last executing test programs: 4m27.605279622s ago: executing program 1 (id=69): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6}, 0x0) 4m26.990499021s ago: executing program 1 (id=70): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) fallocate(r2, 0x8, 0x4000, 0x4000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200e, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfa, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x16}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8006}, 0x0) 4m23.354822644s ago: executing program 1 (id=79): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = getpgid(r1) kcmp(r1, r6, 0x0, r2, r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) fallocate(r8, 0x8, 0x4000, 0x4000) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) 4m18.263671668s ago: executing program 1 (id=87): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005", @ANYBLOB='\x00\x00\x00\x00\x00'], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x3b, r4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r5 = socket(0xa, 0x1, 0x0) ioctl(r5, 0x8916, &(0x7f0000000000)) ioctl(r5, 0x8936, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x8000000004) readv(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 4m14.368485374s ago: executing program 1 (id=95): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) unshare(0x60040600) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = creat(0x0, 0xecf86c37d53049cc) write$binfmt_script(r6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) close(r6) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, 0x0, 0x4040140) 4m11.89989055s ago: executing program 1 (id=99): socket$packet(0x11, 0x3, 0x300) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) unshare(0x26020480) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, 0x0, 0x0) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f00000007c0)=0xeb) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 3m56.389844985s ago: executing program 32 (id=99): socket$packet(0x11, 0x3, 0x300) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) unshare(0x26020480) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, 0x0, 0x0) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f00000007c0)=0xeb) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 2m24.728757897s ago: executing program 5 (id=292): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socket(0x1e, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) 2m23.416669626s ago: executing program 5 (id=296): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_read_part_table(0x635, &(0x7f0000000000)="$eJzs3D9oXeUbB/DvSe899yaFtr8fTl1SncViZ28NSHqpdKp061IVJFQc4lSx5Ea6mCGDg7NLEbLUumjo4KAt4iROoYNacRWkqNQiPXLuOfdPBEFsOwifz5Dzvs953vd5n5yTMSf8py2kmxTjYS+dJMdf/kvGZiYJ6df5Sapue+/czuqp01VVVUWdcz7dPPn5oetJOu2S/nSbqqo2ppOTufrB0o13i1F353Zd9ObWgTq82BzjSPL0wbI/3mZuh1TVvoP1HuXvgX/n2uBWUVwp29lTvzxYST76efXs7pmt966/2IY3ki+T+vm/U78Xk+y3cvHYhc54WD/lN+f3/bW5lLPI7HEvprPvDKMr68PtlcHa3iRwdLjz6WvP/X7sRqoT+arsLExuFLP9ymT08O3X/R+u3/7tS4O1veHlxemNJ97//xdZbid3qypH6pL/y/hPZ/kRVAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HG4NriVZDTcTtb2hr02unp298xWmeSFV/tt6Pj8qgPt9WIu3KmvG1lPfvgk3fmkov4xjiyku9LEvl+unhkPOpP6vcVmcGmwtje8v5TcefbB0WGzKjc/OzErtzHdeTfPt6N7VWM82fy7JtsS1eEm7+v78/0XnWR9uD2uf/nHotM0/HExmh5zIcnrvbzSNFPdK9u1f8zaAAAAAAAAAAAAAAAAAAAAgIeyeur0G3fb8fl+kp/eXqjHVa/5L/diqdiX/20vWTyZXO2nGK0kuf3Sb+U3h7a+az8dMEovoyQHP9w81y4p920w/URAkap8nJ3xT/wZAAD//8Wbezo=") r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) rt_sigaction(0x19, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 2m20.821737194s ago: executing program 5 (id=300): syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) unshare(0x60040600) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = creat(0x0, 0xecf86c37d53049cc) write$binfmt_script(r5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) close(r5) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4040140) 2m18.758716903s ago: executing program 5 (id=305): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x3b, r4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r5 = socket(0xa, 0x1, 0x0) ioctl(r5, 0x8916, &(0x7f0000000000)) ioctl(r5, 0x8936, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x8000000004) readv(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 2m15.620639638s ago: executing program 5 (id=310): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m14.040393272s ago: executing program 5 (id=313): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 1m57.949216916s ago: executing program 33 (id=313): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 1m57.755657648s ago: executing program 2 (id=342): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x4f, [@var, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x884a}}, @func={0x0, 0x0, 0x0, 0xc, 0x20}, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96, 0x0, 0x0, 0xfffffffd, 0x0, @void, @value}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r5, 0xd8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0xffffffffffffff0e, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="0059407e34d0d8492e00"], 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r6}, 0x18) bpf$MAP_CREATE(0x300000000000000, &(0x7f00000013c0)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0340000001"], 0x50) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000a00)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=") mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_GET_DUMPABLE(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x1000, 0x0, {0x0, 0x1}, {0xb7, 0x2}, @period={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x0, 0x0}}) 1m55.381708183s ago: executing program 2 (id=347): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010"], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6}, 0x0) 1m54.549993695s ago: executing program 2 (id=348): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000003f40)={'veth0_virt_wifi\x00', &(0x7f00000001c0)=@ethtool_perm_addr={0x20, 0x6, "801d6276c7fa"}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_clone3(&(0x7f0000000300)={0x136820100, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m52.626850543s ago: executing program 2 (id=352): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0xa, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) sendmmsg(r2, 0x0, 0x0, 0xffe0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_clone(0x4044011, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m46.235488016s ago: executing program 2 (id=360): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000180), 0x1, 0x512, &(0x7f0000000c40)="$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") r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) write$cgroup_devices(r7, 0x0, 0xffdd) fsmount(r0, 0x1, 0x0) open(&(0x7f0000000300)='.\x02\x00', 0x14927e, 0x44) 1m43.384219747s ago: executing program 2 (id=365): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 1m27.202314342s ago: executing program 34 (id=365): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 18.499769701s ago: executing program 3 (id=503): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000080), 0x202140, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r2, 0x40045730, &(0x7f0000000140)=0x7) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9c, 0x32, 0x3f, 0x8, 0x4a5, 0x3003, 0x3ab2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x28, 0xf0, 0xf6}}]}}]}}, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) mmap(&(0x7f0000732000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000240)={0x4000}) r5 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc2c45512, &(0x7f0000000a00)={{0x5, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000]}) 15.303879388s ago: executing program 0 (id=514): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_newvlan={0x24, 0x76, 0x709, 0x0, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x2}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x23f58e5b666a3f02) 15.039735302s ago: executing program 6 (id=515): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = dup(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[@ANYRES8=r1, @ANYRESHEX, @ANYRES8=r1, @ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYRES16=r1, @ANYRES16, @ANYRES32=r2], 0xfffffeb7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x2, &(0x7f0000000180)=[{0x61}, {0x6, 0x0, 0xfc, 0x9}]}) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$sock(r7, &(0x7f0000000300)={&(0x7f0000000040)=@isdn={0x22, 0x2, 0x80, 0x5, 0x3a}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000380)="449df18d098dfcd2c50c61580cd0ba7d5524fac46e641423b01613908be1e46241affd2884d0acb6cde2156c7cbad852c33bb67db850bf9a3869224683ba8cc2d245a2dd7efc089c7dffeff32aab05e5ce9b7eebe34bbea122e427915249b4b662c8d9aca64c9872ad5feb42cebac0b127da8481bc0cf7fc83b057eee475bec953683a7b054d25f30cbfc72e629b217baa6df41c78bf8c328cdb786149a18fbe6e09f6e52e38e6a84a62150d6ee0240e01b2fa467c204a0d", 0xb8}, {&(0x7f00000000c0)="2bc9d0ab0a0169d6a88f99466c2904", 0xf}, {&(0x7f0000000440)="543a9a82b0ddaf4e28041970cb4a94cb3fd34be39b47bff70298a3750a875f445474a9144ae1c33a74ba15afa1ddc5750643c9f4db3b710c327bcb901225181f03fc254ca2c43f5e40aed38a6aad8acfd6ed7a3287b828bcfe087fbe4364e06e858883d7e13f68185ea008236571099482c60211f12d2aabc4ef99d44c7deb646fdd8ba8cee489afb1a56e8b185cc02922eb4499bec899a195e299f24e5be663", 0xa0}, {&(0x7f0000000500)="1723ef612486b918945fc9531d73c06c3eb2bf978afb5feaeb3825058e5e8b10c1247a31d772aa348005d54c79094049f029986ddb1ab18190d67bd4be2746f210a944be6999b102706bb6ace08bcc8160a7e8a3de852bad413db730e6b2afc90fe7e8a9de0a3c893637eb65308f72a2eec15a95aeec262a0bdef7104c4cd88cddb650df6f23a7dc3705b676d6317cdc5a5c545ce2f5023450958171a2970c4b2c3c7cbc93c82e405556b8bb2b28f5", 0xaf}], 0x4, &(0x7f00000001c0)=[@txtime={{0x18, 0x1, 0x3d, 0xffff}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x30}, 0x8000) 14.916373763s ago: executing program 0 (id=516): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = dup(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[@ANYRES8=r1, @ANYRESHEX, @ANYRES8=r1, @ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYRES16=r1, @ANYRES16, @ANYRES32=r2], 0xfffffeb7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$sock(r7, &(0x7f0000000300)={&(0x7f0000000040)=@isdn={0x22, 0x2, 0x80, 0x5, 0x3a}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000380)="449df18d098dfcd2c50c61580cd0ba7d5524fac46e641423b01613908be1e46241affd2884d0acb6cde2156c7cbad852c33bb67db850bf9a3869224683ba8cc2d245a2dd7efc089c7dffeff32aab05e5ce9b7eebe34bbea122e427915249b4b662c8d9aca64c9872ad5feb42cebac0b127da8481bc0cf7fc83b057eee475bec953683a7b054d25f30cbfc72e629b217baa6df41c78bf8c328cdb786149a18fbe6e09f6e52e38e6a84a62150d6ee0240e01b2fa467c204a0d", 0xb8}, {&(0x7f00000000c0)="2bc9d0ab0a0169d6a88f99466c2904", 0xf}, {&(0x7f0000000440)="543a9a82b0ddaf4e28041970cb4a94cb3fd34be39b47bff70298a3750a875f445474a9144ae1c33a74ba15afa1ddc5750643c9f4db3b710c327bcb901225181f03fc254ca2c43f5e40aed38a6aad8acfd6ed7a3287b828bcfe087fbe4364e06e858883d7e13f68185ea008236571099482c60211f12d2aabc4ef99d44c7deb646fdd8ba8cee489afb1a56e8b185cc02922eb4499bec899a195e299f24e5be663", 0xa0}, {&(0x7f0000000500)="1723ef612486b918945fc9531d73c06c3eb2bf978afb5feaeb3825058e5e8b10c1247a31d772aa348005d54c79094049f029986ddb1ab18190d67bd4be2746f210a944be6999b102706bb6ace08bcc8160a7e8a3de852bad413db730e6b2afc90fe7e8a9de0a3c893637eb65308f72a2eec15a95aeec262a0bdef7104c4cd88cddb650df6f23a7dc3705b676d6317cdc5a5c545ce2f5023450958171a2970c4b2c3c7cbc93c82e405556b8bb2b28f5", 0xaf}], 0x4, &(0x7f00000001c0)=[@txtime={{0x18, 0x1, 0x3d, 0xffff}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x30}, 0x8000) bind$802154_dgram(r7, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r7, &(0x7f0000000640)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14) 12.849280994s ago: executing program 6 (id=517): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) fallocate(r2, 0x8, 0x4000, 0x4000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200e, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000000000000081ab09c9f7f6d9ca261e252a996890"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfa, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x16}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8006}, 0x0) 12.363433971s ago: executing program 4 (id=519): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = dup(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYRES8=r0, @ANYRESHEX, @ANYRES8=r0, @ANYRESDEC=0x0, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRES16, @ANYRES32=r1], 0xfffffeb7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x2, &(0x7f0000000180)=[{0x61}, {0x6, 0x0, 0xfc, 0x9}]}) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$sock(r6, &(0x7f0000000300)={&(0x7f0000000040)=@isdn={0x22, 0x2, 0x80, 0x5, 0x3a}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000380)="449df18d098dfcd2c50c61580cd0ba7d5524fac46e641423b01613908be1e46241affd2884d0acb6cde2156c7cbad852c33bb67db850bf9a3869224683ba8cc2d245a2dd7efc089c7dffeff32aab05e5ce9b7eebe34bbea122e427915249b4b662c8d9aca64c9872ad5feb42cebac0b127da8481bc0cf7fc83b057eee475bec953683a7b054d25f30cbfc72e629b217baa6df41c78bf8c328cdb786149a18fbe6e09f6e52e38e6a84a62150d6ee0240e01b2fa467c204a0d", 0xb8}, {&(0x7f00000000c0)="2bc9d0ab0a0169d6a88f99466c2904", 0xf}, {&(0x7f0000000440)="543a9a82b0ddaf4e28041970cb4a94cb3fd34be39b47bff70298a3750a875f445474a9144ae1c33a74ba15afa1ddc5750643c9f4db3b710c327bcb901225181f03fc254ca2c43f5e40aed38a6aad8acfd6ed7a3287b828bcfe087fbe4364e06e858883d7e13f68185ea008236571099482c60211f12d2aabc4ef99d44c7deb646fdd8ba8cee489afb1a56e8b185cc02922eb4499bec899a195e299f24e5be663", 0xa0}, {&(0x7f0000000500)="1723ef612486b918945fc9531d73c06c3eb2bf978afb5feaeb3825058e5e8b10c1247a31d772aa348005d54c79094049f029986ddb1ab18190d67bd4be2746f210a944be6999b102706bb6ace08bcc8160a7e8a3de852bad413db730e6b2afc90fe7e8a9de0a3c893637eb65308f72a2eec15a95aeec262a0bdef7104c4cd88cddb650df6f23a7dc3705b676d6317cdc5a5c545ce2f5023450958171a2970c4b2c3c7cbc93c82e405556b8bb2b28f5", 0xaf}], 0x4, &(0x7f00000001c0)=[@txtime={{0x18, 0x1, 0x3d, 0xffff}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x30}, 0x8000) bind$802154_dgram(r6, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r6, &(0x7f0000000640)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14) 12.36281978s ago: executing program 0 (id=528): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) r5 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r1, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000040)='{(:\x00'}, 0x30) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB='ya\x00?\b\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, 0x0, 0x1, 0x4, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 8.719803733s ago: executing program 3 (id=523): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a700000008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r0}, 0x10) r1 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x140, 0x0) 7.797348487s ago: executing program 0 (id=525): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000040)=@ipv4_delroute={0x1c, 0x1a, 0x1, 0x1, 0x80000000, {0xa, 0x0, 0x80, 0x0, 0x0, 0x3}}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0xffffff8d) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfc", 0x9) r1 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x80108907, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x40c}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x400000000000000, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80602, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000100)=0x3) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0xfffffb07, @local, 0x680}, 0x1c) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) read$FUSE(r5, &(0x7f0000001880)={0x2020}, 0x204b) 7.760834648s ago: executing program 3 (id=526): creat(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x1e) keyctl$reject(0x13, 0x0, 0x7, 0x204, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x10000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) socket(0x400000000010, 0x3, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc04c5609, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[], 0x7c}}, 0x40080d0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a320000000008000440040000000900010073797a30000000000800034000000007"], 0x64}}, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000008c0)=@v3={0x3000000, [{0x1, 0xa}, {0x3, 0xffffff15}]}, 0x18, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) 7.57318356s ago: executing program 6 (id=529): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000340)=ANY=[], 0x0) 7.383198853s ago: executing program 7 (id=530): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sched_setscheduler(0x0, 0x3, &(0x7f0000000180)=0x77ffffff) unshare(0x2c020400) msgget$private(0x0, 0x240) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) msgrcv(0x0, &(0x7f00000004c0)={0x0, ""/4}, 0x2000, 0xffffff7f00000000, 0x3000) 7.382116283s ago: executing program 4 (id=531): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85000000430000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) fallocate(r2, 0x8, 0x4000, 0x4000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200e, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000000000000081ab09c9f7f6d9ca261e252a996890"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfa, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x16}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8006}, 0x0) 7.155840076s ago: executing program 6 (id=533): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb8500000043"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) fallocate(r2, 0x8, 0x4000, 0x4000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200e, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000000000000081ab09c9f7f6d9ca261e252a996890"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfa, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x16}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8006}, 0x0) 7.155406936s ago: executing program 7 (id=534): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r1, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000040)='{(:\x00'}, 0x30) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB='ya\x00?