pid=10588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1106" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 597.408854][ T8184] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.835990][T10607] overlayfs: failed to resolve './file0': -2 [ 599.345471][ T9826] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 599.715742][ T9826] usb 2-1: Using ep0 maxpacket: 8 [ 599.757271][ T9826] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 599.786520][ T9826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.802810][ T9826] usb 2-1: Product: syz [ 599.914126][T10629] siw: device registration error -23 [ 599.932046][ T9826] usb 2-1: Manufacturer: syz [ 599.952533][ T9826] usb 2-1: SerialNumber: syz [ 599.980996][ T9826] usb 2-1: config 0 descriptor?? [ 600.241040][ T9826] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 602.029128][ T9826] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 602.066801][ T9826] usb 2-1: USB disconnect, device number 2 [ 602.290057][T10668] overlayfs: failed to resolve './file0': -2 [ 606.919353][ T789] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 607.251647][ T789] usb 4-1: Using ep0 maxpacket: 8 [ 607.306529][ T789] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 607.365183][ T789] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 607.403702][ T789] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 607.449150][ T789] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 607.508599][ T789] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 607.545414][ T789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.825976][ T789] usb 4-1: GET_CAPABILITIES returned 0 [ 607.831530][ T789] usbtmc 4-1:16.0: can't read capabilities [ 608.039713][T10768] loop9: detected capacity change from 0 to 1024 [ 608.123860][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 608.157599][ T789] usb 4-1: USB disconnect, device number 3 [ 608.765999][T10780] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1157'. [ 608.939671][T10786] 9p: Bad value for 'wfdno' [ 611.040478][T10819] loop9: detected capacity change from 0 to 4096 [ 611.291824][ T30] audit: type=1800 audit(2000000989.879:190): pid=10819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1168" name="file1" dev="loop9" ino=0 res=0 errno=0 [ 612.168786][T10828] loop3: detected capacity change from 0 to 512 [ 612.218803][T10828] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 612.391844][T10828] EXT4-fs (loop3): 1 truncate cleaned up [ 612.424823][T10828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 612.521744][T10838] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1173'. [ 612.912099][T10849] syz.3.1170 (pid 10849) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 615.675535][T10881] netlink: 'syz.0.1185': attribute type 10 has an invalid length. [ 615.684161][T10881] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.691562][T10881] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.774089][T10881] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.781352][T10881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.788958][T10881] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.796153][T10881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 615.912355][T10881] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 618.828723][ T8081] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.865435][T10908] loop1: detected capacity change from 0 to 512 [ 618.973969][T10908] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.1190: inode has both inline data and extents flags [ 619.076880][T10908] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 619.077291][T10908] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1190: couldn't read orphan inode 15 (err -117) [ 619.111220][T10908] loop1: lost filesystem error report for type 5 error -117 [ 619.130874][T10908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 623.179787][ T8184] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.763174][T10945] fuse: Bad value for 'fd' [ 623.853729][T10936] loop9: detected capacity change from 0 to 4096 [ 624.852886][ T30] audit: type=1800 audit(2000001003.419:191): pid=10935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1197" name="file1" dev="loop9" ino=0 res=0 errno=0 [ 624.922536][T10954] loop3: detected capacity change from 0 to 512 [ 624.984061][T10954] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 625.073847][T10954] EXT4-fs (loop3): 1 truncate cleaned up [ 625.113122][T10954] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 626.420270][T10969] loop9: detected capacity change from 0 to 2048 [ 626.508694][T10975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1205'. [ 626.542860][T10940] Alternate GPT is invalid, using primary GPT. [ 626.566091][T10940] loop9: p2 p3 p7 [ 626.600375][T10977] fuse: Bad value for 'fd' [ 626.689117][T10969] Alternate GPT is invalid, using primary GPT. [ 626.736075][T10969] loop9: p2 p3 p7 [ 627.100452][T10946] udevd[10946]: inotify_add_watch(7, /dev/loop9p7, 10) failed: No such file or directory [ 627.116844][T10938] udevd[10938]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 627.144934][T10940] udevd[10940]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 627.166666][T10988] fuse: Bad value for 'rootmode' [ 627.250602][T10940] udevd[10940]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 