last executing test programs: 1m10.229628105s ago: executing program 2 (id=221): syz_mount_image$ext4(&(0x7f00000005c0)='ext3\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000080)={[{@min_batch_time={'min_batch_time', 0x3d, 0xff}}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@barrier_val={'barrier', 0x3d, 0x98}}, {@noblock_validity}, {@resgid}, {@inlinecrypt}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) readlinkat(r0, 0x0, &(0x7f00000002c0)=""/163, 0xa3) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$rxrpc(0x21, 0x2, 0xa) accept4(r5, 0x0, 0x0, 0x800) connect$netlink(0xffffffffffffffff, &(0x7f0000000040)=@proc={0x10, 0x0, 0x3, 0x1000}, 0x9) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x128, 0xb, 0x148, 0x0, 0x148, 0x210, 0x240, 0x240, 0x210, 0x215, 0x3, 0x0, {[{{@ip={@multicast1, @remote, 0x0, 0x0, 'wg0\x00', 'pim6reg0\x00'}, 0x0, 0xc0, 0x128, 0x0, {0xff0f000000000000}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x11, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'veth1\x00', 'bridge0\x00', {}, {}, 0x11}, 0xec010000, 0xa0, 0xe8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x6}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 1m8.833101763s ago: executing program 2 (id=225): syz_io_uring_setup(0xec6, &(0x7f00000008c0)={0x0, 0x0, 0x3000}, 0x0, 0x0, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) unshare(0x22020600) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_add_dev(r1, 0x0, r0, 0x0, &(0x7f0000000080)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@new_dev={0x1, 0xb38, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x14}}}, &(0x7f0000000140)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) syz_ublk_setup_queues(r2, r3, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1bee, 0x80000, 0x1000002, 0x141, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x100, 0x0, 0x8004146, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e8b, 0x1000, 0xffffffff, 0x2fd, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x2, 0x2, 0xc5, 0x0, r2}}], 0x1, 0x0, 0x0) 1m4.492443321s ago: executing program 2 (id=230): socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 1m4.039536641s ago: executing program 2 (id=235): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x200010, &(0x7f0000000500)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}, {@noquota}, {@nodioread_nolock}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@jqfmt_vfsold}, {@nojournal_checksum}]}, 0x1, 0x4c3, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020600) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x108843, 0x55) fcntl$setlease(r3, 0x400, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) futimesat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 1m0.386648575s ago: executing program 2 (id=240): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./lower2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./lower1/dir1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./lower1/dir1\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./mnt\x00', &(0x7f0000000340)='overlay\x00', 0x0, &(0x7f0000000380)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/dir1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/dir2\x00', 0x0) umount2(&(0x7f0000000600)='./mnt\x00', 0x0) mount(0x0, &(0x7f0000000640)='./mnt\x00', 0x0, 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0xe10, 0x80000001f000000}) 57.584589892s ago: executing program 2 (id=244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x90412000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) shutdown(r4, 0x0) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}, 0x4}], 0x1, 0x0, 0x0) 55.737115679s ago: executing program 3 (id=248): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0x13, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000000101040000000014b16b4d97000010240001801400018008000100e000000108000200e0000001"], 0x44}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x4e24, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0xae26}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) fanotify_init(0x40, 0x80000) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0xa880, 0x97) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@local, @in6=@empty, 0x4e23, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@loopback, @in=@remote, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x400c801}, 0x0) 53.23592516s ago: executing program 3 (id=250): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknod(0x0, 0x8001420, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x2000002, 0xe, 0x0, &(0x7f00000004c0)="df034affffffffffff0000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) 46.735389952s ago: executing program 3 (id=257): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902"], 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000002800)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c"], 0xfc, 