last executing test programs: 11m51.282701539s ago: executing program 32 (id=417): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x20000050) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000954b2041de88c61147140884de6a57426d8b259060ac18d9d9e68611f09c72db1e4aa73130", @ANYRES16=r3, @ANYBLOB="010024bd7000fcdbdf253d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f75726365"], 0x50}, 0x1, 0x0, 0x0, 0x20008804}, 0x4050) read$msr(0xffffffffffffffff, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = open(0x0, 0x60840, 0x1d2) fcntl$setlease(r5, 0x400, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x1000000) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000040)={0x9, {0x22, 0xff, 0x7, 0x7, 0x800}}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xa13, 0x4) sendto(r0, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e3b32905b0d26e9ff34b83f38a2ae8b1c6748ef8b87ef2a359249c3e294931489ba57f83f96048684434854ab3b6ad59f45e832972639508fe4dcb371c013bc129572e996a7db94fae8d71a076ec5", 0xad, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000100)={0x0, 0xffffa811}, 0x8) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 11m26.213296656s ago: executing program 33 (id=523): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x2, &(0x7f00000000c0)=0x4002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2020000000000016000200071b48013f030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 9m40.983414807s ago: executing program 34 (id=811): syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xc9, 0x1) 8m48.248203762s ago: executing program 5 (id=935): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x71bd0000) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 8m46.784213719s ago: executing program 5 (id=938): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x1100, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="740000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800c0001006d6163766c616e003c00028008000100100000001c0005800a000400aaaaaaaaaabb000002000400d8928afb7028000008000300030000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r4], 0x74}}, 0x0) 8m41.284382162s ago: executing program 35 (id=918): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 8m31.393994096s ago: executing program 36 (id=938): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x1100, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="740000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800c0001006d6163766c616e003c00028008000100100000001c0005800a000400aaaaaaaaaabb000002000400d8928afb7028000008000300030000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r4], 0x74}}, 0x0) 7m0.458282922s ago: executing program 8 (id=837): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000200)={0x2c, 0x0, r2}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x4000000, r3}, 0x10) 6m53.432748859s ago: executing program 8 (id=1078): pipe2$9p(0x0, 0x800) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x15) dup(0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x88200) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) syz_emit_ethernet(0x6a, 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) socket(0x10, 0x803, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f00000002c0)=[r4], &(0x7f0000000200), 0x0, 0x0, 0x0, 0x300}) 6m51.822006055s ago: executing program 0 (id=1081): syz_io_uring_setup(0x1204a, &(0x7f00000001c0)={0x0, 0x7202, 0x8, 0x80000001, 0xcb}, &(0x7f0000000100), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$user(0x0, &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000500), 0x0, r2) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a2010203010902240001000000"], 0x0) 6m45.290491842s ago: executing program 0 (id=1090): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') read$FUSE(r5, &(0x7f00000005c0)={0x2020}, 0x2020) 6m43.012581393s ago: executing program 0 (id=1094): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x100847c0, 0x0, 0x1, 0x0, 0x0) 6m39.669575451s ago: executing program 0 (id=1097): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000003880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020004000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r1, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200"/16], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) shmget(0x1, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getegid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x0, 0x0, 0x0}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000080)={0x49dd, 0xffff, 0x0, 0xc003, 0x0, "fa3d76170000001b"}) write$binfmt_aout(r3, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000180)={0x0, 0x4, 0x1000000b, 0x9, 0x4, "00000000000000000000c2041a02003d00"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) statx(r5, &(0x7f00000000c0)='./file0\x00', 0x6000, 0x200, &(0x7f0000000440)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000340)=0x0) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffe, r6, 0x2, 0x0) 6m37.51633898s ago: executing program 37 (id=1078): pipe2$9p(0x0, 0x800) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x15) dup(0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x88200) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) syz_emit_ethernet(0x6a, 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) socket(0x10, 0x803, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f00000002c0)=[r4], &(0x7f0000000200), 0x0, 0x0, 0x0, 0x300}) 6m35.875660657s ago: executing program 0 (id=1104): socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x3}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 6m34.466042063s ago: executing program 0 (id=1106): socket$kcm(0x2, 0x200000000000001, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000001180)="370c099069effa43de3e1404db09b4ce1ef7", 0x12, 0xffffffffffffffff) keyctl$setperm(0x5, r3, 0x2000) 6m19.053444756s ago: executing program 38 (id=1106): socket$kcm(0x2, 0x200000000000001, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000001180)="370c099069effa43de3e1404db09b4ce1ef7", 0x12, 0xffffffffffffffff) keyctl$setperm(0x5, r3, 0x2000) 5m45.140526771s ago: executing program 9 (id=1175): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x4040840) execve(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000380)={[&(0x7f0000000280)='rfc4106(gcm(aes))\x00', &(0x7f00000002c0)='}@\x00', &(0x7f0000000300)='GPL\x00', &(0x7f0000000340)='/dev/input/event#\x00']}, &(0x7f00000007c0)={[&(0x7f00000003c0)='\x00', &(0x7f0000000400)='GPL\x00', &(0x7f0000000440)='%[$($J\x00', &(0x7f0000000480)='${:\x00', &(0x7f00000004c0)='sched_switch\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='%@\x00', &(0x7f0000000580)='---&*)-#:^[/+]\x00', &(0x7f0000000600)='\xa5-\x00']}) mknodat$loop(0xffffffffffffffff, &(0x7f0000001600)='./file1\x00', 0x0, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x16, 0x1, 0x100, &(0x7f0000000040)="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"}) ioctl$VT_DISALLOCATE(r4, 0x5608) 5m42.532067475s ago: executing program 9 (id=1179): timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x8001, 0x0) r4 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r4, &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', 0xffffffffffffff9c, 0x0, 0x56) 5m40.59732722s ago: executing program 9 (id=1181): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000003880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020004000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r1, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) shmget(0x1, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) getegid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x0, 0x0, 0x0}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000080)={0x49dd, 0xffff, 0x0, 0xc003, 0x0, "fa3d76170000001b"}) write$binfmt_aout(r3, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000180)={0x0, 0x4, 0x1000000b, 0x9, 0x4, "00000000000000000000c2041a02003d00"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) statx(r5, &(0x7f00000000c0)='./file0\x00', 0x6000, 0x200, &(0x7f0000000440)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000340)=0x0) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffe, r6, 0x2, 0x0) 5m39.097774355s ago: executing program 9 (id=1186): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x1000803, &(0x7f0000000080)=ANY=[], 0x0, 0x1fb, &(0x7f0000000b00)="$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") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffe}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) fadvise64(r5, 0x3, 0xff39, 0x3) 5m35.831631391s ago: executing program 9 (id=1190): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c1}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setitimer(0x1, &(0x7f00000001c0)={{0x0, 0xea60}, {0x77359400}}, 0x0) r4 = syz_open_dev$evdev(0x0, 0x0, 0x822b01) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000140)=0x3) pivot_root(&(0x7f0000000040)='./cgroup\x00', 0x0) clock_gettime(0x0, 0x0) 5m33.531057633s ago: executing program 9 (id=1202): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000140)=0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0xdd3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x24010040) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$TCGETS2(r3, 0x802c542a, &(0x7f0000000040)) 5m18.335707546s ago: executing program 39 (id=1202): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000140)=0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0xdd3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x24010040) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$TCGETS2(r3, 0x802c542a, &(0x7f0000000040)) 1m5.754444881s ago: executing program 2 (id=1513): r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x14, 0x0, 0x1, [@nested={0x4, 0x3}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f00000002c0)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000340)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10}) ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(0x0, &(0x7f0000000f00)='./file0\x00') rmdir(&(0x7f0000000000)='./file0\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x401, 0x9) openat2(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x20000, 0x1, 0x10}, 0x18) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f0000000000200000000000"]) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1m1.676478737s ago: executing program 2 (id=1515): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x1, 0x0, 0x0, 0xffffffff, 0x0, {0x6, 0x200000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x2, 0x0, 0x0, 0x101}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) writev(r6, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2fd200}, {0x0}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21) 58.819664523s ago: executing program 2 (id=1519): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r7 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) ioctl$BTRFS_IOC_QGROUP_LIMIT(r6, 0x8030942b, &(0x7f0000000000)={0x7, {0x0, 0x2, 0x3, 0x6, 0x4}}) ioctl$IMADDTIMER(r7, 0x80044940, &(0x7f0000000080)=0x14) ioctl$IMADDTIMER(r7, 0x80044940, &(0x7f0000000200)=0x32) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') 56.228137335s ago: executing program 2 (id=1524): socket$inet6_sctp(0xa, 0x0, 0x84) r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socket(0x10, 0x803, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000400)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x18e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x3) rmdir(&(0x7f0000000380)='./file0/../file0\x00') 53.916001744s ago: executing program 2 (id=1529): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000080000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000959b75282ab2775b6519f1a8c13b0f002b549071c8b31808f0824b35d7810f45a0b5fa7265048b30cbeb44a50137a3c5a4dfd216dfa34c10e3ad1590c2b8d0dae0203d427822efcbaa3575de3a27cd596a553fdf5abb0258dbd44d"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x8400, &(0x7f00000000c0)=ANY=[]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f00000001c0)) listen(r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000020c0)='cgroup\x00') read$FUSE(r3, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}], 0x1, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023893) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x5000, 0x0, 0xfffffffffffffd57, 0x0, 0x0, 0x0) syz_clone(0x180, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) read$midi(0xffffffffffffffff, &(0x7f0000000740)=""/167, 0xa7) 53.299789684s ago: executing program 2 (id=1530): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1, 0x400000000000000}, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x66, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x30, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[], @dest_unreach={0x1, 0x4, 0x0, 0x0, '\x00', {0x9, 0x6, "e4a55c", 0xabc, 0x2b, 0x0, @private0, @remote}}}}}}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r5, 0x58}, 0x10) r6 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x3}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="9b4307000001aaaa"], 0x0) io_uring_enter(r6, 0x48e9, 0x0, 0x2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) syz_open_dev$vivid(&(0x7f00000002c0), 0x0, 0x2) syz_genetlink_get_family_id$tipc(0x0, r6) r9 = dup2(r2, r2) socket$inet6_udp(0xa, 0x2, 0x0) futex(&(0x7f00000000c0)=0x1, 0xb, 0x2, 0x0, &(0x7f0000000140)=0x2, 0x1) sendmmsg$unix(r9, &(0x7f0000008380), 0x400000000000174, 0x4008890) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) 37.53851504s ago: executing program 40 (id=1530): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1, 0x400000000000000}, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x6, &(0x7f00000006c0)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x66, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x30, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[], @dest_unreach={0x1, 0x4, 0x0, 0x0, '\x00', {0x9, 0x6, "e4a55c", 0xabc, 0x2b, 0x0, @private0, @remote}}}}}}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r5, 0x58}, 0x10) r6 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x3}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="9b4307000001aaaa"], 0x0) io_uring_enter(r6, 0x48e9, 0x0, 0x2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) syz_open_dev$vivid(&(0x7f00000002c0), 0x0, 0x2) syz_genetlink_get_family_id$tipc(0x0, r6) r9 = dup2(r2, r2) socket$inet6_udp(0xa, 0x2, 0x0) futex(&(0x7f00000000c0)=0x1, 0xb, 0x2, 0x0, &(0x7f0000000140)=0x2, 0x1) sendmmsg$unix(r9, &(0x7f0000008380), 0x400000000000174, 0x4008890) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) 19.709240185s ago: executing program 3 (id=1556): syz_read_part_table(0x1055, &(0x7f0000001340)="$eJzsz8GJwmAQBeD372bXgCApQc9WEa96zckmLEGwFg/amFWIEkU0BYgI33d7zJuBCR9VBumSpH7GejAcv4bleTNKttNZdu3PrVn6dttkv5hn0iTrvrYqObT/Kc1fqvviqXuc+K3SHd/zFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8l2sAAAD//0QjCeg=") 17.127966436s ago: executing program 3 (id=1562): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0xd, 0x0, 0x8001}}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_setup(0xec5, &(0x7f0000000380)={0x0, 0x0, 0x1000, 0x10000000, 0xffffffff}, 0x0, &(0x7f0000000340)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) fallocate(r2, 0x23, 0x3, 0x7f) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000480)='y\x105\x14\xf8u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\x15]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xb4\x95\xd1\xc8s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV\x06\xee\x91\'\xae\x9c\x06\xb2\xd4\xfa,\xc0\xca\xd90$\xd7\xfe\xae\xddf?$\xb1\xeeE\b\xbc\xd1[\xd5tO`Z\x15 1\v\xa6\xd0[K!