last executing test programs: 21m25.929359589s ago: executing program 32 (id=322): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000240), &(0x7f00000002c0)=@v3={0x3000000, [{0x1, 0x9}, {0x2, 0xffffffc0}]}, 0x18, 0x0) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) 20m32.560326489s ago: executing program 5 (id=484): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffffed7a00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_OPEN(r2, &(0x7f0000000280)={0x20}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) getresuid(&(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000180)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 20m31.258930138s ago: executing program 5 (id=488): socket$inet6_sctp(0xa, 0x1, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x1b, 0x0, 0x2, 0x7}, 0x0, 0x0) 20m28.475245972s ago: executing program 5 (id=496): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r3 = syz_open_procfs(0x0, &(0x7f0000002700)='cmdline\x00') read$FUSE(r3, &(0x7f0000000000)={0x2020}, 0xfffffc7a) 20m27.52007458s ago: executing program 5 (id=498): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000000)='./file1\x00', 0x210852, &(0x7f0000000780)={[{@fat=@debug}, {@nodots}, {@dots}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@dots}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@fat=@check_strict}, {@nodots}, {@fat=@tz_utc}, {@fat=@discard}, {@dots}]}, 0x1, 0x1c0, &(0x7f0000000500)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) 20m27.152770707s ago: executing program 5 (id=501): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) dup(0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd2b, 0x8, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x20000004) 20m26.628914856s ago: executing program 5 (id=503): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94) 20m25.944263065s ago: executing program 33 (id=503): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94) 15m22.62544748s ago: executing program 0 (id=1229): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0xfe98) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 15m20.531294913s ago: executing program 0 (id=1234): syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file1\x00', 0x810803, &(0x7f0000000140)=ANY=[], 0x4, 0x230, &(0x7f0000000240)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000002000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket(0x10, 0x803, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) write$FUSE_CREATE_OPEN(r3, &(0x7f00000004c0)={0xa0, 0x0, 0x0, {{}, {0x0, 0x2}}}, 0xa0) write$FUSE_INIT(r3, &(0x7f00000003c0)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) setxattr$incfs_id(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) 15m19.272341185s ago: executing program 0 (id=1235): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x4}) 15m17.739993401s ago: executing program 0 (id=1241): ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 15m15.173487055s ago: executing program 0 (id=1248): ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00001e9000/0x1000)=nil, 0x1000) mlock(&(0x7f000000b000/0x4000)=nil, 0x4000) mlock(&(0x7f0000353000/0x4000)=nil, 0x4000) mremap(&(0x7f0000984000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00001fa000/0x4000)=nil) mlock(&(0x7f000010c000/0x3000)=nil, 0x3000) mlock2(&(0x7f0000059000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f00007b0000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000568000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f00003f7000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000705000/0x2000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f000026f000/0x2000)=nil) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28051, r0, 0x0) 15m12.128890929s ago: executing program 0 (id=1257): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000003c0)=[{&(0x7f0000000200)="abc46908b3df918fe61946b2a7d85cf473884b91c53b94d51db7a5918ed07847c392ee17a23d6fea", 0x28}, {&(0x7f0000000580)="db56b84884ffc02c06bd0f01587a681de55a4df7714790716dddfa75831670014c811bd064f615db698adab368dafbf134b3d26a38503c3fe8a7c5ece07759b81233530ed432985e4feebb5d4ca49dcb8c490c015acacef99f7da736180800000000000000ba12b327f6b79ea0d90605040d84453eff84443a09ab5eeba1586f85c1e383f8095573726b1bf117d96c91d1349f4951ead7fd07838ce689e171c4bda933d8fc5c35ce2fcbc1c5bae12537482f023984c435e056b2e8a6613a841360d40172a17e494ae06d5af1305ffa1eb9cbcedd90b7de636015883d0d3473c4bdfd1f", 0xe3}, {&(0x7f0000000140)="d80a642bc17284b8945c0c21fcd2df4e9cf2a68e854560584ed04f62aebae0dab1e7c4", 0x23}, {&(0x7f00000004c0)="67df3baec1ce766316819b76b14295d4f969f2095747039d8a9e01159fc171d6ab964bc50f5d66ab6bcdefa298582348a01ac90b6ecd3001c769cf58704f758dae3ecd02919b7e1eebc643c57afec3b45811ab935a8f893220c7329def2702370b371c3966c553ce13a625dfddbe8bc98f220a9ff6ac6a09165c1273ac580916e65995994307bb637dba5994702e22a333a3d48507689db92142d492c5ca788f11ff4a5c51adfcec8f7e15467d446025f37f9c", 0xb3}, {&(0x7f00000002c0)="2b4f2c23cd72e5f8c27c5125a38cc74027abf1994ab65ba7ca4e64b9ab8b357454e5abb6d754f1318dd05531dce7560e6e7d95526c4358848e67345b32b86de0ff15be80ddf3dab5b55443991f2b4d7276d4d6334a4385a70581c45a6926fc7874e38018387a2d6195df3281ba32a96811d4e9e40b1cf5b927", 0x79}], 0x5, 0x8) r4 = socket$inet(0x2, 0x3, 0x7f) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r4, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x8000, 0x0) 15m9.643125232s ago: executing program 34 (id=1257): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000003c0)=[{&(0x7f0000000200)="abc46908b3df918fe61946b2a7d85cf473884b91c53b94d51db7a5918ed07847c392ee17a23d6fea", 0x28}, {&(0x7f0000000580)="db56b84884ffc02c06bd0f01587a681de55a4df7714790716dddfa75831670014c811bd064f615db698adab368dafbf134b3d26a38503c3fe8a7c5ece07759b81233530ed432985e4feebb5d4ca49dcb8c490c015acacef99f7da736180800000000000000ba12b327f6b79ea0d90605040d84453eff84443a09ab5eeba1586f85c1e383f8095573726b1bf117d96c91d1349f4951ead7fd07838ce689e171c4bda933d8fc5c35ce2fcbc1c5bae12537482f023984c435e056b2e8a6613a841360d40172a17e494ae06d5af1305ffa1eb9cbcedd90b7de636015883d0d3473c4bdfd1f", 0xe3}, {&(0x7f0000000140)="d80a642bc17284b8945c0c21fcd2df4e9cf2a68e854560584ed04f62aebae0dab1e7c4", 0x23}, {&(0x7f00000004c0)="67df3baec1ce766316819b76b14295d4f969f2095747039d8a9e01159fc171d6ab964bc50f5d66ab6bcdefa298582348a01ac90b6ecd3001c769cf58704f758dae3ecd02919b7e1eebc643c57afec3b45811ab935a8f893220c7329def2702370b371c3966c553ce13a625dfddbe8bc98f220a9ff6ac6a09165c1273ac580916e65995994307bb637dba5994702e22a333a3d48507689db92142d492c5ca788f11ff4a5c51adfcec8f7e15467d446025f37f9c", 0xb3}, {&(0x7f00000002c0)="2b4f2c23cd72e5f8c27c5125a38cc74027abf1994ab65ba7ca4e64b9ab8b357454e5abb6d754f1318dd05531dce7560e6e7d95526c4358848e67345b32b86de0ff15be80ddf3dab5b55443991f2b4d7276d4d6334a4385a70581c45a6926fc7874e38018387a2d6195df3281ba32a96811d4e9e40b1cf5b927", 0x79}], 0x5, 0x8) r4 = socket$inet(0x2, 0x3, 0x7f) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r4, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x8000, 0x0) 12m33.321409453s ago: executing program 4 (id=1549): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = inotify_init() r4 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r5 = inotify_add_watch(r3, &(0x7f0000000240)='./file0\x00', 0x8c7) write$binfmt_elf32(r4, &(0x7f0000000000)=ANY=[@ANYRES64=r5], 0x69) close(r4) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 12m31.006718078s ago: executing program 4 (id=1551): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@loopback, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x64010100, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}]}, 0xa0}}, 0x0) 12m28.158647381s ago: executing program 4 (id=1555): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x1100) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 12m25.573997552s ago: executing program 4 (id=1557): syz_mount_image$bfs(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x8, 0xb1, &(0x7f0000000400)="$eJzs1zFqwmAYBuC3oW3aJT1Ah94gd+hRSsd261Rx8ELunsIjCB7AwU1cIjExZHYwIM8DCby8/wff+P/r4/I9VdK85awZ+fuf/Xz9tv9VBs/hjhRJyiQvbai6vPvsuoe+3+zn35dvNPo40coAAMCVitRJXvubfhZF6rprtsOZj/YtcOjD02i4vOmqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJM4BQAA//8fTCFM") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x20040, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x26e1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x275a, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1e9, &(0x7f00000002c0)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) 12m19.864953439s ago: executing program 4 (id=1566): mount(0x0, 0x0, 0x0, 0x1000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0xc, 0x0, r3, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x18}, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x57b6, 0x810003, 0x2, 0x0, 0x0) 12m14.319664893s ago: executing program 4 (id=1574): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000300)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = dup(r3) sendfile(r3, r4, 0x0, 0x80006) 11m58.374121243s ago: executing program 35 (id=1574): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000300)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = dup(r3) sendfile(r3, r4, 0x0, 0x80006) 11m21.346168515s ago: executing program 3 (id=1653): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e00"], 0x70}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0) 11m20.618342808s ago: executing program 3 (id=1654): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, 0x0}, 0x20) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./bus\x00', 0x8000, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x14fe, &(0x7f0000001580)="$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") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f00000000c0)=""/54, 0x36) 11m18.533884185s ago: executing program 3 (id=1658): syz_usb_connect(0x4, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b5403340861a22d6aac3bb25f365b302120001000000000904000000e4d624"], 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x20040400) socket$pppl2tp(0x18, 0x1, 0x1) mount(&(0x7f0000000740)=@nullb, 0x0, 0x0, 0x8000, 0x0) bind$inet(r0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000006c0), r2) sendmsg$NFC_CMD_LLC_GET_PARAMS(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11m17.66325875s ago: executing program 3 (id=1660): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0xb) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @any, 0x54}, 0xe) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) getpgid(0xffffffffffffffff) fcntl$getownex(r1, 0x10, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000540)={0x2020}, 0x2020) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) 11m16.810230448s ago: executing program 3 (id=1662): r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0x4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x80800}) listen(r0, 0x5) io_uring_enter(r4, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 11m15.624296045s ago: executing program 3 (id=1666): io_setup(0x6, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 11m0.203271055s ago: executing program 36 (id=1666): io_setup(0x6, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 17.352938294s ago: executing program 6 (id=2569): openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) socket$igmp(0x2, 0x3, 0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 17.071375269s ago: executing program 1 (id=2571): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f00000016c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r3, r6, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r3}, &(0x7f0000000100), &(0x7f0000000140)=r2}, 0x20) sendmsg(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0) 14.578625936s ago: executing program 7 (id=2572): socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r2 = syz_open_dev$swradio(0x0, 0x1, 0x2) preadv(r2, &(0x7f0000000c00)=[{&(0x7f0000000240)=""/126, 0x7e}], 0x1, 0x80000000, 0x5) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x1fff, 0x2}, 0x14) listen(r4, 0x1ff) r5 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r1, 0x7) sendto$inet(r5, &(0x7f0000000500)="ab", 0x34000, 0x40, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) 14.145081756s ago: executing program 6 (id=2573): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f00000016c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r4, r7, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r4}, &(0x7f0000000100), &(0x7f0000000140)=r3}, 0x20) sendmsg(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0) 13.2117731s ago: executing program 7 (id=2575): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x652}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x2, &(0x7f0000000100)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f0000000280)='GPL\x00', 0xffff0001, 0xd3, &(0x7f0000000300)=""/211, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, 0x1, 0x1], 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000680)='sched_switch\x00', r3}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) semget$private(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b32) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0xfe, 0x0, 0x7ffc1ffb}]}) futimesat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f0000004140)=ANY=[@ANYBLOB="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"], 0x1, 0x1cf, &(0x7f0000000780)="$eJzKKC4sZmdgYPj7sSaZQYABDBgZeBguMDAysDAwMKgzQsQYmCDUeij/BZSeCZW2gfKbofRCKF1xS3vdmlN+Z0566motk2VmaPXUlkcWk0vtMXKTXMwjwcwQmnpkUXFlVXZiTk5qUfFChopbyUkVp08wsFy3v6bSLMHp8EeewyFJ00GH6YiPR9aMxhLOSVKaYmxsmQpnz3yQX8emcYTh0QrmjXWeeY11halT89LykqqyqrLmTZy4cWZjZ2Pjyol1UWl+qxhbUlw2NXUyMjlsURPYzGyoPslGe8K79lUPkxxYezz8mk8ZK71OZb5kvLBI6tSKqpkTvijNZjT8znCHp2yFhIaGk8QVCYsGE4YjdbYNriAnpjQwpCmEMSapsYm1bTkzJ4SZn81tgUJL8gmm0KMcS2dKWBwQqjr501LzrUOi24xtTx3YzvAcPs6zpqBP0Oi4BIPTQsH/MiBjEhoayjTWMi21XfClSOOvhNdqY6cMBnd7pmWwAGVpAJEroTxZsJ6E5BUeOpqaRinJCQ2bJBKS3AoMlRm27uFcLdDAgBRtKgwMDNsZYXELAddgjFEwCkbBKBgFo2AUjIJRMApGwSgYBSMCAAIAAP//QJCYyw==") ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'netdevsim0\x00', 0x2000}) quotactl$Q_QUOTAON(0xffffffff80000200, 0x0, 0x0, &(0x7f00000001c0)='./file2\x00') read$FUSE(0xffffffffffffffff, 0x0, 0x0) capget(&(0x7f0000000180)={0x20071026, r0}, &(0x7f00000002c0)={0x0, 0x800, 0x9, 0x2000004, 0x9, 0x7}) 11.930221151s ago: executing program 7 (id=2578): r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000006480)=ANY=[@ANYBLOB="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"], 0x3, 0x1510, &(0x7f0000003640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRES32=0x0, @ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) r7 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) landlock_restrict_self(r7, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file5\x00', 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x120, 0x4c, 0x1a, 0x120, 0x73, 0x1f0, 0x258, 0x258, 0x1f0, 0x258, 0x3, 0x0, {[{{@ipv6={@mcast1, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x3b, 0x0, 0x5}, 0x0, 0x45, 0x160, 0x0, {}, [@common=@inet=@ecn={{}, {0x11, 0x0, 0x9, 0x6}}, @common=@srh={{}, {0x0, 0xb5, 0xfd, 0x87, 0x7, 0x1, 0x2000}}]}, @unspec=@NOTRACK}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@NFQUEUE2={0x0, 'NFQUEUE\x00', 0x2, {0x1, 0x3, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x339) 10.448928306s ago: executing program 2 (id=2579): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = getpid() prlimit64(r0, 0xc, 0x0, &(0x7f00000003c0)) socket(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000540)='nilfs2\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000006c0)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/\xb0\t\\\x00\x00\x00\x00\x00U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14/\xb4\x00\x80_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b7\x8aH\xd6\xd8\xbf\xe7\xc4|y\x1b\xd3\x88\x139\x8a/L;)?\x80J\x85\xf0[?\x01\xa3\x02~5*\x94`\x1a\"g\x8aV\xb6q{\xbc\x18\x99Y\x12\xd2\xc2\n>\xbb)\xf6|*\xbb\x14F\nZ\xact\xc5\x12\xdd\xda\xe4\x91\x0f\xdf\xb1\xf4\xf7\xa8?tO\xa6|\x11clY\x02\x17 \xf6\xe7\x8a\x93vr\x80A\xbc\xdd#\xd5y\v\xf5\xd6\xe7B\xf1@\xe1w\xfa[\xa4;\xf6\x99\x02\xa8\xcbu\xf1jdV<\xe4y\xf6\xb9\xadHN\a_w ?\xe7\x83\"\xf5\x1f\xb2\x04\x80\xcay\x03`\xa3\xf0+i2jQ\xea\x00um\xe1g\xa4\xd4\xec;\x87\x9c\xef\xc9\x91\xa8\xb2\xef\xee\x98\x12\xd2!\x89\x98T\xdb%R\'\x01\f\xb4\xf4a\x81\x00X\xea\x1c\x03<\xc05\x0e\xd8\xfe9\xd9\x99\xe7\xf5\xc3\x97.\xf4Y\xb7!