\b\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, r8, 0x1, 0x4, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 6.029971172s ago: executing program 7 (id=535): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r1, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000040)='{(:\x00'}, 0x30) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB='ya\x00?\b\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, r8, 0x1, 0x4, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 4.729848861s ago: executing program 7 (id=536): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r1, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000040)='{(:\x00'}, 0x30) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB='ya\x00?\b\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, r7, 0x1, 0x4, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 3.431702531s ago: executing program 7 (id=537): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) fallocate(r2, 0x8, 0x4000, 0x4000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200e, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000000000000081ab09c9f7f6d9ca261e252a996890"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfa, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x16}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8006}, 0x0) 2.961028187s ago: executing program 4 (id=538): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r1, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000040)='{(:\x00'}, 0x30) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB='ya\x00?\b\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, r7, 0x1, 0x4, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 2.958066217s ago: executing program 3 (id=548): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socket$packet(0x11, 0x3, 0x300) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) unshare(0x60040600) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = creat(0x0, 0xecf86c37d53049cc) write$binfmt_script(r5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) close(r5) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 2.450962114s ago: executing program 6 (id=539): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) fallocate(r2, 0x8, 0x4000, 0x4000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200e, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000000000000081ab09c9f7f6d9ca261e252a996890"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfa, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x16}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8006}, 0x0) 1.430472109s ago: executing program 3 (id=540): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r1, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000040)='{(:\x00'}, 0x30) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB='ya\x00?\b\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, r6, 0x1, 0x4, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 1.343748611s ago: executing program 0 (id=541): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = dup(0xffffffffffffffff) write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[@ANYRES8=r1, @ANYRESHEX, @ANYRES8=r1, @ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYRES16=r1, @ANYRES16, @ANYRES32=r2], 0xfffffeb7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x2, &(0x7f0000000180)=[{0x61}, {0x6, 0x0, 0xfc, 0x9}]}) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$sock(r7, &(0x7f0000000300)={&(0x7f0000000040)=@isdn={0x22, 0x2, 0x80, 0x5, 0x3a}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000380)="449df18d098dfcd2c50c61580cd0ba7d5524fac46e641423b01613908be1e46241affd2884d0acb6cde2156c7cbad852c33bb67db850bf9a3869224683ba8cc2d245a2dd7efc089c7dffeff32aab05e5ce9b7eebe34bbea122e427915249b4b662c8d9aca64c9872ad5feb42cebac0b127da8481bc0cf7fc83b057eee475bec953683a7b054d25f30cbfc72e629b217baa6df41c78bf8c328cdb786149a18fbe6e09f6e52e38e6a84a62150d6ee0240e01b2fa467c204a0d", 0xb8}, {&(0x7f00000000c0)="2bc9d0ab0a0169d6a88f99466c2904", 0xf}, {&(0x7f0000000440)="543a9a82b0ddaf4e28041970cb4a94cb3fd34be39b47bff70298a3750a875f445474a9144ae1c33a74ba15afa1ddc5750643c9f4db3b710c327bcb901225181f03fc254ca2c43f5e40aed38a6aad8acfd6ed7a3287b828bcfe087fbe4364e06e858883d7e13f68185ea008236571099482c60211f12d2aabc4ef99d44c7deb646fdd8ba8cee489afb1a56e8b185cc02922eb4499bec899a195e299f24e5be663", 0xa0}, {&(0x7f0000000500)="1723ef612486b918945fc9531d73c06c3eb2bf978afb5feaeb3825058e5e8b10c1247a31d772aa348005d54c79094049f029986ddb1ab18190d67bd4be2746f210a944be6999b102706bb6ace08bcc8160a7e8a3de852bad413db730e6b2afc90fe7e8a9de0a3c893637eb65308f72a2eec15a95aeec262a0bdef7104c4cd88cddb650df6f23a7dc3705b676d6317cdc5a5c545ce2f5023450958171a2970c4b2c3c7cbc93c82e405556b8bb2b28f5", 0xaf}], 0x4, &(0x7f00000001c0)=[@txtime={{0x18, 0x1, 0x3d, 0xffff}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x30}, 0x8000) bind$802154_dgram(r7, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r7, &(0x7f0000000640)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14) 1.074593425s ago: executing program 7 (id=542): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) r1 = dup(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYRES8, @ANYRESHEX, @ANYRES8, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES16, @ANYRES16, @ANYRES32=r1], 0xfffffeb7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x2, &(0x7f0000000180)=[{0x61}, {0x6, 0x0, 0xfc, 0x9}]}) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$sock(r6, &(0x7f0000000300)={&(0x7f0000000040)=@isdn={0x22, 0x2, 0x80, 0x5, 0x3a}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000380)="449df18d098dfcd2c50c61580cd0ba7d5524fac46e641423b01613908be1e46241affd2884d0acb6cde2156c7cbad852c33bb67db850bf9a3869224683ba8cc2d245a2dd7efc089c7dffeff32aab05e5ce9b7eebe34bbea122e427915249b4b662c8d9aca64c9872ad5feb42cebac0b127da8481bc0cf7fc83b057eee475bec953683a7b054d25f30cbfc72e629b217baa6df41c78bf8c328cdb786149a18fbe6e09f6e52e38e6a84a62150d6ee0240e01b2fa467c204a0d", 0xb8}, {&(0x7f00000000c0)="2bc9d0ab0a0169d6a88f99466c2904", 0xf}, {&(0x7f0000000440)="543a9a82b0ddaf4e28041970cb4a94cb3fd34be39b47bff70298a3750a875f445474a9144ae1c33a74ba15afa1ddc5750643c9f4db3b710c327bcb901225181f03fc254ca2c43f5e40aed38a6aad8acfd6ed7a3287b828bcfe087fbe4364e06e858883d7e13f68185ea008236571099482c60211f12d2aabc4ef99d44c7deb646fdd8ba8cee489afb1a56e8b185cc02922eb4499bec899a195e299f24e5be663", 0xa0}, {&(0x7f0000000500)="1723ef612486b918945fc9531d73c06c3eb2bf978afb5feaeb3825058e5e8b10c1247a31d772aa348005d54c79094049f029986ddb1ab18190d67bd4be2746f210a944be6999b102706bb6ace08bcc8160a7e8a3de852bad413db730e6b2afc90fe7e8a9de0a3c893637eb65308f72a2eec15a95aeec262a0bdef7104c4cd88cddb650df6f23a7dc3705b676d6317cdc5a5c545ce2f5023450958171a2970c4b2c3c7cbc93c82e405556b8bb2b28f5", 0xaf}], 0x4, &(0x7f00000001c0)=[@txtime={{0x18, 0x1, 0x3d, 0xffff}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x30}, 0x8000) connect$802154_dgram(r6, &(0x7f0000000640)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14) 276.403146ms ago: executing program 3 (id=543): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000ffffffff000000000000000000000000000000000000000000000000000000010004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac1e00010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000b00000000000000000000000000feffff0700"/130], 0xf0}, 0x1, 0xe}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sync() 259.062196ms ago: executing program 4 (id=544): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r2) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x28, r3, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}}, 0x0) 0s ago: executing program 4 (id=545): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000180), 0x1, 0x512, &(0x7f0000000c40)="$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") r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) write$cgroup_devices(r7, 0x0, 0xffdd) fsmount(r0, 0x1, 0x0) open(&(0x7f0000000300)='.\x02\x00', 0x14927e, 0x44) kernel console output (not intermixed with test programs): 03][ T4267] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 128.143338][ T4267] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 128.151397][ T4263] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 128.159434][ T4267] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 128.171555][ T4267] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 128.179014][ T4267] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 128.385192][ T4920] loop2: detected capacity change from 0 to 1024 [ 128.398631][ T4920] EXT4-fs: Ignoring removed nobh option [ 128.404349][ T4920] EXT4-fs: Ignoring removed bh option [ 128.444782][ T4920] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 128.711210][ T4920] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 128.990366][ T4913] lo speed is unknown, defaulting to 1000 [ 130.225191][ T4913] chnl_net:caif_netlink_parms(): no params data found [ 130.287697][ T4264] Bluetooth: hci5: command 0x0409 tx timeout [ 130.390386][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 130.622822][ T4933] loop2: detected capacity change from 0 to 512 [ 130.684035][ T4933] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 130.693770][ T4933] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.795688][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 131.000158][ T4913] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.018678][ T4913] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.032698][ T4913] device bridge_slave_0 entered promiscuous mode [ 131.047616][ T4942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.145'. [ 131.073226][ T4942] netlink: 48 bytes leftover after parsing attributes in process `syz.2.145'. [ 131.222693][ T4943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.145'. [ 131.296428][ T4943] netlink: 48 bytes leftover after parsing attributes in process `syz.2.145'. [ 131.762461][ T4913] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.769589][ T4913] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.827646][ T4913] device bridge_slave_1 entered promiscuous mode [ 131.961308][ T4951] loop4: detected capacity change from 0 to 2048 [ 131.971246][ T4913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.991765][ T4913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.079493][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.093609][ T4951] loop4: p1 < > p3 [ 132.101930][ T4951] loop4: p3 size 134217728 extends beyond EOD, truncated [ 132.363207][ T4264] Bluetooth: hci5: command 0x041b tx timeout [ 132.790667][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.797698][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.809452][ T4956] lo speed is unknown, defaulting to 1000 [ 132.817996][ T4913] team0: Port device team_slave_0 added [ 132.933725][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.074630][ T4913] team0: Port device team_slave_1 added [ 133.197728][ T4968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.149'. [ 133.862287][ T4968] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 133.871753][ T4968] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 133.881495][ T4968] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 133.908573][ T4391] udevd[4391]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 133.950267][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 134.051220][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.097005][ T4975] loop3: detected capacity change from 0 to 512 [ 134.136994][ T4913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.152739][ T4913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.197238][ T4975] EXT4-fs (loop3): 1 orphan inode deleted [ 134.206028][ T4975] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 134.218519][ T4423] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 134.256325][ T4423] EXT4-fs error (device loop3): ext4_release_dquot:6850: comm kworker/u4:11: Failed to release dquot type 1 [ 134.286831][ T4975] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.322374][ T4913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.442644][ T4264] Bluetooth: hci5: command 0x040f tx timeout [ 134.492530][ T4982] siw: device registration error -23 [ 134.786856][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.632905][ T4913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.639891][ T4913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.752406][ T4913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.953067][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 136.621266][ T4264] Bluetooth: hci5: command 0x0419 tx timeout [ 136.756350][ T4913] device hsr_slave_0 entered promiscuous mode [ 136.783552][ T4913] device hsr_slave_1 entered promiscuous mode [ 136.820988][ T4913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.841164][ T4913] Cannot create hsr debugfs directory [ 136.906303][ T4995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.158'. [ 136.915393][ T4995] netlink: 36 bytes leftover after parsing attributes in process `syz.3.158'. [ 137.034091][ T4995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.158'. [ 137.704814][ T5001] siw: device registration error -23 [ 138.192582][ T4995] netlink: 36 bytes leftover after parsing attributes in process `syz.3.158'. [ 138.685759][ T5012] loop0: detected capacity change from 0 to 1024 [ 138.763434][ T5012] EXT4-fs: Ignoring removed nobh option [ 138.841496][ T5017] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 138.853154][ T5017] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 138.901230][ T5012] EXT4-fs: Ignoring removed bh option [ 138.987344][ T5012] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 139.272044][ T5012] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 139.850701][ T5035] siw: device registration error -23 [ 141.734081][ T5042] netlink: 12 bytes leftover after parsing attributes in process `syz.4.167'. [ 141.805403][ T5051] loop3: detected capacity change from 0 to 1024 [ 141.814489][ T4913] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 141.863618][ T5051] EXT4-fs: Ignoring removed nobh option [ 141.901903][ T4913] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 141.922524][ T5051] EXT4-fs: Ignoring removed bh option [ 141.989586][ T5051] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 142.003948][ T4913] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 142.013176][ T4255] EXT4-fs (loop0): unmounting filesystem. [ 142.029815][ T4913] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 142.243778][ T5051] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 142.782766][ T5074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.172'. [ 143.411045][ T4913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.429700][ T4913] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.488217][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 143.555961][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 143.582979][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 143.618963][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.645700][ T4585] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.652867][ T4585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.720948][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 143.770787][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.840860][ T4585] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.848026][ T4585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.982681][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.129911][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.323731][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 144.450649][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 144.578442][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 144.620655][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.676735][ T5050] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3841: comm syz.3.169: Allocating blocks 497-513 which overlap fs metadata [ 144.707365][ T5076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.173'. [ 144.723390][ T5076] netlink: 36 bytes leftover after parsing attributes in process `syz.2.173'. [ 144.745010][ T5050] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3841: comm syz.3.169: Allocating blocks 497-513 which overlap fs metadata [ 144.763918][ T5079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.173'. [ 144.815695][ T5079] netlink: 36 bytes leftover after parsing attributes in process `syz.2.173'. [ 144.840176][ T4913] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 144.902157][ T4913] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.938589][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 144.957186][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 144.975975][ T5050] EXT4-fs (loop3): pa ffff888073af01c0: logic 520, phys. 273, len 15 [ 144.984492][ T5050] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 144.990846][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 145.037311][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.072980][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 145.098570][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.188553][ T5147] lo speed is unknown, defaulting to 1000 [ 145.208889][ T5153] loop2: detected capacity change from 0 to 2048 [ 145.325282][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 145.332620][ T5153] loop2: p1 < > p3 [ 145.344776][ T5153] loop2: p3 size 134217728 extends beyond EOD, truncated [ 145.959989][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 146.328373][ T5168] loop3: detected capacity change from 0 to 512 [ 146.390239][ T4391] udevd[4391]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 146.506210][ T5169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.181'. [ 146.525501][ T4391] udevd[4391]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 146.551135][ T5168] EXT4-fs (loop3): 1 orphan inode deleted [ 146.583016][ T5116] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 146.589741][ T5168] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 146.615108][ T5116] EXT4-fs error (device loop3): ext4_release_dquot:6850: comm kworker/u4:20: Failed to release dquot type 1 [ 146.666083][ T5168] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.992604][ T11] device hsr_slave_0 left promiscuous mode [ 147.000402][ T11] device hsr_slave_1 left promiscuous mode [ 147.591670][ T5187] loop0: detected capacity change from 0 to 1024 [ 147.605183][ T5187] EXT4-fs: Ignoring removed nobh option [ 147.610852][ T5187] EXT4-fs: Ignoring removed bh option [ 147.655649][ T5187] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 148.187097][ T5187] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 148.691667][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.746766][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.870273][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.919049][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.980165][ T11] device bridge_slave_1 left promiscuous mode [ 149.021622][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.851339][ T5193] loop2: detected capacity change from 0 to 512 [ 149.908082][ T11] device bridge_slave_0 left promiscuous mode [ 150.030764][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.072919][ T5193] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 150.082356][ T5193] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 150.170009][ T4255] EXT4-fs (loop0): unmounting filesystem. [ 150.401338][ T5199] loop4: detected capacity change from 0 to 1024 [ 150.426107][ T5199] EXT4-fs: Ignoring removed nobh option [ 150.444253][ T5199] EXT4-fs: Ignoring removed bh option [ 150.481856][ T11] device veth1_macvtap left promiscuous mode [ 150.497690][ T11] device veth0_macvtap left promiscuous mode [ 150.520619][ T5199] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 150.545187][ T11] device veth1_vlan left promiscuous mode [ 150.573850][ T11] device veth0_vlan left promiscuous mode [ 150.701597][ T5199] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 151.489230][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 151.637935][ T4257] EXT4-fs (loop4): unmounting filesystem. [ 151.913072][ T11] team0 (unregistering): Port device team_slave_1 removed [ 151.950055][ T11] team0 (unregistering): Port device team_slave_0 removed [ 151.980014][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.394913][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.692009][ T11] bond0 (unregistering): Released all slaves [ 154.373311][ T5227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.191'. [ 154.761103][ T5207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.187'. [ 154.774702][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 154.814889][ T5207] netlink: 36 bytes leftover after parsing attributes in process `syz.0.187'. [ 154.832640][ T5208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.187'. [ 154.852506][ T5208] netlink: 36 bytes leftover after parsing attributes in process `syz.0.187'. [ 154.882804][ T5227] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 154.892187][ T5227] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 154.901843][ T5227] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 155.015964][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 155.052967][ T5231] loop3: detected capacity change from 0 to 512 [ 155.059479][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.075446][ T5231] EXT4-fs: Ignoring removed oldalloc option [ 155.081380][ T5231] EXT4-fs: Ignoring removed mblk_io_submit option [ 155.107465][ T4913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.157038][ T5231] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 155.559799][ T5231] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.192: bg 0: block 64: padding at end of block bitmap is not set [ 155.714745][ T5231] Quota error (device loop3): write_blk: dquota write failed [ 155.775212][ T5231] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 155.846466][ T5231] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.192: Failed to acquire dquot type 0 [ 155.920567][ T5231] EXT4-fs (loop3): 1 truncate cleaned up [ 155.984860][ T5231] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 156.130199][ T5246] siw: device registration error -23 [ 156.370128][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 156.617620][ T5269] loop2: detected capacity change from 0 to 512 [ 157.004962][ T5269] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 157.014399][ T5269] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.648644][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 160.743106][ T5331] siw: device registration error -23 [ 161.536200][ T5124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 161.658033][ T5124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 161.697974][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 161.711640][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 161.740385][ T4913] device veth0_vlan entered promiscuous mode [ 161.756660][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 161.771391][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 161.808895][ T4913] device veth1_vlan entered promiscuous mode [ 161.887941][ T5343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.203'. [ 162.457048][ T5344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.205'. [ 163.595536][ T5346] siw: device registration error -23 [ 163.622966][ T5343] netlink: 36 bytes leftover after parsing attributes in process `syz.0.203'. [ 164.427946][ T5348] siw: device registration error -23 [ 164.935741][ T5344] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 164.945159][ T5344] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 164.954760][ T5344] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 164.975168][ T4913] device veth0_macvtap entered promiscuous mode [ 165.068573][ T26] audit: type=1326 audit(1749763375.305:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5350 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2290b8e929 code=0x7ffc0000 [ 165.112629][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 165.121852][ T26] audit: type=1326 audit(1749763375.345:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5350 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2290b8e929 code=0x7ffc0000 [ 165.138919][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 165.176320][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 165.192161][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 165.206686][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 165.221699][ T5351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.203'. [ 165.239153][ T5351] netlink: 36 bytes leftover after parsing attributes in process `syz.0.203'. [ 165.345176][ T5363] loop3: detected capacity change from 0 to 1024 [ 165.352459][ T5363] EXT4-fs: Ignoring removed nobh option [ 165.358029][ T5363] EXT4-fs: Ignoring removed bh option [ 165.378657][ T5363] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 165.428238][ T4913] device veth1_macvtap entered promiscuous mode [ 166.693567][ T5365] siw: device registration error -23 [ 167.146170][ T5363] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 167.800886][ T26] audit: type=1326 audit(1749763375.345:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5350 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f2290b8e929 code=0x7ffc0000 [ 167.864602][ T4913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.965016][ T4913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.052667][ T26] audit: type=1326 audit(1749763375.345:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5350 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2290b8e929 code=0x7ffc0000 [ 168.083356][ T4913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.093863][ T4913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.296769][ T4913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.307487][ T4913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.350056][ T4913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.366318][ T5371] loop2: detected capacity change from 0 to 512 [ 168.372868][ T4913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.420896][ T4913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.446167][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 168.795960][ T5381] loop0: detected capacity change from 0 to 512 [ 168.893777][ T26] audit: type=1326 audit(1749763375.345:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5350 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2290b8e929 code=0x7ffc0000 [ 168.967191][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 168.980286][ T5371] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 169.015644][ T5381] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 169.025042][ T5381] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 169.282967][ T5371] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.306781][ T26] audit: type=1326 audit(1749763375.345:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5350 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2290b8e929 code=0x7ffc0000 [ 169.400350][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 169.483572][ T4913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.554010][ T5370] overlayfs: unrecognized mount option "t:0 prog->len:3) [ 169.554010][ T5370] verification time 97 usec [ 169.554010][ T5370] stack depth 0 [ 169.554010][ T5370] processed 0 insns (limit 1000000) max_states_per_insn 0 total_states 0 peak_states 0 mark_read 0 [ 169.554010][ T5370] " or missing value [ 169.584024][ T26] audit: type=1326 audit(1749763375.345:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5350 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2290b8e929 code=0x7ffc0000 [ 169.672778][ T26] audit: type=1326 audit(1749763375.345:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5350 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2290b8e929 code=0x7ffc0000 [ 169.788088][ T4913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.846628][ T4913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.871219][ T26] audit: type=1326 audit(1749763375.365:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5350 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2290b8e929 code=0x7ffc0000 [ 169.909823][ T4913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.925126][ T4913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.938175][ T26] audit: type=1326 audit(1749763375.365:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5350 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2290b8e929 code=0x7ffc0000 [ 169.966047][ T4913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.982161][ T4913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.998074][ T4913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.010996][ T4913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.032749][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 170.052062][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 170.449765][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 170.485002][ T4255] EXT4-fs (loop0): unmounting filesystem. [ 170.507976][ T4913] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.552407][ T4913] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.561148][ T4913] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.661322][ T4913] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.706962][ T5398] netlink: 20 bytes leftover after parsing attributes in process `syz.3.213'. [ 170.727650][ T5398] netlink: 12 bytes leftover after parsing attributes in process `syz.3.213'. [ 171.951632][ T5410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.214'. [ 172.638309][ T5412] siw: device registration error -23 [ 173.195428][ T5410] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 173.205138][ T5410] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 173.214812][ T5410] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 173.389698][ T5416] loop3: detected capacity change from 0 to 128 [ 173.418961][ T5416] EXT4-fs (loop3): Test dummy encryption mode enabled [ 173.446634][ T5420] loop4: detected capacity change from 0 to 1024 [ 173.483803][ T5420] EXT4-fs: Ignoring removed nobh option [ 173.489392][ T5420] EXT4-fs: Ignoring removed bh option [ 173.521589][ T5416] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 173.550210][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.600939][ T5420] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 173.601671][ T4423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.620021][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.622983][ T5416] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 173.630813][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 173.745178][ T4423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.842475][ T5420] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 173.916952][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 174.648960][ T5423] loop2: detected capacity change from 0 to 512 [ 174.767044][ T5423] EXT4-fs: Ignoring removed oldalloc option [ 174.781733][ T5423] EXT4-fs: Ignoring removed mblk_io_submit option [ 174.796204][ T5423] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 174.847202][ T5436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.221'. [ 174.929556][ T5436] netlink: 36 bytes leftover after parsing attributes in process `syz.0.221'. [ 175.702486][ T5423] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.219: bg 0: block 64: padding at end of block bitmap is not set [ 175.786730][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 175.825762][ T5423] __quota_error: 32 callbacks suppressed [ 175.825776][ T5423] Quota error (device loop2): write_blk: dquota write failed [ 175.961083][ T5423] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 176.768694][ T5456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.222'. [ 177.168967][ T5423] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.219: Failed to acquire dquot type 0 [ 177.235920][ T5440] siw: device registration error -23 [ 177.310932][ T5423] EXT4-fs (loop2): 1 truncate cleaned up [ 177.327182][ T5423] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 177.340110][ T5459] loop3: detected capacity change from 0 to 512 [ 177.348619][ T4257] EXT4-fs (loop4): unmounting filesystem. [ 177.453663][ T5459] EXT4-fs: Ignoring removed oldalloc option [ 177.561875][ T5459] EXT4-fs: Ignoring removed mblk_io_submit option [ 177.792950][ T5459] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 178.242273][ T5459] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.223: bg 0: block 64: padding at end of block bitmap is not set [ 178.317897][ T5459] Quota error (device loop3): write_blk: dquota write failed [ 178.339495][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 178.378188][ T5459] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 178.436249][ T5459] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.223: Failed to acquire dquot type 0 [ 178.507570][ T5459] EXT4-fs (loop3): 1 truncate cleaned up [ 178.553800][ T5459] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 178.994701][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 179.953016][ T5482] tipc: Started in network mode [ 179.957927][ T5482] tipc: Node identity 4, cluster identity 4711 [ 179.964390][ T5482] tipc: Node number set to 4 [ 180.412470][ T5492] loop0: detected capacity change from 0 to 1024 [ 180.431413][ T5492] EXT4-fs: Ignoring removed nobh option [ 180.437453][ T5492] EXT4-fs: Ignoring removed bh option [ 180.446342][ T5492] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 180.593053][ T5500] siw: device registration error -23 [ 181.438130][ T5492] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 183.247795][ T5567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.236'. [ 183.954161][ T4255] EXT4-fs (loop0): unmounting filesystem. [ 184.107714][ T26] audit: type=1326 audit(1749763394.345:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5569 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7518e929 code=0x7ffc0000 [ 184.250918][ T26] audit: type=1326 audit(1749763394.345:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5569 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7518e929 code=0x7ffc0000 [ 184.455583][ T5538] lo speed is unknown, defaulting to 1000 [ 187.097875][ T26] audit: type=1326 audit(1749763394.345:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5569 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fcc7518e929 code=0x7ffc0000 [ 187.293299][ T4264] Bluetooth: hci3: command 0x0406 tx timeout [ 187.299348][ T4264] Bluetooth: hci1: command 0x0406 tx timeout [ 187.312365][ T4267] Bluetooth: hci4: command 0x0406 tx timeout [ 187.312445][ T4263] Bluetooth: hci2: command 0x0406 tx timeout [ 187.521958][ T26] audit: type=1326 audit(1749763394.345:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5569 