+>,FE\x10\t\xbb\x90Jj\xb8{', 0x2) ftruncate(r4, 0x400ffff) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000100)={r4, 0x0, 0x0, 0x1000000}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r7, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f00000001c0)='m', 0xfffffdfc}]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=0000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f000000c3c0)={0x2020}, 0x2020) 13.524120042s ago: executing program 1 (id=1571): syz_mount_image$cramfs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0xfe, 0x160, &(0x7f0000000380)="$eJzs0M+LEnEYx/H3d+Y7aqRYZCBBKXSxJPAHdYtwIknIBoounQSbSlCMhPKWEt06CF09RF1F6B9I00Psoqf9J/bibWGPLjPj7rKs/8E+r9t8Ps/3eWCePFxmFKcet1sfPrqdjvsm/cKpll/uTyYlLw9B98+ZPpifluA9mqm2WPXBi+cxi7eNpmvU203ve1WCMGBfxsstIH58z05o+hry3lwfMrdhdt2fMzifuUUs/90NDXY8yHLAunEp2Hc1yLx9B4AJSoU2x26afKtkU9cUdGE82n2+2Kncu/vI/V4oD+5Ek2b2C/zCVpH/83d75ubVclF95lSdZbFQeFDM5Q3uB01vgH4a/QSvFehhdjwy8PeFSN7Sr+Crgh9K0R3+/adiwOznodMKn/zr3mczDSo1rNeS1u9a4oqBmdFes2YLvyGyrRJCCCGEEEIIIYQQQgghhBBCCHHRHQUAAP//RStQGQ==") 13.230611671s ago: executing program 7 (id=1572): syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x20}, @l2cap_cid_signaling={{0x1c}, [@l2cap_disconn_req={{0x6, 0x7, 0x4}, {0x8, 0xb7f}}, @l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x6, 0xb91d, 0x1000, 0x1ff}}, @l2cap_disconn_rsp={{0x7, 0x2, 0x4}, {0x0, 0x6}}]}}, 0x25) 13.161513838s ago: executing program 1 (id=1573): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000003880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020004000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r1, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) shmget(0x1, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getegid() bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000080)={0x49dd, 0xffff, 0x0, 0xc003, 0x0, "fa3d76170000001b"}) write$binfmt_aout(r3, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000180)={0x0, 0x4, 0x1000000b, 0x9, 0x4, "00000000000000000000c2041a02003d00"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) statx(r5, &(0x7f00000000c0)='./file0\x00', 0x6000, 0x200, &(0x7f0000000440)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000340)=0x0) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffe, r6, 0x2, 0x0) 13.105930261s ago: executing program 4 (id=1574): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @typedef={0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x0, 0x61, 0x61]}}, 0x0, 0x52}, 0x28) 12.847471068s ago: executing program 7 (id=1576): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) mount$fuseblk(0x0, &(0x7f0000002480)='./file0\x00', &(0x7f0000000100), 0x4000, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x8104a9, 0x0) bind$netrom(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @default]}, 0x48) open(0x0, 0x14103e, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@flushpolicy={0x10, 0x12, 0x105}, 0x10}}, 0x20040810) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, r1, 0x917, 0x0, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x100002}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}}, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000140)='./file1\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x444f, &(0x7f0000004480)="$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") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0xa11408, 0x0, 0x0, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') 12.790348178s ago: executing program 4 (id=1577): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r6, 0xa) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 10.562228758s ago: executing program 4 (id=1579): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000003880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020004000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r1, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) shmget(0x1, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getegid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x0, 0x0, 0x0}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000080)={0x49dd, 0xffff, 0x0, 0xc003, 0x0, "fa3d76170000001b"}) write$binfmt_aout(r3, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000180)={0x0, 0x4, 0x1000000b, 0x9, 0x4, "00000000000000000000c2041a02003d00"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x17) statx(r5, &(0x7f00000000c0)='./file0\x00', 0x6000, 0x200, &(0x7f0000000440)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000340)=0x0) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffe, r6, 0x2, 0x0) 9.73347535s ago: executing program 1 (id=1580): syz_usb_connect(0x0, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0xf0, 0x8f, 0xd, 0x40, 0x4b4, 0x6830, 0x86cf, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x88, 0x63, 0xc1}}]}}]}}, 0x0) 9.371716111s ago: executing program 6 (id=1581): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) msgsnd(0x0, &(0x7f0000000040)={0x1}, 0x8, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c00028008000140000000"], 0x140}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r6, 0x0, 0x0, 0xf000000) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000280)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x0, 0x2, 0x2a}, 0x2c) 7.900718772s ago: executing program 6 (id=1582): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r5, 0xa) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) close_range(0xffffffffffffffff, r6, 0x0) 7.856152967s ago: executing program 4 (id=1583): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e08831b0c"], 0xb) 5.887015244s ago: executing program 5 (id=1584): flock(0xffffffffffffffff, 0x1780f9c373410dea) 5.85999222s ago: executing program 6 (id=1585): syz_emit_vhci(&(0x7f0000000800)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 5.655865222s ago: executing program 7 (id=1586): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200087fc, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="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", 0x15d}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmmsg$inet(r3, &(0x7f00000098c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001480)="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", 0x597}], 0x1}}], 0x1, 0x8000) 5.531995777s ago: executing program 1 (id=1587): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB], 0x48) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 5.531830854s ago: executing program 4 (id=1588): syz_emit_vhci(&(0x7f0000001300)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_ev_le_phy_update_complete={{}, {0x0, 0xc9, 0x4, 0x9}}}}, 0x9) 5.37621521s ago: executing program 6 (id=1589): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x13, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xe6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x11000000}, 0x50) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(0xffffffffffffffff, &(0x7f00000003c0)={0x28, 0x0, r3, {{0x2, 0xcd21, 0x0, 0xffffffffffffffff}}}, 0x28) pselect6(0x40, &(0x7f0000000240)={0x0, 0x53, 0x3, 0x8, 0x2, 0xb, 0x0, 0x1}, 0x0, &(0x7f0000000280)={0x3ff, 0x252d, 0x0, 0x400d, 0x0, 0x9, 0x466}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0x5e99, 0x3000, 0x3, 0x19a}, &(0x7f0000000040), 0x0) r6 = epoll_create1(0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000200)={0xa0000019}) finit_module(r7, 0x0, 0x3) ppoll(&(0x7f00000001c0)=[{r5, 0x20}], 0x1, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f00000043c0)=ANY=[@ANYBLOB="2900000003000000a45cbdce7de12b9402d3324d00000000000000000100000000006964"], 0x29) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000084) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bind$phonet(r0, 0x0, 0x0) 5.29324453s ago: executing program 5 (id=1590): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x4}, 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$evdev(0x0, 0x0, 0x200100) ioctl$EVIOCGREP(r3, 0x80084522, 0x0) lsm_set_self_attr(0x68, 0x0, 0x20, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r6, r6, 0x0, 0x101) mkdir(&(0x7f0000000300)='./bus\x00', 0x40) mount$9p_virtio(0x0, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0), 0x814004, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000680)={{}, {}, [], {}, [], {0x10, 0x1}}, 0x24, 0x3) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) mmap$binder(&(0x7f00008d6000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x5) r7 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x18\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) symlink(&(0x7f00000049c0)='.\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1c, 0x18, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x3}, 0x94) 4.148441667s ago: executing program 1 (id=1591): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000003880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020004000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r1, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) shmget(0x1, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getegid() bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000080)={0x49dd, 0xffff, 0x0, 0xc003, 0x0, "fa3d76170000001b"}) write$binfmt_aout(r3, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000180)={0x0, 0x4, 0x1000000b, 0x9, 0x4, "00000000000000000000c2041a02003d00"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) statx(r5, &(0x7f00000000c0)='./file0\x00', 0x6000, 0x200, &(0x7f0000000440)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000340)=0x0) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffe, r6, 0x2, 0x0) 4.09834848s ago: executing program 3 (id=1592): syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x1, 0x8}, {0x1a0, 0x8, 0x2, 0xdae}}}}, 0x15) 3.943997168s ago: executing program 4 (id=1593): sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_emit_ethernet(0x6e, &(0x7f00000006c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x38, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @private2, [@dstopts]}}}}}}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x3, 0x10, &(0x7f0000000140)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1238}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$tun(0xffffffffffffff9c, 0x0, 0x4080, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) truncate(&(0x7f0000000200)='./file0\x00', 0xfffffffffffffffd) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, 0xffffffffffffffff, 0x2000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r3, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000ac, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, 0x8, 0x0, 0x0}}, 0x10) 3.070948505s ago: executing program 3 (id=1594): syz_emit_vhci(&(0x7f0000001440)=ANY=[@ANYBLOB="02c93010000c0005001a0608"], 0x15) 2.910748221s ago: executing program 5 (id=1595): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000003880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020004000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r1, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) shmget(0x1, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getegid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x0, 0x0, 0x0}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000080)={0x49dd, 0xffff, 0x0, 0xc003, 0x0, "fa3d76170000001b"}) write$binfmt_aout(r3, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000180)={0x0, 0x4, 0x1000000b, 0x9, 0x4, "00000000000000000000c2041a02003d00"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x17) statx(r5, &(0x7f00000000c0)='./file0\x00', 0x6000, 0x200, &(0x7f0000000440)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000340)=0x0) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffe, r6, 0x2, 0x0) 2.534894247s ago: executing program 6 (id=1596): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a9, &(0x7f0000000680)="$eJzs3U1sFOUbAPBnth/8of1bTDBGTk042ARp7UcgBCKCiR5UItaLiZeGlo9QQNua2J70RvwiJnLyAp6IBy3CwZCQGM8mRj1oIpJgwqVJQyJ4Q2tmd2dZ7FKKbRlkfr9k2HdmZ3mf2WefYefdl90ACqsz/aMU8VhEnEwiOurua47qnZ2V/c73Tx9IlyTm5gavJpFExNn+6QPZ/kn1tq36sK6I2HUyYkPr/H7HJ6cODY2OjoxV13smDr/eMz45teng4aH9I/tHjgz0bdnc27e1r39g2Y51YGbdtg1/7O6YnpvZ+NfgVzfSeNur99Ufx3LpjM7ac3KLJOKJ5e4sZ6VF7vfIyPELKxwKi9T+zVODTdU6b4mI9dERTdWqjxdf+70jvnw67xiBlbMjIuaAgkrUPxRU9j4gvf7Nlnv13uO5Z+5VT9zO7M7KBeDZ6tjO+Vr+mytjQ/G/8rXhmmtJdmVYlmRjR0sw9UX6d2wsdZ47sz1dYoXGYbg/Tf+WdwTkqXX5hnb5D1q/J+8IyNN3x/KOgDz9OJt3BOTp5cG8IyBPuzfnHQF5+uRq3hHw9c4oT0aZP/5Xqo3/RIPxn7aIeHKJfV9+NqIzPhyp3zZ//Kc0s8RuWMDszojtdXO7ztflv2ptU3Xt/+lKtCT7Do6OpLl/KCK6omVVut67QB+7Tl9p+FJ5dSDNf8/ai8cvbMuWtP/09uZepZnmVbc+bnhoYmipx03F7DsR65sb5T+p1X/SoP7T18NiJwcd/2XLtUbbP9ia5v/GDwvnn5U0dyri8Yb1f3PmYrLw/Mye8vmgJzsrzPfRoz9/3mj76T1p/r/fIf/5Set/zcL5L5//a/N1x+++jxObhq402n55Ms3/2J//5vzfmrxSDjCbWvzW0MTEWG9Ea/LC/O19dx/zgyp7PrLnK81/14bG//4vdP5fHREvLbLPlv1Xvm20/cSFNP9bfspy33nuzHb1f2+l+R++Q/0nt9T/3Tc63v/0VKO+295N8//re9nnv1n+s8+CK9L6HygH01Xd4v3fnS02QXnHCQAAAAAAAAAAAAAAAAAAAAAAUDSl8m9gJ6XuWrtU6u6ufL/vulhTGj06PrFx39E3jwxXfit7bbSUsm967Kj7Ptjecvvmet8/1vsj4uGIONa0urzevffo6HDeBw8F1R5x6ewbexv8Mj8AAAAAAAAAAAAAAAAAAJCXttv8///Uxaa8owNWQnvEpX0fN72dtq+rcyiUtP4/u374+VD/UDjqH4pL/UNxqX8oLvUPxaX+objUPxSX+ofiUv9QXPX1DwAAAAA8mMYnpw4NjY6OjGloaGjUGnmfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuJ/8HQAA//9rTy3i") 2.299954566s ago: executing program 3 (id=1597): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r5, 0xa) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) close_range(0xffffffffffffffff, r6, 0x0) 1.339572098s ago: executing program 7 (id=1598): syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0e"], 0x22) 1.30197823s ago: executing program 1 (id=1599): syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000000000)='./file1\x00', 0x3200041, &(0x7f0000000040)={[{@eas_no}, {@err_cont}, {@eas_rw}, {@check_none}]}, 0x1, 0x9e15, &(0x7f000000a040)="$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") 708.039706ms ago: executing program 6 (id=1600): syz_usb_connect(0x0, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x6, 0x17, 0xd0, 0x20, 0xdba, 0x5000, 0x11bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x12, 0x10, 0x89}}]}}]}}, 0x0) 401.329286ms ago: executing program 3 (id=1601): ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) shutdown(0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x40000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) read$nci(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCFLSH(r2, 0x80045438, 0x0) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x101600, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r3, 0x8028640c, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[0x0, 0x0], 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000001900), &(0x7f0000000a80)={[&(0x7f00000018c0)='.^*%$\'-\\:\x00\xfb\x12#\x19\t\x99n\x1e\xef,NA\xf3)\xc8\xcd\x9bM\x83\x9d\v\x80\xcbU\xdcV\xe4\xff\xa8\xf1']}) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SET_THP_DISABLE(0x41, 0x1) prctl$PR_SET_THP_DISABLE(0x41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1d1) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) 198.360329ms ago: executing program 7 (id=1602): syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x4, 0x4}, {0x1, 0x4}}}}, 0x11) 0s ago: executing program 7 (id=1603): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) close_range(r5, r6, 0x0) kernel console output (not intermixed with test programs): ock Ridge and switching to Joliet. [ 402.565875][ T5976] team0 (unregistering): Port device team_slave_1 removed [ 404.900851][ T9577] syz.2.954 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 405.087602][ T5877] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 405.139609][ T5877] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 405.167649][ T5877] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 405.170476][ T9577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.954'. [ 405.288069][ T5877] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 405.470557][ T5976] team0 (unregistering): Port device team_slave_0 removed [ 405.491725][ T5877] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 406.777046][ T9587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.958'. [ 407.110908][ T5882] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 407.152609][ T5882] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 407.691292][ T5882] Bluetooth: hci0: command tx timeout [ 407.710651][ T5882] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 407.729019][ T5882] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 407.739961][ T5882] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 409.770257][ T5877] Bluetooth: hci0: command tx timeout [ 409.854558][ T5877] Bluetooth: hci7: command tx timeout [ 411.843937][ T5877] Bluetooth: hci0: command tx timeout [ 412.160696][ T5877] Bluetooth: hci7: command tx timeout [ 413.428871][ T5882] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 413.448484][ T5882] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 413.456772][ T5882] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 413.481767][ T5882] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 413.499670][ T5882] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 413.521803][ T9655] netlink: 'syz.6.967': attribute type 10 has an invalid length. [ 413.933623][ T5882] Bluetooth: hci0: command tx timeout [ 414.278904][ T5882] Bluetooth: hci7: command tx timeout [ 415.571699][ T5882] Bluetooth: hci8: command tx timeout [ 415.628485][ T9655] veth0_vlan: left promiscuous mode [ 415.685613][ T9655] veth0_vlan: entered promiscuous mode [ 415.937921][ T9655] team0: Device veth0_vlan failed to register rx_handler [ 416.480259][ T5882] Bluetooth: hci7: command tx timeout [ 417.600406][ T5882] Bluetooth: hci8: command tx timeout [ 419.680260][ T5882] Bluetooth: hci8: command tx timeout [ 421.817995][ T5882] Bluetooth: hci8: command tx timeout [ 425.085900][ T10] usb 2-1: USB disconnect, device number 12 [ 425.432470][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 425.790270][ T10] cp210x 2-1:0.0: device disconnected [ 425.903137][ T9718] mmap: syz.2.983 (9718) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 431.866431][ T5976] bridge_slave_1: left allmulticast mode [ 431.899611][ T5976] bridge_slave_1: left promiscuous mode [ 431.926341][ T5976] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.081965][ T5976] bridge_slave_0: left allmulticast mode [ 432.090936][ T5976] bridge_slave_0: left promiscuous mode [ 432.141413][ T5976] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.963975][ T5976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.516355][ T5976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.666584][ T5976] bond0 (unregistering): Released all slaves [ 435.818401][ T9780] loop2: detected capacity change from 0 to 2048 [ 435.933404][ T9780] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 436.988382][ T5976] hsr_slave_0: left promiscuous mode [ 437.214681][ T5976] hsr_slave_1: left promiscuous mode [ 438.181471][ T5976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.031820][ T5976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.155835][ T5882] Bluetooth: hci1: unexpected event for opcode 0x0407 [ 440.610956][ T5976] team0 (unregistering): Port device team_slave_1 removed [ 442.316361][ T5976] team0 (unregistering): Port device team_slave_0 removed [ 447.890431][ T9849] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1009'. [ 449.605569][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.613100][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.532459][ T9863] random: crng reseeded on system resumption [ 452.185657][ T9589] chnl_net:caif_netlink_parms(): no params data found [ 452.225171][ T9652] chnl_net:caif_netlink_parms(): no params data found [ 454.906119][ T9575] chnl_net:caif_netlink_parms(): no params data found [ 456.551838][ T9589] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.586326][ T9589] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.610479][ T9589] bridge_slave_0: entered allmulticast mode [ 456.687195][ T9589] bridge_slave_0: entered promiscuous mode [ 456.887823][ T9899] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1020'. [ 456.978923][ T9589] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.990419][ T9589] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.024011][ T9589] bridge_slave_1: entered allmulticast mode [ 457.049133][ T9589] bridge_slave_1: entered promiscuous mode [ 457.133064][ T9652] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.140915][ T9652] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.166085][ T9652] bridge_slave_0: entered allmulticast mode [ 457.219458][ T9652] bridge_slave_0: entered promiscuous mode [ 457.504778][ T9652] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.530693][ T9652] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.563945][ T9652] bridge_slave_1: entered allmulticast mode [ 458.528998][ T9652] bridge_slave_1: entered promiscuous mode [ 458.782160][ T9918] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1022'. [ 458.860339][ T9589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.303094][ T9652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.572236][ T9589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.383894][ T9575] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.397226][ T9575] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.424511][ T9575] bridge_slave_0: entered allmulticast mode [ 461.433543][ T9575] bridge_slave_0: entered promiscuous mode [ 461.465669][ T9652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.170518][ T5936] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 464.362276][ T5936] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 464.380172][ T5936] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 464.414944][ T5936] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 464.476819][ T9652] team0: Port device team_slave_0 added [ 464.483582][ T5936] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 464.527579][ T9652] team0: Port device team_slave_1 added [ 464.535368][ T5936] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 464.558312][ T9947] overlayfs: failed to clone upperpath [ 464.601099][ T5877] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 464.614482][ T5877] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 464.627349][ T5877] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 464.636552][ T5877] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 464.645280][ T5877] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 464.674918][ T5936] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 464.693359][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 464.701998][ T5936] usb 3-1: Product: syz [ 464.706165][ T5936] usb 3-1: Manufacturer: syz [ 464.751158][ T5936] cdc_wdm 3-1:1.0: skipping garbage [ 464.756393][ T5936] cdc_wdm 3-1:1.0: skipping garbage [ 464.773730][ T5936] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 464.779643][ T5936] cdc_wdm 3-1:1.0: Unknown control protocol [ 465.261187][ T9652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.339369][ T9652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.444124][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 465.450989][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 465.457679][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 465.464287][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 465.471835][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 465.478446][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 465.485256][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 465.491861][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 465.498489][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 465.505097][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 465.511435][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 465.518043][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 465.524681][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 465.528874][ T9652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.531276][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 465.531568][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 465.554438][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 465.560961][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 465.567573][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 465.574155][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 465.580760][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 465.588853][ T5936] usb 3-1: USB disconnect, device number 9 [ 465.594731][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 466.321295][ T5877] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 466.336307][ T5877] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 466.346746][ T5877] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 466.355421][ T9652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.366677][ T9652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.401768][ T9652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.505170][ T5877] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 466.646520][ T5877] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 466.721292][ T5877] Bluetooth: hci2: command tx timeout [ 468.800414][ T5882] Bluetooth: hci2: command tx timeout [ 469.215500][ T5882] Bluetooth: hci0: command tx timeout [ 470.880192][ T5882] Bluetooth: hci2: command tx timeout [ 470.998877][ T9652] hsr_slave_0: entered promiscuous mode [ 471.051415][ T9652] hsr_slave_1: entered promiscuous mode [ 471.124062][ T9011] bridge_slave_0: left allmulticast mode [ 471.162287][ T9011] bridge_slave_0: left promiscuous mode [ 471.280198][ T5882] Bluetooth: hci0: command tx timeout [ 471.429010][ T9011] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.026251][T10008] loop2: detected capacity change from 0 to 8 [ 473.071430][ T5882] Bluetooth: hci2: command tx timeout [ 473.360523][ T5882] Bluetooth: hci0: command tx timeout [ 474.372757][ T9011] bond0 (unregistering): Released all slaves [ 475.215194][T10023] block nbd2: Attempted send on invalid socket [ 475.270272][T10023] blk_print_req_error: 138 callbacks suppressed [ 475.270366][T10023] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 475.563774][ T5882] Bluetooth: hci0: command tx timeout [ 475.635661][T10023] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1045'. [ 477.315974][ T5877] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 477.337021][ T5877] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 477.345342][ T5877] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 477.354915][ T5877] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 477.363806][ T5877] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 479.492816][ T5877] Bluetooth: hci4: command tx timeout [ 481.068431][ T9948] chnl_net:caif_netlink_parms(): no params data found [ 482.160381][ T5877] Bluetooth: hci4: command tx timeout [ 484.248607][ T5877] Bluetooth: hci4: command tx timeout [ 484.574603][ T9948] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.640962][ T9948] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.656502][ T9948] bridge_slave_0: entered allmulticast mode [ 484.683703][ T9948] bridge_slave_0: entered promiscuous mode [ 484.737761][ T9948] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.770462][ T9948] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.810467][ T9948] bridge_slave_1: entered allmulticast mode [ 484.856784][ T9948] bridge_slave_1: entered promiscuous mode [ 484.889400][ T9959] chnl_net:caif_netlink_parms(): no params data found [ 486.320312][ T5877] Bluetooth: hci4: command tx timeout [ 486.625136][ T9011] bridge_slave_1: left allmulticast mode [ 486.657754][ T9011] bridge_slave_1: left promiscuous mode [ 486.670715][ T9011] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.021557][ T9011] bridge_slave_0: left allmulticast mode [ 488.043055][ T9011] bridge_slave_0: left promiscuous mode [ 488.065929][ T9011] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.233195][ T9011] bridge_slave_1: left allmulticast mode [ 488.238939][ T9011] bridge_slave_1: left promiscuous mode [ 488.287865][ T9011] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.323731][ T9011] bridge_slave_0: left allmulticast mode [ 488.329625][ T9011] bridge_slave_0: left promiscuous mode [ 488.335732][ T9011] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.546110][ T9011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.575806][ T9011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.614455][ T9011] bond0 (unregistering): Released all slaves [ 488.821069][ T9011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.845970][ T9011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.860045][ T9011] bond0 (unregistering): Released all slaves [ 488.902182][ T9948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.086815][ T9948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.288802][ T9011] hsr_slave_0: left promiscuous mode [ 489.303676][ T9011] hsr_slave_1: left promiscuous mode [ 489.324168][ T9011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.349403][ T9011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.555334][ T9011] team0 (unregistering): Port device team_slave_1 removed [ 489.608410][ T9011] team0 (unregistering): Port device team_slave_0 removed [ 490.592776][ T9948] team0: Port device team_slave_0 added [ 490.615435][ T9959] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.631802][ T9959] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.639037][ T9959] bridge_slave_0: entered allmulticast mode [ 490.647409][ T9959] bridge_slave_0: entered promiscuous mode [ 490.692624][ T9948] team0: Port device team_slave_1 added [ 490.707421][ T9959] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.740600][ T9959] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.749679][ T9959] bridge_slave_1: entered allmulticast mode [ 490.773180][ T9959] bridge_slave_1: entered promiscuous mode [ 490.992530][ T9948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.010197][ T9948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.051714][ T9948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.168807][ T9948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.176199][ T9948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.205391][ T9948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.246847][ T9959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.260737][ T9959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.418226][ T9959] team0: Port device team_slave_0 added [ 491.452509][T10032] chnl_net:caif_netlink_parms(): no params data found [ 491.469832][ T9959] team0: Port device team_slave_1 added [ 491.534949][ T9948] hsr_slave_0: entered promiscuous mode [ 491.542541][ T9948] hsr_slave_1: entered promiscuous mode [ 491.576488][ T9959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.583736][ T9959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.611879][ T9959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.656260][ T9959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.667208][ T9959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.694573][ T9959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.861358][T10032] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.868617][T10032] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.876608][T10032] bridge_slave_0: entered allmulticast mode [ 491.885766][T10032] bridge_slave_0: entered promiscuous mode [ 491.921370][ T9959] hsr_slave_0: entered promiscuous mode [ 491.927951][ T9959] hsr_slave_1: entered promiscuous mode [ 491.935419][ T9959] debugfs: 'hsr0' already exists in 'hsr' [ 491.941760][ T9959] Cannot create hsr debugfs directory [ 491.952510][T10032] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.959727][T10032] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.967484][T10032] bridge_slave_1: entered allmulticast mode [ 491.976295][T10032] bridge_slave_1: entered promiscuous mode [ 492.085788][T10032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.126390][T10032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.221088][T10032] team0: Port device team_slave_0 added [ 492.245547][T10032] team0: Port device team_slave_1 added [ 492.333222][T10032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.341494][T10032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.368064][T10032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.409419][T10032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.417073][T10032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.443699][T10032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.586199][T10032] hsr_slave_0: entered promiscuous mode [ 492.594316][T10032] hsr_slave_1: entered promiscuous mode [ 492.600757][T10032] debugfs: 'hsr0' already exists in 'hsr' [ 492.606504][T10032] Cannot create hsr debugfs directory [ 492.666040][ T9948] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 492.681445][ T9948] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 492.696472][ T9948] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 492.716041][ T9948] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 492.873009][ T9959] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 492.908615][ T9959] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 492.944182][ T9959] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 492.973479][ T9959] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 493.530053][ T9948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.594595][ T9948] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.629319][ T9010] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.636498][ T9010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.672671][ T9010] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.679854][ T9010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.726226][ T9959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.838502][ T9959] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.905571][ T9620] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.912778][ T9620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.966291][ T9620] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.973503][ T9620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.021336][T10032] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 494.035214][T10032] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 494.068006][T10032] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 494.110474][T10032] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 494.532118][T10032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.618729][T10032] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.679869][ T9620] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.687163][ T9620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.729505][ T9620] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.736738][ T9620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.874742][ T9948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.994878][ T9959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.625367][T10032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.827203][T10032] veth0_vlan: entered promiscuous mode [ 495.896764][T10032] veth1_vlan: entered promiscuous mode [ 495.963349][ T9948] veth0_vlan: entered promiscuous mode [ 496.007373][ T9948] veth1_vlan: entered promiscuous mode [ 496.073259][T10032] veth0_macvtap: entered promiscuous mode [ 496.114378][T10032] veth1_macvtap: entered promiscuous mode [ 496.123685][ T9959] veth0_vlan: entered promiscuous mode [ 496.148737][ T9959] veth1_vlan: entered promiscuous mode [ 496.200750][ T9948] veth0_macvtap: entered promiscuous mode [ 496.215209][T10032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.244410][ T9948] veth1_macvtap: entered promiscuous mode [ 496.261218][T10032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.293137][ T9959] veth0_macvtap: entered promiscuous mode [ 496.336923][ T967] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.355686][ T967] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.388151][ T967] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.403039][ T967] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.421161][ T9959] veth1_macvtap: entered promiscuous mode [ 496.458881][ T9948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.505712][ T9948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.543786][ T9959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.625557][ T9959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.663340][ T9011] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.687729][ T9011] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.737974][ T9011] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.756061][ T9011] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.831968][ T9010] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.847357][ T9010] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.861056][ T5976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.868884][ T5976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.946844][ T9010] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.964518][ T9010] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.100182][ T967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.108069][ T967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.121444][ T5976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.135995][ T5976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.332431][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.361826][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.424934][ T9620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.462434][ T9620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.387667][ T9615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.468475][ T9615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.909581][T10234] loop0: detected capacity change from 0 to 1764 [ 502.484367][T10234] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 511.402491][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.408830][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 515.078503][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 516.073168][T10315] loop9: detected capacity change from 0 to 32768 [ 516.243385][T10315] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.1085 (10315) [ 516.306667][ T9] usb 1-1: device descriptor read/all, error -71 [ 516.363380][T10315] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 516.375744][T10315] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm [ 516.474118][T10331] tipc: Enabling of bearer rejected, failed to enable media [ 517.562162][T10315] BTRFS info (device loop9): enabling ssd optimizations [ 517.569149][T10315] BTRFS info (device loop9): enabling free space tree [ 523.463657][ T5964] libceph: connect (1)[c::]:6789 error -101 [ 523.615068][T10387] ceph: No mds server is up or the cluster is laggy [ 523.660295][ T5964] libceph: mon0 (1)[c::]:6789 connect error [ 523.843443][ T9948] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 529.596789][ T5882] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 