0xc41, &(0x7f0000001b80)="$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") syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c0000000c000000ff0f00000000190008001c00c900000014003100057a49"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) mprotect(&(0x7f0000d84000/0x3000)=nil, 0x3000, 0x1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r2, 0x0, 0x8000000a, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x83) fchdir(r3) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x4000, &(0x7f0000000100)={[{@i_version}, {@dioread_lock}, {@i_version}, {@stripe={'stripe', 0x3d, 0xf0}}, {@grpid}, {@bh}, {@noblock_validity}]}, 0x3, 0x453, &(0x7f0000000600)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x41, 0x0) 40.449529889s ago: executing program 32 (id=244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x90412000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) shutdown(r4, 0x0) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}, 0x4}], 0x1, 0x0, 0x0) 40.39933414s ago: executing program 3 (id=265): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file1\x00', 0x208008de, &(0x7f0000000b40)=ANY=[], 0x80, 0x150a, &(0x7f0000002080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) socket$inet6(0xa, 0xb0c8d8ad4c48b294, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0xb9d8, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) getpid() mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) fdatasync(r0) 39.051112488s ago: executing program 3 (id=268): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddb, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x60800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c, 0x80000) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x200105}, 0x1c) syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_FLOW={0x8, 0xb, 0x7}]}, 0x24}}, 0x0) 37.677997385s ago: executing program 3 (id=271): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0xb, 0x6, @random="c28cee6af9b7"}, 0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) socket$kcm(0x21, 0x2, 0xa) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xffffffff, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x1, 0x7fff, 0x4e23, 0x25, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x6c}, @in6=@mcast1, {0xfffffffffffffff9, 0x10000000192, 0x7, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0x5, 0x0, 0x8000000000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3500, 0x2, 0x1, 0x0, 0x28}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0x4, 0x0, 0x9, 0x400100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) 36.45226039s ago: executing program 33 (id=271): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0xb, 0x6, @random="c28cee6af9b7"}, 0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) socket$kcm(0x21, 0x2, 0xa) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xffffffff, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x1, 0x7fff, 0x4e23, 0x25, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x6c}, @in6=@mcast1, {0xfffffffffffffff9, 0x10000000192, 0x7, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0x5, 0x0, 0x8000000000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3500, 0x2, 0x1, 0x0, 0x28}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0x4, 0x0, 0x9, 0x400100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) 29.296572155s ago: executing program 0 (id=293): r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xaa, 0x0, &(0x7f0000000180)="e3ef7f670000ec6783b4241544940000009550f50ac311e0f0544b00aab05400f16b2882a631a8af3a439e1432fa00228f11b0f472aeeb58d909c57270d30b5b85990747c7e37312f7eb8286ea199ecd22221ad7dade9e2b670d2dce18dd851fe6b48b3188c3764958b51a9aafc271972b28397406e611e1c0d1a8ecafe2e82d1df01e507e1c0c7f8093da6e376297d1c18eecdde56d5eb156d7ddf449d9e50010acfa620c4d7f6ee20c", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x50) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x300001c) r2 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x8001) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x18, 0x39, 0x107, 0x1, 0x25dfdbfb, {0x4, 0x7c}, [@nested={0x4, 0x208c}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000005}, 0x2000c004) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000280)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0x7, 0xffffffffffffc474, 0x8, 0x5, 0x0, 0xfffffff8, 0x1}) 27.015163932s ago: executing program 0 (id=295): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0x8, 0x2, 0x0, 0x0, 0x0) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) symlink(0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) fcntl$notify(r4, 0x402, 0xfb0fca2daa2f4273) lchown(0x0, 0xee00, 0x0) open(0x0, 0x60840, 0x0) 26.910174714s ago: executing program 1 (id=287): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x8, 0x4, 0xfa11, 0xffffffff}, 0x0) socket$inet6(0xa, 0x2, 0x0) sync() mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) move_pages(0x0, 0x1, &(0x7f0000000300)=[&(0x7f00001dc000/0x1000)=nil], 0x0, &(0x7f0000001680), 