/yy\xee\x84\xef\bw=\xab\xea\x18\xdaS\xf2\'S:\x86\xf6o\x89\xf1\xe0\xcc\x13P\xa7\x06\xc6\xe9\xfe\xed\xf7\x04\xadJ\xfd:\x9fL>=\xdbQ\xde\xb0\x1e$\xd1\x17\f\xddiN\xf5\xca\x84\xf3\xd5[\x1e\xb2\x9d6\x89\xc7w\x14\xb6\xb9G\x80\xb3\xd4C', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800) write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', &(0x7f0000000240), &(0x7f0000000440)=ANY=[], 0x835, 0x0) execve(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f0000000080), &(0x7f00000002c0)=ANY=[], 0x835, 0x0) 10.060420349s ago: executing program 7 (id=2580): r0 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, 0x0, 0x0, r0) add_key$fscrypt_provisioning(0x0, &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000140)={0x1, 0x0, @c}, 0x29, r0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0xc001, &(0x7f0000000400), 0x0, 0x24d, &(0x7f0000000440)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffe13) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = fcntl$dupfd(r5, 0x0, r6) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000280)={'dummy0\x00', 0x4}) 9.859277434s ago: executing program 1 (id=2581): mkdir(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000005) mount(0x0, 0x0, 0x0, 0x0, 0x0) msync(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) 8.979430765s ago: executing program 2 (id=2582): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="1000000000000000000000000700000014000400000000000000000000ea"], 0x28}}], 0x1, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r4}, &(0x7f0000000180), &(0x7f0000000200)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x41, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x90, 0x1b, "00bf46f8bbde7047bcd4a280000400"}) r6 = syz_open_pts(r5, 0x0) ioctl$TIOCGLCKTRMIOS(r6, 0x5456, 0x0) 7.049377585s ago: executing program 1 (id=2583): socket(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) unshare(0x6020400) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="7cd1f233", 0x4}], 0x1, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socket(0x15, 0x5, 0x0) 6.90428557s ago: executing program 2 (id=2584): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20) 6.887873985s ago: executing program 6 (id=2585): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) sendmsg$nl_route_sched(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, 0x0, &(0x7f0000002200), 0x1000000, &(0x7f0000000000)) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x440) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000580)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@noblock_validity}, {@grpquota}, {@nobh}, {@nouid32}, {@bh}, {@dioread_nolock}]}, 0x1, 0x577, &(0x7f0000001080)="$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") r5 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) sendfile(r5, r5, 0x0, 0x800000009) 5.916795821s ago: executing program 7 (id=2586): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x400000000, 0x0, 0x0, 0x0, 0x9d}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x3e, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, [{}, {0x0, 0x5, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f7564"}, {}]}}}}}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000300)={0xa, 0x4e20, 0x400, @empty}, 0x1c) 5.859961238s ago: executing program 2 (id=2587): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000201000085"], 0x0, 0x80000, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r3, 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r4, 0x1) flock(r4, 0x2) 5.840316406s ago: executing program 1 (id=2588): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, 0x0, 0x4000844) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000040)={0x2, 0x37, 0x6, 0x19, 0x3, 0x64, 0x2, 0x106, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000040)=0xa632, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4002, &(0x7f0000000000)=0x4, 0x6, 0x0) 5.539228233s ago: executing program 6 (id=2589): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x5, &(0x7f0000002340)=0x0) io_submit(r4, 0x1, &(0x7f00000014c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) sendto$inet6(r5, &(0x7f00000001c0), 0x0, 0x840, 0x0, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_emit_vhci(&(0x7f0000001280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x413}}}, 0x7) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hfsplus\x00', 0x8002, 0x0) 4.53134985s ago: executing program 2 (id=2590): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@loopback, @initdev, @dev}, &(0x7f0000000000)=0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_PEC(r5, 0x708, 0x7) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000580)={0x1, 0x0, 0x7, &(0x7f0000000540)={0x1c, "584fc4dfae9a34fb1ffbb539b436cc843759a57bf235d2f60200"}}) 4.50981162s ago: executing program 1 (id=2591): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x2, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000680), 0x1, 0x400000) sendto$inet(r3, 0x0, 0x0, 0x20000000, &(0x7f0000000700)={0x2, 0x4e22, @remote}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") add_key$fscrypt_provisioning(&(0x7f0000000600), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000a80)=ANY=[@ANYBLOB="010000"], 0x29, 0xfffffffffffffffe) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r6, 0x10001, 0x0) 2.897007296s ago: executing program 7 (id=2592): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="5002000000000000611130000000000085000000a00000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@dev}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f00000000c0)=0xe8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) 1.813190297s ago: executing program 6 (id=2593): mkdir(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000005) mount(0x0, 0x0, 0x0, 0x0, 0x0) msync(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) 1.345939855s ago: executing program 8 (id=1258): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) socket(0x1, 0x3, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x3c}}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) 369.8847ms ago: executing program 1 (id=2594): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$netlink(0x10, 0x3, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/consoles\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x25}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x10}]}, 0x34}, 0x1, 0x0, 0x0, 0x4018045}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x2, &(0x7f0000000040)=[{0x5}, {0x6}]}) lseek(r5, 0xc6c3, 0x0) accept4$tipc(r5, 0x0, &(0x7f0000000240), 0x80800) 369.143681ms ago: executing program 2 (id=2595): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f00000016c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r4, r7, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r4}, &(0x7f0000000100), &(0x7f0000000140)=r3}, 0x20) sendmsg(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0) 69.002213ms ago: executing program 6 (id=2596): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setscheduler(r1, 0x1, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) capset(0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000018c0), 0x0, 0x4000) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x0, 0x32, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, 0x0, &(0x7f0000000280)) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, 0x0, 0x0) 0s ago: executing program 8 (id=2597): accept(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) set_mempolicy(0x3, 0x0, 0x1000b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5a20}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r4) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x20004050) mkdirat(0xffffffffffffff9c, 0x0, 0x0) kernel console output (not intermixed with test programs): nregistering): (slave bond_slave_1): Releasing backup interface [ 1012.552843][T12289] bond0 (unregistering): Released all slaves [ 1012.645982][T13358] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1013.483199][ T5853] Bluetooth: hci4: command tx timeout [ 1014.180322][ T5853] Bluetooth: hci2: command tx timeout [ 1015.280186][T12289] hsr_slave_0: left promiscuous mode [ 1015.425479][T12289] hsr_slave_1: left promiscuous mode [ 1015.534546][ T5853] Bluetooth: hci4: command tx timeout [ 1016.171074][T12289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1016.231416][T12289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1016.260198][T10141] Bluetooth: hci2: command tx timeout [ 1016.454791][T13731] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1016.542393][T12289] hsr_slave_0: left promiscuous mode [ 1016.633289][T12289] hsr_slave_1: left promiscuous mode [ 1016.698964][T12289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1016.803992][T12289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1017.067173][T12289] hsr_slave_0: left promiscuous mode [ 1017.119344][T12289] hsr_slave_1: left promiscuous mode [ 1017.179386][T12289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1017.203296][T12289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1017.263885][ T5853] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1017.274382][ T5853] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1017.283256][ T5853] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1017.294402][ T5853] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1017.306860][ T5853] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1017.316853][ T5853] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1017.610301][ T5853] Bluetooth: hci4: command tx timeout [ 1018.355916][T13742] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1019.073760][ T5853] Bluetooth: hci2: command tx timeout [ 1019.390496][ T5853] Bluetooth: hci6: command tx timeout [ 1019.718322][ T5853] Bluetooth: hci4: command tx timeout [ 1020.150629][T12289] team0 (unregistering): Port device team_slave_1 removed [ 1020.882092][T12289] team0 (unregistering): Port device team_slave_0 removed [ 1021.470118][ T5853] Bluetooth: hci6: command tx timeout [ 1022.760766][T12289] team0 (unregistering): Port device team_slave_1 removed [ 1022.993199][T13770] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1023.532678][ T5853] Bluetooth: hci6: command tx timeout [ 1023.904222][T12289] team0 (unregistering): Port device team_slave_0 removed [ 1025.621828][ T5853] Bluetooth: hci6: command tx timeout [ 1026.773270][T13816] loop7: detected capacity change from 0 to 512 [ 1026.791636][T13816] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1026.823744][T13816] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 1026.850354][T13816] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 1026.869788][T13816] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 1026.898631][T13816] System zones: 0-2, 18-18, 34-34 [ 1026.921801][T13816] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1026.988499][T13816] EXT4-fs (loop7): 1 truncate cleaned up [ 1026.995397][T13816] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1028.080348][T12289] team0 (unregistering): Port device team_slave_1 removed [ 1028.147273][T12289] team0 (unregistering): Port device team_slave_0 removed [ 1028.646439][T13832] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1028.681518][ T7855] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1030.936471][T13843] loop7: detected capacity change from 0 to 32768 [ 1031.153624][T13843] XFS (loop7): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 1031.295821][T13843] XFS (loop7): Ending clean mount [ 1031.309350][T13843] XFS (loop7): Metadata CRC error detected at xfs_inobt_read_verify+0x41/0xd0, xfs_finobt block 0x20 [ 1031.320515][T13843] XFS (loop7): Unmount and run xfs_repair [ 1031.326248][T13843] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 1031.334784][T13843] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 1031.343724][T13843] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 1031.352632][T13843] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 1031.361826][T13843] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 1031.370880][T13843] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 1031.379748][T13843] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 1031.388819][T13843] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1031.397754][T13843] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1031.406693][T13843] XFS (loop7): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x20 len 8 error 74 [ 1031.418085][T13843] XFS (loop7): Failed to initialize disk quotas, err -117. [ 1031.852027][T13856] loop6: detected capacity change from 0 to 40427 [ 1031.872877][T13856] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x1fffff [ 1031.915055][T13856] F2FS-fs (loop6): invalid crc value [ 1031.925404][ T7855] XFS (loop7): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 1031.949352][T13856] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1032.011095][T13856] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1032.041874][ T7855] XFS (loop7): Uncorrected metadata errors detected; please run xfs_repair. [ 1032.674139][T13693] chnl_net:caif_netlink_parms(): no params data found [ 1032.841759][ T9783] syz-executor: attempt to access beyond end of device [ 1032.841759][ T9783] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1032.913704][ T9783] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1032.993147][T13686] chnl_net:caif_netlink_parms(): no params data found [ 1033.195201][T13869] loop7: detected capacity change from 0 to 16 [ 1033.300746][T13869] erofs (device loop7): mounted with root inode @ nid 36. [ 1033.405844][T13874] syz.7.1982: attempt to access beyond end of device [ 1033.405844][T13874] loop7: rw=524288, sector=7864328, nr_sectors = 8 limit=16 [ 1033.431514][T13874] syz.7.1982: attempt to access beyond end of device [ 1033.431514][T13874] loop7: rw=0, sector=7864328, nr_sectors = 8 limit=16 [ 1033.448010][T13874] erofs (device loop7): read error -5 @ 0 of nid 89 [ 1036.621194][T13686] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.628309][T13686] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.710438][T13686] bridge_slave_0: entered allmulticast mode [ 1036.717701][T13686] bridge_slave_0: entered promiscuous mode [ 1036.742076][T13686] bridge0: port 2(bridge_slave_1) entered blocking state [ 1036.749172][T13686] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.779399][T13686] bridge_slave_1: entered allmulticast mode [ 1036.818644][T13686] bridge_slave_1: entered promiscuous mode [ 1036.848905][T13693] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.860776][T13693] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.867948][T13693] bridge_slave_0: entered allmulticast mode [ 1036.899053][T13895] loop6: detected capacity change from 0 to 8 [ 1036.942634][T13693] bridge_slave_0: entered promiscuous mode [ 1036.986549][T13729] chnl_net:caif_netlink_parms(): no params data found [ 1038.466266][T13693] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.497459][T13693] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.541419][T13693] bridge_slave_1: entered allmulticast mode [ 1038.575486][T13693] bridge_slave_1: entered promiscuous mode [ 1039.151037][T13912] loop7: detected capacity change from 0 to 8 [ 1040.860320][T13686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1040.866924][T13906] dccp_check_seqno: Step 6 failed for CLOSEREQ packet, (LSWL(264277052407097) <= P.seqno(264277052407096) <= S.SWH(264277052407120)) and (P.ackno exists or LAWL(229905782890345) <= P.ackno(229905782890345) <= S.AWH(229905782890346), sending SYNC... [ 1040.893013][T13686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1041.170307][T13912] SQUASHFS error: Failed to read block 0x4e8: -5 [ 1041.177267][T13912] SQUASHFS error: Failed to read block 0x4de: -5 [ 1041.184077][T13912] SQUASHFS error: Failed to read block 0x4de: -5 [ 1041.190988][T13912] SQUASHFS error: Failed to read block 0x4de: -5 [ 1041.233108][T13912] SQUASHFS error: Failed to read block 0x4de: -5 [ 1041.239979][T13912] SQUASHFS error: Failed to read block 0x4de: -5 [ 1041.246965][T13912] SQUASHFS error: Failed to read block 0x4de: -5 [ 1041.253672][T13912] SQUASHFS error: Failed to read block 0x4de: -5 [ 1041.260508][T13912] SQUASHFS error: Failed to read block 0x4de: -5 [ 1041.267145][T13912] SQUASHFS error: Failed to read block 0x4de: -5 [ 1041.273961][T13912] SQUASHFS error: Failed to read block 0x4de: -5 [ 1041.280671][T13912] SQUASHFS error: Failed to read block 0x4de: -5 [ 1041.287415][T13912] SQUASHFS error: Failed to read block 0x4de: -5 [ 1041.294403][T13912] SQUASHFS error: Failed to read block 0x4de: -5 [ 1041.301200][T13912] SQUASHFS error: Failed to read block 0x4de: -5 [ 1041.364392][ T30] audit: type=1800 audit(1742165691.441:281): pid=13912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1991" name="file1" dev="loop7" ino=5 res=0 errno=0 [ 1041.867377][T13693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1042.423436][T13927] loop7: detected capacity change from 0 to 512 [ 1044.177342][T13927] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1044.185637][T13927] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1044.192512][T13927] Quota error (device loop7): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 1044.203260][T13927] EXT4-fs warning (device loop7): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1044.220914][T13927] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 1044.234380][T13927] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1996: bg 0: block 40: padding at end of block bitmap is not set [ 1044.251734][T13927] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1044.262113][T13927] EXT4-fs (loop7): 1 truncate cleaned up [ 1044.269425][T13927] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1044.377653][T13693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1044.544248][ T7855] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1044.592867][T13936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1997'. [ 1044.605984][T13686] team0: Port device team_slave_0 added [ 1044.630597][T13686] team0: Port device team_slave_1 added [ 1046.299946][T13941] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1999'. [ 1048.209959][T13693] team0: Port device team_slave_0 added [ 1048.467055][T13961] loop7: detected capacity change from 0 to 256 [ 1048.476871][T13686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1048.492345][T13686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1048.518229][ C1] vkms_vblank_simulate: vblank timer overrun [ 1048.526276][T13686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1048.561803][T13693] team0: Port device team_slave_1 added [ 1048.573330][T13729] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.671644][T13729] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.799264][T13729] bridge_slave_0: entered allmulticast mode [ 1048.885900][T13729] bridge_slave_0: entered promiscuous mode [ 1049.271565][T13967] No control pipe specified [ 1049.370717][T13686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1049.377805][T13686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1049.403716][ C1] vkms_vblank_simulate: vblank timer overrun [ 1049.410186][T13686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1049.433128][T13961] gfs2: not a GFS2 filesystem [ 1049.478267][T13693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1049.485530][T13693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1049.512399][T13693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1049.524738][T13729] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.720820][T13729] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.728113][T13729] bridge_slave_1: entered allmulticast mode [ 1049.735305][T13729] bridge_slave_1: entered promiscuous mode [ 1049.814527][T13693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1049.845138][T13693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1049.871020][ C1] vkms_vblank_simulate: vblank timer overrun [ 1049.986464][T13971] loop6: detected capacity change from 0 to 4096 [ 1050.020767][T13693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1050.802542][T13972] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1051.072442][T13729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1051.257511][T13693] hsr_slave_0: entered promiscuous mode [ 1051.293944][T13693] hsr_slave_1: entered promiscuous mode [ 1051.320799][T13693] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1051.374570][T13693] Cannot create hsr debugfs directory [ 1051.402320][T13729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1051.598609][T13729] team0: Port device team_slave_0 added [ 1051.813788][T13686] hsr_slave_0: entered promiscuous mode [ 1051.870564][T13686] hsr_slave_1: entered promiscuous mode [ 1051.886892][T13686] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1051.907368][T13686] Cannot create hsr debugfs directory [ 1053.199565][T13729] team0: Port device team_slave_1 added [ 1053.343428][T13982] loop6: detected capacity change from 0 to 1024 [ 1053.884304][T13729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1053.904445][T13729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1053.932433][T13729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1053.939970][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.444488][T13729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1055.474272][T13729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.636294][T13729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1056.350803][T14008] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1058.098072][T14010] overlayfs: failed to clone upperpath [ 1058.819814][T13729] hsr_slave_0: entered promiscuous mode [ 1058.870333][T13729] hsr_slave_1: entered promiscuous mode [ 1058.880964][T13729] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1059.750107][T13729] Cannot create hsr debugfs directory [ 1062.634147][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a0c7000: rx timeout, send abort [ 1062.994292][T13686] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1063.142439][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a0c7000: abort rx timeout. Force session deactivation [ 1064.586456][T14040] loop7: detected capacity change from 0 to 512 [ 1064.710193][T13686] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1064.731300][T13686] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1064.750893][T14040] EXT4-fs: Ignoring removed oldalloc option [ 1064.756881][T14040] EXT4-fs: Ignoring removed nobh option [ 1065.165572][T14040] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1065.194281][T14040] ext4 filesystem being mounted at /310/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1065.661478][T12289] bridge_slave_1: left allmulticast mode [ 1066.271889][T12289] bridge_slave_1: left promiscuous mode [ 1066.283807][T12289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.451935][ T7855] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1066.731545][T12289] bridge_slave_0: left allmulticast mode [ 1066.737239][T12289] bridge_slave_0: left promiscuous mode [ 1066.758822][T12289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.146012][T14060] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1067.872842][T12289] bridge_slave_1: left allmulticast mode [ 1067.892119][T12289] bridge_slave_1: left promiscuous mode [ 1067.937596][T12289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1068.528822][T12289] bridge_slave_0: left allmulticast mode [ 1068.535215][T12289] bridge_slave_0: left promiscuous mode [ 1068.550177][T12289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.565258][T12289] bridge_slave_1: left allmulticast mode [ 1068.571925][T12289] bridge_slave_1: left promiscuous mode [ 1068.577743][T12289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1068.586675][T12289] bridge_slave_0: left allmulticast mode [ 1068.592645][T12289] bridge_slave_0: left promiscuous mode [ 1068.598316][T12289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.905143][T12289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1068.917374][T12289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1068.928694][T12289] bond0 (unregistering): Released all slaves [ 1068.942864][T12289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1068.954541][T12289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1068.965579][T12289] bond0 (unregistering): Released all slaves [ 1068.978769][T12289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1068.990680][T12289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1069.005499][T12289] bond0 (unregistering): Released all slaves [ 1069.029971][T13686] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1069.217741][T12289] hsr_slave_0: left promiscuous mode [ 1069.270516][T12289] hsr_slave_1: left promiscuous mode [ 1069.276756][T12289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1069.306491][T12289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1069.339900][T12289] hsr_slave_0: left promiscuous mode [ 1069.645684][T12289] hsr_slave_1: left promiscuous mode [ 1069.651803][T12289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1070.791846][T12289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1070.828029][T12289] hsr_slave_0: left promiscuous mode [ 1071.940236][T12289] hsr_slave_1: left promiscuous mode [ 1072.569049][T12289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1072.720752][T10141] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1072.739417][T10141] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1072.747936][T10141] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1072.756853][T10141] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1072.765898][T10141] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1072.773185][T10141] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1072.810695][T12289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1073.040487][T12289] team0 (unregistering): Port device team_slave_1 removed [ 1073.069933][T12289] team0 (unregistering): Port device team_slave_0 removed [ 1073.612881][T14090] loop6: detected capacity change from 0 to 512 [ 1073.619801][T14090] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1073.947523][T14090] EXT4-fs: Ignoring removed i_version option [ 1074.439597][T14090] EXT4-fs (loop6): 1 orphan inode deleted [ 1074.472319][T14090] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1074.532110][T12289] team0 (unregistering): Port device team_slave_1 removed [ 1074.593781][T12289] team0 (unregistering): Port device team_slave_0 removed [ 1074.812813][T10141] Bluetooth: hci2: command tx timeout [ 1075.726954][ T5853] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1076.382912][ T9783] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1076.684666][ T5853] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1077.101957][ T5853] Bluetooth: hci2: command tx timeout [ 1077.111330][ T5143] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1077.130631][ T5143] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1077.157846][ T5143] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1077.166540][ T5143] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1079.130280][ T5143] Bluetooth: hci2: command tx timeout [ 1079.302890][T10141] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1079.381022][T14138] xt_nfacct: accounting object `syz1' does not exists [ 1079.399206][T10141] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1079.634119][T10141] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1079.647689][T10141] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1079.659058][T10141] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1079.667611][T10141] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1080.261296][T10141] Bluetooth: hci5: command tx timeout [ 1081.228151][T10141] Bluetooth: hci2: command tx timeout [ 1081.254040][T12289] team0 (unregistering): Port device team_slave_1 removed [ 1082.220135][T10141] Bluetooth: hci7: command tx timeout [ 1082.307053][T12289] team0 (unregistering): Port device team_slave_0 removed [ 1082.498751][T10141] Bluetooth: hci5: command tx timeout [ 1084.256452][T10141] Bluetooth: hci7: command tx timeout [ 1084.580636][T10141] Bluetooth: hci5: command tx timeout [ 1085.048080][T14177] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1085.941965][T14178] Invalid source name [ 1086.091765][T14178] UBIFS error (pid: 14178): cannot open "./file0", error -22 [ 1086.340101][T10141] Bluetooth: hci7: command tx timeout [ 1087.288217][T10141] Bluetooth: hci5: command tx timeout [ 1088.590398][ T5143] Bluetooth: hci7: command tx timeout [ 1089.457482][T14136] chnl_net:caif_netlink_parms(): no params data found [ 1090.794780][T14216] Set syz0 is full, maxelem 0 reached [ 1091.611764][T14222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2066'. [ 1092.247889][T14082] chnl_net:caif_netlink_parms(): no params data found [ 1092.539606][T14136] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.557257][T14136] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.570381][T14136] bridge_slave_0: entered allmulticast mode [ 1092.586518][T14136] bridge_slave_0: entered promiscuous mode [ 1092.638340][T14102] chnl_net:caif_netlink_parms(): no params data found [ 1094.619916][T14136] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.627187][T14136] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.644390][T14136] bridge_slave_1: entered allmulticast mode [ 1094.718359][T14136] bridge_slave_1: entered promiscuous mode [ 1096.142708][T14136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1097.286548][T14136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1098.119026][T14270] loop7: detected capacity change from 0 to 8 [ 1098.275030][T14082] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.359116][T14082] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.444560][T14082] bridge_slave_0: entered allmulticast mode [ 1098.483266][T14082] bridge_slave_0: entered promiscuous mode [ 1099.503446][T14082] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.517004][T14082] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.540619][T14082] bridge_slave_1: entered allmulticast mode [ 1100.025693][T14082] bridge_slave_1: entered promiscuous mode [ 1100.096777][T14102] bridge0: port 1(bridge_slave_0) entered blocking state [ 1100.120244][T14102] bridge0: port 1(bridge_slave_0) entered disabled state [ 1100.127435][T14102] bridge_slave_0: entered allmulticast mode [ 1100.151284][T14102] bridge_slave_0: entered promiscuous mode [ 1100.169091][T14136] team0: Port device team_slave_0 added [ 1100.187180][T14136] team0: Port device team_slave_1 added [ 1100.248545][T14102] bridge0: port 2(bridge_slave_1) entered blocking state [ 1100.263548][T14102] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.279711][T14102] bridge_slave_1: entered allmulticast mode [ 1100.295777][T14102] bridge_slave_1: entered promiscuous mode [ 1100.347374][T14082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1100.451800][T14082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1101.017500][T14102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1101.042895][T14136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1101.180128][T14136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1101.249769][T14136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1101.496632][T14136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1101.503903][T14136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1102.507093][T14136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1102.531923][T14102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1105.219927][T14102] team0: Port device team_slave_0 added [ 1105.433396][T14082] team0: Port device team_slave_0 added [ 1106.457241][T14102] team0: Port device team_slave_1 added [ 1106.524410][T14082] team0: Port device team_slave_1 added [ 1107.541458][T14136] hsr_slave_0: entered promiscuous mode [ 1107.547867][T14136] hsr_slave_1: entered promiscuous mode [ 1107.569759][T14136] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1107.610310][T14136] Cannot create hsr debugfs directory [ 1110.201812][T14082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1110.208787][T14082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1110.580164][T14082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1112.871423][T14102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1112.884596][T14102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1112.911340][T14102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1112.991728][T14082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1113.002338][T14082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1113.012382][T14361] loop7: detected capacity change from 0 to 512 [ 1113.062645][T14082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1113.933136][T14102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1113.966004][T14102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1114.025056][T14102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1114.745123][T14361] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1114.765237][T14361] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1115.475629][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.530924][T14102] hsr_slave_0: entered promiscuous mode [ 1115.539150][T14102] hsr_slave_1: entered promiscuous mode [ 1115.545990][T14102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1115.553956][T14102] Cannot create hsr debugfs directory [ 1115.569061][T14082] hsr_slave_0: entered promiscuous mode [ 1115.575773][T14082] hsr_slave_1: entered promiscuous mode [ 1115.582577][T14082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1115.590778][T14082] Cannot create hsr debugfs directory [ 1115.858062][ T7855] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1115.894672][T12289] bridge_slave_1: left allmulticast mode [ 1115.905051][T12289] bridge_slave_1: left promiscuous mode [ 1115.917331][T12289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.939019][T12289] bridge_slave_0: left allmulticast mode [ 1115.950839][T12289] bridge_slave_0: left promiscuous mode [ 1115.964144][T12289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.343463][T12289] bridge_slave_1: left allmulticast mode [ 1117.047842][T12289] bridge_slave_1: left promiscuous mode [ 1117.064368][T12289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.414935][T12289] bridge_slave_0: left allmulticast mode [ 1117.427238][T12289] bridge_slave_0: left promiscuous mode [ 1117.436797][T12289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.447934][T12289] bridge_slave_1: left allmulticast mode [ 1117.453798][T12289] bridge_slave_1: left promiscuous mode [ 1117.491459][T12289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.451425][T12289] bridge_slave_0: left allmulticast mode [ 1118.457224][T12289] bridge_slave_0: left promiscuous mode [ 1118.650386][T12289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.106302][T14415] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2112'. [ 1121.320201][T14415] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2112'. [ 1122.995944][T12289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1123.007911][T12289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1123.019171][T12289] bond0 (unregistering): Released all slaves [ 1123.034282][T12289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1123.046058][T12289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1123.057085][T12289] bond0 (unregistering): Released all slaves [ 1123.074249][T12289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1123.094026][T12289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1123.105089][T12289] bond0 (unregistering): Released all slaves [ 1123.171472][T14136] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1123.187705][T14136] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1123.264206][T14136] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1123.308799][T12289] hsr_slave_0: left promiscuous mode [ 1123.326040][T12289] hsr_slave_1: left promiscuous mode [ 1123.332428][T12289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1123.340917][T12289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1123.353440][T12289] hsr_slave_0: left promiscuous mode [ 1123.359418][T12289] hsr_slave_1: left promiscuous mode [ 1123.365653][T12289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1123.374137][T12289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1123.387327][T12289] hsr_slave_0: left promiscuous mode [ 1123.393783][T12289] hsr_slave_1: left promiscuous mode [ 1123.399675][T12289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1123.407682][T12289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1123.585979][T12289] team0 (unregistering): Port device team_slave_1 removed [ 1123.631060][T12289] team0 (unregistering): Port device team_slave_0 removed [ 1125.979984][T14448] fuse: Unknown parameter '0xffffffffffffffff' [ 1126.008457][T14448] usb usb6: usbfs: process 14448 (syz.7.2123) did not claim interface 0 before use [ 1127.318961][T14447] Process accounting resumed [ 1127.521998][T12289] team0 (unregistering): Port device team_slave_1 removed [ 1127.736221][T14459] loop7: detected capacity change from 0 to 128 [ 1128.233869][T12289] team0 (unregistering): Port device team_slave_0 removed [ 1128.563390][T14467] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1129.646206][T12289] team0 (unregistering): Port device team_slave_1 removed [ 1129.674034][T12289] team0 (unregistering): Port device team_slave_0 removed [ 1129.824489][T14136] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1129.992723][T14136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1130.009706][T14136] 8021q: adding VLAN 0 to HW filter on device team0 [ 1130.028692][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1130.035791][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1130.054505][T12631] bridge0: port 2(bridge_slave_1) entered blocking state [ 1130.061628][T12631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1130.249341][T14102] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1130.292705][T14102] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1130.322040][T14102] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1130.370874][T14102] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1132.543390][T14136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1132.873475][T14102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1134.149844][T10141] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1134.170841][T10141] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1134.181006][T10141] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1134.189470][T10141] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1134.197135][T10141] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1134.210486][T10141] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1136.251266][ T5143] Bluetooth: hci2: command tx timeout [ 1137.468004][T14501] chnl_net:caif_netlink_parms(): no params data found [ 1138.111261][T10141] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1138.121164][T10141] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1138.129525][T10141] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1138.137477][T10141] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1138.161806][T10141] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1138.169129][T10141] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1138.350116][T10141] Bluetooth: hci2: command tx timeout [ 1138.429095][ T5143] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1138.441968][ T5143] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1138.460090][ T5143] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1138.470523][ T5143] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1138.478103][ T5143] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1138.485650][ T5143] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1139.003221][T14551] loop7: detected capacity change from 0 to 512 [ 1139.012866][T14551] ext4: Unknown parameter 'uid' [ 1139.414907][T14501] bridge0: port 1(bridge_slave_0) entered blocking state [ 1139.431248][T14501] bridge0: port 1(bridge_slave_0) entered disabled state [ 1139.438426][T14501] bridge_slave_0: entered allmulticast mode [ 1139.447769][T14501] bridge_slave_0: entered promiscuous mode [ 1139.457612][T14501] bridge0: port 2(bridge_slave_1) entered blocking state [ 1139.465421][T14501] bridge0: port 2(bridge_slave_1) entered disabled state [ 1139.473787][T14501] bridge_slave_1: entered allmulticast mode [ 1139.480793][T14501] bridge_slave_1: entered promiscuous mode [ 1139.857669][T14559] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1140.250782][ T5143] Bluetooth: hci4: command tx timeout [ 1140.598251][ T5143] Bluetooth: hci2: command tx timeout [ 1140.608405][ T5143] Bluetooth: hci5: command tx timeout [ 1140.892984][T14501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1142.400616][T10141] Bluetooth: hci4: command tx timeout [ 1142.673100][T10141] Bluetooth: hci5: command tx timeout [ 1142.678563][T10141] Bluetooth: hci2: command tx timeout [ 1143.534375][T14572] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 1143.954827][T14501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1144.187890][T14501] team0: Port device team_slave_0 added [ 1144.204650][T14501] team0: Port device team_slave_1 added [ 1144.438915][ T5143] Bluetooth: hci4: command tx timeout [ 1144.714812][T14501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1144.737597][ T5143] Bluetooth: hci5: command tx timeout [ 1144.802259][T14501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1145.258560][T14501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1145.304826][T14501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1145.330267][T14501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1145.399625][T14501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1146.554292][ T5143] Bluetooth: hci4: command tx timeout [ 1146.810338][ T5143] Bluetooth: hci5: command tx timeout [ 1146.842224][T14501] hsr_slave_0: entered promiscuous mode [ 1146.856279][T14501] hsr_slave_1: entered promiscuous mode [ 1146.864157][T14501] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1146.872009][T14501] Cannot create hsr debugfs directory [ 1151.443284][T12289] bridge_slave_1: left allmulticast mode [ 1151.448973][T12289] bridge_slave_1: left promiscuous mode [ 1151.455277][T12289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1151.501021][T12289] bridge_slave_0: left allmulticast mode [ 1151.506748][T12289] bridge_slave_0: left promiscuous mode [ 1151.771526][T12289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1151.781973][T12289] bridge_slave_1: left allmulticast mode [ 1151.787633][T12289] bridge_slave_1: left promiscuous mode [ 1151.806846][T12289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1151.818954][T12289] bridge_slave_0: left allmulticast mode [ 1151.964141][T12289] bridge_slave_0: left promiscuous mode [ 1152.018825][T12289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.461014][T14684] loop7: detected capacity change from 0 to 2048 [ 1160.483777][T14684] hpfs: filesystem error: invalid size in superblock: ffffffff; already mounted read-only [ 1162.794702][T12289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1163.087365][T12289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1164.982360][T12289] bond0 (unregistering): Released all slaves [ 1165.170586][T12289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1165.982493][T12289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1166.466353][T12289] bond0 (unregistering): Released all slaves [ 1168.354142][T14531] chnl_net:caif_netlink_parms(): no params data found [ 1168.868344][T14736] Cannot find add_set index 0 as target [ 1171.069010][T12289] hsr_slave_0: left promiscuous mode [ 1171.082108][T12289] hsr_slave_1: left promiscuous mode [ 1171.585224][T12289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1171.660756][T12289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1171.706451][T12289] hsr_slave_0: left promiscuous mode [ 1171.733120][T12289] hsr_slave_1: left promiscuous mode [ 1171.744353][T12289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1171.772015][T12289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1176.813287][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.820793][T12289] team0 (unregistering): Port device team_slave_1 removed [ 1177.931600][T12289] team0 (unregistering): Port device team_slave_0 removed [ 1182.499249][T12289] team0 (unregistering): Port device team_slave_1 removed [ 1183.264495][T12289] team0 (unregistering): Port device team_slave_0 removed [ 1185.689582][T14541] chnl_net:caif_netlink_parms(): no params data found [ 1185.796804][T14501] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1186.779588][T14501] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1187.047326][T14834] xt_time: unknown flags 0xc [ 1187.969306][T14501] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1188.773682][T14501] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1189.571433][T14531] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.626477][T14531] bridge0: port 1(bridge_slave_0) entered disabled state [ 1189.633769][T14531] bridge_slave_0: entered allmulticast mode [ 1189.640824][T14531] bridge_slave_0: entered promiscuous mode [ 1189.699294][T14531] bridge0: port 2(bridge_slave_1) entered blocking state [ 1190.625562][T14531] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.632918][T14531] bridge_slave_1: entered allmulticast mode [ 1190.640011][T14531] bridge_slave_1: entered promiscuous mode [ 1190.734136][ T1579] libceph: connect (1)[c::]:6789 error -101 [ 1190.765846][T14843] ceph: No mds server is up or the cluster is laggy [ 1190.785332][ T1579] libceph: mon0 (1)[c::]:6789 connect error [ 1190.798095][T14531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1190.809339][T14541] bridge0: port 1(bridge_slave_0) entered blocking state [ 1190.828187][T14541] bridge0: port 1(bridge_slave_0) entered disabled state [ 1190.835509][T14541] bridge_slave_0: entered allmulticast mode [ 1190.843363][T14541] bridge_slave_0: entered promiscuous mode [ 1190.882438][T14541] bridge0: port 2(bridge_slave_1) entered blocking state [ 1190.910441][T14541] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.917668][T14541] bridge_slave_1: entered allmulticast mode [ 1190.940895][T14541] bridge_slave_1: entered promiscuous mode [ 1190.960871][T14531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1191.038178][T14541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1191.067929][T14541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1191.086088][T14531] team0: Port device team_slave_0 added [ 1191.129293][T14531] team0: Port device team_slave_1 added [ 1191.159420][T14541] team0: Port device team_slave_0 added [ 1191.169923][T14541] team0: Port device team_slave_1 added [ 1191.262683][T14541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1191.269784][T14541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1191.296128][T14541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1191.308993][T14531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1191.316090][T14531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1191.342576][T14531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1191.377403][T14541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1191.384449][T14541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1191.410567][T14541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1191.438755][T14531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1191.445988][T14531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1191.472374][T14531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1191.522964][T14541] hsr_slave_0: entered promiscuous mode [ 1191.529268][T14541] hsr_slave_1: entered promiscuous mode [ 1191.536556][T14541] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1191.544284][T14541] Cannot create hsr debugfs directory [ 1191.554836][T14531] hsr_slave_0: entered promiscuous mode [ 1191.561376][T14531] hsr_slave_1: entered promiscuous mode [ 1191.567395][T14531] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1191.576802][T14531] Cannot create hsr debugfs directory [ 1191.842684][T14856] netlink: 'syz.1.2215': attribute type 3 has an invalid length. [ 1191.850829][T14856] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2215'. [ 1195.779016][T10141] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1195.789093][T10141] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1195.797094][T10141] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1195.805525][T10141] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1195.813768][T10141] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1195.821075][T10141] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1197.028654][T14877] chnl_net:caif_netlink_parms(): no params data found [ 1197.940957][ T5143] Bluetooth: hci2: command tx timeout [ 1198.052652][T10141] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1198.063494][T10141] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1198.090190][T10141] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1198.098629][T10141] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1198.106242][T10141] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1198.113682][T10141] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1199.082475][T14904] loop7: detected capacity change from 0 to 1024 [ 1199.108863][T14904] EXT4-fs: Ignoring removed orlov option [ 1199.115242][T14904] EXT4-fs: Ignoring removed bh option [ 1199.152114][T14904] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1199.475663][T14904] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1200.083038][T10141] Bluetooth: hci2: command tx timeout [ 1200.170662][T10141] Bluetooth: hci6: command tx timeout [ 1200.201107][ T7855] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1200.388683][T14877] bridge0: port 1(bridge_slave_0) entered blocking state [ 1200.531725][T14877] bridge0: port 1(bridge_slave_0) entered disabled state [ 1200.691743][T14877] bridge_slave_0: entered allmulticast mode [ 1200.837003][T14877] bridge_slave_0: entered promiscuous mode [ 1200.862224][T14877] bridge0: port 2(bridge_slave_1) entered blocking state [ 1200.907718][T14877] bridge0: port 2(bridge_slave_1) entered disabled state [ 1200.962038][T14877] bridge_slave_1: entered allmulticast mode [ 1200.970767][T14877] bridge_slave_1: entered promiscuous mode [ 1202.416426][T10141] Bluetooth: hci2: command tx timeout [ 1202.423552][ T5143] Bluetooth: hci6: command tx timeout [ 1202.729284][ T5853] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1202.744972][ T5853] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1202.755523][ T5853] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1202.786559][ T5853] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1202.794823][ T5853] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1202.803025][ T5853] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1202.832711][T14877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1202.844326][T14877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1204.491187][ T5853] Bluetooth: hci2: command tx timeout [ 1204.496709][ T5853] Bluetooth: hci6: command tx timeout [ 1205.108324][T10141] Bluetooth: hci7: command tx timeout [ 1206.740398][T10141] Bluetooth: hci6: command tx timeout [ 1207.456758][T10141] Bluetooth: hci7: command tx timeout [ 1208.108495][T14953] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2234'. [ 1208.119698][T14953] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2234'. [ 1208.493111][T14877] team0: Port device team_slave_0 added [ 1208.735975][T14877] team0: Port device team_slave_1 added [ 1209.181265][T14963] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2238'. [ 1209.530819][T10141] Bluetooth: hci7: command tx timeout [ 1210.506663][T14971] loop7: detected capacity change from 0 to 4096 [ 1210.513704][T12289] bridge_slave_1: left allmulticast mode [ 1210.519382][T12289] bridge_slave_1: left promiscuous mode [ 1210.541076][T12289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1210.740881][T12289] bridge_slave_0: left allmulticast mode [ 1210.755853][T12289] bridge_slave_0: left promiscuous mode [ 1210.764733][T12289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1211.045223][T12289] bridge_slave_1: left allmulticast mode [ 1211.625979][T10141] Bluetooth: hci7: command tx timeout [ 1211.636947][T12289] bridge_slave_1: left promiscuous mode [ 1211.642824][T12289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.755802][T12289] bridge_slave_0: left allmulticast mode [ 1211.790418][T12289] bridge_slave_0: left promiscuous mode [ 1211.796131][T12289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1218.610336][T15025] delete_channel: no stack [ 1218.614900][T15025] delete_channel: no stack [ 1220.009162][T12289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1220.044770][T12289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1220.843026][T12289] bond0 (unregistering): Released all slaves [ 1222.346702][T10141] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 1223.951760][ T5900] libceph: connect (1)[c::]:6789 error -101 [ 1223.958555][ T5900] libceph: mon0 (1)[c::]:6789 connect error [ 1223.969319][ T5900] libceph: connect (1)[c::]:6789 error -101 [ 1223.981601][ T5900] libceph: mon0 (1)[c::]:6789 connect error [ 1224.104839][T12289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1224.176482][T15036] ceph: No mds server is up or the cluster is laggy [ 1224.230594][T12289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1224.253700][T12289] bond0 (unregistering): Released all slaves [ 1224.765097][T14877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1224.852471][T14877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1225.680097][T14877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1226.613515][T15068] overlayfs: failed to clone upperpath [ 1227.590165][T12289] hsr_slave_0: left promiscuous mode [ 1228.094503][T12289] hsr_slave_1: left promiscuous mode [ 1228.180939][T12289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1228.235121][T12289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1228.557345][T12289] hsr_slave_0: left promiscuous mode [ 1228.571754][T12289] hsr_slave_1: left promiscuous mode [ 