529.611230][ T5882] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 529.619103][ T5882] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 529.628118][ T5882] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 529.635946][ T5882] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 532.415802][ T5882] Bluetooth: hci6: command tx timeout [ 534.796956][ T5877] Bluetooth: hci6: command tx timeout [ 536.890195][ T5877] Bluetooth: hci6: command tx timeout [ 539.110743][ T5877] Bluetooth: hci6: command tx timeout [ 540.134474][T10505] loop2: detected capacity change from 0 to 1024 [ 540.319860][ T8444] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.354413][T10505] hfsplus: unable to find HFS+ superblock [ 541.227387][T10509] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 541.626054][T10436] chnl_net:caif_netlink_parms(): no params data found [ 541.671739][T10516] netlink: 'syz.6.1126': attribute type 1 has an invalid length. [ 542.604647][T10519] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 543.210260][T10527] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 544.791621][T10539] loop2: detected capacity change from 0 to 16 [ 544.897095][T10539] erofs (device loop2): mounted with root inode @ nid 36. [ 544.915685][ T8444] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.060926][T10543] erofs (device loop2): readahead error at folio 12 @ nid 36 [ 546.068897][T10543] erofs (device loop2): readahead error at folio 9 @ nid 36 [ 546.078739][T10543] erofs (device loop2): readahead error at folio 6 @ nid 36 [ 546.086100][T10543] erofs (device loop2): readahead error at folio 4 @ nid 36 [ 546.094755][T10543] syz.2.1132: attempt to access beyond end of device [ 546.094755][T10543] loop2: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 546.109127][T10543] syz.2.1132: attempt to access beyond end of device [ 546.109127][T10543] loop2: rw=524288, sector=376, nr_sectors = 16 limit=16 [ 546.122932][T10543] syz.2.1132: attempt to access beyond end of device [ 546.122932][T10543] loop2: rw=524288, sector=0, nr_sectors = 24 limit=16 [ 546.136526][T10543] syz.2.1132: attempt to access beyond end of device [ 546.136526][T10543] loop2: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 546.150359][T10543] syz.2.1132: attempt to access beyond end of device [ 546.150359][T10543] loop2: rw=524288, sector=525144, nr_sectors = 16 limit=16 [ 546.951474][T10521] veth7: entered promiscuous mode [ 547.539579][ T5882] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 547.556086][ T5882] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 547.565714][ T5882] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 547.804377][T10571] hub 9-0:1.0: USB hub found [ 547.816574][T10571] hub 9-0:1.0: 1 port detected [ 547.955328][ T5882] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 547.972740][ T5882] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 550.530531][ T5882] Bluetooth: hci0: command tx timeout [ 550.547790][ T8444] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.460109][T10582] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 552.660497][ T5877] Bluetooth: hci0: command tx timeout [ 552.690908][T10585] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 553.565024][T10599] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1142'. [ 553.586162][T10599] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 553.594604][T10599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.720247][ T5877] Bluetooth: hci0: command tx timeout [ 555.431902][ T8444] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.534499][T10436] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.547055][T10436] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.554972][T10436] bridge_slave_0: entered allmulticast mode [ 555.570655][T10436] bridge_slave_0: entered promiscuous mode [ 555.703601][T10436] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.842527][T10436] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.858075][T10436] bridge_slave_1: entered allmulticast mode [ 555.895320][T10436] bridge_slave_1: entered promiscuous mode [ 556.892482][ T5877] Bluetooth: hci0: command tx timeout [ 557.465837][T10436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 558.864182][T10436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.748227][T10654] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 562.752965][T10653] ceph: No mds server is up or the cluster is laggy [ 562.772326][ T24] libceph: connect (1)[c::]:6789 error -101 [ 562.778413][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 564.341919][T10436] team0: Port device team_slave_0 added [ 564.422047][T10436] team0: Port device team_slave_1 added [ 565.756152][T10436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.778277][T10436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.109140][T10436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.368378][T10697] loop2: detected capacity change from 0 to 1024 [ 567.031039][T10436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.038012][T10436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.124191][T10436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.616672][ T5877] Bluetooth: hci5: Unknown advertising packet type: 0x7f [ 567.616948][ T5877] Bluetooth: hci5: Malformed LE Event: 0x0d [ 568.907429][ T8444] bridge_slave_1: left allmulticast mode [ 568.915232][ T8444] bridge_slave_1: left promiscuous mode [ 568.923204][ T8444] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.952878][ T8444] bridge_slave_0: left allmulticast mode [ 568.970113][ T8444] bridge_slave_0: left promiscuous mode [ 568.975916][ T8444] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.031662][T10713] loop2: detected capacity change from 0 to 2048 [ 569.352357][T10713] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 569.439122][T10713] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 569.689675][ T30] audit: type=1800 audit(1757742198.723:61): pid=10727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1165" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 570.656367][T10733] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1163'. [ 570.915347][T10733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1163'. [ 571.378757][ T6003] libceph: connect (1)[c::]:6789 error -101 [ 571.550684][T10736] ceph: No mds server is up or the cluster is laggy [ 571.669723][ T6003] libceph: mon0 (1)[c::]:6789 connect error [ 572.858341][T10746] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 573.029641][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.054457][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 575.348935][ T8444] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 576.180985][ T8444] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 576.232449][ T8444] bond0 (unregistering): Released all slaves [ 576.461866][T10436] hsr_slave_0: entered promiscuous mode [ 576.494514][T10436] hsr_slave_1: entered promiscuous mode [ 576.716180][T10436] debugfs: 'hsr0' already exists in 'hsr' [ 576.730075][T10436] Cannot create hsr debugfs directory [ 576.769207][T10566] chnl_net:caif_netlink_parms(): no params data found [ 577.822208][ T5879] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.238179][T10818] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1184'. [ 583.276890][T10821] loop9: detected capacity change from 0 to 16 [ 583.804761][T10821] erofs (device loop9): mounted with root inode @ nid 36. [ 584.869771][T10835] erofs (device loop9): readahead error at folio 12 @ nid 36 [ 584.877487][T10835] erofs (device loop9): readahead error at folio 9 @ nid 36 [ 584.891057][T10835] erofs (device loop9): readahead error at folio 6 @ nid 36 [ 584.899471][T10835] erofs (device loop9): readahead error at folio 4 @ nid 36 [ 584.907338][T10835] syz.9.1186: attempt to access beyond end of device [ 584.907338][T10835] loop9: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 584.921671][T10835] syz.9.1186: attempt to access beyond end of device [ 584.921671][T10835] loop9: rw=524288, sector=376, nr_sectors = 16 limit=16 [ 584.935471][T10835] syz.9.1186: attempt to access beyond end of device [ 584.935471][T10835] loop9: rw=524288, sector=0, nr_sectors = 24 limit=16 [ 584.949071][T10835] syz.9.1186: attempt to access beyond end of device [ 584.949071][T10835] loop9: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 584.965011][T10835] syz.9.1186: attempt to access beyond end of device [ 584.965011][T10835] loop9: rw=524288, sector=525144, nr_sectors = 16 limit=16 [ 588.192458][ T8444] hsr_slave_0: left promiscuous mode [ 588.517138][ T8444] hsr_slave_1: left promiscuous mode [ 588.544343][ T8444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 588.820141][ T8444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.731669][ T8444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 589.739096][ T8444] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 589.962710][ T5882] Bluetooth: hci2: command 0x0406 tx timeout [ 591.149876][ T5882] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 591.150156][ T5882] Bluetooth: hci1: Malformed LE Event: 0x0d [ 591.681658][ T8444] veth1_macvtap: left promiscuous mode [ 591.688253][ T8444] veth0_macvtap: left promiscuous mode [ 591.737412][ T8444] veth1_vlan: left promiscuous mode [ 591.757518][ T8444] veth0_vlan: left promiscuous mode [ 593.419636][ T6104] libceph: connect (1)[c::]:6789 error -101 [ 593.428581][ T5882] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 593.439879][ T5882] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 593.449157][ T5882] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 593.459401][T10884] ceph: No mds server is up or the cluster is laggy [ 593.468825][ T5882] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 593.484760][ T5882] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 593.502798][ T6104] libceph: mon0 (1)[c::]:6789 connect error [ 593.863022][T10894] fuse: Bad value for 'fd' [ 594.309916][T10896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1198'. [ 594.319041][T10896] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 594.327444][T10896] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 596.026050][ T5877] Bluetooth: hci4: command tx timeout [ 597.497065][T10906] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 599.108307][ T5882] Bluetooth: hci4: command tx timeout [ 599.112669][T10911] overlayfs: failed to clone upperpath [ 601.220530][ T5882] Bluetooth: hci4: command tx timeout [ 603.282609][ T5882] Bluetooth: hci4: command tx timeout [ 605.340540][T10944] loop2: detected capacity change from 0 to 65536 [ 605.580797][T10944] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 605.735291][T10944] XFS (loop2): Ending clean mount [ 606.862726][ T30] audit: type=1800 audit(1757742235.873:62): pid=10958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1213" name="file1" dev="loop2" ino=38 res=0 errno=0 [ 607.058063][ T5877] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 607.085362][ T5879] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 607.094442][ T5877] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 607.115889][ T5877] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 607.159335][ T5877] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 607.182563][ T5877] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 608.355415][ T5882] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 608.402506][ T5882] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 608.412049][ T5882] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 608.423579][ T5882] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 608.431516][ T5882] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 608.972655][ T8444] team0 (unregistering): Port device team_slave_1 removed [ 609.174430][ T8444] team0 (unregistering): Port device team_slave_0 removed [ 609.280260][ T5882] Bluetooth: hci6: command tx timeout [ 610.610276][ T5882] Bluetooth: hci7: command tx timeout [ 611.360175][ T5882] Bluetooth: hci6: command tx timeout [ 611.940886][T10983] overlayfs: failed to clone upperpath [ 612.660169][ T5882] Bluetooth: hci7: command tx timeout [ 612.710083][ T6104] libceph: connect (1)[c::]:6789 error -101 [ 612.717049][T10987] loop2: detected capacity change from 0 to 2048 [ 613.003515][T10992] ceph: No mds server is up or the cluster is laggy [ 613.036627][ T6104] libceph: mon0 (1)[c::]:6789 connect error [ 613.101541][T10987] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 613.469948][ T5882] Bluetooth: hci6: command tx timeout [ 614.730186][ T5882] Bluetooth: hci7: command tx timeout [ 615.530172][ T5882] Bluetooth: hci6: command tx timeout [ 616.800473][ T5882] Bluetooth: hci7: command tx timeout [ 621.813321][T10566] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 624.537054][T11060] overlayfs: failed to clone upperpath [ 633.950641][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 633.956983][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.229342][T10957] chnl_net:caif_netlink_parms(): no params data found [ 634.304932][T10890] chnl_net:caif_netlink_parms(): no params data found [ 635.259152][T10969] chnl_net:caif_netlink_parms(): no params data found [ 636.472260][T11157] binder: 11156:11157 ioctl c0306201 0 returned -14 [ 636.992929][ T73] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.316056][ T9] IPVS: starting estimator thread 0... [ 638.448050][ T73] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.461380][T11172] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1256'. [ 638.620598][T11174] IPVS: using max 21 ests per chain, 50400 per kthread [ 639.514846][T11186] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 642.896391][T11172] hsr_slave_1 (unregistering): left promiscuous mode [ 643.266202][T11237] loop2: detected capacity change from 0 to 64 [ 643.284275][ T73] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.104567][ T73] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.180236][T11283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 651.205418][T10957] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.239410][T10957] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.267290][T10957] bridge_slave_0: entered allmulticast mode [ 651.313437][T10957] bridge_slave_0: entered promiscuous mode [ 651.357371][ T5877] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 651.370643][ T5877] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 651.379028][ T5877] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 651.391728][ T5877] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 651.400455][ T5877] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 651.421488][T10969] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.468782][T10969] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.476987][T10969] bridge_slave_0: entered allmulticast mode [ 651.491883][T10969] bridge_slave_0: entered promiscuous mode [ 651.533045][T10969] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.550490][T10969] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.567618][T10969] bridge_slave_1: entered allmulticast mode [ 651.576809][T10969] bridge_slave_1: entered promiscuous mode [ 651.722959][T10957] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.775248][T10957] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.794226][T10957] bridge_slave_1: entered allmulticast mode [ 651.825419][T11306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1273'. [ 651.832317][T10957] bridge_slave_1: entered promiscuous mode [ 652.424492][T11306] hsr_slave_1 (unregistering): left promiscuous mode [ 652.440389][T11310] serio: Serial port ptm0 [ 652.632812][T10969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.657470][T10969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.714272][T10957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.749549][T10957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 653.562429][ T5882] Bluetooth: hci0: command tx timeout [ 653.642837][T10969] team0: Port device team_slave_0 added [ 654.099878][T10969] team0: Port device team_slave_1 added [ 654.378489][T10957] team0: Port device team_slave_0 added [ 654.421508][T10957] team0: Port device team_slave_1 added [ 655.610257][ T5882] Bluetooth: hci0: command tx timeout [ 656.198070][ T73] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.099138][T10957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.129409][T10957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.166443][T10957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 658.441233][ T5882] Bluetooth: hci0: command tx timeout [ 658.493225][ T73] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.661676][T10969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 658.668654][T10969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.290113][T10969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.304000][T10969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.311025][T10969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.355543][T10969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.411065][T10957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.418751][T10957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.531721][T10957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.482994][ T5882] Bluetooth: hci0: command tx timeout [ 661.159558][T11385] loop2: detected capacity change from 0 to 512 [ 661.357780][T11385] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 661.520967][T11385] EXT4-fs (loop2): 1 truncate cleaned up [ 661.563603][T11385] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 661.624579][ T73] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.655805][ T5879] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.261010][T10957] hsr_slave_0: entered promiscuous mode [ 663.288870][T10957] hsr_slave_1: entered promiscuous mode [ 663.308269][T10957] debugfs: 'hsr0' already exists in 'hsr' [ 663.324946][T10957] Cannot create hsr debugfs directory [ 663.339306][T11407] loop2: detected capacity change from 0 to 8 [ 663.375434][T11407] squashfs image failed sanity check [ 664.948969][ T73] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.287359][T11424] loop2: detected capacity change from 0 to 1024 [ 