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7518e929 code=0x7ffc0000 [ 187.786039][ T26] audit: type=1326 audit(1749763394.345:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5569 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7518e929 code=0x7ffc0000 [ 189.702478][ T26] audit: type=1326 audit(1749763394.345:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5569 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc7518e929 code=0x7ffc0000 [ 189.937928][ T26] audit: type=1326 audit(1749763394.345:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5569 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7518e929 code=0x7ffc0000 [ 190.225415][ T26] audit: type=1326 audit(1749763394.345:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5569 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7518e929 code=0x7ffc0000 [ 190.777983][ T5622] lo speed is unknown, defaulting to 1000 [ 190.792491][ T26] audit: type=1326 audit(1749763394.345:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5569 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcc7518e929 code=0x7ffc0000 [ 190.962930][ T26] audit: type=1326 audit(1749763394.345:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5569 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7518e929 code=0x7ffc0000 [ 191.032392][ T26] audit: type=1326 audit(1749763394.345:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5569 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7518e929 code=0x7ffc0000 [ 191.071251][ T5637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.245'. [ 191.080788][ T5639] loop3: detected capacity change from 0 to 256 [ 191.111232][ T26] audit: type=1326 audit(1749763394.345:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5569 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcc75190847 code=0x7ffc0000 [ 191.115797][ T5637] netlink: 36 bytes leftover after parsing attributes in process `syz.2.245'. [ 191.143532][ T5639] exfat: Unknown parameter 'iocrarseyrillicdiscard' [ 191.201307][ T26] audit: type=1326 audit(1749763394.345:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5569 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fcc751907bc code=0x7ffc0000 [ 191.248246][ T26] audit: type=1326 audit(1749763394.345:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5569 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fcc751906f4 code=0x7ffc0000 [ 191.330760][ T5640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.245'. [ 191.340286][ T5640] netlink: 36 bytes leftover after parsing attributes in process `syz.2.245'. [ 191.349498][ T26] audit: type=1326 audit(1749763394.345:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5569 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fcc751906f4 code=0x7ffc0000 [ 191.525183][ T5646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.247'. [ 192.070829][ T5646] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 192.080307][ T5646] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 192.089985][ T5646] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 192.174631][ T5649] loop3: detected capacity change from 0 to 128 [ 192.209780][ T5649] EXT4-fs (loop3): Test dummy encryption mode enabled [ 192.305919][ T5649] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 192.349140][ T5651] tipc: Started in network mode [ 192.368869][ T5651] tipc: Node identity 4, cluster identity 4711 [ 192.380384][ T5649] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 192.390365][ T5651] tipc: Node number set to 4 [ 192.575320][ T5657] loop4: detected capacity change from 0 to 1024 [ 192.627521][ T5657] EXT4-fs: Ignoring removed nobh option [ 192.633574][ T5657] EXT4-fs: Ignoring removed bh option [ 192.666985][ T5657] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 193.434981][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 193.545254][ T5657] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 193.744134][ T5671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.251'. [ 194.373268][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.379620][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.408349][ T5685] loop2: detected capacity change from 0 to 128 [ 196.522073][ T5685] EXT4-fs (loop2): Test dummy encryption mode enabled [ 196.523484][ T4257] EXT4-fs (loop4): unmounting filesystem. [ 196.544202][ T5688] loop0: detected capacity change from 0 to 128 [ 196.928928][ T5688] EXT4-fs (loop0): Test dummy encryption mode enabled [ 197.173296][ T5685] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 197.213310][ T5685] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 197.278561][ T5688] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 197.325407][ T5688] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 197.351376][ T5701] netlink: 8 bytes leftover after parsing attributes in process `syz.5.259'. [ 197.360695][ T5701] netlink: 36 bytes leftover after parsing attributes in process `syz.5.259'. [ 197.371325][ T5701] netlink: 8 bytes leftover after parsing attributes in process `syz.5.259'. [ 197.380193][ T5701] netlink: 36 bytes leftover after parsing attributes in process `syz.5.259'. [ 199.128647][ T4255] EXT4-fs (loop0): unmounting filesystem. [ 199.317108][ T5722] loop3: detected capacity change from 0 to 512 [ 199.352143][ T5725] loop5: detected capacity change from 0 to 1024 [ 199.403391][ T5725] EXT4-fs: Ignoring removed nobh option [ 199.441934][ T5725] EXT4-fs: Ignoring removed bh option [ 199.509514][ T5725] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 199.665505][ T5722] EXT4-fs (loop3): 1 orphan inode deleted [ 199.802421][ T5722] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 200.166250][ T5725] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 200.316887][ T5113] __quota_error: 25 callbacks suppressed [ 200.316904][ T5113] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 200.332642][ T5113] EXT4-fs error (device loop3): ext4_release_dquot:6850: comm kworker/u4:19: Failed to release dquot type 1 [ 200.393032][ T5722] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.684748][ T5738] loop0: detected capacity change from 0 to 2048 [ 200.733834][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 201.514578][ T5738] loop0: p1 < > p3 [ 201.552922][ T5738] loop0: p3 size 134217728 extends beyond EOD, truncated [ 201.552982][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 201.692643][ T3623] loop0: p1 < > p3 [ 201.713027][ T3623] loop0: p3 size 134217728 extends beyond EOD, truncated [ 202.333220][ T26] audit: type=1800 audit(1749763412.555:95): pid=5733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.264" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 202.822831][ T5761] loop2: detected capacity change from 0 to 512 [ 204.316863][ T5747] lo speed is unknown, defaulting to 1000 [ 204.492408][ T5761] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 204.501790][ T5761] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 205.289859][ T4913] EXT4-fs (loop5): unmounting filesystem. [ 205.408313][ T5349] udevd[5349]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 205.455559][ T5387] udevd[5387]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 205.665647][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 205.699918][ T5387] udevd[5387]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 205.715879][ T5349] udevd[5349]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 206.016200][ T5801] loop5: detected capacity change from 0 to 128 [ 206.193758][ T5801] EXT4-fs (loop5): Test dummy encryption mode enabled [ 206.310211][ T5801] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 206.391776][ T5801] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 207.574721][ T5813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.274'. [ 207.922946][ T5825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.276'. [ 208.128772][ T5830] siw: device registration error -23 [ 208.246357][ T4913] EXT4-fs (loop5): unmounting filesystem. [ 210.497457][ T5846] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 210.617036][ T5848] loop0: detected capacity change from 0 to 512 [ 210.724885][ T5848] EXT4-fs (loop0): Test dummy encryption mode enabled [ 210.731728][ T5848] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 210.960431][ T5854] loop3: detected capacity change from 0 to 512 [ 211.113259][ T5848] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002] [ 211.121318][ T5848] System zones: 1-12 [ 211.197915][ T5848] EXT4-fs (loop0): 1 truncate cleaned up [ 211.203647][ T5848] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 211.264942][ T5854] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 211.274408][ T5854] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.340658][ T5854] overlayfs: unrecognized mount option "ocessed 0 insns (limit 1000000) max_states_per_insn 0 total_states 0 peak_states 0 mark_read 0 [ 211.340658][ T5854] " or missing value [ 211.392468][ T5859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.283'. [ 211.401394][ T5859] netlink: 36 bytes leftover after parsing attributes in process `syz.2.283'. [ 211.441402][ T5859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.283'. [ 211.492465][ T5859] netlink: 36 bytes leftover after parsing attributes in process `syz.2.283'. [ 211.511606][ T5853] loop4: detected capacity change from 0 to 2048 [ 211.659862][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 211.840861][ T5868] loop2: detected capacity change from 0 to 128 [ 211.930501][ T5871] loop5: detected capacity change from 0 to 512 [ 212.093465][ T5868] EXT4-fs (loop2): Test dummy encryption mode enabled [ 212.206044][ T5871] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 212.215388][ T5871] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 212.363814][ T5387] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 212.662572][ T5868] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 212.774095][ T5868] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 214.348128][ T4913] EXT4-fs (loop5): unmounting filesystem. [ 214.355197][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 214.765727][ T5900] loop3: detected capacity change from 0 to 1024 [ 214.772986][ T5900] EXT4-fs: Ignoring removed nobh option [ 214.778562][ T5900] EXT4-fs: Ignoring removed bh option [ 214.802620][ T5900] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 215.799464][ T5897] loop2: detected capacity change from 0 to 512 [ 216.235645][ T5897] EXT4-fs (loop2): 1 orphan inode deleted [ 216.243761][ T4381] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 216.296409][ T5897] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 216.306035][ T4381] EXT4-fs error (device loop2): ext4_release_dquot:6850: comm kworker/u4:10: Failed to release dquot type 1 [ 216.317755][ T5897] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.329906][ T5900] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 217.806026][ T5915] lo speed is unknown, defaulting to 1000 [ 218.652722][ T5923] overlayfs: missing 'lowerdir' [ 218.703955][ T5923] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 218.776308][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 218.931323][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 219.075064][ T5926] loop3: detected capacity change from 0 to 512 [ 219.086738][ T5926] EXT4-fs (loop3): Test dummy encryption mode enabled [ 219.093732][ T5926] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 219.121124][ T5926] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002] [ 219.129494][ T5926] System zones: 1-12 [ 219.143093][ T5926] EXT4-fs (loop3): 1 truncate cleaned up [ 219.148811][ T5926] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 219.820245][ T5938] loop5: detected capacity change from 0 to 2048 [ 219.958950][ T5938] loop5: p1 < > p3 [ 219.967539][ T5938] loop5: p3 size 134217728 extends beyond EOD, truncated [ 220.113411][ T5947] loop4: detected capacity change from 0 to 512 [ 220.174574][ T4255] EXT4-fs (loop0): unmounting filesystem. [ 220.238675][ T5947] EXT4-fs (loop4): 1 orphan inode deleted [ 220.253770][ T4891] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 220.304259][ T5947] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 220.318709][ T5947] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.363863][ T4891] EXT4-fs error (device loop4): ext4_release_dquot:6850: comm kworker/u4:16: Failed to release dquot type 1 [ 220.448627][ T5954] loop0: detected capacity change from 0 to 512 [ 220.906907][ T5954] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 220.916185][ T5954] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 222.163147][ T4257] EXT4-fs (loop4): unmounting filesystem. [ 222.470293][ T5961] lo speed is unknown, defaulting to 1000 [ 222.888858][ T4255] EXT4-fs (loop0): unmounting filesystem. [ 223.243488][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.301'. [ 223.849149][ T5976] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 223.858697][ T5976] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 223.868338][ T5976] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 224.231211][ T5983] lo speed is unknown, defaulting to 1000 [ 224.573995][ T3623] loop5: p1 < > p3 [ 224.657041][ T3623] loop5: p3 size 134217728 extends beyond EOD, truncated [ 227.517701][ T5992] lo speed is unknown, defaulting to 1000 [ 227.749571][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 228.624505][ T6020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.311'. [ 229.360122][ T6020] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 229.369603][ T6020] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 229.379741][ T6020] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 229.465950][ T3623] loop5: p1 < > p3 [ 229.471002][ T3623] loop5: p3 size 134217728 extends beyond EOD, truncated [ 229.704338][ T6034] loop0: detected capacity change from 0 to 512 [ 229.722756][ T6031] loop4: detected capacity change from 0 to 512 [ 229.805765][ T6035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.315'. [ 231.720196][ T6034] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 231.730216][ T6034] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 232.090504][ T6031] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 232.099641][ T6031] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.116190][ T6031] overlayfs: failed to resolve './bus': -2 [ 233.430094][ T4255] EXT4-fs (loop0): unmounting filesystem. [ 233.777479][ T4257] EXT4-fs (loop4): unmounting filesystem. [ 233.806311][ T6044] lo speed is unknown, defaulting to 1000 [ 234.033542][ T6067] loop2: detected capacity change from 0 to 512 [ 234.541053][ T6067] EXT4-fs (loop2): 1 orphan inode deleted [ 234.553739][ T4545] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 234.676778][ T4545] EXT4-fs error (device loop2): ext4_release_dquot:6850: comm kworker/u4:14: Failed to release dquot type 1 [ 234.691144][ T6067] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 234.761780][ T6067] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.214301][ T6092] siw: device registration error -23 [ 236.319725][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 238.451172][ T6113] siw: device registration error -23 [ 238.737669][ T6119] loop0: detected capacity change from 0 to 512 [ 238.934040][ T6119] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 238.943432][ T6119] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 239.788992][ T6128] loop3: detected capacity change from 0 to 512 [ 239.872376][ T6128] EXT4-fs (loop3): 1 orphan inode deleted [ 239.883388][ T4317] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 239.914185][ T6128] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 239.927886][ T4317] EXT4-fs error (device loop3): ext4_release_dquot:6850: comm kworker/u4:7: Failed to release dquot type 1 [ 239.985984][ T6128] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.120282][ T4255] EXT4-fs (loop0): unmounting filesystem. [ 241.128502][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 242.203940][ T6150] siw: device registration error -23 [ 245.863481][ T6184] loop2: detected capacity change from 0 to 512 [ 246.805572][ T6187] device bridge0 entered promiscuous mode [ 246.841657][ T6187] bridge0: port 3(macsec1) entered blocking state [ 246.860439][ T6187] bridge0: port 3(macsec1) entered disabled state [ 246.921375][ T6187] device bridge0 left promiscuous mode [ 247.084208][ T6184] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 247.093951][ T6184] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.094331][ T6198] loop4: detected capacity change from 0 to 512 [ 247.146478][ T6179] overlayfs: unrecognized mount option "t:0 prog->len:3) [ 247.146478][ T6179] verification time 466 usec [ 247.146478][ T6179] stack depth 0 [ 247.146478][ T6179] processed 0 insns (limit 1000000) max_states_per_insn 0 total_states 0 peak_states 0 mark_read 0 [ 247.146478][ T6179] " or missing value [ 247.450391][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 247.542217][ T6198] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 247.551683][ T6198] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 247.930604][ T4264] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 247.940888][ T4264] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 247.949387][ T4264] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 247.957847][ T4264] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 247.967543][ T4264] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 247.978785][ T4264] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 248.149468][ T6203] lo speed is unknown, defaulting to 1000 [ 248.477193][ T5113] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.687860][ T4257] EXT4-fs (loop4): unmounting filesystem. [ 