627.258374][T10938] udevd[10938]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 627.286958][T10946] udevd[10946]: inotify_add_watch(7, /dev/loop9p7, 10) failed: No such file or directory [ 630.563314][ T8081] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.668438][T11040] fuse: Bad value for 'fd' [ 631.130196][T11050] IPVS: dh: FWM 3 0x00000003 - no destination available [ 631.487138][T11058] fuse: Bad value for 'fd' [ 632.407942][T11079] loop9: detected capacity change from 0 to 4096 [ 633.015722][T11098] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1239'. [ 633.985422][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 633.991769][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.672189][T11130] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1251'. [ 634.682528][T11130] netlink: 'syz.9.1251': attribute type 10 has an invalid length. [ 634.690781][T11130] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.698186][T11130] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.668198][T11163] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1258'. [ 636.702287][T11163] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1258'. [ 640.788324][T11231] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1278'. [ 640.800613][T11231] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1278'. [ 640.999605][T11233] loop9: detected capacity change from 0 to 128 syzkaller syzkaller login: [ 644.318852][T11294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1299'. [ 644.346972][T11294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1299'. [ 645.607977][ T6611] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.040350][ T6611] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.187051][ T6611] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.300537][ T6611] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.684809][ T6611] bridge_slave_1: left allmulticast mode [ 647.704643][ T6611] bridge_slave_1: left promiscuous mode [ 647.725686][ T6611] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.846652][ T6611] bridge_slave_0: left allmulticast mode [ 647.859922][ T6611] bridge_slave_0: left promiscuous mode [ 647.885582][ T6611] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.900427][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 647.920722][T11350] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 647.931131][T11350] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 647.971177][T11350] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 647.979774][T11350] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 649.210438][T11377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1319'. [ 649.307757][T11377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1319'. [ 650.056316][T11350] Bluetooth: hci2: command tx timeout [ 650.067171][T11391] 9p: Bad value for 'wfdno' [ 650.132605][ T6611] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 650.216822][ T6611] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 650.240444][ T6611] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.272605][ T6611] bond0 (unregistering): Released all slaves [ 650.302441][ T6611] bond1 (unregistering): Released all slaves [ 650.342772][ T6611] bond2 (unregistering): Released all slaves [ 650.671130][T11347] lo speed is unknown, defaulting to 1000 [ 651.248950][T11414] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1327'. [ 651.325421][T11414] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 651.376248][T11420] IPVS: dh: FWM 3 0x00000003 - no destination available [ 651.544514][ T6611] hsr_slave_0: left promiscuous mode [ 651.576689][ T6611] hsr_slave_1: left promiscuous mode [ 651.595892][ T6611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 651.603317][ T6611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.765810][ T6611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 651.773255][ T6611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.306015][T11350] Bluetooth: hci2: command tx timeout [ 652.847204][T11451] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1337'. [ 652.856871][T11451] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1337'. [ 652.895569][ T6611] veth1_macvtap: left promiscuous mode [ 652.904578][ T6611] veth0_macvtap: left promiscuous mode [ 652.925569][ T6611] veth1_vlan: left promiscuous mode [ 652.949351][ T6611] veth0_vlan: left promiscuous mode [ 653.224935][ T30] audit: type=1326 audit(2000001031.809:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.3.1339" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcde8f9bf79 code=0x0 [ 654.069998][ T6611] team0 (unregistering): Port device team_slave_1 removed [ 654.340214][ T6611] team0 (unregistering): Port device team_slave_0 removed [ 654.375676][T11350] Bluetooth: hci2: command tx timeout [ 656.370789][T11480] IPVS: dh: FWM 3 0x00000003 - no destination available [ 656.466255][T11350] Bluetooth: hci2: command tx timeout [ 656.513605][T11482] loop3: detected capacity change from 0 to 256 [ 656.629949][T11467] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 657.490162][T11506] loop9: detected capacity change from 0 to 128 [ 657.941479][T11347] chnl_net:caif_netlink_parms(): no params data found [ 658.550989][T11347] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.591745][T11347] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.816098][T11347] bridge_slave_0: entered allmulticast mode [ 658.826532][T11347] bridge_slave_0: entered promiscuous mode [ 658.843106][T11347] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.850778][T11347] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.860670][T11347] bridge_slave_1: entered allmulticast mode [ 658.908132][T11347] bridge_slave_1: entered promiscuous mode [ 659.860851][ T6611] IPVS: stop unused estimator thread 0... [ 659.995889][T11347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 660.048150][T11347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 660.121742][T11557] ./file0: Can't lookup blockdev [ 660.191665][T11347] team0: Port device team_slave_0 added [ 660.229550][T11347] team0: Port device team_slave_1 added [ 660.256268][T11556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1362'. [ 660.271089][T11556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1362'. [ 660.381755][T11347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.398382][T11347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.429944][T11347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.473542][T11347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.491072][T11347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.572008][T11347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.709795][T11567] loop3: detected capacity change from 0 to 128 [ 660.737043][T11347] hsr_slave_0: entered promiscuous mode [ 660.762834][T11347] hsr_slave_1: entered promiscuous mode [ 660.775244][T11347] debugfs: 'hsr0' already exists in 'hsr' [ 660.784085][T11347] Cannot create hsr debugfs directory [ 663.544044][T11347] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 663.565003][T11347] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 663.602994][T11347] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 663.735525][T11347] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 664.269726][T11347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 664.359052][T11347] 8021q: adding VLAN 0 to HW filter on device team0 [ 664.614203][ T6442] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.621445][ T6442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 664.723881][ T5979] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.731070][ T5979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.940919][T11347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 666.119004][T11347] veth0_vlan: entered promiscuous mode [ 666.171767][ T5827] syz_tun (unregistering): left allmulticast mode [ 666.221484][T11347] veth1_vlan: entered promiscuous mode [ 666.339781][T11347] veth0_macvtap: entered promiscuous mode [ 666.764672][T11347] veth1_macvtap: entered promiscuous mode [ 666.911861][ T5979] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.034689][T11347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 667.113533][T11347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 667.263149][ T5979] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.341549][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.372018][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.428992][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.461181][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.639481][ T5979] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.117258][ T5979] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.215113][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 668.226594][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 668.242592][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 668.260790][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 668.281756][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 668.668487][T11705] lo speed is unknown, defaulting to 1000 [ 669.010336][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.057080][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.136453][ T5979] bridge_slave_1: left allmulticast mode [ 669.153510][ T5979] bridge_slave_1: left promiscuous mode [ 669.163822][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.396154][ T5979] bridge_slave_0: left allmulticast mode [ 669.401849][ T5979] bridge_slave_0: left promiscuous mode [ 669.423338][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.379748][ T5846] Bluetooth: hci4: command tx timeout [ 671.274552][ T5979] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 672.084971][T11737] siw: device registration error -23 [ 672.482804][ T5846] Bluetooth: hci4: command tx timeout [ 672.810544][ T5979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 673.006868][ T5979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 673.087373][ T5979] bond0 (unregistering): Released all slaves [ 673.110916][ T5979] bond1 (unregistering): Released all slaves [ 673.222266][ T5979] bond2 (unregistering): Released all slaves [ 673.389234][ T5979] bond3 (unregistering): Released all slaves [ 673.453227][ T5979] bond4 (unregistering): Released all slaves [ 673.813302][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.821251][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.545435][ T5846] Bluetooth: hci4: command tx timeout [ 674.936761][ C0] ------------[ cut here ]------------ [ 674.942638][ C0] ODEBUG: free active (active state 0) object: ffff8880535be490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 