666.243954][T11424] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 666.320146][T11424] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 667.928659][T11429] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 668.152837][ T5879] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 669.372453][T11299] chnl_net:caif_netlink_parms(): no params data found [ 669.603323][ T5877] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 669.662420][ T5877] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 669.674927][ T5877] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 669.695365][ T5877] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 669.708213][ T5877] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 671.771296][ T5877] Bluetooth: hci2: command tx timeout [ 673.840573][ T5882] Bluetooth: hci2: command tx timeout [ 673.848360][ T5882] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 674.931632][ T5882] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 674.945183][ T5882] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 674.957791][ T5882] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 675.454683][ T5882] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 675.476092][ T73] bridge_slave_1: left allmulticast mode [ 675.512709][ T73] bridge_slave_1: left promiscuous mode [ 675.518951][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.752067][ T73] bridge_slave_0: left allmulticast mode [ 675.781076][ T73] bridge_slave_0: left promiscuous mode [ 675.789961][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.921174][ T5882] Bluetooth: hci2: command tx timeout [ 676.372525][ T73] bridge_slave_1: left allmulticast mode [ 676.378209][ T73] bridge_slave_1: left promiscuous mode [ 676.764131][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.849961][ T73] bridge_slave_0: left allmulticast mode [ 676.858247][ T73] bridge_slave_0: left promiscuous mode [ 676.891444][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.178459][ T73] bridge_slave_1: left allmulticast mode [ 677.530185][ T5882] Bluetooth: hci4: command tx timeout [ 677.779012][T11501] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 678.000143][ T5882] Bluetooth: hci2: command tx timeout [ 678.048104][ T73] bridge_slave_1: left promiscuous mode [ 678.054249][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.148902][ T73] bridge_slave_0: left allmulticast mode [ 678.168526][ T73] bridge_slave_0: left promiscuous mode [ 678.198473][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.610218][ T5882] Bluetooth: hci4: command tx timeout [ 681.382230][ T73] bond0 (unregistering): Released all slaves [ 681.680977][ T5882] Bluetooth: hci4: command tx timeout [ 683.760271][ T5882] Bluetooth: hci4: command tx timeout [ 683.793313][ T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 683.846356][ T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 683.867425][ T73] bond0 (unregistering): Released all slaves [ 684.131558][ T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 684.143662][ T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 684.166132][ T73] bond0 (unregistering): Released all slaves [ 684.711568][ T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 684.749891][ T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 684.767116][ T73] bond0 (unregistering): Released all slaves [ 685.206440][T11299] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.221245][T11299] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.228560][T11299] bridge_slave_0: entered allmulticast mode [ 685.257096][T11299] bridge_slave_0: entered promiscuous mode [ 685.283197][T11299] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.298121][T11299] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.328841][T11299] bridge_slave_1: entered allmulticast mode [ 685.362487][T11299] bridge_slave_1: entered promiscuous mode [ 687.926826][T11299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 688.135359][ T943] libceph: connect (1)[c::]:6789 error -101 [ 688.174704][ T943] libceph: mon0 (1)[c::]:6789 connect error [ 688.203733][T11572] ceph: No mds server is up or the cluster is laggy [ 688.216562][T11299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 688.531530][T11299] team0: Port device team_slave_0 added [ 688.783245][T11299] team0: Port device team_slave_1 added [ 689.131640][T11299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 689.138615][T11299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 689.185020][T11299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 689.222028][T11299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 689.230625][T11299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 689.257571][T11299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 689.328819][ T73] hsr_slave_0: left promiscuous mode [ 689.394981][ T73] hsr_slave_1: left promiscuous mode [ 689.426066][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 689.453447][ T73] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 689.511542][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.487893][ T73] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 691.101880][ T73] hsr_slave_0: left promiscuous mode [ 691.114526][ T943] libceph: connect (1)[c::]:6789 error -101 [ 691.187118][T11600] ceph: No mds server is up or the cluster is laggy [ 691.510842][ T73] hsr_slave_1: left promiscuous mode [ 691.588968][ T943] libceph: mon0 (1)[c::]:6789 connect error [ 691.890726][ T73] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 692.080927][ T73] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 692.187240][ T73] hsr_slave_0: left promiscuous mode [ 692.283825][ T73] hsr_slave_1: left promiscuous mode [ 692.292766][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 692.319797][ T73] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 692.339119][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 692.350963][ T73] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 692.725321][T11613] No control pipe specified [ 693.843796][T11616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1334'. [ 693.890065][T11616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1334'. [ 693.920912][T11616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1334'. [ 694.212824][ T73] veth1_macvtap: left promiscuous mode [ 694.222700][ T73] veth0_macvtap: left promiscuous mode [ 694.228457][ T73] veth1_vlan: left promiscuous mode [ 694.252068][ T73] veth0_vlan: left promiscuous mode [ 694.359498][ T73] veth1_macvtap: left promiscuous mode [ 694.365287][ T73] veth0_macvtap: left promiscuous mode [ 694.375536][ T73] veth1_vlan: left promiscuous mode [ 694.385577][ T73] veth0_vlan: left promiscuous mode [ 695.388932][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.395339][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 698.062780][T11644] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 698.407433][T11650] loop2: detected capacity change from 0 to 512 [ 698.446035][T11650] EXT4-fs: Ignoring removed nobh option [ 698.802931][T11650] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1345: iget: bad i_size value: 38620345925642 [ 698.845123][T11650] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.1345: couldn't read orphan inode 15 (err -117) [ 698.907921][T11656] No control pipe specified [ 699.219504][T11650] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 700.793083][ T5879] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.380532][T11674] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 703.514038][T11686] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 704.006891][T11683] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 704.555455][ T73] team0 (unregistering): Port device team_slave_1 removed [ 705.010429][T11699] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 705.874044][ T73] team0 (unregistering): Port device team_slave_0 removed [ 706.909798][T11708] netlink: 'syz.6.1360': attribute type 2 has an invalid length. [ 708.734703][T11718] overlayfs: failed to clone upperpath [ 710.210351][ T5877] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 710.225942][ T5877] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 710.235011][ T5877] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 710.247346][ T5877] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 710.275536][ T5877] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 712.410202][ T5882] Bluetooth: hci6: command tx timeout [ 712.931172][T11745] overlayfs: missing 'lowerdir' [ 714.988433][ T5882] Bluetooth: hci6: command tx timeout [ 715.870542][ T6003] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 716.043225][ T6003] usb 3-1: config 1 interface 0 has no altsetting 0 [ 716.052956][ T6003] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 716.074151][ T6003] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.082624][ T6003] usb 3-1: Product: syz [ 716.086883][ T6003] usb 3-1: Manufacturer: syz [ 716.097093][ T6003] usb 3-1: SerialNumber: syz [ 717.835031][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 717.843451][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 717.950344][ T5882] Bluetooth: hci6: command tx timeout [ 718.460303][ T6003] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 718.510552][ T6003] usb 3-1: USB disconnect, device number 10 [ 718.788790][ T6003] usblp0: removed [ 718.798007][ T73] team0 (unregistering): Port device team_slave_1 removed [ 720.080100][ T5882] Bluetooth: hci6: command tx timeout [ 721.012412][ T73] team0 (unregistering): Port device team_slave_0 removed [ 728.081834][T11812] overlayfs: failed to clone upperpath [ 731.154161][T10569] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 731.164095][T10569] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 731.175268][T11834] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 731.175346][T11835] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 731.185681][T11834] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 731.202912][T11835] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 731.204159][T11834] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 731.213148][T11835] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 731.220482][T11834] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 731.227296][T11835] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 733.336388][T11835] Bluetooth: hci7: command tx timeout [ 733.623846][T11835] Bluetooth: hci8: command tx timeout [ 734.161411][T11859] overlayfs: failed to clone upperpath [ 735.360050][T11835] Bluetooth: hci7: command tx timeout [ 735.387927][ T73] team0 (unregistering): Port device team_slave_1 removed [ 736.211599][T11835] Bluetooth: hci8: command tx timeout [ 736.493817][T11871] loop2: detected capacity change from 0 to 128 [ 736.510471][T11871] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 736.523158][T11871] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 736.880431][ T73] team0 (unregistering): Port device team_slave_0 removed [ 737.440543][ T5882] Bluetooth: hci7: command tx timeout [ 738.270098][ T5882] Bluetooth: hci8: command tx timeout [ 739.522804][ T5882] Bluetooth: hci7: command tx timeout [ 739.757105][T11885] syz.2.1397 (11885): drop_caches: 2 [ 740.330037][ T5882] Bluetooth: hci8: command tx timeout [ 748.326621][T11917] input: syz0 as /devices/virtual/input/input12 [ 748.951804][T11917] loop2: detected capacity change from 0 to 512 [ 750.520678][ T30] audit: type=1326 audit(1757743092.911:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11911 comm="syz.6.1406" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f872958eba9 code=0x0 [ 750.612441][T11917] EXT4-fs warning (device loop2): ext4_multi_mount_protect:397: Unable to create kmmpd thread for loop2. [ 753.465251][T11946] loop2: detected capacity change from 0 to 32768 [ 753.701089][T11946] (syz.2.1411,11946,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 753.715145][T11946] (syz.2.1411,11946,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 753.799844][T11946] JBD2: Ignoring recovery information on journal [ 753.920242][T11946] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 755.217009][ T5879] ocfs2: Unmounting device (7,2) on (node local) [ 755.545025][T11961] Process accounting resumed [ 755.858575][T11729] chnl_net:caif_netlink_parms(): no params data found [ 756.804886][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 756.815742][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 758.219774][T11827] chnl_net:caif_netlink_parms(): no params data found [ 758.480855][T11985] loop2: detected capacity change from 0 to 32768 [ 758.508813][T11985] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1415 (11985) [ 758.639390][T11828] chnl_net:caif_netlink_parms(): no params data found [ 758.661226][T11985] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 758.671400][T11985] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 758.890803][T11985] BTRFS info (device loop2): enabling ssd optimizations [ 758.897810][T11985] BTRFS info (device loop2): enabling free space tree [ 760.629748][T12015] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 760.690446][ T5879] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 760.971062][T11729] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.990264][T11729] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.997546][T11729] bridge_slave_0: entered allmulticast mode [ 761.690001][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 761.880186][T11729] bridge_slave_0: entered promiscuous mode [ 762.612039][T11729] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.630529][T11729] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.650324][T11729] bridge_slave_1: entered allmulticast mode [ 762.658461][T11729] bridge_slave_1: entered promiscuous mode [ 762.961236][T12033] random: crng reseeded on system resumption [ 763.303044][T11827] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.330451][T11827] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.350354][T11827] bridge_slave_0: entered allmulticast mode [ 763.377663][T11827] bridge_slave_0: entered promiscuous mode [ 763.674750][T11729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 763.712152][T11729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 763.816808][T11827] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.830125][T11827] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.847751][T11827] bridge_slave_1: entered allmulticast mode [ 763.879055][T11827] bridge_slave_1: entered promiscuous mode [ 763.926672][T11828] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.938734][T11828] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.957714][T11828] bridge_slave_0: entered allmulticast mode [ 763.987181][T11828] bridge_slave_0: entered promiscuous mode [ 764.078286][T11828] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.103130][T11828] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.122112][T11828] bridge_slave_1: entered allmulticast mode [ 764.146817][T11828] bridge_slave_1: entered promiscuous mode [ 764.202159][T11729] team0: Port device team_slave_0 added [ 764.286532][T11827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 764.382465][T11828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 764.407208][T11729] team0: Port device team_slave_1 added [ 764.422965][T11827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 764.494337][T11828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 766.781605][T11827] team0: Port device team_slave_0 added [ 767.140809][T11828] team0: Port device team_slave_0 added [ 767.715069][T11828] team0: Port device team_slave_1 added [ 768.532606][T11729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 768.539731][T11729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 768.567403][T11729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 768.583304][T11827] team0: Port device team_slave_1 added [ 768.644537][T11828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 768.665862][T11828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 768.703187][T11828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 768.786359][T11828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 768.807872][T11828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 768.845257][T11828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 768.857798][T11827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 768.865145][T11827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 768.892158][T11827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 768.927039][ T73] bridge_slave_1: left allmulticast mode [ 768.935230][ T73] bridge_slave_1: left promiscuous mode [ 768.980588][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.265489][ T73] bridge_slave_0: left allmulticast mode [ 769.294547][ T73] bridge_slave_0: left promiscuous mode [ 769.357670][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.464348][ T73] bridge_slave_1: left allmulticast mode [ 771.534893][ T73] bridge_slave_1: left promiscuous mode [ 771.561889][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.546375][ T73] bridge_slave_0: left allmulticast mode [ 772.571305][ T73] bridge_slave_0: left promiscuous mode [ 772.591184][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.883504][ T73] bridge_slave_1: left allmulticast mode [ 772.929958][ T73] bridge_slave_1: left promiscuous mode [ 772.935776][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.081354][ T73] bridge_slave_0: left allmulticast mode [ 773.110329][ T73] bridge_slave_0: left promiscuous mode [ 773.116155][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.660819][T11835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 774.672200][T11835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 774.680212][T11835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 774.689205][T11835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 774.697563][T11835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 774.791237][ T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 775.083833][ T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 776.058393][ T73] bond0 (unregistering): Released all slaves [ 776.559107][ T73] bond0 (unregistering): Released all slaves [ 776.852282][ T5882] Bluetooth: hci0: command tx timeout [ 778.901178][ T5882] Bluetooth: hci0: command tx timeout [ 779.208533][ T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 779.226810][ T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 779.241297][ T73] bond0 (unregistering): Released all slaves [ 780.430303][ T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 780.468157][ T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 780.503987][ T73] bond0 (unregistering): Released all slaves [ 780.724600][ T73] bond0 (unregistering): Released all slaves [ 780.765813][T11827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 780.774552][T11827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.803058][T11827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 781.064983][ T5882] Bluetooth: hci0: command tx timeout [ 781.575784][T11827] hsr_slave_0: entered promiscuous mode [ 781.779457][T11827] hsr_slave_1: entered promiscuous mode [ 781.816982][ T73] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 781.830300][ T73] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 781.849292][ T73] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 781.970153][T12161] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(3նi>f_ٮ,<_eF" [ 781.981909][T12161] CUSE: unknown device info "3ܟ,̘" [ 781.987780][T12161] CUSE: unknown device info "J2S Z !e/J+-na4D|G$5O~q [ 781.987780][T12161] fzXSAxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 782.007270][T12161] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TMM|" [ 782.019007][T12161] CUSE: DEVNAME unspecified [ 782.068503][ T30] audit: type=1326 audit(1757743125.111:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12158 comm="syz.2.1446" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4a4458eba9 code=0x0 [ 782.808831][ T73] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 783.130001][ T5882] Bluetooth: hci0: command tx timeout [ 784.113457][ T73] hsr_slave_0: left promiscuous mode [ 784.172576][T12168] loop2: detected capacity change from 0 to 128 [ 784.208931][ T73] hsr_slave_1: left promiscuous mode [ 784.231648][ T73] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 784.256610][T12168] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 784.274185][ T73] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 784.327518][T12168] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 785.089492][T12181] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 785.765402][ T73] team0 (unregistering): Port device team_slave_1 removed [ 785.930540][ T73] team0 (unregistering): Port device team_slave_0 removed [ 786.652677][T11835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 787.065114][T12198] overlayfs: failed to clone upperpath [ 787.760364][T11835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 787.782329][T11835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 788.164038][T11835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 788.193314][T12201] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 788.330473][T11835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 790.038988][T12210] loop2: detected capacity change from 0 to 4096 [ 790.047910][T12210] ntfs3: Bad value for 'uid' [ 790.052845][T12210] ntfs3: Bad value for 'uid' [ 790.475660][T11835] Bluetooth: hci2: command tx timeout [ 790.514072][ T5882] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 790.524258][ T5882] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 790.551538][ T5882] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 790.591315][ T5882] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 790.599185][ T5882] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 790.631369][ T73] team0 (unregistering): Port device team_slave_1 removed [ 791.681193][ T73] team0 (unregistering): Port device team_slave_0 removed [ 793.042642][ T5882] Bluetooth: hci2: command tx timeout [ 793.064234][ T5882] Bluetooth: hci4: command tx timeout [ 793.169875][ T30] audit: type=1326 audit(1757743136.201:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12222 comm="syz.4.1457" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcba818eba9 code=0x0 [ 795.124927][ T5882] Bluetooth: hci4: command tx timeout [ 795.130430][T11835] Bluetooth: hci2: command tx timeout [ 795.396605][T12238] loop2: detected capacity change from 0 to 2048 [ 795.399206][ T73] team0 (unregistering): Port device team_slave_1 removed [ 795.539943][T12240] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1461'. [ 796.341596][T12183] udevd[12183]: incorrect nilfs2 checksum on /dev/loop2 [ 796.662806][ T73] team0 (unregistering): Port device team_slave_0 removed [ 797.000745][T12247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1462'. [ 797.012224][T12247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1462'. [ 797.023389][T12247] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1462'. [ 797.230201][ T5882] Bluetooth: hci2: command tx timeout [ 797.235716][T11835] Bluetooth: hci4: command tx timeout [ 797.969687][T12251] hub 6-0:1.0: USB hub found [ 797.979710][T12251] hub 6-0:1.0: 1 port detected [ 798.607197][T11828] hsr_slave_0: entered promiscuous mode [ 798.633939][T11828] hsr_slave_1: entered promiscuous mode [ 798.651383][T11828] debugfs: 'hsr0' already exists in 'hsr' [ 798.657128][T11828] Cannot create hsr debugfs directory [ 798.701623][T12195] wlan0 speed is unknown, defaulting to 1000 [ 798.708000][T12195] wlan0 speed is unknown, defaulting to 1000 [ 798.717975][T12195] wlan0 speed is unknown, defaulting to 1000 [ 798.731228][T12195] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 798.748593][T12195] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 798.769061][T12192] wlan0 speed is unknown, defaulting to 1000 [ 798.792983][T12246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1462'. [ 798.813217][T12195] wlan0 speed is unknown, defaulting to 1000 [ 798.813350][T12246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1462'. [ 798.821730][T12195] wlan0 speed is unknown, defaulting to 1000 [ 798.837797][T12195] wlan0 speed is unknown, defaulting to 1000 [ 798.845942][T12195] wlan0 speed is unknown, defaulting to 1000 [ 798.854196][T12195] wlan0 speed is unknown, defaulting to 1000 [ 798.864192][T12195] wlan0 speed is unknown, defaulting to 1000 [ 798.872360][T12195] wlan0 speed is unknown, defaulting to 1000 [ 798.880724][T12195] wlan0 speed is unknown, defaulting to 1000 [ 799.095116][T12111] wlan0 speed is unknown, defaulting to 1000 [ 799.280486][T11835] Bluetooth: hci4: command tx timeout [ 800.427277][T12214] wlan0 speed is unknown, defaulting to 1000 [ 801.112043][T12272] overlayfs: failed to clone upperpath [ 803.909349][T12192] chnl_net:caif_netlink_parms(): no params data found [ 804.695910][T12111] chnl_net:caif_netlink_parms(): no params data found [ 805.098976][T12317] loop2: detected capacity change from 0 to 128 [ 805.202812][T12317] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 805.223325][T12317] ext4 filesystem being mounted at /291/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 805.322037][T12192] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.540133][T12192] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.547535][T12192] bridge_slave_0: entered allmulticast mode [ 806.310161][T12192] bridge_slave_0: entered promiscuous mode [ 807.519112][T12327] /dev/nullb0: Can't lookup blockdev [ 807.539721][ T30] audit: type=1326 audit(1757743150.581:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12322 comm="syz.6.1473" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f872958eba9 code=0x0 [ 808.378310][T12192] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.545520][T12192] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.553294][T12192] bridge_slave_1: entered allmulticast mode [ 808.568972][T12192] bridge_slave_1: entered promiscuous mode [ 808.785461][ T5879] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 808.914225][T12214] chnl_net:caif_netlink_parms(): no params data found [ 809.093095][T12192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 809.191376][T12192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 809.962198][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 810.269967][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 810.293835][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 810.314097][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 810.348310][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 810.372494][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 810.398962][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 810.429971][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 810.460026][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.660438][T12192] team0: Port device team_slave_0 added [ 810.934611][T12361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1477'. [ 810.944164][T12361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1477'. [ 810.953843][T12361] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1477'. [ 811.453336][T12192] team0: Port device team_slave_1 added [ 811.470049][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 811.475569][ T9] usbtmc 3-1:16.0: can't read capabilities [ 811.532792][T12111] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.550970][T12111] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.558212][T12111] bridge_slave_0: entered allmulticast mode [ 811.585858][T12111] bridge_slave_0: entered promiscuous mode [ 811.617799][T12111] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.624918][T12359] lo speed is unknown, defaulting to 1000 [ 811.642186][T12111] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.649447][T12111] bridge_slave_1: entered allmulticast mode [ 811.682412][T12111] bridge_slave_1: entered promiscuous mode [ 811.779576][ T9] usb 3-1: USB disconnect, device number 11 [ 811.790263][T12343] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 811.925254][T12359] lo speed is unknown, defaulting to 1000 [ 811.927162][T12192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 811.979777][T12192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 812.059981][T12192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 812.143088][T12111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 812.244253][T12359] lo speed is unknown, defaulting to 1000 [ 812.251437][T12192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 812.258393][T12192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 812.262727][T12359] infiniband 3yz0: RDMA CMA: cma_listen_on_dev, error -98 [ 812.354353][T12192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 812.394232][T12111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 812.416214][T12359] lo speed is unknown, defaulting to 1000 [ 812.428729][T12359] lo speed is unknown, defaulting to 1000 [ 812.436581][T12359] lo speed is unknown, defaulting to 1000 [ 812.444450][T12359] lo speed is unknown, defaulting to 1000 [ 812.452935][T12359] lo speed is unknown, defaulting to 1000 [ 812.460744][T12359] lo speed is unknown, defaulting to 1000 [ 812.468529][T12359] lo speed is unknown, defaulting to 1000 [ 812.476306][T12359] lo speed is unknown, defaulting to 1000 [ 812.484764][T12359] lo speed is unknown, defaulting to 1000 [ 812.492588][T12359] lo speed is unknown, defaulting to 1000 [ 812.500427][T12359] lo speed is unknown, defaulting to 1000 [ 812.657837][T12214] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.673481][T12214] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.684423][T12214] bridge_slave_0: entered allmulticast mode [ 812.692500][T12214] bridge_slave_0: entered promiscuous mode [ 812.703336][T12214] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.710499][T12214] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.717709][T12214] bridge_slave_1: entered allmulticast mode [ 812.742397][T12214] bridge_slave_1: entered promiscuous mode [ 812.850769][T12378] loop2: detected capacity change from 0 to 128 [ 813.026039][T12378] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 813.144707][T12378] ext4 filesystem being mounted at /293/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 814.953846][ T5879] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 815.049013][T12214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 815.092831][T12214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 815.366126][T12192] hsr_slave_0: entered promiscuous mode [ 815.395707][T12192] hsr_slave_1: entered promiscuous mode [ 815.440287][T12192] debugfs: 'hsr0' already exists in 'hsr' [ 815.604095][T12192] Cannot create hsr debugfs directory [ 816.092070][T12111] team0: Port device team_slave_0 added [ 816.215776][T12392] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1483'. [ 816.279449][T12111] team0: Port device team_slave_1 added [ 817.739675][T12214] team0: Port device team_slave_0 added [ 818.207412][T12406] overlayfs: failed to resolve './file0': -2 [ 818.208239][T12412] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 818.280952][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.287400][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 818.664563][T12214] team0: Port device team_slave_1 added [ 818.806628][T12111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 818.827151][T12111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 818.854842][T12111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 820.980328][T12214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 820.987385][T12214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 821.090350][T12214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 822.893900][T12111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 822.902726][T12111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 822.970758][T12111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 823.780715][T12214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 823.787673][T12214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 823.948187][T12214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 825.249454][T12214] hsr_slave_0: entered promiscuous mode [ 825.290359][T12214] hsr_slave_1: entered promiscuous mode [ 825.296793][T12214] debugfs: 'hsr0' already exists in 'hsr' [ 825.350205][T12214] Cannot create hsr debugfs directory [ 825.487737][T12111] hsr_slave_0: entered promiscuous mode [ 825.511904][T12111] hsr_slave_1: entered promiscuous mode [ 825.518358][T12111] debugfs: 'hsr0' already exists in 'hsr' [ 825.528851][T12111] Cannot create hsr debugfs directory [ 825.815798][ T73] bridge_slave_1: left allmulticast mode [ 825.870095][ T73] bridge_slave_1: left promiscuous mode [ 825.913017][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.963805][ T73] bridge_slave_0: left allmulticast mode [ 825.969480][ T73] bridge_slave_0: left promiscuous mode [ 825.990751][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.035564][ T73] bridge_slave_1: left allmulticast mode [ 826.088023][ T73] bridge_slave_1: left promiscuous mode [ 826.111047][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.132719][ T73] bridge_slave_0: left allmulticast mode [ 826.139528][ T73] bridge_slave_0: left promiscuous mode [ 826.210367][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.225573][ T73] bridge_slave_1: left allmulticast mode [ 826.240279][ T73] bridge_slave_1: left promiscuous mode [ 826.246064][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.287672][ T73] bridge_slave_0: left allmulticast mode [ 826.299796][ T73] bridge_slave_0: left promiscuous mode [ 826.306782][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.425103][ T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 826.437905][ T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 826.452178][ T73] bond0 (unregistering): Released all slaves [ 826.580550][ T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 826.593332][ T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 826.605613][ T73] bond0 (unregistering): Released all slaves [ 826.725936][ T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 826.737066][ T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 826.748240][ T73] bond0 (unregistering): Released all slaves [ 827.170792][ T73] hsr_slave_0: left promiscuous mode [ 827.176768][ T73] hsr_slave_1: left promiscuous mode [ 827.183163][ T73] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 827.192433][ T73] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 827.208227][ T73] hsr_slave_0: left promiscuous mode [ 827.214643][ T73] hsr_slave_1: left promiscuous mode [ 827.221619][ T73] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 827.229631][ T73] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 827.238522][ T73] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 827.336500][ T73] team0 (unregistering): Port device team_slave_1 removed [ 827.375538][ T73] team0 (unregistering): Port device team_slave_0 removed [ 827.636638][ T73] team0 (unregistering): Port device team_slave_1 removed [ 827.668822][ T73] team0 (unregistering): Port device team_slave_0 removed [ 827.914593][ T73] team0 (unregistering): Port device team_slave_1 removed [ 827.947437][ T73] team0 (unregistering): Port device team_slave_0 removed [ 828.166921][T12192] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.314422][T12192] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.469798][T12192] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.608648][T12192] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.631439][T12214] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 829.646990][T12214] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 829.775676][T12214] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 829.788032][T12214] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 830.162089][ T5882] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 830.180375][ T5882] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 830.194877][ T5882] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 830.212137][ T5882] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 830.231455][ T5882] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 830.432860][T12490] wlan0 speed is unknown, defaulting to 1000 [ 830.436148][T12192] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 830.485112][T12490] lo speed is unknown, defaulting