249.966284][ T5113] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.042486][ T4264] Bluetooth: hci0: command 0x0409 tx timeout [ 250.366278][ T6235] loop3: detected capacity change from 0 to 2048 [ 250.409724][ T5113] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.433558][ T6235] loop3: p1 < > p3 [ 250.446001][ T6235] loop3: p3 size 134217728 extends beyond EOD, truncated [ 250.535691][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.350'. [ 251.391804][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.353'. [ 251.581966][ T5113] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.084023][ T6246] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 252.093498][ T6246] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 252.103179][ T6246] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 252.235445][ T6250] device bridge1 entered promiscuous mode [ 252.312354][ T4264] Bluetooth: hci0: command 0x041b tx timeout [ 252.649872][ T6203] chnl_net:caif_netlink_parms(): no params data found [ 252.801661][ T5388] udevd[5388]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 252.815566][ T5349] udevd[5349]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 253.339651][ T6259] loop3: detected capacity change from 0 to 128 [ 255.286418][ T4264] Bluetooth: hci0: command 0x040f tx timeout [ 256.287804][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.301244][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.331532][ T6259] EXT4-fs: error -4 creating inode table initialization thread [ 256.339707][ T6259] EXT4-fs (loop3): mount failed [ 256.657812][ T6203] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.677399][ T6203] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.706714][ T6275] loop4: detected capacity change from 0 to 128 [ 256.706825][ T6203] device bridge_slave_0 entered promiscuous mode [ 256.737933][ T6203] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.751287][ T6277] loop2: detected capacity change from 0 to 512 [ 256.836930][ T6279] loop3: detected capacity change from 0 to 512 [ 256.883110][ T6275] EXT4-fs (loop4): Test dummy encryption mode enabled [ 256.946590][ T6203] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.080987][ T6279] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 257.090428][ T6279] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 257.119323][ T6275] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 257.230303][ T6277] EXT4-fs (loop2): 1 orphan inode deleted [ 257.239192][ T5127] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 257.297276][ T6203] device bridge_slave_1 entered promiscuous mode [ 257.313138][ T6275] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 257.332354][ T4252] Bluetooth: hci0: command 0x0419 tx timeout [ 257.373395][ T5127] EXT4-fs error (device loop2): ext4_release_dquot:6850: comm kworker/u4:24: Failed to release dquot type 1 [ 257.413703][ T6277] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 257.660776][ T6277] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.777943][ T6203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.800235][ T6203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.008400][ T4257] EXT4-fs (loop4): unmounting filesystem. [ 259.192151][ T6203] team0: Port device team_slave_0 added [ 259.198764][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 259.417313][ T6203] team0: Port device team_slave_1 added [ 259.507309][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.364'. [ 261.072655][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 261.078842][ T6315] loop0: detected capacity change from 0 to 2048 [ 261.766200][ T6203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.783541][ T6203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.815023][ T6343] loop3: detected capacity change from 0 to 512 [ 261.905093][ T6343] EXT4-fs: Ignoring removed oldalloc option [ 261.911051][ T6343] EXT4-fs: Ignoring removed mblk_io_submit option [ 261.988546][ T6203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.045580][ T6343] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 262.200016][ T6343] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.367: bg 0: block 64: padding at end of block bitmap is not set [ 262.225314][ T6203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.272325][ T6203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.321099][ T6343] Quota error (device loop3): write_blk: dquota write failed [ 262.369273][ T6343] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 262.404966][ T6368] loop4: detected capacity change from 0 to 128 [ 262.440975][ T6203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.463722][ T6368] EXT4-fs (loop4): Test dummy encryption mode enabled [ 262.474740][ T6343] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.367: Failed to acquire dquot type 0 [ 262.504083][ T6368] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 262.556657][ T6368] ext4 filesystem being mounted at /73/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 262.583805][ T6343] EXT4-fs (loop3): 1 truncate cleaned up [ 262.636132][ T6343] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 262.776421][ T6348] lo speed is unknown, defaulting to 1000 [ 262.836017][ T6203] device hsr_slave_0 entered promiscuous mode [ 262.846967][ T6371] loop0: detected capacity change from 0 to 8192 [ 263.050781][ T6371] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 263.576172][ T6203] device hsr_slave_1 entered promiscuous mode [ 263.603055][ T6203] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.713328][ T6203] Cannot create hsr debugfs directory [ 263.960419][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 264.091676][ T4257] EXT4-fs (loop4): unmounting filesystem. [ 264.574031][ T6379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.371'. [ 264.583035][ T6380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.371'. [ 264.619530][ T6383] tipc: Started in network mode [ 264.638204][ T6383] tipc: Node identity 4, cluster identity 4711 [ 264.654139][ T6383] tipc: Node number set to 4 [ 264.881443][ T6388] loop4: detected capacity change from 0 to 512 [ 265.137534][ T6388] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 265.146889][ T6388] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 267.393395][ T4257] EXT4-fs (loop4): unmounting filesystem. [ 267.567668][ T6404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.376'. [ 269.040038][ T6404] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 269.050012][ T6404] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 269.059679][ T6404] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 269.550180][ T6412] loop4: detected capacity change from 0 to 2048 [ 269.903101][ T6412] loop4: p1 < > p3 [ 269.942456][ T6412] loop4: p3 size 134217728 extends beyond EOD, truncated [ 269.969715][ T6422] loop3: detected capacity change from 0 to 128 [ 270.019925][ T6422] EXT4-fs (loop3): Test dummy encryption mode enabled [ 270.048460][ T6422] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 270.062707][ T6422] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 271.207538][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 271.229072][ T5349] udevd[5349]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 271.250952][ T5388] udevd[5388]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 271.257661][ T6438] loop4: detected capacity change from 0 to 8192 [ 272.303923][ T6203] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 272.473595][ T5113] device hsr_slave_0 left promiscuous mode [ 272.577466][ T5113] device hsr_slave_1 left promiscuous mode [ 272.696502][ T5113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.716613][ T5113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.819392][ T5113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.859272][ T5113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.059003][ T5113] device bridge_slave_1 left promiscuous mode [ 273.224407][ T5113] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.932817][ T5113] device bridge_slave_0 left promiscuous mode [ 273.939170][ T5113] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.057164][ T5113] device veth1_macvtap left promiscuous mode [ 274.063269][ T5113] device veth0_macvtap left promiscuous mode [ 274.069360][ T5113] device veth1_vlan left promiscuous mode [ 274.082386][ T5113] device veth0_vlan left promiscuous mode [ 275.685051][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.390'. [ 276.784522][ T4252] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 276.799225][ T4252] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 276.812009][ T4252] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 277.003245][ T4263] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 277.014508][ T4263] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 277.021745][ T4263] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 277.186300][ T6489] loop3: detected capacity change from 0 to 2048 [ 277.267074][ T6489] loop3: p1 < > p3 [ 277.273252][ T6489] loop3: p3 size 134217728 extends beyond EOD, truncated [ 277.506529][ T5349] udevd[5349]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 277.525692][ T5388] udevd[5388]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 277.627452][ T5113] team0 (unregistering): Port device team_slave_1 removed [ 277.725759][ T5113] team0 (unregistering): Port device team_slave_0 removed [ 277.807068][ T5113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.811561][ T6492] loop3: detected capacity change from 0 to 8192 [ 278.104132][ T5113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.092368][ T4264] Bluetooth: hci5: command 0x0409 tx timeout [ 280.226604][ T5113] bond0 (unregistering): Released all slaves [ 280.318084][ T6203] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 280.349766][ T6203] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 280.370512][ T6203] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 280.431141][ T6478] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 280.483397][ T6478] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 280.552718][ T6478] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 280.575202][ T6484] lo speed is unknown, defaulting to 1000 [ 280.588241][ T6504] loop3: detected capacity change from 0 to 128 [ 280.627035][ T6504] EXT4-fs (loop3): Test dummy encryption mode enabled [ 280.696621][ T6504] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 280.705629][ T6504] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 281.206091][ T4264] Bluetooth: hci5: command 0x041b tx timeout [ 281.601918][ T6203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.757174][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 282.076982][ T6513] lo speed is unknown, defaulting to 1000 [ 282.437577][ T6203] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.543947][ T6203] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 282.602094][ T6203] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 283.322353][ T4263] Bluetooth: hci5: command 0x040f tx timeout [ 283.380509][ T6524] netlink: 72 bytes leftover after parsing attributes in process `syz.0.400'. [ 283.393607][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 283.402031][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 283.428530][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 283.439749][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 283.485826][ T4545] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.493008][ T4545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.552948][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 283.573034][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 283.604091][ T4545] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.611260][ T4545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.643555][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 283.663751][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 283.683846][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 283.712938][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 283.732349][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 283.758009][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 283.777038][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 283.790779][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 283.805183][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 283.830334][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 283.854263][ T6527] netlink: 72 bytes leftover after parsing attributes in process `syz.0.400'. [ 284.025300][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 284.041147][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 284.083591][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 284.125205][ T6484] chnl_net:caif_netlink_parms(): no params data found [ 284.237353][ T6545] loop0: detected capacity change from 0 to 2048 [ 284.249509][ T5113] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.318263][ T6545] loop0: p1 < > p3 [ 284.328366][ T6545] loop0: p3 size 134217728 extends beyond EOD, truncated [ 284.362372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 284.418040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 284.508146][ T5113] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.588705][ T6203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.609687][ T5388] udevd[5388]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 284.639184][ T5349] udevd[5349]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 284.656831][ T5113] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.807464][ T6556] device bridge1 entered promiscuous mode [ 285.612563][ T4264] Bluetooth: hci5: command 0x0419 tx timeout [ 286.047794][ T6565] loop0: detected capacity change from 0 to 512 [ 286.095267][ T5113] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.299451][ T6484] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.369302][ T6484] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.381859][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.406'. [ 287.400242][ T6565] EXT4-fs (loop0): 1 orphan inode deleted [ 287.413539][ T5131] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 287.418908][ T6484] device bridge_slave_0 entered promiscuous mode [ 287.443925][ T5131] EXT4-fs error (device loop0): ext4_release_dquot:6850: comm kworker/u4:26: Failed to release dquot type 1 [ 287.456964][ T6565] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 287.483247][ T6484] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.497091][ T6484] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.509459][ T6565] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.709210][ T6484] device bridge_slave_1 entered promiscuous mode [ 291.057871][ T6580] device bridge2 entered promiscuous mode [ 291.188419][ T4255] EXT4-fs (loop0): unmounting filesystem. [ 291.283014][ T5113] tipc: Left network mode [ 291.285083][ T6484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.344372][ T6484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.622022][ T6606] netlink: 72 bytes leftover after parsing attributes in process `syz.4.410'. [ 291.642554][ T6609] netlink: 72 bytes leftover after parsing attributes in process `syz.4.410'. [ 292.473736][ T6484] team0: Port device team_slave_0 added [ 292.547680][ T6484] team0: Port device team_slave_1 added [ 292.573815][ T5129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 292.599677][ T5129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 292.756094][ T6484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.771170][ T6484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.840763][ T6484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.493563][ T6484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.530373][ T6484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.622315][ T6484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.736979][ T5139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 293.759617][ T5139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 293.792707][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 293.821079][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 293.868674][ T6636] loop0: detected capacity change from 0 to 2048 [ 293.882802][ T6203] device veth0_vlan entered promiscuous mode [ 293.896225][ T6203] device veth1_vlan entered promiscuous mode [ 293.995683][ T6636] loop0: p1 < > p3 [ 294.289717][ T6484] device hsr_slave_0 entered promiscuous mode [ 294.637786][ T6636] loop0: p3 size 134217728 extends beyond EOD, truncated [ 294.796205][ T6484] device hsr_slave_1 entered promiscuous mode [ 294.816671][ T6484] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.862441][ T6484] Cannot create hsr debugfs directory [ 294.880443][ T6644] loop4: detected capacity change from 0 to 512 [ 294.942846][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 294.982510][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 295.000468][ T6644] EXT4-fs (loop4): 1 orphan inode deleted [ 295.026776][ T5116] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 295.037282][ T6644] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 295.062338][ T5116] EXT4-fs error (device loop4): ext4_release_dquot:6850: comm kworker/u4:20: Failed to release dquot type 1 [ 295.096249][ T6644] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.297769][ T6595] udevd[6595]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 295.309702][ T6203] device veth0_macvtap entered promiscuous mode [ 295.318588][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 295.329057][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 295.338067][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 295.367541][ T6607] udevd[6607]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 296.124756][ T6595] udevd[6595]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 296.140442][ T6203] device veth1_macvtap entered promiscuous mode [ 296.141863][ T6657] loop3: detected capacity change from 0 to 128 [ 296.162547][ T6607] udevd[6607]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 296.182147][ T6655] device bridge2 entered promiscuous mode [ 296.191834][ T5139] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 296.234592][ T6657] EXT4-fs (loop3): Test dummy encryption mode enabled [ 296.266345][ T4257] EXT4-fs (loop4): unmounting filesystem. [ 296.356948][ T6657] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 296.370401][ T6657] ext4 filesystem being mounted at /100/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 296.632012][ T6203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.719735][ T6203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.798085][ T6203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.825337][ T6203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.856089][ T6203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.873649][ T6203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.102602][ T6203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.114783][ T6203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.209711][ T6203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.563612][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 297.574037][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 297.586539][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 297.642534][ T6203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.660161][ T6203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.688585][ T6203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.732569][ T6203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.751540][ T6203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.766190][ T6203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.856321][ T6203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.888894][ T6203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.930985][ T6203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.984902][ T6683] netlink: 72 bytes leftover after parsing attributes in process `syz.3.421'. [ 298.154933][ T6685] netlink: 72 bytes leftover after parsing attributes in process `syz.3.421'. [ 298.261761][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 298.325170][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 298.647146][ T6203] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.678751][ T6203] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.732356][ T6203] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.741105][ T6203] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.808554][ T6698] loop3: detected capacity change from 0 to 512 [ 298.903458][ T6695] loop4: detected capacity change from 0 to 2048 [ 298.917927][ T6698] EXT4-fs (loop3): 1 orphan inode deleted [ 298.924431][ T6698] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 298.942527][ T33] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 298.954990][ T6698] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.958727][ T5113] device hsr_slave_0 left promiscuous mode [ 298.992661][ T33] EXT4-fs error (device loop3): ext4_release_dquot:6850: comm kworker/u4:2: Failed to release dquot type 1 [ 299.020173][ T6695] loop4: p1 < > p3 [ 299.032552][ T5113] device hsr_slave_1 left promiscuous mode [ 299.153602][ T6695] loop4: p3 size 134217728 extends beyond EOD, truncated [ 299.182541][ T5113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.233870][ T5113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.262798][ T5113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.270286][ T5113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.560402][ T5113] device bridge_slave_1 left promiscuous mode [ 299.955654][ T5113] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.995445][ T5113] device bridge_slave_0 left promiscuous mode [ 300.001681][ T5113] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.047677][ T5113] device veth1_macvtap left promiscuous mode [ 300.063975][ T5113] device veth0_macvtap left promiscuous mode [ 300.081641][ T5113] device veth1_vlan left promiscuous mode [ 300.102905][ T5113] device veth0_vlan left promiscuous mode [ 300.116735][ T6607] udevd[6607]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 300.144657][ T6601] udevd[6601]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 301.631291][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.428'. [ 302.330810][ T6728] loop0: detected capacity change from 0 to 128 [ 302.350246][ T6728] EXT4-fs (loop0): Test dummy encryption mode enabled [ 302.378963][ T6728] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 302.388399][ T6728] ext4 filesystem being mounted at /109/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 302.501405][ T5113] team0 (unregistering): Port device team_slave_1 removed [ 302.544770][ T5113] team0 (unregistering): Port device team_slave_0 removed [ 302.598844][ T5113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.645235][ T5113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.603744][ T5113] bond0 (unregistering): Released all slaves [ 303.744784][ T6725] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 303.754337][ T6725] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 303.763978][ T6725] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 303.879954][ T6484] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 303.898621][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 303.910596][ T4255] EXT4-fs (loop0): unmounting filesystem. [ 303.942631][ T6484] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 303.993259][ T6484] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 304.043929][ T6484] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 304.051892][ T4423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.062723][ T4423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.104811][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 304.136949][ T4423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.170208][ T4423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.182068][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 304.203068][ T6741] loop0: detected capacity change from 0 to 128 [ 304.219321][ T6740] netlink: 72 bytes leftover after parsing attributes in process `syz.3.432'. [ 304.332010][ T6742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.430'. [ 304.896072][ T6741] EXT4-fs (loop0): Test dummy encryption mode enabled [ 304.964142][ T6741] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 305.077478][ T6741] ext4 filesystem being mounted at /110/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 305.210760][ T6484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.563764][ T6484] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.575792][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 307.586091][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 307.594420][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 307.603567][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 307.613270][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.620412][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.630780][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 307.735031][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 307.773406][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 307.781960][ T4423] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.789133][ T4423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.831924][ T6771] loop4: detected capacity change from 0 to 2048 [ 307.852423][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 307.882863][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 307.900272][ T4255] EXT4-fs (loop0): unmounting filesystem. [ 307.935251][ T6771] loop4: p1 < > p3 [ 307.961625][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 307.970728][ T6771] loop4: p3 size 134217728 extends beyond EOD, truncated [ 307.999790][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 308.062746][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 308.101870][ T6484] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 308.121822][ T6775] loop0: detected capacity change from 0 to 128 [ 308.170051][ T6775] EXT4-fs (loop0): Test dummy encryption mode enabled [ 308.178287][ T6484] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 308.258253][ T6775] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 308.304947][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 308.308047][ T6775] ext4 filesystem being mounted at /111/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 308.334814][ T4264] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 308.353613][ T4264] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 308.362024][ T4264] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 308.370807][ T4264] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 308.382809][ T4264] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 308.390178][ T4264] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 308.403010][ T6771] loop4: detected capacity change from 0 to 1024 [ 308.411210][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 308.423376][ T6607] udevd[6607]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 308.431317][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 308.438386][ T6601] udevd[6601]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 308.441867][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 308.460376][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 308.469274][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 308.679536][ T6607] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 308.704557][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 309.311709][ T6779] lo speed is unknown, defaulting to 1000 [ 309.424918][ T4255] EXT4-fs (loop0): unmounting filesystem. [ 309.886743][ T6797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.439'. [ 310.048683][ T5113] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.445286][ T4264] Bluetooth: hci0: command 0x0409 tx timeout [ 310.467639][ T6797] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 310.477921][ T6797] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 310.487604][ T6797] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 310.527069][ T6779] chnl_net:caif_netlink_parms(): no params data found [ 310.704413][ T5113] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.787190][ T6814] netlink: 72 bytes leftover after parsing attributes in process `syz.0.441'. [ 310.822485][ T6817] netlink: 72 bytes leftover after parsing attributes in process `syz.0.441'. [ 310.873476][ T5113] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.922716][ T6802] lo speed is unknown, defaulting to 1000 [ 310.951360][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 310.968475][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 311.186799][ T5113] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.228295][ T6484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.109118][ T6779] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.146861][ T6779] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.193385][ T6779] device bridge_slave_0 entered promiscuous mode [ 312.220582][ T6779] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.249866][ T6779] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.273594][ T6779] device bridge_slave_1 entered promiscuous mode [ 312.532655][ T4264] Bluetooth: hci0: command 0x041b tx timeout [ 312.700728][ T6779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.810922][ T6779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.408780][ T6843] device bridge3 entered promiscuous mode [ 313.996440][ T6779] team0: Port device team_slave_0 added [ 314.042550][ T6779] team0: Port device team_slave_1 added [ 314.262732][ T6779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.269850][ T6779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.462328][ T6779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.541590][ T6779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.597345][ T6779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.632510][ T4264] Bluetooth: hci0: command 0x040f tx timeout [ 314.704940][ T6779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.750973][ T6779] device hsr_slave_0 entered promiscuous mode [ 314.990953][ T6779] device hsr_slave_1 entered promiscuous mode [ 315.118118][ T6779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.287580][ T6779] Cannot create hsr debugfs directory [ 315.760037][ T6868] loop3: detected capacity change from 0 to 2048 [ 315.834441][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 315.845917][ T6868] loop3: p1 < > p3 [ 315.850381][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 315.852110][ T6868] loop3: p3 size 134217728 extends beyond EOD, truncated [ 316.033809][ T6872] netlink: 72 bytes leftover after parsing attributes in process `syz.0.450'. [ 316.150956][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.449'. [ 316.568657][ T6866] loop3: detected capacity change from 0 to 1024 [ 316.716342][ T4264] Bluetooth: hci0: command 0x0419 tx timeout [ 316.728159][ T6875] netlink: 72 bytes leftover after parsing attributes in process `syz.0.450'. [ 316.739999][ T6877] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 316.750442][ T6877] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 316.750691][ T6484] device veth0_vlan entered promiscuous mode [ 316.761449][ T6877] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 317.037684][ T6882] loop4: detected capacity change from 0 to 128 [ 317.087095][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.094968][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.105783][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 317.132895][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 317.141850][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 318.051925][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 318.600763][ T6484] device veth1_vlan entered promiscuous mode [ 318.895388][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 319.033877][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 319.260344][ T6900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.454'. [ 319.297712][ T6484] device veth0_macvtap entered promiscuous mode [ 319.810761][ T6899] loop0: detected capacity change from 0 to 512 [ 319.874888][ T6900] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 319.882481][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 319.884491][ T6900] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 319.901871][ T6900] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 320.226935][ T6899] EXT4-fs (loop0): 1 orphan inode deleted [ 320.274015][ T6899] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 320.313156][ T6899] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.349894][ T5110] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 320.370111][ T6484] device veth1_macvtap entered promiscuous mode [ 320.528065][ T5110] EXT4-fs error (device loop0): ext4_release_dquot:6850: comm kworker/u4:18: Failed to release dquot type 1 [ 320.601292][ T6484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.632292][ T6484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.705959][ T6484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.761091][ T6484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.774680][ T6484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.757299][ T6484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.821683][ T6484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.863947][ T6484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.903537][ T6484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.096794][ T6925] device bridge4 entered promiscuous mode [ 324.202861][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 324.211768][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 324.275390][ T6484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.283486][ T4255] EXT4-fs (loop0): unmounting filesystem. [ 324.286317][ T6484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.332408][ T6484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.355096][ T6484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.366307][ T6484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.377175][ T6484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.394077][ T6484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.414950][ T6484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.428396][ T6484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.609749][ T6937] netlink: 72 bytes leftover after parsing attributes in process `syz.3.461'. [ 324.625038][ T6939] netlink: 72 bytes leftover after parsing attributes in process `syz.3.461'. [ 324.636936][ T6484] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.711618][ T6948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.460'. [ 324.820218][ T6484] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.964909][ T6484] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.093700][ T6484] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.267563][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 325.286882][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 325.429592][ T6956] loop0: detected capacity change from 0 to 512 [ 325.441190][ T6954] loop3: detected capacity change from 0 to 2048 [ 325.457997][ T6948] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 325.471071][ T6948] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 325.482596][ T6948] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 325.600201][ T6954] loop3: p1 < > p3 [ 325.613573][ T6954] loop3: p3 size 134217728 extends beyond EOD, truncated [ 325.721244][ T6956] EXT4-fs (loop0): 1 orphan inode deleted [ 325.749696][ T5139] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 325.758259][ T6956] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 325.836712][ T6956] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.856195][ T5110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.871830][ T5139] EXT4-fs error (device loop0): ext4_release_dquot:6850: comm kworker/u4:30: Failed to release dquot type 1 [ 325.914446][ T5110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.098894][ T5113] device hsr_slave_0 left promiscuous mode [ 326.142654][ T5113] device hsr_slave_1 left promiscuous mode [ 326.150434][ T5113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.169831][ T5113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.183123][ T5113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.202419][ T5113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.246907][ T5113] device bridge_slave_1 left promiscuous mode [ 326.347545][ T5113] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.758478][ T5113] device bridge_slave_0 left promiscuous mode [ 326.837547][ T5113] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.984108][ T5113] device veth1_macvtap left promiscuous mode [ 326.991852][ T5113] device veth0_macvtap left promiscuous mode [ 327.010164][ T5113] device veth1_vlan left promiscuous mode [ 327.028493][ T5113] device veth0_vlan left promiscuous mode [ 328.145142][ T5113] team0 (unregistering): Port device team_slave_1 removed [ 328.208408][ T5113] team0 (unregistering): Port device team_slave_0 removed [ 328.272510][ T5113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.337879][ T5113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.290690][ T5113] bond0 (unregistering): Released all slaves [ 329.383871][ T5139] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 329.513462][ T4255] EXT4-fs (loop0): unmounting filesystem. [ 329.517795][ T4461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.668572][ T4461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.878705][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 331.028699][ T6779] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 331.295476][ T7013] loop7: detected capacity change from 0 to 512 [ 332.352026][ T7013] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 332.361477][ T7013] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 332.624446][ T6779] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 332.666887][ T7006] netlink: 72 bytes leftover after parsing attributes in process `syz.3.470'. [ 333.000615][ T6779] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 333.261151][ T6779] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 333.333831][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.473'. [ 333.939224][ T7034] loop4: detected capacity change from 0 to 2048 [ 333.955349][ T6607] udevd[6607]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 333.983408][ T6601] udevd[6601]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 334.098115][ T7037] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 334.110714][ T7037] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 334.120676][ T7037] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 334.381347][ T6484] EXT4-fs (loop7): unmounting filesystem. [ 334.413003][ T7034] loop4: p1 < > p3 [ 334.421330][ T7034] loop4: p3 size 134217728 extends beyond EOD, truncated [ 334.514936][ T7046] siw: device registration error -23 [ 334.904672][ T3623] loop4: p1 < > p3 [ 334.946699][ T3623] loop4: p3 size 134217728 extends beyond EOD, truncated [ 335.168471][ T6595] udevd[6595]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 335.187377][ T7052] loop7: detected capacity change from 0 to 512 [ 335.203190][ T6601] udevd[6601]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 335.256300][ T6779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.286015][ T6607] udevd[6607]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 335.295749][ T6595] udevd[6595]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 335.340521][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 335.359231][ T7052] EXT4-fs (loop7): 1 orphan inode deleted [ 335.382623][ T4381] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 335.422041][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 335.448771][ T7052] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 335.502758][ T4381] EXT4-fs error (device loop7): ext4_release_dquot:6850: comm kworker/u4:10: Failed to release dquot type 1 [ 335.531080][ T7052] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.535018][ T6779] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.789768][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 336.259400][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 336.272259][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 336.282340][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 336.291575][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 336.303962][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 336.312712][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 336.321943][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 336.330699][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 336.339697][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 336.348197][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 336.448725][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 336.472572][ T3639] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 336.512174][ T4381] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.521658][ T4381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.862336][ T3639] usb 5-1: Using ep0 maxpacket: 32 [ 336.932506][ T3639] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 336.953324][ T3639] usb 5-1: config 0 has no interface number 0 [ 336.961285][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 336.989215][ T3639] usb 5-1: config 0 interface 184 has no altsetting 0 [ 337.007422][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 337.009813][ T6484] EXT4-fs (loop7): unmounting filesystem. [ 337.048530][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 337.127194][ T4381] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.134409][ T4381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.176605][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 337.200189][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 337.293423][ T3639] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 337.306018][ T3639] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.328317][ T5139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 337.336823][ T3639] usb 5-1: Product: syz [ 337.341009][ T3639] usb 5-1: Manufacturer: syz [ 337.354109][ T3639] usb 5-1: SerialNumber: syz [ 337.354707][ T5139] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 337.419000][ T3639] usb 5-1: config 0 descriptor?? [ 337.436949][ T5139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 337.498821][ T5139] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 337.530049][ T5139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 337.539971][ T5139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 337.553439][ T5139] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 337.577459][ T6779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 337.638779][ T6779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 337.673994][ T5139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 337.688352][ T5139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 337.712429][ T4403] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 337.936492][ T4403] usb 8-1: config 1 interface 0 has no altsetting 0 [ 337.974655][ T4403] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 338.012360][ T4403] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.030543][ T3639] smsc75xx v1.0.0 [ 338.052330][ T3639] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 338.085923][ T4403] usb 8-1: Product: syz [ 338.090859][ T4403] usb 8-1: Manufacturer: syz [ 338.117033][ T3639] smsc75xx: probe of 5-1:0.184 failed with error -22 [ 338.152384][ T4403] usb 8-1: SerialNumber: syz [ 338.493600][ T7061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.528986][ T7061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.723559][ T7061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.792623][ T7061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.810070][ T4403] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 338.951655][ T4403] usb 8-1: USB disconnect, device number 2 [ 338.990822][ T4403] usblp0: removed [ 339.368692][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 339.409647][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 339.468078][ T6779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.584940][ T7110] loop3: detected capacity change from 0 to 1024 [ 339.625133][ T7110] EXT4-fs: Ignoring removed nobh option [ 339.631023][ T7110] EXT4-fs: Ignoring removed bh option [ 339.715664][ T7110] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 339.932447][ T4261] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 339.965382][ T26] audit: type=1326 audit(1749763550.205:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87d98e929 code=0x7ffc0000 [ 340.030576][ T7110] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 340.088848][ T26] audit: type=1326 audit(1749763550.245:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc87d98e929 code=0x7ffc0000 [ 340.134013][ T4261] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.158848][ T4261] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 340.252381][ T4261] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 340.318566][ T4261] usb 8-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 340.332292][ T26] audit: type=1326 audit(1749763550.255:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87d98e929 code=0x7ffc0000 [ 340.368968][ T4261] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 340.392574][ T4261] usb 8-1: Product: syz [ 340.396768][ T4261] usb 8-1: Manufacturer: syz [ 340.421889][ T26] audit: type=1326 audit(1749763550.255:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87d98e929 code=0x7ffc0000 [ 340.450794][ T4261] usb 8-1: SerialNumber: syz [ 340.481781][ T4261] usb 8-1: config 0 descriptor?? [ 340.559774][ T4261] radio-si470x 8-1:0.0: could not find interrupt in endpoint [ 340.578545][ T26] audit: type=1326 audit(1749763550.255:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc87d98e929 code=0x7ffc0000 [ 340.624658][ T4261] radio-si470x: probe of 8-1:0.0 failed with error -5 [ 340.668597][ T4261] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 340.732368][ T26] audit: type=1326 audit(1749763550.255:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87d98e929 code=0x7ffc0000 [ 340.847638][ T4261] usb 5-1: USB disconnect, device number 2 [ 340.871456][ T26] audit: type=1326 audit(1749763550.255:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87d98e929 code=0x7ffc0000 [ 340.966194][ T26] audit: type=1326 audit(1749763550.255:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fc87d98e929 code=0x7ffc0000 [ 341.019460][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 341.050854][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 341.062396][ T26] audit: type=1326 audit(1749763550.255:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87d98e929 code=0x7ffc0000 [ 341.117146][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 341.143961][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 341.163067][ T26] audit: type=1326 audit(1749763550.255:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87d98e929 code=0x7ffc0000 [ 341.210272][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 341.231048][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 341.280748][ T6779] device veth0_vlan entered promiscuous mode [ 341.327405][ T6779] device veth1_vlan entered promiscuous mode [ 341.342095][ T26] audit: type=1326 audit(1749763550.255:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc87d92ab19 code=0x7ffc0000 [ 341.371289][ T26] audit: type=1326 audit(1749763550.255:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87d98e929 code=0x7ffc0000 [ 341.395820][ T26] audit: type=1326 audit(1749763550.255:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87d98e929 code=0x7ffc0000 [ 341.468989][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 341.582131][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 341.702480][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 341.896143][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 342.285116][ T6779] device veth0_macvtap entered promiscuous mode [ 342.353936][ T6779] device veth1_macvtap entered promiscuous mode [ 342.430296][ T6779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.454170][ T6779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.471497][ T6779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.486656][ T6779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.497405][ T6779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.514280][ T6779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.541286][ T6779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.586600][ T5139] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 342.606894][ T5139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 342.635152][ T6779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.664895][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 342.671298][ T6779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.692287][ T4842] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 342.700129][ T6779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.716967][ T4294] usb 8-1: USB disconnect, device number 3 [ 342.718707][ T6779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.732318][ T4299] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 342.751871][ T6779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.785981][ T6779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.820813][ T6779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.858250][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 342.872315][ T4842] usb 1-1: Using ep0 maxpacket: 32 [ 342.888195][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 342.889940][ T4842] usb 1-1: config index 0 descriptor too short (expected 10245, got 18) [ 342.901704][ T6779] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.920753][ T6779] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.931696][ T4842] usb 1-1: config 208 has too many interfaces: 57, using maximum allowed: 32 [ 342.935952][ T6779] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.954950][ T6779] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.954950][ T4842] usb 1-1: config 208 has 1 interface, different from the descriptor's value: 57 [ 342.955007][ T4842] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 342.997298][ T4299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 343.014191][ T4299] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 343.024044][ T4842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.032570][ T4299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 343.053222][ T4299] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 343.074571][ T4842] gspca_main: sq930x-2.14.0 probing 041e:403c [ 343.089053][ T4299] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 343.098461][ T4299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.109468][ T4299] usb 5-1: config 0 descriptor?? [ 343.279350][ T7161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.352039][ T7161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.398388][ T4545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.421099][ T4545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.486329][ T4842] gspca_sq930x: reg_r 001f failed -71 [ 343.491875][ T4842] sq930x: probe of 1-1:208.0 failed with error -71 [ 343.506031][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 343.546422][ T4842] usb 1-1: USB disconnect, device number 2 [ 343.553165][ T4891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.561344][ T4891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.631360][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 343.981471][ T7190] loop6: detected capacity change from 0 to 512 [ 344.229073][ T7190] EXT4-fs (loop6): 1 orphan inode deleted [ 344.263213][ T7190] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 344.284506][ T7190] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.397243][ T4381] EXT4-fs error (device loop6): ext4_release_dquot:6850: comm kworker/u4:10: Failed to release dquot type 1 [ 345.532126][ T6779] EXT4-fs (loop6): unmounting filesystem. [ 345.640796][ T7163] syz.4.495 uses obsolete (PF_INET,SOCK_PACKET) [ 345.762492][ T4296] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 345.952418][ T4296] usb 4-1: Using ep0 maxpacket: 8 [ 345.970742][ T4296] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 346.018213][ T4296] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.059469][ T26] kauditd_printk_skb: 37 callbacks suppressed [ 346.059480][ T26] audit: type=1326 audit(1749763556.295:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7227 comm="syz.0.