674.955606][ C0] WARNING: lib/debugobjects.c:612 at debug_print_object+0x18e/0x2a0, CPU#0: swapper/0/0 [ 674.965428][ C0] Modules linked in: [ 674.969560][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 674.980104][ C0] Tainted: [L]=SOFTLOCKUP [ 674.984415][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 674.994525][ C0] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 675.000452][ C0] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 92 c3 d0 0b 41 56 48 8b 14 dd 60 a3 fa 8b 4c 89 e6 <67> 48 0f b9 3a 58 83 05 5c 76 c6 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 675.020195][ C0] RSP: 0018:ffffc90000007a38 EFLAGS: 00010246 [ 675.026387][ C0] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 675.034420][ C0] RDX: ffffffff8bfaa2a0 RSI: ffffffff8bfa9ec0 RDI: ffffffff90c2cb00 [ 675.042541][ C0] RBP: 0000000000000001 R08: ffff8880535be490 R09: ffffffff8b92c5e0 [ 675.050638][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8bfa9ec0 [ 675.058871][ C0] R13: ffffffff8b92c620 R14: ffffffff8a6a8bf0 R15: ffffc90000007b38 [ 675.066946][ C0] FS: 0000000000000000(0000) GS:ffff8881245ab000(0000) knlGS:0000000000000000 [ 675.075991][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 675.082636][ C0] CR2: 000000110c38e755 CR3: 0000000068cfe000 CR4: 0000000000350ef0 [ 675.090834][ C0] Call Trace: [ 675.094182][ C0] [ 675.097080][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 675.102805][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 675.108750][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 675.114460][ C0] debug_check_no_obj_freed+0x4da/0x630 [ 675.120067][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 675.126269][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 675.131908][ C0] ? mark_held_locks+0x40/0x70 [ 675.136706][ C0] ? kasan_quarantine_put+0x104/0x240 [ 675.142089][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 675.147769][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 675.152971][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 675.158648][ C0] ? rose_timer_expiry+0x53f/0x630 [ 675.163769][ C0] kfree+0x343/0x670 [ 675.167730][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 675.173495][ C0] rose_timer_expiry+0x53f/0x630 [ 675.178549][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 675.184010][ C0] call_timer_fn+0x19a/0x590 [ 675.188633][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 675.193743][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 675.199443][ C0] ? __run_timers+0x747/0xac0 [ 675.204126][ C0] ? __run_timers+0x747/0xac0 [ 675.208826][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 675.214466][ C0] ? rcu_is_watching+0x12/0xc0 [ 675.219282][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 675.224774][ C0] __run_timers+0x757/0xac0 [ 675.229319][ C0] ? __pfx___run_timers+0x10/0x10 [ 675.234365][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 675.240040][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 675.245723][ C0] run_timer_base+0x114/0x190 [ 675.250427][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 675.255662][ C0] run_timer_softirq+0x1a/0x50 [ 675.260434][ C0] handle_softirqs+0x1ea/0x910 [ 675.265204][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 675.270516][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 675.276183][ C0] __irq_exit_rcu+0xef/0x150 [ 675.280801][ C0] irq_exit_rcu+0x9/0x30 [ 675.285041][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 675.290720][ C0] [ 675.293645][ C0] [ 675.296601][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 675.302597][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 675.308264][ C0] Code: 3e 75 02 e9 4e 1b 95 f5 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 5d 10 00 fb f4 27 1b 95 f5 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 675.327930][ C0] RSP: 0018:ffffffff8e207e00 EFLAGS: 00000242 [ 675.334002][ C0] RAX: 00000000008a319b RBX: ffffffff8e2975c0 RCX: ffffffff8b7b3c75 [ 675.341999][ C0] RDX: 0000000000000000 RSI: ffffffff8dc5a0da RDI: ffffffff8bfa91a0 [ 675.349991][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1017086755 [ 675.357982][ C0] R10: ffff8880b8433aab R11: 0000000000000000 R12: fffffbfff1c52eb8 [ 675.365974][ C0] R13: 0000000000000000 R14: ffffffff90b84ad0 R15: 0000000000000000 [ 675.373952][ C0] ? ct_kernel_exit+0x125/0x180 [ 675.378844][ C0] default_idle+0x9/0x10 [ 675.383580][ C0] default_idle_call+0x6c/0xb0 [ 675.388386][ C0] do_idle+0x35b/0x4b0 [ 675.392457][ C0] ? __pfx_do_idle+0x10/0x10 [ 675.397093][ C0] cpu_startup_entry+0x4f/0x60 [ 675.401864][ C0] rest_init+0x251/0x260 [ 675.406166][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 675.411747][ C0] start_kernel+0x47a/0x480 [ 675.416291][ C0] x86_64_start_reservations+0x24/0x30 [ 675.421768][ C0] x86_64_start_kernel+0x122/0x130 [ 675.426921][ C0] common_startup_64+0x13e/0x148 [ 675.431900][ C0] [ 675.434926][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 675.442289][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 675.452796][ C0] Tainted: [L]=SOFTLOCKUP [ 675.457107][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 675.467153][ C0] Call Trace: [ 675.470419][ C0] [ 675.473248][ C0] dump_stack_lvl+0x100/0x190 [ 675.477942][ C0] vpanic+0x20d/0x630 [ 675.481924][ C0] panic+0xd1/0xd1 [ 675.485728][ C0] ? __pfx_panic+0x10/0x10 [ 675.490155][ C0] ? check_panic_on_warn+0x1f/0x90 [ 675.495297][ C0] check_panic_on_warn.cold+0x19/0x34 [ 675.500688][ C0] ? debug_print_object+0x18e/0x2a0 [ 675.505901][ C0] __warn.cold+0x191/0x2f8 [ 675.510326][ C0] __report_bug+0x296/0x3d0 [ 675.514844][ C0] ? debug_print_object+0x18e/0x2a0 [ 675.520054][ C0] ? __pfx___report_bug+0x10/0x10 [ 675.525093][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 675.530738][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 675.536374][ C0] ? mark_held_locks+0x40/0x70 [ 675.541143][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 675.546966][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 675.552618][ C0] report_bug_entry+0xe1/0x290 [ 675.557422][ C0] ? debug_print_object+0x19b/0x2a0 [ 675.562640][ C0] handle_bug+0x1c9/0x2a0 [ 675.566974][ C0] exc_invalid_op+0x17/0x50 [ 675.571483][ C0] asm_exc_invalid_op+0x1a/0x20 [ 675.576328][ C0] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 675.582151][ C0] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 92 c3 d0 0b 41 56 48 8b 14 dd 60 a3 fa 8b 4c 89 e6 <67> 48 0f b9 3a 58 83 05 5c 76 c6 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 675.601757][ C0] RSP: 0018:ffffc90000007a38 EFLAGS: 00010246 [ 675.607826][ C0] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 675.615791][ C0] RDX: ffffffff8bfaa2a0 RSI: ffffffff8bfa9ec0 RDI: ffffffff90c2cb00 [ 675.623755][ C0] RBP: 0000000000000001 R08: ffff8880535be490 R09: ffffffff8b92c5e0 [ 675.631716][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8bfa9ec0 [ 675.639680][ C0] R13: ffffffff8b92c620 R14: ffffffff8a6a8bf0 R15: ffffc90000007b38 [ 675.648191][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 675.653860][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 675.659502][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 675.665150][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 675.671006][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 675.676649][ C0] debug_check_no_obj_freed+0x4da/0x630 [ 675.682222][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 675.688311][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 675.693951][ C0] ? mark_held_locks+0x40/0x70 [ 675.698719][ C0] ? kasan_quarantine_put+0x104/0x240 [ 675.704098][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 675.709740][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 675.714939][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 675.720580][ C0] ? rose_timer_expiry+0x53f/0x630 [ 675.725693][ C0] kfree+0x343/0x670 [ 675.729591][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 675.735240][ C0] rose_timer_expiry+0x53f/0x630 [ 675.740176][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 675.745636][ C0] call_timer_fn+0x19a/0x590 [ 675.750225][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 675.755332][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 675.760987][ C0] ? __run_timers+0x747/0xac0 [ 675.765663][ C0] ? __run_timers+0x747/0xac0 [ 675.770341][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 675.775975][ C0] ? rcu_is_watching+0x12/0xc0 [ 675.780757][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 675.786228][ C0] __run_timers+0x757/0xac0 [ 675.790745][ C0] ? __pfx___run_timers+0x10/0x10 [ 675.795774][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 675.801418][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 675.807061][ C0] run_timer_base+0x114/0x190 [ 675.811745][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 675.816962][ C0] run_timer_softirq+0x1a/0x50 [ 675.821726][ C0] handle_softirqs+0x1ea/0x910 [ 675.826503][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 675.831785][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 675.837434][ C0] __irq_exit_rcu+0xef/0x150 [ 675.842021][ C0] irq_exit_rcu+0x9/0x30 [ 675.846257][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 675.851913][ C0] [ 675.854829][ C0] [ 675.857752][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 675.863827][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 675.869461][ C0] Code: 3e 75 02 e9 4e 1b 95 f5 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 5d 10 00 fb f4 27 1b 95 f5 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 675.889070][ C0] RSP: 0018:ffffffff8e207e00 EFLAGS: 00000242 [ 675.895132][ C0] RAX: 00000000008a319b RBX: ffffffff8e2975c0 RCX: ffffffff8b7b3c75 [ 675.903094][ C0] RDX: 0000000000000000 RSI: ffffffff8dc5a0da RDI: ffffffff8bfa91a0 [ 675.911076][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1017086755 [ 675.919040][ C0] R10: ffff8880b8433aab R11: 0000000000000000 R12: fffffbfff1c52eb8 [ 675.927015][ C0] R13: 0000000000000000 R14: ffffffff90b84ad0 R15: 0000000000000000 [ 675.934995][ C0] ? ct_kernel_exit+0x125/0x180 [ 675.939856][ C0] default_idle+0x9/0x10 [ 675.944299][ C0] default_idle_call+0x6c/0xb0 [ 675.949068][ C0] do_idle+0x35b/0x4b0 [ 675.953140][ C0] ? __pfx_do_idle+0x10/0x10 [ 675.957736][ C0] cpu_startup_entry+0x4f/0x60 [ 675.962506][ C0] rest_init+0x251/0x260 [ 675.966808][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 675.972372][ C0] start_kernel+0x47a/0x480 [ 675.976886][ C0] x86_64_start_reservations+0x24/0x30 [ 675.982356][ C0] x86_64_start_kernel+0x122/0x130 [ 675.987534][ C0] common_startup_64+0x13e/0x148 [ 675.992509][ C0] [ 675.995916][ C0] Kernel Offset: disabled [ 676.000261][ C0] Rebooting in 86400 seconds..