to 1000 [ 830.489805][T12214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 830.509605][T12192] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 830.535597][T12192] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 830.577483][T12192] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 830.756042][T12214] 8021q: adding VLAN 0 to HW filter on device team0 [ 830.793836][ T967] bridge0: port 1(bridge_slave_0) entered blocking state [ 830.801040][ T967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 830.851539][ T12] bridge_slave_1: left allmulticast mode [ 830.857228][ T12] bridge_slave_1: left promiscuous mode [ 830.863453][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.881591][ T12] bridge_slave_0: left allmulticast mode [ 830.887260][ T12] bridge_slave_0: left promiscuous mode [ 830.893720][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.027792][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 831.055975][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 831.069135][ T12] bond0 (unregistering): Released all slaves [ 831.165938][ T9617] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.173173][ T9617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 831.303488][ T12] hsr_slave_0: left promiscuous mode [ 831.309420][ T12] hsr_slave_1: left promiscuous mode [ 831.316763][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 831.326521][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 831.509408][ T12] team0 (unregistering): Port device team_slave_1 removed [ 831.546296][ T12] team0 (unregistering): Port device team_slave_0 removed [ 831.792903][T12490] chnl_net:caif_netlink_parms(): no params data found [ 832.023838][T12192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 832.036709][T12490] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.061401][T12490] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.068750][T12490] bridge_slave_0: entered allmulticast mode [ 832.081782][T12490] bridge_slave_0: entered promiscuous mode [ 832.091798][T12490] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.098935][T12490] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.107560][T12490] bridge_slave_1: entered allmulticast mode [ 832.118694][T12490] bridge_slave_1: entered promiscuous mode [ 832.189594][T12192] 8021q: adding VLAN 0 to HW filter on device team0 [ 832.222099][T12490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 832.247148][ T9617] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.254355][ T9617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 832.285525][T12490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 832.320825][T11835] Bluetooth: hci6: command tx timeout [ 832.402786][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.410003][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 832.429253][T12490] team0: Port device team_slave_0 added [ 832.459528][T12490] team0: Port device team_slave_1 added [ 832.537938][T12214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 832.561613][T12490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 832.568568][T12490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 832.599649][T12490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 832.619145][T12490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 832.627833][T12490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 832.660588][T12490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 832.834844][T12490] hsr_slave_0: entered promiscuous mode [ 832.846330][T12490] hsr_slave_1: entered promiscuous mode [ 833.381402][T12214] veth0_vlan: entered promiscuous mode [ 833.421835][T12214] veth1_vlan: entered promiscuous mode [ 833.447077][T12192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 833.484668][T12490] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 833.507914][T12490] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 833.523027][T12490] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 833.542211][T12490] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 833.593100][T12214] veth0_macvtap: entered promiscuous mode [ 833.634420][T12214] veth1_macvtap: entered promiscuous mode [ 833.722452][T12214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 833.749540][T12214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 833.764537][T12192] veth0_vlan: entered promiscuous mode [ 833.805002][ T73] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.836942][T12192] veth1_vlan: entered promiscuous mode [ 833.871603][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.932933][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.973648][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.076983][T12490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 834.115672][T12192] veth0_macvtap: entered promiscuous mode [ 834.136832][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.143536][T12192] veth1_macvtap: entered promiscuous mode [ 834.164078][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.215938][T12192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 834.257174][T12490] 8021q: adding VLAN 0 to HW filter on device team0 [ 834.284169][T12192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 834.330520][T11214] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.337691][T11214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 834.364305][ T73] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.375978][ T9617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.387989][T11214] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.395179][T11214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 834.402420][ T9617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.410827][T11835] Bluetooth: hci6: command tx timeout [ 834.452598][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.493188][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.540033][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.203018][T12537] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 837.621160][T11835] Bluetooth: hci6: command tx timeout [ 839.688215][T11835] Bluetooth: hci6: command tx timeout [ 840.935617][ T967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 840.988641][ T967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.275777][T12549] loop7: detected capacity change from 0 to 128 [ 842.772272][T12549] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 842.852053][T12549] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 842.877619][ T9617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.141236][ T9617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.479985][T12569] gfs2: not a GFS2 filesystem [ 844.157592][ T30] audit: type=1326 audit(1757743186.541:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12562 comm="syz.2.1499" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4a4458eba9 code=0x0 [ 846.383802][T12214] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 847.261700][T12587] loop7: detected capacity change from 0 to 764 [ 847.978988][T12590] loop2: detected capacity change from 0 to 256 [ 848.680466][T12591] overlayfs: failed to clone upperpath [ 849.969144][T12490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 849.970575][T12590] loop2: detected capacity change from 0 to 2048 [ 850.029714][T12590] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=18576, location=18576 [ 850.205150][T12590] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 850.296755][T12602] loop7: detected capacity change from 0 to 512 [ 850.356818][T12490] veth0_vlan: entered promiscuous mode [ 850.982955][T12490] veth1_vlan: entered promiscuous mode [ 851.082018][T12602] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 851.160811][T12602] EXT4-fs (loop7): mount failed [ 852.503802][T12490] veth0_macvtap: entered promiscuous mode [ 852.669779][ T5882] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 852.702661][T12619] loop7: detected capacity change from 0 to 128 [ 852.712040][ T5882] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 852.723995][ T5882] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 852.844928][ T5882] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 852.883602][ T5882] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 853.369334][T12619] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 853.470872][T12490] veth1_macvtap: entered promiscuous mode [ 853.481703][T12619] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 854.774967][T12490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 855.039289][T12214] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 855.398568][T12641] block device autoloading is deprecated and will be removed. [ 855.920871][ T5882] Bluetooth: hci0: command tx timeout [ 856.430979][T12652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 856.558574][T12652] overlayfs: failed to resolve './file1': -2 [ 856.867314][T11214] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.355897][T12490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 857.644820][T12617] wlan0 speed is unknown, defaulting to 1000 [ 857.650744][ T967] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.690999][ T967] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.731648][ T967] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.000918][ T5882] Bluetooth: hci0: command tx timeout [ 858.053224][ T967] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.220949][T12617] lo speed is unknown, defaulting to 1000 [ 858.655596][T11214] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.944200][T11214] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.097255][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 859.222717][T11214] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.285752][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 859.762526][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 859.802926][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.090191][ T5882] Bluetooth: hci0: command tx timeout [ 861.247030][T11214] bridge_slave_1: left allmulticast mode [ 861.253703][T11214] bridge_slave_1: left promiscuous mode [ 861.261403][T11214] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.161835][ T5882] Bluetooth: hci0: command tx timeout [ 863.053203][T11214] bridge_slave_0: left allmulticast mode [ 863.058889][T11214] bridge_slave_0: left promiscuous mode [ 863.105757][T11214] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.974830][ T30] audit: type=1326 audit(1757743207.021:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12690 comm="syz.6.1518" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f872958eba9 code=0x0 [ 864.004649][T12700] 9pnet_fd: Insufficient options for proto=fd [ 865.439259][ T6104] libceph: connect (1)[c::]:6789 error -101 [ 865.468012][ T6104] libceph: mon0 (1)[c::]:6789 connect error [ 865.730515][ T6104] libceph: connect (1)[c::]:6789 error -101 [ 865.944027][ T6104] libceph: mon0 (1)[c::]:6789 connect error [ 866.238127][T12727] overlayfs: failed to resolve './cgroup': -2 [ 867.094904][T12709] ceph: No mds server is up or the cluster is laggy [ 867.823151][T12741] tmpfs: Unknown parameter '' [ 868.246866][T11214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 868.329313][T11214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 868.369652][T11214] bond0 (unregistering): Released all slaves [ 869.193057][T12756] loop3: detected capacity change from 0 to 128 [ 870.418194][T12756] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 870.485151][T12756] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 870.543905][T12617] chnl_net:caif_netlink_parms(): no params data found [ 871.170718][T12767] syz.3.1531 (pid 12767) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 872.366461][T12490] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 873.770819][T12778] loop7: detected capacity change from 0 to 32768 [ 874.122368][T12552] Dev loop7 Sun disklabel: Csum bad, label corrupted [ 874.947258][T12552] loop7: unable to read partition table [ 875.152941][T12786] input: syz0 as /devices/virtual/input/input13 [ 875.810147][T12778] Dev loop7 Sun disklabel: Csum bad, label corrupted [ 875.825457][T12778] Dev loop7: unable to read RDB block 8 [ 875.831277][T12778] loop7: unable to read partition table [ 875.837645][T12778] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 878.143293][T12797] fuse: Bad value for 'fd' [ 878.251136][T11214] hsr_slave_0: left promiscuous mode [ 878.445524][T11214] hsr_slave_1: left promiscuous mode [ 878.631110][T11214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 879.312664][T11214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 879.372119][T11214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 879.394843][T11214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 880.351453][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 881.873886][T11214] veth1_macvtap: left promiscuous mode [ 881.877408][T12819] 9pnet_fd: Insufficient options for proto=fd [ 882.176664][T11214] veth0_macvtap: left promiscuous mode [ 883.090213][T11214] veth1_vlan: left promiscuous mode [ 883.095612][T11214] veth0_vlan: left promiscuous mode [ 883.524020][T12830] loop7: detected capacity change from 0 to 128 [ 883.765764][ T30] audit: type=1800 audit(1757743226.771:69): pid=12830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1545" name="file1" dev="loop7" ino=1048663 res=0 errno=0 [ 887.556352][T12859] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 887.810426][T11835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 887.860871][T11835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 887.882511][T11835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 887.891781][T11835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 887.899743][T11835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 887.911116][ T30] audit: type=1326 audit(1757743230.941:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12867 comm="syz.6.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f872958eba9 code=0x7ffc0000 [ 887.958233][ T30] audit: type=1326 audit(1757743230.991:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12867 comm="syz.6.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f872958eba9 code=0x7ffc0000 [ 887.980679][ T30] audit: type=1326 audit(1757743230.991:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12867 comm="syz.6.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f872958eba9 code=0x7ffc0000 [ 888.027494][ T30] audit: type=1326 audit(1757743230.991:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12867 comm="syz.6.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f872958eba9 code=0x7ffc0000 [ 888.149996][ T30] audit: type=1326 audit(1757743231.021:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12867 comm="syz.6.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f872958eba9 code=0x7ffc0000 [ 888.244784][ T30] audit: type=1326 audit(1757743231.021:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12867 comm="syz.6.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f872958eba9 code=0x7ffc0000 [ 888.267708][ T30] audit: type=1326 audit(1757743231.071:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12867 comm="syz.6.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f872958eba9 code=0x7ffc0000 [ 888.338116][ T30] audit: type=1326 audit(1757743231.071:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12867 comm="syz.6.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f872958eba9 code=0x7ffc0000 [ 888.513560][ T30] audit: type=1326 audit(1757743231.071:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12867 comm="syz.6.