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87d98e929 code=0x7ffc0000 [ 346.103406][ T4299] hdpvr 5-1:0.0: unexpected answer of status request, len -71 [ 346.127784][ T4299] hdpvr 5-1:0.0: device init failed [ 346.148862][ T4296] usb 4-1: Product: syz [ 346.162701][ T4299] hdpvr: probe of 5-1:0.0 failed with error -12 [ 346.180569][ T4296] usb 4-1: Manufacturer: syz [ 346.192732][ T4296] usb 4-1: SerialNumber: syz [ 346.207462][ T26] audit: type=1326 audit(1749763556.325:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7227 comm="syz.0.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87d98e929 code=0x7ffc0000 [ 346.241345][ T4296] usb 4-1: config 0 descriptor?? [ 346.297468][ T26] audit: type=1326 audit(1749763556.325:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7227 comm="syz.0.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc87d98e929 code=0x7ffc0000 [ 346.308585][ T4299] usb 5-1: USB disconnect, device number 3 [ 346.388625][ T26] audit: type=1326 audit(1749763556.325:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7227 comm="syz.0.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87d98e929 code=0x7ffc0000 [ 346.811876][ T26] audit: type=1326 audit(1749763556.325:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7227 comm="syz.0.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87d98e929 code=0x7ffc0000 [ 346.840472][ C0] vkms_vblank_simulate: vblank timer overrun [ 347.013323][ T26] audit: type=1326 audit(1749763556.325:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7227 comm="syz.0.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc87d98e929 code=0x7ffc0000 [ 347.040033][ C0] vkms_vblank_simulate: vblank timer overrun [ 347.188770][ T26] audit: type=1326 audit(1749763556.325:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7227 comm="syz.0.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87d98e929 code=0x7ffc0000 [ 347.316289][ T26] audit: type=1326 audit(1749763556.325:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7227 comm="syz.0.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87d98e929 code=0x7ffc0000 [ 347.342086][ C0] vkms_vblank_simulate: vblank timer overrun [ 347.522741][ T26] audit: type=1326 audit(1749763556.325:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7227 comm="syz.0.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc87d98e929 code=0x7ffc0000 [ 347.590703][ T7254] netlink: 'syz.0.514': attribute type 1 has an invalid length. [ 347.628154][ T26] audit: type=1326 audit(1749763556.325:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7227 comm="syz.0.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87d98e929 code=0x7ffc0000 [ 348.516507][ T7265] siw: device registration error -23 [ 350.220914][ T7271] loop6: detected capacity change from 0 to 1024 [ 350.352052][ T7271] EXT4-fs: Ignoring removed nobh option [ 350.502000][ T7271] EXT4-fs: Ignoring removed bh option [ 350.717971][ T7271] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 350.925655][ T7284] siw: device registration error -23 [ 352.189743][ T7283] siw: device registration error -23 [ 352.315270][ T4296] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 352.363409][ T4296] gspca_sunplus: reg_w_riv err -32 [ 353.779576][ T7271] EXT4-fs: failed to create workqueue [ 353.784430][ T4296] sunplus: probe of 4-1:0.0 failed with error -32 [ 353.822447][ T7271] EXT4-fs (loop6): mount failed [ 353.860214][ T7291] tipc: Started in network mode [ 353.872370][ T7291] tipc: Node identity b6a8adadfc9c, cluster identity 4711 [ 353.889047][ T7291] tipc: Enabled bearer , priority 0 [ 353.930243][ T7290] tipc: Disabling bearer [ 353.998312][ T4842] usb 4-1: USB disconnect, device number 2 [ 354.377667][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.532'. [ 354.970876][ T7310] loop7: detected capacity change from 0 to 1024 [ 355.124775][ T7310] EXT4-fs: Invalid want_extra_isize 0 [ 355.190888][ T7297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.522'. [ 355.741071][ T7331] loop4: detected capacity change from 0 to 1024 [ 355.903380][ T7331] EXT4-fs: Ignoring removed nobh option [ 355.919746][ T7331] EXT4-fs: Ignoring removed bh option [ 355.979327][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.7.534'. [ 356.628706][ T7339] loop6: detected capacity change from 0 to 1024 [ 356.638843][ T7331] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 356.696691][ T7338] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 356.706177][ T7338] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 356.716070][ T7338] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 356.786352][ T7339] EXT4-fs: Ignoring removed nobh option [ 356.810956][ T7339] EXT4-fs: Ignoring removed bh option [ 356.837403][ T7331] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 356.966701][ T7339] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 357.296211][ T7353] netlink: 8 bytes leftover after parsing attributes in process `syz.7.535'. [ 357.997740][ T7353] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 358.007218][ T7353] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 358.016840][ T7353] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 358.133303][ T7339] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 358.249363][ T7352] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3841: comm syz.4.531: Allocating blocks 497-513 which overlap fs metadata [ 358.455910][ T7362] netlink: 8 bytes leftover after parsing attributes in process `syz.7.536'. [ 359.298580][ T7362] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 359.308138][ T7362] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 359.318350][ T7362] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 359.571978][ T7370] loop7: detected capacity change from 0 to 1024 [ 359.679271][ T7370] EXT4-fs: Ignoring removed nobh option [ 359.710831][ T7370] EXT4-fs: Ignoring removed bh option [ 359.730472][ T7370] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 359.873829][ T7370] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 359.948952][ T4257] EXT4-fs (loop4): unmounting filesystem. [ 360.057925][ T7368] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3841: comm syz.7.537: Allocating blocks 497-513 which overlap fs metadata [ 360.264699][ T7382] lo speed is unknown, defaulting to 1000 [ 360.386014][ T7368] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3841: comm syz.7.537: Allocating blocks 497-513 which overlap fs metadata [ 360.903790][ T7381] EXT4-fs (loop7): pa ffff888053a34a80: logic 0, phys. 113, len 25 [ 360.912163][ T7381] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:4881: group 0, free 23, pa_free 24 [ 361.043453][ T6779] EXT4-fs (loop6): unmounting filesystem. [ 361.189379][ T7384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.538'. [ 361.683171][ T7396] loop6: detected capacity change from 0 to 1024 [ 361.726550][ T7396] EXT4-fs: Ignoring removed nobh option [ 361.737241][ T7396] EXT4-fs: Ignoring removed bh option [ 361.746744][ T7396] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 361.846692][ T7398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.540'. [ 362.067537][ T7396] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 362.650124][ T6484] EXT4-fs (loop7): unmounting filesystem. [ 362.912776][ T7413] loop4: detected capacity change from 0 to 512 [ 363.043009][ T5110] ================================================================== [ 363.051120][ T5110] BUG: KASAN: use-after-free in ext4_find_extent+0xbcc/0xe00 [ 363.058522][ T5110] Read of size 4 at addr ffff88804f9ed018 by task kworker/u4:18/5110 [ 363.066612][ T5110] [ 363.068974][ T5110] CPU: 0 PID: 5110 Comm: kworker/u4:18 Not tainted 6.1.141-syzkaller #0 [ 363.077316][ T5110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 363.087427][ T5110] Workqueue: writeback wb_workfn (flush-7:6) [ 363.093467][ T5110] Call Trace: [ 363.096759][ T5110] [ 363.099700][ T5110] dump_stack_lvl+0x168/0x22e [ 363.104398][ T5110] ? __lock_acquire+0x7c50/0x7c50 [ 363.109442][ T5110] ? show_regs_print_info+0x12/0x12 [ 363.114753][ T5110] ? load_image+0x3b0/0x3b0 [ 363.119287][ T5110] ? __virt_addr_valid+0x465/0x540 [ 363.124421][ T5110] ? ext4_find_extent+0xbcc/0xe00 [ 363.129469][ T5110] print_report+0xa8/0x220 [ 363.133910][ T5110] kasan_report+0x10b/0x140 [ 363.138438][ T5110] ? ext4_find_extent+0xbcc/0xe00 [ 363.143483][ T5110] ext4_find_extent+0xbcc/0xe00 [ 363.148364][ T5110] ? arch_stack_walk+0x10c/0x140 [ 363.153324][ T5110] ext4_ext_map_blocks+0x27d/0x66d0 [ 363.158546][ T5110] ? stack_trace_save+0x98/0xe0 [ 363.163590][ T5110] ? __stack_depot_save+0x35/0x460 [ 363.168744][ T5110] ? ext4_ext_release+0x10/0x10 [ 363.173619][ T5110] ? rwsem_write_trylock+0x12f/0x1b0 [ 363.178931][ T5110] ? ext4_es_lookup_extent+0x443/0xb20 [ 363.184442][ T5110] ext4_map_blocks+0x9d1/0x1b60 [ 363.189323][ T5110] ? slab_pre_alloc_hook+0x59/0x310 [ 363.194555][ T5110] ? ext4_issue_zeroout+0x250/0x250 [ 363.199777][ T5110] ? rcu_is_watching+0x11/0xa0 [ 363.204569][ T5110] ? ext4_inode_journal_mode+0x18f/0x460 [ 363.210220][ T5110] ext4_writepages+0x1336/0x2e50 [ 363.215193][ T5110] ? ext4_read_folio+0x370/0x370 [ 363.220149][ T5110] ? __lock_acquire+0x13c0/0x7c50 [ 363.225200][ T5110] ? verify_lock_unused+0x140/0x140 [ 363.230433][ T5110] ? writeback_sb_inodes+0x441/0x17d0 [ 363.235837][ T5110] ? ext4_read_folio+0x370/0x370 [ 363.240791][ T5110] do_writepages+0x3b7/0x610 [ 363.245408][ T5110] ? __writepage+0x130/0x130 [ 363.250020][ T5110] ? writeback_sb_inodes+0x6e5/0x17d0 [ 363.255421][ T5110] ? __lock_acquire+0x7c50/0x7c50 [ 363.260465][ T5110] ? do_raw_spin_lock+0x11d/0x280 [ 363.265532][ T5110] __writeback_single_inode+0x156/0x1160 [ 363.271202][ T5110] writeback_sb_inodes+0xad8/0x17d0 [ 363.276433][ T5110] ? do_raw_spin_lock+0x11d/0x280 [ 363.281505][ T5110] ? queue_io+0x5a0/0x5a0 [ 363.285876][ T5110] ? rcu_is_watching+0x11/0xa0 [ 363.290669][ T5110] wb_writeback+0x468/0xd00 [ 363.295202][ T5110] ? percpu_ref_tryget+0x250/0x250 [ 363.300340][ T5110] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 363.306348][ T5110] ? _raw_spin_unlock_irq+0x1f/0x40 [ 363.311573][ T5110] wb_workfn+0x435/0xec0 [ 363.315864][ T5110] ? inode_wait_for_writeback+0x200/0x200 [ 363.321617][ T5110] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 363.327624][ T5110] ? read_lock_is_recursive+0x10/0x10 [ 363.333022][ T5110] ? _raw_spin_unlock_irq+0x1f/0x40 [ 363.338260][ T5110] ? process_one_work+0x7a1/0x1160 [ 363.343397][ T5110] process_one_work+0x898/0x1160 [ 363.348364][ T5110] ? worker_detach_from_pool+0x240/0x240 [ 363.354021][ T5110] ? _raw_spin_lock_irq+0xab/0xe0 [ 363.359077][ T5110] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 363.364491][ T5110] ? kthread_data+0x4b/0xc0 [ 363.369025][ T5110] worker_thread+0xaa2/0x1250 [ 363.373993][ T5110] kthread+0x29d/0x330 [ 363.378095][ T5110] ? worker_clr_flags+0x1a0/0x1a0 [ 363.383167][ T5110] ? kthread_blkcg+0xd0/0xd0 [ 363.387797][ T5110] ret_from_fork+0x1f/0x30 [ 363.392248][ T5110] [ 363.395278][ T5110] [ 363.397607][ T5110] The buggy address belongs to the physical page: [ 363.404059][ T5110] page:ffffea00013e7b40 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x4f9ed [ 363.414234][ T5110] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 363.421391][ T5110] raw: 00fff00000000000 dead000000000100 dead000000000122 0000000000000000 [ 363.429993][ T5110] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 363.438584][ T5110] page dumped because: kasan: bad access detected [ 363.445013][ T5110] page_owner tracks the page as freed [ 363.450384][ T5110] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 6469, tgid 6468 (syz.4.388), ts 274310931258, free_ts 275509502983 [ 363.468031][ T5110] post_alloc_hook+0x173/0x1a0 [ 363.472820][ T5110] get_page_from_freelist+0x1a26/0x1ac0 [ 363.478384][ T5110] __alloc_pages+0x1df/0x4e0 [ 363.482984][ T5110] __folio_alloc+0xe/0x30 [ 363.487334][ T5110] vma_alloc_folio+0x4a3/0x900 [ 363.492122][ T5110] shmem_alloc_and_acct_folio+0x42e/0xb60 [ 363.497868][ T5110] shmem_get_folio_gfp+0x1361/0x3400 [ 363.503190][ T5110] shmem_fault+0x1be/0x7b0 [ 363.507659][ T5110] __do_fault+0x13b/0x4e0 [ 363.512003][ T5110] handle_mm_fault+0x28ca/0x3e70 [ 363.516951][ T5110] __get_user_pages+0x3ff/0xeb0 [ 363.521828][ T5110] populate_vma_page_range+0x214/0x2b0 [ 363.527312][ T5110] __mm_populate+0x248/0x370 [ 363.531921][ T5110] vm_mmap_pgoff+0x203/0x2b0 [ 363.536533][ T5110] do_syscall_64+0x4c/0xa0 [ 363.540965][ T5110] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 363.546886][ T5110] page last free stack trace: [ 363.551569][ T5110] free_unref_page_prepare+0x8b4/0x9a0 [ 363.557062][ T5110] free_unref_page_list+0xbb/0x8e0 [ 363.562197][ T5110] release_pages+0x1f92/0x2200 [ 363.566980][ T5110] __pagevec_release+0x6d/0xe0 [ 363.571773][ T5110] shmem_undo_range+0x75b/0x2050 [ 363.576733][ T5110] shmem_evict_inode+0x248/0xa40 [ 363.581696][ T5110] evict+0x485/0x870 [ 363.585610][ T5110] __dentry_kill+0x431/0x650 [ 363.590214][ T5110] dentry_kill+0xb8/0x290 [ 363.594555][ T5110] dput+0xfa/0x1d0 [ 363.598287][ T5110] __fput+0x5e0/0x920 [ 363.602283][ T5110] task_work_run+0x1ca/0x250 [ 363.606883][ T5110] do_exit+0x936/0x2400 [ 363.611054][ T5110] do_group_exit+0x217/0x2d0 [ 363.615661][ T5110] get_signal+0x1272/0x1350 [ 363.620185][ T5110] arch_do_signal_or_restart+0xb0/0x1230 [ 363.625847][ T5110] [ 363.628178][ T5110] Memory state around the buggy address: [ 363.633822][ T5110] ffff88804f9ecf00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 363.641907][ T5110] ffff88804f9ecf80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 363.649981][ T5110] >ffff88804f9ed000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 363.658056][ T5110] ^ [ 363.663007][ T5110] ffff88804f9ed080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 363.671093][ T5110] ffff88804f9ed100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 363.679172][ T5110] ================================================================== [ 363.746434][ T5110] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 363.753683][ T5110] CPU: 0 PID: 5110 Comm: kworker/u4:18 Not tainted 6.1.141-syzkaller #0 [ 363.762018][ T5110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 363.767472][ T7413] EXT4-fs (loop4): 1 orphan inode deleted [ 363.767500][ T7413] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 363.767774][ T7413] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.797014][ T5110] Workqueue: writeback wb_workfn (flush-7:6) [ 363.803008][ T5110] Call Trace: [ 363.806393][ T5110] [ 363.809313][ T5110] dump_stack_lvl+0x168/0x22e [ 363.814079][ T5110] ? memcpy+0x3c/0x60 [ 363.818098][ T5110] ? show_regs_print_info+0x12/0x12 [ 363.823301][ T5110] ? load_image+0x3b0/0x3b0 [ 363.827799][ T5110] panic+0x2c9/0x710 [ 363.831684][ T5110] ? bpf_jit_dump+0xd0/0xd0 [ 363.836178][ T5110] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 363.842075][ T5110] ? _raw_spin_unlock+0x40/0x40 [ 363.846911][ T5110] ? print_memory_metadata+0x314/0x400 [ 363.852386][ T5110] check_panic_on_warn+0x80/0xa0 [ 363.857328][ T5110] ? ext4_find_extent+0xbcc/0xe00 [ 363.862340][ T5110] end_report+0x66/0x110 [ 363.866574][ T5110] kasan_report+0x118/0x140 [ 363.871064][ T5110] ? ext4_find_extent+0xbcc/0xe00 [ 363.876073][ T5110] ext4_find_extent+0xbcc/0xe00 [ 363.880912][ T5110] ? arch_stack_walk+0x10c/0x140 [ 363.885840][ T5110] ext4_ext_map_blocks+0x27d/0x66d0 [ 363.891057][ T5110] ? stack_trace_save+0x98/0xe0 [ 363.895943][ T5110] ? __stack_depot_save+0x35/0x460 [ 363.901075][ T5110] ? ext4_ext_release+0x10/0x10 [ 363.905933][ T5110] ? rwsem_write_trylock+0x12f/0x1b0 [ 363.911235][ T5110] ? ext4_es_lookup_extent+0x443/0xb20 [ 363.916702][ T5110] ext4_map_blocks+0x9d1/0x1b60 [ 363.921551][ T5110] ? slab_pre_alloc_hook+0x59/0x310 [ 363.926742][ T5110] ? ext4_issue_zeroout+0x250/0x250 [ 363.931938][ T5110] ? rcu_is_watching+0x11/0xa0 [ 363.936697][ T5110] ? ext4_inode_journal_mode+0x18f/0x460 [ 363.942335][ T5110] ext4_writepages+0x1336/0x2e50 [ 363.947290][ T5110] ? ext4_read_folio+0x370/0x370 [ 363.952235][ T5110] ? __lock_acquire+0x13c0/0x7c50 [ 363.957264][ T5110] ? verify_lock_unused+0x140/0x140 [ 363.962458][ T5110] ? writeback_sb_inodes+0x441/0x17d0 [ 363.967825][ T5110] ? ext4_read_folio+0x370/0x370 [ 363.972750][ T5110] do_writepages+0x3b7/0x610 [ 363.977332][ T5110] ? __writepage+0x130/0x130 [ 363.981913][ T5110] ? writeback_sb_inodes+0x6e5/0x17d0 [ 363.987301][ T5110] ? __lock_acquire+0x7c50/0x7c50 [ 363.992356][ T5110] ? do_raw_spin_lock+0x11d/0x280 [ 363.997400][ T5110] __writeback_single_inode+0x156/0x1160 [ 364.003044][ T5110] writeback_sb_inodes+0xad8/0x17d0 [ 364.008240][ T5110] ? do_raw_spin_lock+0x11d/0x280 [ 364.013263][ T5110] ? queue_io+0x5a0/0x5a0 [ 364.017591][ T5110] ? rcu_is_watching+0x11/0xa0 [ 364.022350][ T5110] wb_writeback+0x468/0xd00 [ 364.026847][ T5110] ? percpu_ref_tryget+0x250/0x250 [ 364.031945][ T5110] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 364.037917][ T5110] ? _raw_spin_unlock_irq+0x1f/0x40 [ 364.043106][ T5110] wb_workfn+0x435/0xec0 [ 364.047341][ T5110] ? inode_wait_for_writeback+0x200/0x200 [ 364.053052][ T5110] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 364.059021][ T5110] ? read_lock_is_recursive+0x10/0x10 [ 364.064381][ T5110] ? _raw_spin_unlock_irq+0x1f/0x40 [ 364.069570][ T5110] ? process_one_work+0x7a1/0x1160 [ 364.074668][ T5110] process_one_work+0x898/0x1160 [ 364.079593][ T5110] ? worker_detach_from_pool+0x240/0x240 [ 364.085212][ T5110] ? _raw_spin_lock_irq+0xab/0xe0 [ 364.090233][ T5110] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 364.095594][ T5110] ? kthread_data+0x4b/0xc0 [ 364.100092][ T5110] worker_thread+0xaa2/0x1250 [ 364.104764][ T5110] kthread+0x29d/0x330 [ 364.108821][ T5110] ? worker_clr_flags+0x1a0/0x1a0 [ 364.113832][ T5110] ? kthread_blkcg+0xd0/0xd0 [ 364.118410][ T5110] ret_from_fork+0x1f/0x30 [ 364.122835][ T5110] [ 364.126091][ T5110] Kernel Offset: disabled [ 364.130411][ T5110] Rebooting in 86400 seconds..