1229.437809][T12289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1229.631143][T12289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1233.349839][T15107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2271'. [ 1233.358807][T15107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2271'. [ 1233.368101][T15107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2271'. [ 1236.630952][T12289] team0 (unregistering): Port device team_slave_1 removed [ 1236.677240][T12289] team0 (unregistering): Port device team_slave_0 removed [ 1238.133315][T12289] team0 (unregistering): Port device team_slave_1 removed [ 1238.216573][T12289] team0 (unregistering): Port device team_slave_0 removed [ 1238.255131][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.414364][T14924] chnl_net:caif_netlink_parms(): no params data found [ 1239.460246][T14877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1239.467207][T14877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1239.493324][T14877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1239.506496][T15115] bridge0: port 3(syz_tun) entered blocking state [ 1239.513343][T15115] bridge0: port 3(syz_tun) entered disabled state [ 1239.520073][T15115] syz_tun: entered allmulticast mode [ 1239.527284][T15115] syz_tun: entered promiscuous mode [ 1239.533914][T15115] bridge0: port 3(syz_tun) entered blocking state [ 1239.540652][T15115] bridge0: port 3(syz_tun) entered forwarding state [ 1240.262671][T14892] chnl_net:caif_netlink_parms(): no params data found [ 1240.442362][T15143] overlayfs: overlapping lowerdir path [ 1243.381108][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1244.991886][T14877] hsr_slave_0: entered promiscuous mode [ 1244.998438][T14877] hsr_slave_1: entered promiscuous mode [ 1245.038346][T14877] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1245.105738][T14877] Cannot create hsr debugfs directory [ 1245.816969][T15171] loop7: detected capacity change from 0 to 256 [ 1246.632070][T15177] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1248.003888][T14924] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.030129][T14924] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.047767][T14924] bridge_slave_0: entered allmulticast mode [ 1248.061104][T14924] bridge_slave_0: entered promiscuous mode [ 1248.085277][T14924] bridge0: port 2(bridge_slave_1) entered blocking state [ 1248.100300][T14924] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.107462][T14924] bridge_slave_1: entered allmulticast mode [ 1248.141106][T14924] bridge_slave_1: entered promiscuous mode [ 1252.080565][T15204] loop7: detected capacity change from 0 to 512 [ 1252.087485][T15204] ext4: Unknown parameter 'smackfsroot' [ 1252.341740][T14924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1252.734264][T15207] loop7: detected capacity change from 0 to 1024 [ 1253.285551][T14924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1253.395770][T12626] hfsplus: b-tree write err: -5, ino 4 [ 1253.640578][T14892] bridge0: port 1(bridge_slave_0) entered blocking state [ 1254.442087][T14892] bridge0: port 1(bridge_slave_0) entered disabled state [ 1254.449390][T14892] bridge_slave_0: entered allmulticast mode [ 1254.480584][T14892] bridge_slave_0: entered promiscuous mode [ 1254.671512][T14892] bridge0: port 2(bridge_slave_1) entered blocking state [ 1254.678646][T14892] bridge0: port 2(bridge_slave_1) entered disabled state [ 1254.704413][T14892] bridge_slave_1: entered allmulticast mode [ 1254.721132][T14892] bridge_slave_1: entered promiscuous mode [ 1257.030063][T15234] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2300'. [ 1258.976515][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1258.985983][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1258.996707][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1259.004838][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1259.012965][ T5853] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1259.020325][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1259.070503][T14924] team0: Port device team_slave_0 added [ 1259.115444][T14924] team0: Port device team_slave_1 added [ 1259.273174][T14924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1259.281021][T14924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1259.308525][T14924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1259.352531][T14924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1259.359561][T14924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1259.393969][T14924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1259.469531][T14924] hsr_slave_0: entered promiscuous mode [ 1259.477127][T14924] hsr_slave_1: entered promiscuous mode [ 1259.483408][T14924] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1259.491422][T14924] Cannot create hsr debugfs directory [ 1259.525881][T12289] bridge_slave_1: left allmulticast mode [ 1259.531703][T12289] bridge_slave_1: left promiscuous mode [ 1259.537390][T12289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.550926][T12289] bridge_slave_0: left allmulticast mode [ 1259.556588][T12289] bridge_slave_0: left promiscuous mode [ 1259.562562][T12289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1259.572848][T12289] bridge_slave_1: left allmulticast mode [ 1259.578483][T12289] bridge_slave_1: left promiscuous mode [ 1259.584506][T12289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.593201][T12289] bridge_slave_0: left allmulticast mode [ 1259.598844][T12289] bridge_slave_0: left promiscuous mode [ 1259.605767][T12289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1259.615590][T12289] bridge_slave_1: left allmulticast mode [ 1259.621547][T12289] bridge_slave_1: left promiscuous mode [ 1259.628878][T12289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.682451][T12289] bridge_slave_0: left allmulticast mode [ 1259.688109][T12289] bridge_slave_0: left promiscuous mode [ 1259.710162][T12289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1259.953311][T12289] bridge_slave_1: left allmulticast mode [ 1259.958998][T12289] bridge_slave_1: left promiscuous mode [ 1259.964787][T12289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.991436][T12289] bridge_slave_0: left allmulticast mode [ 1259.997100][T12289] bridge_slave_0: left promiscuous mode [ 1260.010211][T12289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.051615][ T5853] Bluetooth: hci4: command tx timeout [ 1261.461550][T10141] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1261.557544][T10141] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1261.567982][T10141] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1261.645417][T10141] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1261.656548][T10141] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1261.666016][T10141] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1262.671904][T15260] overlayfs: failed to clone upperpath [ 1263.399819][T10141] Bluetooth: hci4: command tx timeout [ 1263.815075][T10141] Bluetooth: hci2: command tx timeout [ 1265.560650][ T5853] Bluetooth: hci4: command tx timeout [ 1265.566628][ T5853] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1265.576121][ T5853] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1265.740639][ T5853] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1265.756157][ T5853] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1265.931302][ T5143] Bluetooth: hci2: command tx timeout [ 1266.577959][ T5853] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1266.585441][ T5853] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1267.610484][ T5853] Bluetooth: hci4: command tx timeout [ 1267.921366][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1267.933968][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1268.802354][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1268.814887][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1268.827115][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1268.839530][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1268.851795][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1268.864491][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1268.876715][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1268.889160][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1268.901353][ T5853] Bluetooth: hci2: command tx timeout [ 1268.906820][ T5853] Bluetooth: hci5: command tx timeout [ 1269.423185][T12289] bond0 (unregistering): Released all slaves [ 1270.423538][T12289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1270.505759][T12289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1270.545936][T12289] bond0 (unregistering): Released all slaves [ 1270.592076][T12289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1270.893153][T12289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1271.830133][T10141] Bluetooth: hci2: command tx timeout [ 1271.838311][ T5853] Bluetooth: hci5: command tx timeout [ 1272.433959][T12289] bond0 (unregistering): Released all slaves [ 1273.283682][T12289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1273.368137][T12289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1273.431784][T12289] bond0 (unregistering): Released all slaves [ 1273.894594][ T5853] Bluetooth: hci5: command tx timeout [ 1275.178221][T15237] chnl_net:caif_netlink_parms(): no params data found [ 1276.596281][T12289] hsr_slave_0: left promiscuous mode [ 1276.648298][ T5853] Bluetooth: hci5: command tx timeout [ 1277.260541][T12289] hsr_slave_1: left promiscuous mode [ 1277.266510][T12289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1277.297196][T12289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1278.403558][T12289] hsr_slave_0: left promiscuous mode [ 1278.910769][T12289] hsr_slave_1: left promiscuous mode [ 1278.920834][T12289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1279.280882][T12289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1280.578477][T12289] hsr_slave_0: left promiscuous mode [ 1280.797976][T12289] hsr_slave_1: left promiscuous mode [ 1281.125501][T12289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1281.223227][T15367] loop7: detected capacity change from 0 to 128 [ 1281.245664][T15367] omfs: sysblock size (-58445445) is out of range [ 1281.386740][T12289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1286.881115][T15395] loop7: detected capacity change from 0 to 32768 [ 1288.346604][T15395] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1288.862211][T15395] XFS (loop7): Ending clean mount [ 1288.872334][T15395] XFS (loop7): Quotacheck needed: Please wait. [ 1288.900925][T12289] team0 (unregistering): Port device team_slave_1 removed [ 1288.983546][T15395] XFS (loop7): Quotacheck: Done. [ 1289.964007][T12289] team0 (unregistering): Port device team_slave_0 removed [ 1290.375782][T15418] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1290.384545][T15418] overlayfs: missing 'lowerdir' [ 1291.219901][ T7855] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1296.548640][T12289] team0 (unregistering): Port device team_slave_1 removed [ 1296.724502][T12289] team0 (unregistering): Port device team_slave_0 removed [ 1298.327238][T12289] team0 (unregistering): Port device team_slave_1 removed [ 1298.357626][T12289] team0 (unregistering): Port device team_slave_0 removed [ 1299.860576][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.120283][T15237] bridge0: port 1(bridge_slave_0) entered blocking state [ 1300.127410][T15237] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.027326][T15237] bridge_slave_0: entered allmulticast mode [ 1301.041643][T15237] bridge_slave_0: entered promiscuous mode [ 1301.062584][T15237] bridge0: port 2(bridge_slave_1) entered blocking state [ 1301.069682][T15237] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.094655][T15237] bridge_slave_1: entered allmulticast mode [ 1301.102539][T15237] bridge_slave_1: entered promiscuous mode [ 1301.133852][T15251] chnl_net:caif_netlink_parms(): no params data found [ 1302.164737][T15271] chnl_net:caif_netlink_parms(): no params data found [ 1302.754859][T15237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1303.004171][T15237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1304.461522][T15237] team0: Port device team_slave_0 added [ 1304.572150][T15251] bridge0: port 1(bridge_slave_0) entered blocking state [ 1304.579276][T15251] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.628264][T15251] bridge_slave_0: entered allmulticast mode [ 1304.905364][T15251] bridge_slave_0: entered promiscuous mode [ 1305.619675][T15237] team0: Port device team_slave_1 added [ 1306.488623][T15251] bridge0: port 2(bridge_slave_1) entered blocking state [ 1306.530094][T15251] bridge0: port 2(bridge_slave_1) entered disabled state [ 1306.537321][T15251] bridge_slave_1: entered allmulticast mode [ 1306.591287][T15251] bridge_slave_1: entered promiscuous mode [ 1310.048638][T15528] loop7: detected capacity change from 0 to 256 [ 1310.782800][T15528] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 1310.795296][T15528] exFAT-fs (loop7): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1310.819172][T15237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1310.864477][T15237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1311.191175][T15237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1311.331488][T15271] bridge0: port 1(bridge_slave_0) entered blocking state [ 1311.338719][T15271] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.359014][T15271] bridge_slave_0: entered allmulticast mode [ 1311.374171][T15271] bridge_slave_0: entered promiscuous mode [ 1311.406839][T15237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1311.436836][T15237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1311.488267][T15237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1311.616874][T15251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1311.668384][T15251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1311.749034][T15271] bridge0: port 2(bridge_slave_1) entered blocking state [ 1311.757993][T15271] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.781438][T15271] bridge_slave_1: entered allmulticast mode [ 1312.201599][T15271] bridge_slave_1: entered promiscuous mode [ 1312.413774][T15251] team0: Port device team_slave_0 added [ 1312.488847][T15251] team0: Port device team_slave_1 added [ 1312.966701][T15251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1313.013963][T15251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1313.109057][T15251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1314.003228][T15271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1314.072834][T15251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1314.079801][T15251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1314.227709][T15251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1314.342636][T15271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1314.535393][T15251] hsr_slave_0: entered promiscuous mode [ 1314.560820][T15251] hsr_slave_1: entered promiscuous mode [ 1314.566929][T15251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1314.659486][T15251] Cannot create hsr debugfs directory [ 1314.741613][T15271] team0: Port device team_slave_0 added [ 1315.009546][T15271] team0: Port device team_slave_1 added [ 1315.170986][T15271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1315.177960][T15271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1315.241132][T15271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1316.530607][T15271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1316.539997][T15271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1316.950974][T15271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1317.933732][T15564] loop7: detected capacity change from 0 to 512 [ 1317.950723][T15564] EXT4-fs: Ignoring removed nobh option [ 1317.960027][T15564] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1317.990308][T10141] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1318.008516][T15271] hsr_slave_0: entered promiscuous mode [ 1318.008801][T10141] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1318.021774][T15564] EXT4-fs (loop7): 1 truncate cleaned up [ 1318.023601][T10141] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1318.031286][T15564] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1318.036254][T10141] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1318.050778][T15271] hsr_slave_1: entered promiscuous mode [ 1318.054217][T10141] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1318.059318][T15271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1318.066228][T10141] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1318.084739][T15271] Cannot create hsr debugfs directory [ 1318.402014][T12289] bridge_slave_1: left allmulticast mode [ 1318.410842][T12289] bridge_slave_1: left promiscuous mode [ 1318.418227][T15570] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2371'. [ 1318.428506][T12289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1318.437657][T12289] bridge_slave_0: left allmulticast mode [ 1318.443541][T12289] bridge_slave_0: left promiscuous mode [ 1318.455145][T12289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1319.260176][T12289] bridge_slave_1: left allmulticast mode [ 1319.262929][ T7855] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1319.277521][T12289] bridge_slave_1: left promiscuous mode [ 1319.289105][T12289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1319.314128][T12289] bridge_slave_0: left allmulticast mode [ 1319.326985][T12289] bridge_slave_0: left promiscuous mode [ 1319.338246][T12289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1320.620080][T10141] Bluetooth: hci4: command tx timeout [ 1321.510580][T12289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1321.566131][T12289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1321.612014][T12289] bond0 (unregistering): Released all slaves [ 1321.629514][T12289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1321.641249][T12289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1321.651550][T12289] bond0 (unregistering): Released all slaves [ 1322.049575][T12289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1322.099289][ T5853] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1322.109282][ T5853] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1322.118716][ T5853] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1322.128024][ T5853] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1322.131609][T12289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1322.153372][ T5853] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1322.167669][ T5853] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1322.205709][T12289] hsr_slave_0: left promiscuous mode [ 1322.220320][T12289] hsr_slave_1: left promiscuous mode [ 1322.226797][T12289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1322.247011][T12289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1322.327098][T12289] team0 (unregistering): Port device team_slave_1 removed [ 1322.363157][T12289] team0 (unregistering): Port device team_slave_0 removed [ 1322.557672][T15607] loop7: detected capacity change from 0 to 512 [ 1322.606322][T15607] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1322.641029][T15607] EXT4-fs (loop7): 1 truncate cleaned up [ 1322.660128][T10141] Bluetooth: hci4: command tx timeout [ 1322.666691][T15607] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1324.781243][T10141] Bluetooth: hci6: command tx timeout [ 1324.788556][T10141] Bluetooth: hci4: command tx timeout [ 1325.355320][ T7855] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1325.472097][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1325.483594][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1325.491487][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1325.505044][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1325.512711][ T5853] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1325.520100][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1325.587134][T15630] loop7: detected capacity change from 0 to 128 [ 1325.599318][T15630] VFS: Found a Xenix FS (block size = 512) on device loop7 [ 1325.622181][T15630] sysv_free_block: trying to free block not in datazone [ 1325.692898][T15630] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1326.923944][T10141] Bluetooth: hci6: command tx timeout [ 1326.932374][ T5853] Bluetooth: hci4: command tx timeout [ 1327.640077][ T5853] Bluetooth: hci2: command tx timeout [ 1328.672725][T12289] team0 (unregistering): Port device team_slave_1 removed [ 1328.690049][T15643] loop7: detected capacity change from 0 to 16 [ 1328.772307][T12289] team0 (unregistering): Port device team_slave_0 removed [ 1328.975379][ T5853] Bluetooth: hci6: command tx timeout [ 1330.331466][ T5853] Bluetooth: hci2: command tx timeout [ 1331.060225][ T5853] Bluetooth: hci6: command tx timeout [ 1332.650140][ T5853] Bluetooth: hci2: command tx timeout [ 1332.917001][T15565] chnl_net:caif_netlink_parms(): no params data found [ 1333.951525][T15565] bridge0: port 1(bridge_slave_0) entered blocking state [ 1333.990161][T15565] bridge0: port 1(bridge_slave_0) entered disabled state [ 1334.007523][T15565] bridge_slave_0: entered allmulticast mode [ 1334.022160][T15565] bridge_slave_0: entered promiscuous mode [ 1334.046099][T15565] bridge0: port 2(bridge_slave_1) entered blocking state [ 1334.060118][T15565] bridge0: port 2(bridge_slave_1) entered disabled state [ 1334.095274][T15565] bridge_slave_1: entered allmulticast mode [ 1334.112384][T15565] bridge_slave_1: entered promiscuous mode [ 1334.310838][T15565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1334.768661][T15692] loop7: detected capacity change from 0 to 128 [ 1335.280012][T10141] Bluetooth: hci2: command tx timeout [ 1335.980321][T15694] netlink: 124 bytes leftover after parsing attributes in process `syz.6.2394'. [ 1336.297524][T15565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1336.800325][T15692] affs: No valid root block on device loop7 [ 1337.044329][T15700] loop7: detected capacity change from 0 to 1024 [ 1337.051803][T15700] EXT4-fs: Ignoring removed orlov option [ 1337.070340][T15700] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1337.155478][T15700] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1337.416665][T15565] team0: Port device team_slave_0 added [ 1337.465357][T15565] team0: Port device team_slave_1 added [ 1338.238577][ T30] audit: type=1326 audit(2000000184.179:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15699 comm="syz.7.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6e58d169 code=0x7ffc0000 [ 1338.637671][ T30] audit: type=1326 audit(2000000184.179:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15699 comm="syz.7.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6e58d169 code=0x7ffc0000 [ 1338.660764][ T30] audit: type=1326 audit(2000000184.189:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15699 comm="syz.7.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5d6e58d169 code=0x7ffc0000 [ 1338.715698][ T7855] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1338.803191][ T30] audit: type=1326 audit(2000000184.189:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15699 comm="syz.7.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6e58d169 code=0x7ffc0000 [ 1338.829992][ T30] audit: type=1326 audit(2000000184.189:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15699 comm="syz.7.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6e58d169 code=0x7ffc0000 [ 1338.861449][ T30] audit: type=1326 audit(2000000184.189:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15699 comm="syz.7.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f5d6e58d169 code=0x7ffc0000 [ 1339.703347][T15565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1339.751799][T15565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1339.882111][T15565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1339.919036][T15565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1339.951955][T15565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1340.194042][T15565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1340.251180][T15625] chnl_net:caif_netlink_parms(): no params data found [ 1342.633333][T15600] chnl_net:caif_netlink_parms(): no params data found [ 1343.284891][T15565] hsr_slave_0: entered promiscuous mode [ 1344.122505][T15565] hsr_slave_1: entered promiscuous mode [ 1344.193145][T15565] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1345.154814][T15565] Cannot create hsr debugfs directory [ 1349.855983][T15625] bridge0: port 1(bridge_slave_0) entered blocking state [ 1349.880563][T15625] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.888067][T15625] bridge_slave_0: entered allmulticast mode [ 1349.919660][T15625] bridge_slave_0: entered promiscuous mode [ 1350.145883][T15600] bridge0: port 1(bridge_slave_0) entered blocking state [ 1350.170965][T15600] bridge0: port 1(bridge_slave_0) entered disabled state [ 1350.200346][T15600] bridge_slave_0: entered allmulticast mode [ 1350.326608][T15600] bridge_slave_0: entered promiscuous mode [ 1350.340336][T15625] bridge0: port 2(bridge_slave_1) entered blocking state [ 1350.364031][T15625] bridge0: port 2(bridge_slave_1) entered disabled state [ 1350.473042][T15625] bridge_slave_1: entered allmulticast mode [ 1350.487644][T15625] bridge_slave_1: entered promiscuous mode [ 1350.649200][T15600] bridge0: port 2(bridge_slave_1) entered blocking state [ 1350.660081][T15600] bridge0: port 2(bridge_slave_1) entered disabled state [ 1350.676672][T15600] bridge_slave_1: entered allmulticast mode [ 1350.720108][T15600] bridge_slave_1: entered promiscuous mode [ 1351.632540][T15625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1351.683552][T15625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1352.135036][T15798] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 1353.081245][T15600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1355.443538][T15600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1355.970774][T15811] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1355.978639][T15811] F2FS-fs (loop13): Can't find valid F2FS filesystem in 1th superblock [ 1355.987005][T15811] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1355.994905][T15811] F2FS-fs (loop13): Can't find valid F2FS filesystem in 2th superblock [ 1356.423324][T15625] team0: Port device team_slave_0 added [ 1356.451713][T15625] team0: Port device team_slave_1 added [ 1357.449301][T15819] loop7: detected capacity change from 0 to 128 [ 1358.667469][T15819] adfs: Bad value for 'uid' [ 1358.721603][T15819] adfs: Bad value for 'uid' [ 1360.427006][T15625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1360.439964][T15625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1360.478158][T15625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1360.501867][T15625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1360.508813][T15625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1360.536806][T15625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1360.601888][T15600] team0: Port device team_slave_0 added [ 1360.639474][T15600] team0: Port device team_slave_1 added [ 1361.680564][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.952224][T15600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1362.959210][T15600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1363.082899][T15600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1363.125088][T15600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1363.132789][T15600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1363.279035][T15600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1364.659792][T15625] hsr_slave_0: entered promiscuous mode [ 1364.671884][T15625] hsr_slave_1: entered promiscuous mode [ 1364.678003][T15625] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1364.704148][T15625] Cannot create hsr debugfs directory [ 1364.710186][T15853] loop7: detected capacity change from 0 to 1024 [ 1366.255615][ C0] net_ratelimit: 93 callbacks suppressed [ 1366.255654][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1366.505338][T15600] hsr_slave_0: entered promiscuous mode [ 1366.541058][T15600] hsr_slave_1: entered promiscuous mode [ 1366.547173][T15600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1366.729010][T15600] Cannot create hsr debugfs directory [ 1371.454709][T12289] bridge_slave_1: left allmulticast mode [ 1372.345507][T12289] bridge_slave_1: left promiscuous mode [ 1372.373604][T12289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1372.423341][T12289] bridge_slave_0: left allmulticast mode [ 1372.438136][T12289] bridge_slave_0: left promiscuous mode [ 1372.686228][T12289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1372.696049][T12289] bridge_slave_1: left allmulticast mode [ 1372.701741][T12289] bridge_slave_1: left promiscuous mode [ 1372.707636][T12289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1372.716276][T12289] bridge_slave_0: left allmulticast mode [ 1373.675360][T12289] bridge_slave_0: left promiscuous mode [ 1373.682896][T12289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.059341][T12289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1376.071006][T12289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1376.082783][T12289] bond0 (unregistering): Released all slaves [ 1376.094761][T12289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1376.110367][T12289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1376.125152][T12289] bond0 (unregistering): Released all slaves [ 1376.334635][T12289] hsr_slave_0: left promiscuous mode [ 1376.348366][T12289] hsr_slave_1: left promiscuous mode [ 1376.358596][T12289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1376.367068][T12289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1376.400479][T12289] hsr_slave_0: left promiscuous mode [ 1376.406460][T12289] hsr_slave_1: left promiscuous mode [ 1376.420501][T12289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1376.440456][T12289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1379.920239][T12289] team0 (unregistering): Port device team_slave_1 removed [ 1380.068370][T12289] team0 (unregistering): Port device team_slave_0 removed [ 1380.100372][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1380.131615][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1380.140308][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1380.151371][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1380.158997][ T5853] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1380.166938][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1380.518138][T15948] loop7: detected capacity change from 0 to 128 [ 1380.822304][T15948] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1380.922324][T15948] ext4 filesystem being mounted at /438/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1382.354179][T10141] Bluetooth: hci4: command tx timeout [ 1383.301910][ T7855] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1383.473457][T12289] team0 (unregistering): Port device team_slave_1 removed [ 1383.507432][T12289] team0 (unregistering): Port device team_slave_0 removed [ 1383.953424][T15939] chnl_net:caif_netlink_parms(): no params data found [ 1384.075971][T15625] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1384.421032][T10141] Bluetooth: hci4: command tx timeout [ 1384.456171][T15969] 9pnet_fd: Insufficient options for proto=fd [ 1385.301756][ T5853] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1385.323457][ T5853] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1385.335870][ T5853] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1385.352227][ T5853] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1385.360580][ T5853] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1385.463249][ T5853] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1386.490002][ T5853] Bluetooth: hci4: command tx timeout [ 1386.654115][T10141] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1386.664821][T10141] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1386.672944][T10141] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1386.690289][T10141] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1386.701449][T15939] bridge0: port 1(bridge_slave_0) entered blocking state [ 1386.708681][T10141] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1386.708751][T15939] bridge0: port 1(bridge_slave_0) entered disabled state [ 1386.723352][T10141] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1386.790413][T15939] bridge_slave_0: entered allmulticast mode [ 1386.797999][T15939] bridge_slave_0: entered promiscuous mode [ 1386.961371][T15939] bridge0: port 2(bridge_slave_1) entered blocking state [ 1386.998912][T15939] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.031483][T15939] bridge_slave_1: entered allmulticast mode [ 1387.038516][T15939] bridge_slave_1: entered promiscuous mode [ 1387.258689][T15939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1387.372536][T15939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1387.650051][T10141] Bluetooth: hci5: command tx timeout [ 1387.757527][T15993] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2459'. [ 1387.767363][T15993] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2459'. [ 1387.893747][T15996] overlayfs: failed to resolve './file0': -2 [ 1388.572595][T10141] Bluetooth: hci4: command tx timeout [ 1388.757386][T15939] team0: Port device team_slave_0 added [ 1388.810691][T10141] Bluetooth: hci6: command tx timeout [ 1389.082582][T15939] team0: Port device team_slave_1 added [ 1389.710153][T10141] Bluetooth: hci5: command tx timeout [ 1390.351452][T15939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1390.358414][T15939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1390.424760][T15939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1390.790335][T15939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1390.868967][T16013] 9pnet_fd: Insufficient options for proto=fd [ 1391.490148][T15939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1391.583649][T10141] Bluetooth: hci6: command tx timeout [ 1391.709958][T15939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1391.770226][T10141] Bluetooth: hci5: command tx timeout [ 1393.630133][T10141] Bluetooth: hci6: command tx timeout [ 1393.860197][ T5853] Bluetooth: hci5: command tx timeout [ 1394.343838][T15939] hsr_slave_0: entered promiscuous mode [ 1394.358811][T15939] hsr_slave_1: entered promiscuous mode [ 1394.365815][T15939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1394.571024][T15939] Cannot create hsr debugfs directory [ 1394.586177][T15973] chnl_net:caif_netlink_parms(): no params data found [ 1395.701854][ T5853] Bluetooth: hci6: command tx timeout [ 1397.013236][T16044] gfs2: gfs2 mount does not exist [ 1397.181276][T16048] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2470'. [ 1397.624262][T15988] chnl_net:caif_netlink_parms(): no params data found [ 1398.132064][T15973] bridge0: port 1(bridge_slave_0) entered blocking state [ 1398.139522][T15973] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.146869][T15973] bridge_slave_0: entered allmulticast mode [ 1398.155244][T15973] bridge_slave_0: entered promiscuous mode [ 1399.093929][T15973] bridge0: port 2(bridge_slave_1) entered blocking state [ 1399.110763][T15973] bridge0: port 2(bridge_slave_1) entered disabled state [ 1399.117943][T15973] bridge_slave_1: entered allmulticast mode [ 1399.169373][T15973] bridge_slave_1: entered promiscuous mode [ 1401.253553][T15973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1401.361279][T15988] bridge0: port 1(bridge_slave_0) entered blocking state [ 1401.368428][T15988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1401.376525][T15988] bridge_slave_0: entered allmulticast mode [ 1401.397507][T15988] bridge_slave_0: entered promiscuous mode [ 1401.443938][T16081] loop7: detected capacity change from 0 to 2048 [ 1401.444915][T15973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1401.487872][T16081] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1401.506227][T15988] bridge0: port 2(bridge_slave_1) entered blocking state [ 1401.520495][T15988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1401.527689][T15988] bridge_slave_1: entered allmulticast mode [ 1401.543110][T15988] bridge_slave_1: entered promiscuous mode [ 1401.765590][T15973] team0: Port device team_slave_0 added [ 1402.852479][T16086] loop7: detected capacity change from 0 to 2048 [ 1402.853053][T15973] team0: Port device team_slave_1 added [ 1402.880497][T16086] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1402.991932][T15988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1403.029702][T15988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1404.146621][ T5899] Process accounting resumed [ 1404.840271][T15973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1404.861210][T15973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1404.940914][T15973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1404.968175][T15973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1404.975580][T15973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1405.020683][T15973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1405.087430][T15988] team0: Port device team_slave_0 added [ 1405.786508][T15988] team0: Port device team_slave_1 added [ 1406.684967][T15973] hsr_slave_0: entered promiscuous mode [ 1406.783408][T16104] ptrace attach of "./syz-executor exec"[7855] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\x [ 1406.809713][T15973] hsr_slave_1: entered promiscuous mode [ 1407.208204][T15973] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1407.239256][T15973] Cannot create hsr debugfs directory [ 1407.300705][T16111] delete_channel: no stack [ 1407.327989][T15988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1407.339979][T15988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1408.264156][T15988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1408.508403][T15988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1408.515938][T15988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1408.551537][T15988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1409.376225][T12289] bridge_slave_1: left allmulticast mode [ 1409.382147][T12289] bridge_slave_1: left promiscuous mode [ 1409.404266][T12289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.432113][T12289] bridge_slave_0: left allmulticast mode [ 1409.437772][T12289] bridge_slave_0: left promiscuous mode [ 1409.971148][T12289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1410.026617][T16131] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2490'. [ 1410.785954][T12289] bridge_slave_1: left allmulticast mode [ 1410.800326][T12289] bridge_slave_1: left promiscuous mode [ 1411.399107][T12289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1411.416314][T12289] bridge_slave_0: left allmulticast mode [ 1411.430154][T12289] bridge_slave_0: left promiscuous mode [ 1411.440449][T12289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1411.484105][T12289] bridge_slave_1: left allmulticast mode [ 1411.583330][T12289] bridge_slave_1: left promiscuous mode [ 1411.611154][T12289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1411.680997][T12289] bridge_slave_0: left allmulticast mode [ 1411.701609][T12289] bridge_slave_0: left promiscuous mode [ 1411.715045][T12289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.875038][T16150] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2496'. [ 1416.482446][T12289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1416.761237][T12289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1416.931635][T12289] bond0 (unregistering): Released all slaves [ 1417.755591][T12289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1419.491360][T12289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1419.578816][T12289] bond0 (unregistering): Released all slaves [ 1419.649749][T12289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1419.806969][T12289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1419.830435][T12289] bond0 (unregistering): Released all slaves [ 1420.744476][T15988] hsr_slave_0: entered promiscuous mode [ 1420.778940][T15988] hsr_slave_1: entered promiscuous mode [ 1421.623940][T10141] Bluetooth: hci1: command 0x0405 tx timeout [ 1421.751575][T15988] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1421.892508][T15988] Cannot create hsr debugfs directory [ 1422.525877][T12289] hsr_slave_0: left promiscuous mode [ 1422.538130][T12289] hsr_slave_1: left promiscuous mode [ 1422.559308][T12289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1422.814651][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.560700][T12289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1423.810586][T12289] hsr_slave_0: left promiscuous mode [ 1423.823020][T12289] hsr_slave_1: left promiscuous mode [ 1423.848749][T12289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1424.896609][T16205] overlayfs: failed to clone upperpath [ 1425.021595][T12289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1425.065179][T12289] hsr_slave_0: left promiscuous mode [ 1425.093947][T12289] hsr_slave_1: left promiscuous mode [ 1425.786455][T12289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1425.813935][T12289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1428.327384][T12289] team0 (unregistering): Port device team_slave_1 removed [ 1429.364987][T12289] team0 (unregistering): Port device team_slave_0 removed [ 1430.534667][T16235] overlayfs: failed to clone upperpath [ 1432.021136][ T30] audit: type=1326 audit(2000000278.479:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16247 comm="syz.1.2521" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e8398d169 code=0x0 [ 1432.062074][T16246] loop7: detected capacity change from 0 to 32768 [ 1432.374955][T16246] XFS (loop7): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1433.081794][T16246] XFS (loop7): Ending clean mount [ 1433.097342][T16246] XFS (loop7): Quotacheck needed: Please wait. [ 1433.315746][T16246] XFS (loop7): Quotacheck: Done. [ 1436.106622][T12289] team0 (unregistering): Port device team_slave_1 removed [ 1436.793195][ T7855] XFS (loop7): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1437.785311][T12289] team0 (unregistering): Port device team_slave_0 removed [ 1438.563320][T12289] team0 (unregistering): Port device team_slave_1 removed [ 1438.641551][T12289] team0 (unregistering): Port device team_slave_0 removed [ 1439.345436][T15973] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1439.368462][T15973] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1439.437649][T15973] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1439.523523][T15973] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1439.694150][T15973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1439.716434][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1439.726002][T15973] 8021q: adding VLAN 0 to HW filter on device team0 [ 1439.733584][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1439.738327][T12618] bridge0: port 1(bridge_slave_0) entered blocking state [ 1439.747616][T12618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1439.756745][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1439.773968][T12291] bridge0: port 2(bridge_slave_1) entered blocking state [ 1439.781085][T12291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1439.807057][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1439.828083][ T5853] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1439.837990][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1439.861631][T15973] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1439.872040][T15973] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1440.010850][T15988] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1440.036254][T15988] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1440.068343][T15988] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1440.077659][T15988] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1440.179084][T15973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1440.327888][T15973] veth0_vlan: entered promiscuous mode [ 1440.343573][T15988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1440.356740][T16281] chnl_net:caif_netlink_parms(): no params data found [ 1440.394410][T15973] veth1_vlan: entered promiscuous mode [ 1440.464838][T15988] 8021q: adding VLAN 0 to HW filter on device team0 [ 1440.475960][T16281] bridge0: port 1(bridge_slave_0) entered blocking state [ 1440.483464][T16281] bridge0: port 1(bridge_slave_0) entered disabled state [ 1440.491842][T16281] bridge_slave_0: entered allmulticast mode [ 1440.498843][T16281] bridge_slave_0: entered promiscuous mode [ 1440.538130][T16281] bridge0: port 2(bridge_slave_1) entered blocking state [ 1440.545461][T16281] bridge0: port 2(bridge_slave_1) entered disabled state [ 1440.552773][T16281] bridge_slave_1: entered allmulticast mode [ 1440.559801][T16281] bridge_slave_1: entered promiscuous mode [ 1440.578708][T15590] bridge0: port 1(bridge_slave_0) entered blocking state [ 1440.585828][T15590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1440.601563][T15590] bridge0: port 2(bridge_slave_1) entered blocking state [ 1440.608642][T15590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1440.650402][T15973] veth0_macvtap: entered promiscuous mode [ 1440.659684][T16281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1440.671977][T16281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1440.719404][T15973] veth1_macvtap: entered promiscuous mode [ 1440.746009][T16281] team0: Port device team_slave_0 added [ 1440.774976][T16281] team0: Port device team_slave_1 added [ 1440.803199][T15973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1440.819314][T15973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1440.831285][T15973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1440.841847][T15973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1440.851964][T15973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1440.862403][T15973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1440.872407][T15973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1440.883028][T15973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1440.897324][T15973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1440.914772][T16281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1440.922199][T16281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1440.948496][T16281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1440.978885][T15973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1440.989765][T15973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1441.000548][T15973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1441.011143][T15973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1441.021288][T15973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1441.031747][T15973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1441.042076][T15973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1441.052699][T15973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1441.064805][T15973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1441.074423][T16281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1441.081806][T16281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1441.108167][T16281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1441.143346][T15973] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.152763][T15973] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.161645][T15973] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.172056][T15973] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.259344][T16281] hsr_slave_0: entered promiscuous mode [ 1441.277038][T16281] hsr_slave_1: entered promiscuous mode [ 1441.287658][T16281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1441.306335][T16281] Cannot create hsr debugfs directory [ 1441.372658][T12289] bridge_slave_1: left allmulticast mode [ 1441.378460][T12289] bridge_slave_1: left promiscuous mode [ 1441.384441][T12289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1441.394676][T12289] bridge_slave_0: left allmulticast mode [ 1441.400875][T12289] bridge_slave_0: left promiscuous mode [ 1441.406548][T12289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1441.522350][T12289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1441.535480][T12289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1441.546224][T12289] bond0 (unregistering): Released all slaves [ 1441.646887][T15988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1441.695599][T12289] hsr_slave_0: left promiscuous mode [ 1441.708048][T12289] hsr_slave_1: left promiscuous mode [ 1441.719622][T12289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1441.740894][T12289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1441.898920][T12289] team0 (unregistering): Port device team_slave_1 removed [ 1441.927512][T12289] team0 (unregistering): Port device team_slave_0 removed [ 1441.936174][T10141] Bluetooth: hci2: command tx timeout [ 1442.096842][T12291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1442.126803][T12291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1442.207122][T15590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1442.229275][T15590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1442.783254][T15988] veth0_vlan: entered promiscuous mode [ 1442.796799][T15988] veth1_vlan: entered promiscuous mode [ 1444.550271][T10141] Bluetooth: hci2: command tx timeout [ 1445.993009][T16332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2528'. [ 1446.630619][T10141] Bluetooth: hci2: command tx timeout [ 1447.010796][T15988] veth0_macvtap: entered promiscuous mode [ 1447.143408][T16281] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1447.167075][T16281] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1447.186624][T16281] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1447.202958][T16281] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1447.316956][T16281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1447.336725][T16281] 8021q: adding VLAN 0 to HW filter on device team0 [ 1447.355343][T12618] bridge0: port 1(bridge_slave_0) entered blocking state [ 1447.362438][T12618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1447.381331][T12631] bridge0: port 2(bridge_slave_1) entered blocking state [ 1447.388402][T12631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1447.593308][T16281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1447.851936][T16281] veth0_vlan: entered promiscuous mode [ 1447.888063][T16281] veth1_vlan: entered promiscuous mode [ 1447.921365][T16281] veth0_macvtap: entered promiscuous mode [ 1447.934869][T16281] veth1_macvtap: entered promiscuous mode [ 1447.956460][T16281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1447.967348][T16281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1447.977829][T16281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1447.988331][T16281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1447.998202][T16281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1448.010458][T16281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.020324][T16281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1448.031091][T16281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.041197][T16281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1448.052102][T16281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.063049][T16281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1448.073145][T16281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1448.084556][T16281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.094711][T16281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1448.105301][T16281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.115897][T16281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1448.126691][T16281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.137017][T16281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1448.147560][T16281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.157624][T16281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1448.168159][T16281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.211335][T16281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1448.513988][T16353] loop7: detected capacity change from 0 to 4096 [ 1448.543726][T16353] ntfs3(loop7): Different NTFS sector size (2048) and media sector size (512). [ 1448.564439][T16281] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.580761][T16281] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.589677][T16281] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.755345][T10141] Bluetooth: hci2: command tx timeout [ 1449.433538][T16281] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.581082][ T30] audit: type=1800 audit(2000000296.039:289): pid=16360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2533" name="file1" dev="loop7" ino=30 res=0 errno=0 [ 1449.830110][T12618] bridge_slave_1: left allmulticast mode [ 1449.835902][T12618] bridge_slave_1: left promiscuous mode [ 1449.860141][T12618] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.925302][T12618] bridge_slave_0: left allmulticast mode [ 1449.942566][T12618] bridge_slave_0: left promiscuous mode [ 1450.023118][T16371] netlink: 45349 bytes leftover after parsing attributes in process `syz.6.2534'. [ 1450.790148][T12618] bridge0: port 1(bridge_slave_0) entered disabled state [ 1450.965365][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1450.986438][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1450.995578][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1451.004348][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1451.012239][ T5853] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1451.019544][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1452.138094][T16385] loop7: detected capacity change from 0 to 64 [ 1453.130078][T10141] Bluetooth: hci4: command tx timeout [ 1453.711228][T16389] input: syz0 as /devices/virtual/input/input17 [ 1455.372012][T16402] loop7: detected capacity change from 0 to 512 [ 1455.382220][T10141] Bluetooth: hci4: command tx timeout [ 1455.435923][T16402] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 1455.496870][T16402] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 1455.522957][T16402] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.2544: corrupted in-inode xattr: e_value size too large [ 1455.548563][T16402] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.2544: couldn't read orphan inode 15 (err -117) [ 1455.573093][T16402] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1456.364944][ T7855] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1457.277062][T16415] loop7: detected capacity change from 0 to 16 [ 1457.417063][T16415] erofs (device loop7): mounted with root inode @ nid 36. [ 1457.679133][T10141] Bluetooth: hci4: command tx timeout [ 1457.718252][T12618] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1457.730234][T12618] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1457.740843][T12618] bond0 (unregistering): Released all slaves [ 1457.756023][T16371] 0XD: renamed from gretap0 (while UP) [ 1457.763868][T16371] 0XD: entered allmulticast mode [ 1459.114814][T12618] hsr_slave_0: left promiscuous mode [ 1459.160116][T12618] hsr_slave_1: left promiscuous mode [ 1459.189314][T12618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1459.233829][T12618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1459.544988][T16432] ubi31: attaching mtd0 [ 1459.555965][T16432] ubi31: scanning is finished [ 1459.941374][T10141] Bluetooth: hci4: command tx timeout [ 1460.176545][T12618] veth0_macvtap: left promiscuous mode [ 1460.203020][T12618] veth1_vlan: left promiscuous mode [ 1460.232384][T12618] veth0_vlan: left promiscuous mode [ 1460.318092][T16432] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 1460.478424][T16442] xt_TCPMSS: Only works on TCP SYN packets [ 1465.821268][T16470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2559'. [ 1472.068446][T12618] team0 (unregistering): Port device team_slave_1 removed [ 1473.232584][T12618] team0 (unregistering): Port device team_slave_0 removed [ 1474.042724][T16518] input: syz0 as /devices/virtual/input/input18 [ 1476.041859][T16534] loop7: detected capacity change from 0 to 8 [ 1476.122759][ T30] audit: type=1326 audit(2000000322.489:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16529 comm="syz.7.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6e58d169 code=0x7ffc0000 [ 1476.371592][ T30] audit: type=1326 audit(2000000322.489:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16529 comm="syz.7.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6e58d169 code=0x7ffc0000 [ 1476.768824][ T30] audit: type=1326 audit(2000000322.499:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16529 comm="syz.7.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f5d6e58d169 code=0x7ffc0000 [ 1476.920189][ T30] audit: type=1326 audit(2000000322.499:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16529 comm="syz.7.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6e58d169 code=0x7ffc0000 [ 1476.988169][ T30] audit: type=1326 audit(2000000322.499:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16529 comm="syz.7.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6e58d169 code=0x7ffc0000 [ 1477.014293][T16536] loop7: detected capacity change from 0 to 256 [ 1477.046516][T16536] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1477.068539][ T30] audit: type=1326 audit(2000000322.499:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16529 comm="syz.7.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5d6e58d169 code=0x7ffc0000 [ 1477.999354][ T30] audit: type=1326 audit(2000000322.499:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16529 comm="syz.7.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5d6e58d1a3 code=0x7ffc0000 [ 1478.348146][ T30] audit: type=1326 audit(2000000322.499:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16529 comm="syz.7.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5d6e58bc1f code=0x7ffc0000 [ 1478.379905][ T30] audit: type=1326 audit(2000000322.499:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16529 comm="syz.7.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5d6e58d1f7 code=0x7ffc0000 [ 1478.636112][ T30] audit: type=1326 audit(2000000322.499:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16529 comm="syz.7.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5d6e58bad0 code=0x7ffc0000 [ 1479.548403][T16553] loop7: detected capacity change from 0 to 128 [ 1479.821998][T16553] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 1482.938789][ T7855] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1482.955468][ T7528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1482.963892][T12631] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1482.989973][T12631] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1483.020349][ T7528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1483.254655][T16585] loop7: detected capacity change from 0 to 512 [ 1483.811456][T16585] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1484.134474][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.260076][T16585] ext4 filesystem being mounted at /474/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1485.537027][T16372] chnl_net:caif_netlink_parms(): no params data found [ 1486.459029][ T7855] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1489.150062][T16639] ------------[ cut here ]------------ [ 1489.155558][T16639] DEBUG_LOCKS_WARN_ON(1) [ 1489.155664][T16639] WARNING: CPU: 0 PID: 16639 at kernel/locking/lockdep.c:234 __lock_acquire+0x564/0x2100 [ 1489.169691][T16639] Modules linked in: [ 1489.173584][T16639] CPU: 0 UID: 0 PID: 16639 Comm: syz.7.2592 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 1489.184352][T16639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1489.194399][T16639] RIP: 0010:__lock_acquire+0x564/0x2100 [ 1489.199954][T16639] Code: 00 00 83 3d 61 52 a0 0e 00 75 23 90 48 c7 c7 40 b2 2a 8c 48 c7 c6 40 b5 2a 8c e8 f7 bc e4 ff 48 ba 00 00 00 00 00 fc ff df 90 <0f> 0b 90 90 90 31 db 48 81 c3 c4 00 00 00 48 89 d8 48 c1 e8 03 0f [ 1489.219565][T16639] RSP: 0018:ffffc90004cdf290 EFLAGS: 00010046 [ 1489.225628][T16639] RAX: 83fd3eaf94a73d00 RBX: 0000000000001420 RCX: 0000000000080000 [ 1489.233592][T16639] RDX: dffffc0000000000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1489.241560][T16639] RBP: 00000000000c1420 R08: ffffffff81819e52 R09: fffffbfff1d3a69c [ 1489.249524][T16639] R10: dffffc0000000000 R11: fffffbfff1d3a69c R12: ffff8880260f8ad4 [ 1489.257494][T16639] R13: 000000000000000f R14: 1ffff11004c1f171 R15: ffff8880260f8b88 [ 1489.265459][T16639] FS: 00007f5d6c3d56c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1489.274379][T16639] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1489.280950][T16639] CR2: 000000110c41daad CR3: 000000005e96a000 CR4: 0000000000350ef0 [ 1489.288915][T16639] Call Trace: [ 1489.292183][T16639] [ 1489.295107][T16639] ? __warn+0x165/0x4d0 [ 1489.299267][T16639] ? __lock_acquire+0x564/0x2100 [ 1489.304211][T16639] ? report_bug+0x2b3/0x500 [ 1489.308716][T16639] ? __lock_acquire+0x564/0x2100 [ 1489.313662][T16639] ? handle_bug+0x60/0x90 [ 1489.317983][T16639] ? exc_invalid_op+0x1a/0x50 [ 1489.322654][T16639] ? asm_exc_invalid_op+0x1a/0x20 [ 1489.327682][T16639] ? __warn_printk+0x292/0x360 [ 1489.332456][T16639] ? __lock_acquire+0x564/0x2100 [ 1489.337407][T16639] lock_acquire+0x1ed/0x550 [ 1489.341917][T16639] ? raw_spin_rq_lock_nested+0x2a/0x140 [ 1489.347467][T16639] ? __pfx_lock_acquire+0x10/0x10 [ 1489.352498][T16639] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1489.357877][T16639] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1489.363522][T16639] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 1489.368994][T16639] _raw_spin_lock_nested+0x31/0x40 [ 1489.374108][T16639] ? raw_spin_rq_lock_nested+0x2a/0x140 [ 1489.379652][T16639] raw_spin_rq_lock_nested+0x2a/0x140 [ 1489.385023][T16639] try_to_wake_up+0x7e2/0x1470 [ 1489.389792][T16639] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1489.395438][T16639] ? __pfx_try_to_wake_up+0x10/0x10 [ 1489.400645][T16639] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1489.406284][T16639] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1489.411923][T16639] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 1489.417381][T16639] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1489.423275][T16639] autoremove_wake_function+0x16/0x110 [ 1489.428739][T16639] __wake_up_common_lock+0x132/0x1e0 [ 1489.434031][T16639] __unix_dgram_recvmsg+0x61a/0x1320 [ 1489.439327][T16639] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1489.444964][T16639] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 1489.450691][T16639] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1489.456332][T16639] ? iovec_from_user+0x61/0x240 [ 1489.461182][T16639] ? __pfx___might_resched+0x10/0x10 [ 1489.466467][T16639] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1489.472104][T16639] ? __import_iovec+0x3bf/0x830 [ 1489.476956][T16639] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1489.482595][T16639] ? unix_dgram_recvmsg+0xb6/0xe0 [ 1489.487613][T16639] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 1489.493160][T16639] sock_recvmsg_nosec+0x190/0x1d0 [ 1489.498192][T16639] ____sys_recvmsg+0x3cd/0x480 [ 1489.502979][T16639] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1489.508271][T16639] ? do_recvmmsg+0x44e/0xab0 [ 1489.512860][T16639] ? __might_fault+0xaa/0x120 [ 1489.517534][T16639] do_recvmmsg+0x426/0xab0 [ 1489.521960][T16639] ? __pfx_do_recvmmsg+0x10/0x10 [ 1489.526892][T16639] ? __pfx_futex_wake_mark+0x10/0x10 [ 1489.532191][T16639] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1489.537830][T16639] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1489.543466][T16639] ? futex_wait+0x285/0x360 [ 1489.547975][T16639] ? __pfx_futex_wait+0x10/0x10 [ 1489.552836][T16639] ? fd_install+0x9c/0x5d0 [ 1489.557256][T16639] ? __pfx_lock_release+0x10/0x10 [ 1489.562291][T16639] ? __pfx_do_futex+0x10/0x10 [ 1489.566976][T16639] __x64_sys_recvmmsg+0x199/0x250 [ 1489.571996][T16639] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1489.577538][T16639] ? do_syscall_64+0x100/0x230 [ 1489.582314][T16639] ? do_syscall_64+0xb6/0x230 [ 1489.586997][T16639] do_syscall_64+0xf3/0x230 [ 1489.591507][T16639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.597405][T16639] RIP: 0033:0x7f5d6e58d169 [ 1489.601813][T16639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1489.621414][T16639] RSP: 002b:00007f5d6c3d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1489.629826][T16639] RAX: ffffffffffffffda RBX: 00007f5d6e7a6080 RCX: 00007f5d6e58d169 [ 1489.637795][T16639] RDX: 0000000000010106 RSI: 00004000000000c0 RDI: 0000000000000003 [ 1489.645757][T16639] RBP: 00007f5d6e60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1489.653718][T16639] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1489.661680][T16639] R13: 0000000000000000 R14: 00007f5d6e7a6080 R15: 00007ffe70bad678 [ 1489.669649][T16639] [ 1489.672658][T16639] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1489.679922][T16639] CPU: 0 UID: 0 PID: 16639 Comm: syz.7.2592 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 1489.690671][T16639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1489.700717][T16639] Call Trace: [ 1489.703985][T16639] [ 1489.706907][T16639] dump_stack_lvl+0x241/0x360 [ 1489.711588][T16639] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1489.716803][T16639] ? __pfx__printk+0x10/0x10 [ 1489.721389][T16639] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1489.727026][T16639] ? vscnprintf+0x5d/0x90 [ 1489.731354][T16639] panic+0x349/0x880 [ 1489.735240][T16639] ? __warn+0x174/0x4d0 [ 1489.739401][T16639] ? __pfx_panic+0x10/0x10 [ 1489.743818][T16639] __warn+0x344/0x4d0 [ 1489.747806][T16639] ? __lock_acquire+0x564/0x2100 [ 1489.752750][T16639] report_bug+0x2b3/0x500 [ 1489.757082][T16639] ? __lock_acquire+0x564/0x2100 [ 1489.762027][T16639] handle_bug+0x60/0x90 [ 1489.766175][T16639] exc_invalid_op+0x1a/0x50 [ 1489.770673][T16639] asm_exc_invalid_op+0x1a/0x20 [ 1489.775528][T16639] RIP: 0010:__lock_acquire+0x564/0x2100 [ 1489.781085][T16639] Code: 00 00 83 3d 61 52 a0 0e 00 75 23 90 48 c7 c7 40 b2 2a 8c 48 c7 c6 40 b5 2a 8c e8 f7 bc e4 ff 48 ba 00 00 00 00 00 fc ff df 90 <0f> 0b 90 90 90 31 db 48 81 c3 c4 00 00 00 48 89 d8 48 c1 e8 03 0f [ 1489.800687][T16639] RSP: 0018:ffffc90004cdf290 EFLAGS: 00010046 [ 1489.806754][T16639] RAX: 83fd3eaf94a73d00 RBX: 0000000000001420 RCX: 0000000000080000 [ 1489.814718][T16639] RDX: dffffc0000000000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1489.822712][T16639] RBP: 00000000000c1420 R08: ffffffff81819e52 R09: fffffbfff1d3a69c [ 1489.830675][T16639] R10: dffffc0000000000 R11: fffffbfff1d3a69c R12: ffff8880260f8ad4 [ 1489.838638][T16639] R13: 000000000000000f R14: 1ffff11004c1f171 R15: ffff8880260f8b88 [ 1489.846606][T16639] ? __warn_printk+0x292/0x360 [ 1489.851389][T16639] lock_acquire+0x1ed/0x550 [ 1489.855897][T16639] ? raw_spin_rq_lock_nested+0x2a/0x140 [ 1489.861445][T16639] ? __pfx_lock_acquire+0x10/0x10 [ 1489.866476][T16639] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1489.871853][T16639] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1489.877492][T16639] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 1489.882954][T16639] _raw_spin_lock_nested+0x31/0x40 [ 1489.888064][T16639] ? raw_spin_rq_lock_nested+0x2a/0x140 [ 1489.893608][T16639] raw_spin_rq_lock_nested+0x2a/0x140 [ 1489.898980][T16639] try_to_wake_up+0x7e2/0x1470 [ 1489.903751][T16639] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1489.909398][T16639] ? __pfx_try_to_wake_up+0x10/0x10 [ 1489.914618][T16639] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1489.920267][T16639] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1489.925907][T16639] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 1489.931366][T16639] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1489.937264][T16639] autoremove_wake_function+0x16/0x110 [ 1489.942729][T16639] __wake_up_common_lock+0x132/0x1e0 [ 1489.948022][T16639] __unix_dgram_recvmsg+0x61a/0x1320 [ 1489.953318][T16639] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1489.958957][T16639] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 1489.964686][T16639] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1489.970325][T16639] ? iovec_from_user+0x61/0x240 [ 1489.975177][T16639] ? __pfx___might_resched+0x10/0x10 [ 1489.980464][T16639] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1489.986120][T16639] ? __import_iovec+0x3bf/0x830 [ 1489.990971][T16639] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1489.996611][T16639] ? unix_dgram_recvmsg+0xb6/0xe0 [ 1490.001631][T16639] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 1490.007172][T16639] sock_recvmsg_nosec+0x190/0x1d0 [ 1490.012203][T16639] ____sys_recvmsg+0x3cd/0x480 [ 1490.016968][T16639] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1490.022255][T16639] ? do_recvmmsg+0x44e/0xab0 [ 1490.026842][T16639] ? __might_fault+0xaa/0x120 [ 1490.031513][T16639] do_recvmmsg+0x426/0xab0 [ 1490.035935][T16639] ? __pfx_do_recvmmsg+0x10/0x10 [ 1490.040868][T16639] ? __pfx_futex_wake_mark+0x10/0x10 [ 1490.046165][T16639] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1490.051804][T16639] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1490.057442][T16639] ? futex_wait+0x285/0x360 [ 1490.061953][T16639] ? __pfx_futex_wait+0x10/0x10 [ 1490.066815][T16639] ? fd_install+0x9c/0x5d0 [ 1490.071235][T16639] ? __pfx_lock_release+0x10/0x10 [ 1490.076289][T16639] ? __pfx_do_futex+0x10/0x10 [ 1490.080975][T16639] __x64_sys_recvmmsg+0x199/0x250 [ 1490.086014][T16639] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1490.091562][T16639] ? do_syscall_64+0x100/0x230 [ 1490.096333][T16639] ? do_syscall_64+0xb6/0x230 [ 1490.101016][T16639] do_syscall_64+0xf3/0x230 [ 1490.105527][T16639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.111426][T16639] RIP: 0033:0x7f5d6e58d169 [ 1490.115832][T16639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1490.135432][T16639] RSP: 002b:00007f5d6c3d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1490.143843][T16639] RAX: ffffffffffffffda RBX: 00007f5d6e7a6080 RCX: 00007f5d6e58d169 [ 1490.151809][T16639] RDX: 0000000000010106 RSI: 00004000000000c0 RDI: 0000000000000003 [ 1490.159780][T16639] RBP: 00007f5d6e60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1490.167744][T16639] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1490.175707][T16639] R13: 0000000000000000 R14: 00007f5d6e7a6080 R15: 00007ffe70bad678 [ 1490.183679][T16639] [ 1490.186894][T16639] Kernel Offset: disabled [ 1490.191385][T16639] Rebooting in 86400 seconds..