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f872958eba9 code=0x7ffc0000 [ 890.000914][ T5882] Bluetooth: hci2: command tx timeout [ 890.592853][T11214] team0 (unregistering): Port device team_slave_1 removed [ 890.715212][T11214] team0 (unregistering): Port device team_slave_0 removed [ 891.195253][T12829] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 891.205975][T12829] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 891.215759][T12829] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 891.514193][T12864] wlan0 speed is unknown, defaulting to 1000 [ 891.634546][T12864] lo speed is unknown, defaulting to 1000 [ 891.641832][T12617] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.678667][T12617] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.696447][T12617] bridge_slave_0: entered allmulticast mode [ 891.717103][T12617] bridge_slave_0: entered promiscuous mode [ 891.759228][T12617] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.805844][T12617] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.819250][T12617] bridge_slave_1: entered allmulticast mode [ 891.838133][T12617] bridge_slave_1: entered promiscuous mode [ 891.969652][T12617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 892.007919][T12617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 892.080904][ T5882] Bluetooth: hci2: command tx timeout [ 892.130595][T12617] team0: Port device team_slave_0 added [ 892.157551][T12617] team0: Port device team_slave_1 added [ 892.299041][T12617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 892.318857][T12617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 892.369368][T12617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 892.385788][T12617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 892.398342][T12617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 892.425195][T12617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 892.508453][T11214] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.749112][T11214] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.804736][T12617] hsr_slave_0: entered promiscuous mode [ 892.833169][T12617] hsr_slave_1: entered promiscuous mode [ 892.839551][T12617] debugfs: 'hsr0' already exists in 'hsr' [ 892.856827][T12617] Cannot create hsr debugfs directory [ 892.938953][T11214] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.985805][T12864] chnl_net:caif_netlink_parms(): no params data found [ 893.076130][T11214] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.386948][T12864] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.404979][T12864] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.424813][T12864] bridge_slave_0: entered allmulticast mode [ 893.438833][T12864] bridge_slave_0: entered promiscuous mode [ 893.572488][T12864] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.586542][T12864] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.597948][T12864] bridge_slave_1: entered allmulticast mode [ 893.629360][T12864] bridge_slave_1: entered promiscuous mode [ 893.822766][T12864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 893.843244][T11214] bridge_slave_1: left allmulticast mode [ 893.848990][T11214] bridge_slave_1: left promiscuous mode [ 893.862146][T11214] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.872286][T11214] bridge_slave_0: left allmulticast mode [ 893.877935][T11214] bridge_slave_0: left promiscuous mode [ 893.884601][T11214] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.160325][ T5882] Bluetooth: hci2: command tx timeout [ 894.365915][T11214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 894.378427][T11214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 894.390122][T11214] bond0 (unregistering): Released all slaves [ 894.416883][T12864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 894.549511][T12864] team0: Port device team_slave_0 added [ 894.642239][T12864] team0: Port device team_slave_1 added [ 894.780347][T12864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 894.787317][T12864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 894.814585][T12864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 894.954137][T12864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 894.963332][T12864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 894.995047][T12864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 895.209122][T11214] hsr_slave_0: left promiscuous mode [ 895.241515][T11214] hsr_slave_1: left promiscuous mode [ 895.247567][T11214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 895.269934][T11214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 895.297498][T11214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 895.305299][T11214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 895.346856][T11214] veth1_macvtap: left promiscuous mode [ 895.360192][T11214] veth0_macvtap: left promiscuous mode [ 895.365911][T11214] veth1_vlan: left promiscuous mode [ 895.387793][T11214] veth0_vlan: left promiscuous mode [ 896.240564][ T5882] Bluetooth: hci2: command tx timeout [ 896.623960][T11214] team0 (unregistering): Port device team_slave_1 removed [ 896.743209][T11214] team0 (unregistering): Port device team_slave_0 removed [ 897.444096][T12864] hsr_slave_0: entered promiscuous mode [ 897.461333][T12864] hsr_slave_1: entered promiscuous mode [ 897.467721][T12864] debugfs: 'hsr0' already exists in 'hsr' [ 897.476744][T12864] Cannot create hsr debugfs directory [ 897.956667][T12617] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 897.986578][T12617] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 898.020699][T12617] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 898.039224][T12617] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 898.064306][T11214] IPVS: stop unused estimator thread 0... [ 898.171706][T12864] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.287970][T12864] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.388699][T12864] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.439577][T12617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 898.475646][T12617] 8021q: adding VLAN 0 to HW filter on device team0 [ 898.510977][T12864] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.537002][ T6811] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.544186][ T6811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 898.572501][ T6811] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.579677][ T6811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 898.746979][T12617] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 898.931471][T12864] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 898.955198][T12864] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 899.001124][T12864] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 899.025375][T12864] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 899.292713][T12864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 899.335587][T12864] 8021q: adding VLAN 0 to HW filter on device team0 [ 899.378745][ T9617] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.385964][ T9617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 899.433572][ T9617] bridge0: port 2(bridge_slave_1) entered blocking state [ 899.440770][ T9617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 899.516489][T12617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 899.711621][T12617] veth0_vlan: entered promiscuous mode [ 899.743514][T12617] veth1_vlan: entered promiscuous mode [ 899.835110][T12617] veth0_macvtap: entered promiscuous mode [ 899.879069][T12617] veth1_macvtap: entered promiscuous mode [ 899.968455][T12617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 899.998935][T12617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 900.065644][ T6033] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.088503][ T6811] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.121186][ T6811] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.144706][ T6811] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.278926][T12864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 900.362302][T11214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 900.389995][T11214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 900.468829][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 900.506614][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 900.809438][ T5882] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 902.138897][T12864] veth0_vlan: entered promiscuous mode [ 902.168358][T13073] loop1: detected capacity change from 0 to 128 [ 902.317285][T13073] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 902.405866][T13073] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 903.771916][T13087] fuse: Bad value for 'fd' [ 904.421927][T12617] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 904.490543][T12864] veth1_vlan: entered promiscuous mode [ 904.992274][T12864] veth0_macvtap: entered promiscuous mode [ 907.522131][T12864] veth1_macvtap: entered promiscuous mode [ 908.114400][T12864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 908.199614][T13113] loop1: detected capacity change from 0 to 16 [ 908.225284][T13113] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 908.255369][T13105] fuse: Invalid rootmode [ 908.264871][T13113] cramfs: bad root offset 20556 [ 908.276751][T12864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 908.376823][ T1097] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.458688][ T1097] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.548017][ T1097] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.606095][ T1097] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.831456][ T9617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 910.108821][ T9617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 911.706826][T13141] loop7: detected capacity change from 0 to 32768 [ 911.782182][T13141] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 911.844699][T13141] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 911.929053][T13128] (syz.7.1576,13128,1):ocfs2_double_lock:1192 ERROR: status = -2 [ 911.943342][T11214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 911.966708][T11214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 911.987878][T13128] (syz.7.1576,13128,1):ocfs2_rename:1301 ERROR: status = -2 [ 912.060194][T13128] (syz.7.1576,13128,0):ocfs2_rename:1702 ERROR: status = -2 [ 912.733773][ T943] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 913.303814][T13158] ceph: No mds server is up or the cluster is laggy [ 913.444893][ T5843] libceph: connect (1)[c::]:6789 error -101 [ 913.518638][ T5843] libceph: mon0 (1)[c::]:6789 connect error [ 913.752579][ T943] usb 2-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf [ 913.874519][ T943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.905307][ T943] ums-cypress 2-1:1.0: USB Mass Storage device detected [ 914.125436][T13169] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1548'. [ 914.680038][ T5964] IPVS: starting estimator thread 0... [ 914.890064][T13172] IPVS: using max 21 ests per chain, 50400 per kthread [ 915.860207][ T943] usb 2-1: USB disconnect, device number 13 [ 915.874717][ T5882] Bluetooth: hci1: unexpected event for opcode 0x0c1b [ 916.106769][T13184] syz.5.1584(13184): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 916.134335][T12214] ocfs2: Unmounting device (7,7) on (node local) [ 917.784493][ T5882] Bluetooth: hci4: command 0x0406 tx timeout [ 918.000547][T11835] Bluetooth: Wrong link type (-22) [ 918.498544][T13206] fuse: Bad value for 'fd' [ 918.766240][T13207] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 921.287111][T11835] Bluetooth: hci4: unexpected subevent 0x0e length: 30 > 15 [ 921.300096][T11835] Bluetooth: hci4: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 921.373164][T13238] loop1: detected capacity change from 0 to 128 [ 921.431787][T13238] hpfs: filesystem error: invalid number of hotfixes: 256, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 921.505096][T13238] hpfs: filesystem error: improperly stopped [ 921.535516][T13238] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 921.547876][T11835] Bluetooth: Wrong link type (-57) [ 921.578711][T13238] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 921.600781][T13238] hpfs: You really don't want any checks? You are crazy... [ 921.784951][T13238] hpfs: hpfs_map_sector(): read error [ 921.829428][T13238] hpfs: code page support is disabled [ 922.176673][T13238] ================================================================== [ 922.184775][T13238] BUG: KASAN: use-after-free in strcmp+0xa7/0xb0 [ 922.191125][T13238] Read of size 1 at addr ffff888066cb48a6 by task syz.1.1599/13238 [ 922.199028][T13238] [ 922.201341][T13238] CPU: 1 UID: 0 PID: 13238 Comm: syz.1.1599 Not tainted syzkaller #0 PREEMPT(full) [ 922.201375][T13238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 922.201392][T13238] Call Trace: [ 922.201402][T13238] [ 922.201412][T13238] dump_stack_lvl+0x116/0x1f0 [ 922.201457][T13238] print_report+0xcd/0x630 [ 922.201483][T13238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 922.201517][T13238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 922.201550][T13238] ? __phys_addr+0xe8/0x180 [ 922.201589][T13238] ? strcmp+0xa7/0xb0 [ 922.201611][T13238] kasan_report+0xe0/0x110 [ 922.201637][T13238] ? strcmp+0xa7/0xb0 [ 922.201666][T13238] strcmp+0xa7/0xb0 [ 922.201691][T13238] hpfs_get_ea+0x1f9/0xc90 [ 922.201737][T13238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 922.201773][T13238] ? __pfx_hpfs_get_ea+0x10/0x10 [ 922.201809][T13238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 922.201851][T13238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 922.201895][T13238] ? find_held_lock+0x2b/0x80 [ 922.201940][T13238] ? __pfx___might_resched+0x10/0x10 [ 922.201986][T13238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 922.202036][T13238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 922.202071][T13238] ? bdev_getblk+0x7c/0xe0 [ 922.202108][T13238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 922.202141][T13238] ? __bread_gfp+0xbe/0x3c0 [ 922.202175][T13238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 922.202208][T13238] ? hpfs_map_sector+0x1a8/0x390 [ 922.202238][T13238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 922.202274][T13238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 922.202306][T13238] ? hpfs_map_fnode+0x4bf/0x770 [ 922.202349][T13238] hpfs_read_inode+0x69e/0x1270 [ 922.202385][T13238] ? rcu_is_watching+0x12/0xc0 [ 922.202421][T13238] ? __pfx_hpfs_read_inode+0x10/0x10 [ 922.202458][T13238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 922.202491][T13238] ? inode_set_ctime_to_ts+0xca/0x1f0 [ 922.202524][T13238] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 922.202557][T13238] ? __pfx_hpfs_load_code_page+0x10/0x10 [ 922.202603][T13238] hpfs_fill_super+0x13e9/0x2230 [ 922.202635][T13238] ? __pfx_hpfs_fill_super+0x10/0x10 [ 922.202660][T13238] ? __pfx_snprintf+0x10/0x10 [ 922.202702][T13238] ? do_raw_spin_lock+0x12c/0x2b0 [ 922.202742][T13238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 922.202774][T13238] ? find_held_lock+0x2b/0x80 [ 922.202807][T13238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 922.202840][T13238] ? set_blocksize+0x406/0x500 [ 922.202874][T13238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 922.202907][T13238] ? sb_set_blocksize+0x176/0x1d0 [ 922.202938][T13238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 922.202972][T13238] ? setup_bdev_super+0x369/0x730 [ 922.203023][T13238] get_tree_bdev_flags+0x38c/0x620 [ 922.203081][T13238] ? __pfx_hpfs_fill_super+0x10/0x10 [ 922.203117][T13238] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 922.203177][T13238] ? apparmor_capable+0x114/0x1d0 [ 922.203217][T13238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 922.203251][T13238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 922.203283][T13238] ? security_capable+0x7e/0x260 [ 922.203313][T13238] vfs_get_tree+0x8e/0x340 [ 922.203350][T13238] path_mount+0x1513/0x2000 [ 922.203384][T13238] ? __pfx_path_mount+0x10/0x10 [ 922.203415][T13238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 922.203448][T13238] ? kmem_cache_free+0x2d1/0x4d0 [ 922.203489][T13238] ? putname+0x154/0x1a0 [ 922.203522][T13238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 922.203555][T13238] ? putname+0x154/0x1a0 [ 922.203588][T13238] ? __x64_sys_mount+0x28d/0x310 [ 922.203617][T13238] __x64_sys_mount+0x28d/0x310 [ 922.203648][T13238] ? __pfx___x64_sys_mount+0x10/0x10 [ 922.203678][T13238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 922.203735][T13238] do_syscall_64+0xcd/0x4e0 [ 922.203782][T13238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.203810][T13238] RIP: 0033:0x7f6fde99034a [ 922.203831][T13238] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 922.203860][T13238] RSP: 002b:00007f6fdf7d5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 922.203886][T13238] RAX: ffffffffffffffda RBX: 00007f6fdf7d5ef0 RCX: 00007f6fde99034a [ 922.203905][T13238] RDX: 000020000000a000 RSI: 0000200000000000 RDI: 00007f6fdf7d5eb0 [ 922.203923][T13238] RBP: 000020000000a000 R08: 00007f6fdf7d5ef0 R09: 0000000003200041 [ 922.203941][T13238] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000000000 [ 922.203959][T13238] R13: 00007f6fdf7d5eb0 R14: 0000000000009e15 R15: 0000200000000040 [ 922.203990][T13238] [ 922.203999][T13238] [ 922.641087][T13238] The buggy address belongs to the physical page: [ 922.647520][T13238] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x579 pfn:0x66cb4 [ 922.656446][T13238] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 922.663554][T13238] raw: 00fff00000000000 ffffea00019b2d48 ffffea00011480c8 0000000000000000 [ 922.672132][T13238] raw: 0000000000000579 0000000000000000 00000000ffffffff 0000000000000000 [ 922.680699][T13238] page dumped because: kasan: bad access detected [ 922.687098][T13238] page_owner tracks the page as freed [ 922.692444][T13238] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 13222, tgid 13221 (syz.3.1597), ts 920195291346, free_ts 921084519129 [ 922.710329][T13238] post_alloc_hook+0x1c0/0x230 [ 922.715104][T13238] get_page_from_freelist+0x132b/0x38e0 [ 922.720658][T13238] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 922.726564][T13238] alloc_pages_mpol+0x1fb/0x550 [ 922.731401][T13238] folio_alloc_mpol_noprof+0x36/0x2f0 [ 922.736773][T13238] shmem_alloc_folio+0x135/0x160 [ 922.741711][T13238] shmem_alloc_and_add_folio+0x499/0xc20 [ 922.747351][T13238] shmem_get_folio_gfp+0x67f/0x1600 [ 922.752554][T13238] shmem_fault+0x1fe/0xa30 [ 922.756978][T13238] __do_fault+0x10d/0x490 [ 922.761317][T13238] do_pte_missing+0xf50/0x3ba0 [ 922.766170][T13238] __handle_mm_fault+0x152a/0x2a50 [ 922.771303][T13238] handle_mm_fault+0x589/0xd10 [ 922.776067][T13238] __get_user_pages+0x551/0x34a0 [ 922.781000][T13238] populate_vma_page_range+0x267/0x3f0 [ 922.786542][T13238] __mm_populate+0x1d8/0x380 [ 922.791216][T13238] page last free pid 13231 tgid 13221 stack trace: [ 922.797790][T13238] free_unref_folios+0xa61/0x16b0 [ 922.802823][T13238] folios_put_refs+0x56f/0x740 [ 922.807578][T13238] shmem_undo_range+0x58f/0x1150 [ 922.812520][T13238] shmem_evict_inode+0x3a1/0xbe0 [ 922.817462][T13238] evict+0x3e6/0x920 [ 922.821525][T13238] iput+0x521/0x880 [ 922.825328][T13238] dentry_unlink_inode+0x29c/0x480 [ 922.830432][T13238] __dentry_kill+0x1d0/0x600 [ 922.835023][T13238] dput.part.0+0x4b1/0x9b0 [ 922.839477][T13238] dput+0x1f/0x30 [ 922.843136][T13238] __fput+0x51c/0xb70 [ 922.847116][T13238] task_work_run+0x150/0x240 [ 922.851700][T13238] do_exit+0x86f/0x2bf0 [ 922.855874][T13238] do_group_exit+0xd3/0x2a0 [ 922.860380][T13238] get_signal+0x2673/0x26d0 [ 922.864881][T13238] arch_do_signal_or_restart+0x8f/0x7d0 [ 922.870427][T13238] [ 922.872735][T13238] Memory state around the buggy address: [ 922.878348][T13238] ffff888066cb4780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 922.886395][T13238] ffff888066cb4800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 922.894443][T13238] >ffff888066cb4880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 922.902487][T13238] ^ [ 922.907580][T13238] ffff888066cb4900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 922.915627][T13238] ffff888066cb4980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 922.923672][T13238] ================================================================== [ 923.226367][T13238] Disabling lock debugging due to kernel taint [ 923.430446][T13238] hpfs: hpfs_map_sector(): read error [ 923.436055][T13238] hpfs: hpfs_map_sector(): read error [ 923.465502][T13238] hpfs: hpfs_map_sector(): read error [ 923.584577][T13238] hpfs: hpfs_map_sector(): read error [ 923.705513][T13238] hpfs: hpfs_map_4sectors(): unaligned read [ 923.925485][T13238] hpfs: hpfs_map_4sectors(): unaligned read [ 923.955616][T13238] hpfs: filesystem error: unable to find root dir