0x0) sync() sync() sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x0, 0x0}) request_key(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0xfffffffffffffffe) 24.742766208s ago: executing program 1 (id=288): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) writev(r4, &(0x7f0000010b40)=[{&(0x7f0000000440)="b766", 0x2}], 0x1) splice(r4, 0x0, r3, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24041091}, 0x844) 24.730187618s ago: executing program 0 (id=298): r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xaa, 0x0, &(0x7f0000000180)="e3ef7f670000ec6783b4241544940000009550f50ac311e0f0544b00aab05400f16b2882a631a8af3a439e1432fa00228f11b0f472aeeb58d909c57270d30b5b85990747c7e37312f7eb8286ea199ecd22221ad7dade9e2b670d2dce18dd851fe6b48b3188c3764958b51a9aafc271972b28397406e611e1c0d1a8ecafe2e82d1df01e507e1c0c7f8093da6e376297d1c18eecdde56d5eb156d7ddf449d9e50010acfa620c4d7f6ee20c", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x50) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x300001c) syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x8001) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x18, 0x39, 0x107, 0x1, 0x25dfdbfb, {0x4, 0x7c}, [@nested={0x4, 0x208c}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000005}, 0x2000c004) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000280)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0x7, 0xffffffffffffc474, 0x8, 0x5, 0x0, 0xfffffff8, 0x1}) 22.63285927s ago: executing program 0 (id=289): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file1\x00', 0x208008de, &(0x7f0000000b40)=ANY=[], 0x80, 0x150a, &(0x7f0000002080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) socket$inet6(0xa, 0xb0c8d8ad4c48b294, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0xb9d8, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) getpid() mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) fdatasync(r0) 22.63207637s ago: executing program 1 (id=290): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x40, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xea8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x38, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x38}}, 0x2) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x48040) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x2, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000000040)={r5, 0x0, 0x6}) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 21.433041915s ago: executing program 1 (id=291): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0xfffffff2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x2882026, 0x0, 0x1, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x2000080, &(0x7f0000000440)=ANY=[@ANYBLOB='noswap,mpol=interleave']) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x400a8, &(0x7f0000000440)=ANY=[], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 21.353061967s ago: executing program 0 (id=292): mkdirat(0xffffffffffffff9c, 0x0, 0x1cc) write(0xffffffffffffffff, &(0x7f0000000200), 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000000b40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_getparam(r0, &(0x7f0000002b80)) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r2 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) mknod$loop(&(0x7f0000000040)='./pipefs/gssd/clntXX/gssd\x00', 0x100, 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 19.512978444s ago: executing program 0 (id=294): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$inet(0xffffffffffffffff, 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={'streebog256\x00'}}) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r3, 0x6, 0x2b, 0x0, &(0x7f0000002000)) fchmodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40) socket$l2tp(0x2, 0x2, 0x73) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write$char_usb(0xffffffffffffffff, &(0x7f0000000280)='L', 0x1) 19.512117753s ago: executing program 1 (id=296): r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xaa, 0x0, &(0x7f0000000180)="e3ef7f670000ec6783b4241544940000009550f50ac311e0f0544b00aab05400f16b2882a631a8af3a439e1432fa00228f11b0f472aeeb58d909c57270d30b5b85990747c7e37312f7eb8286ea199ecd22221ad7dade9e2b670d2dce18dd851fe6b48b3188c3764958b51a9aafc271972b28397406e611e1c0d1a8ecafe2e82d1df01e507e1c0c7f8093da6e376297d1c18eecdde56d5eb156d7ddf449d9e50010acfa620c4d7f6ee20c", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x50) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x300001c) r2 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x8001) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x18, 0x39, 0x107, 0x1, 0x25dfdbfb, {0x4, 0x7c}, [@nested={0x4, 0x208c}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000005}, 0x2000c004) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000280)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0x7, 0xffffffffffffc474, 0x8, 0x5, 0x0, 0xfffffff8, 0x1}) 19.001547174s ago: executing program 1 (id=297): r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xaa, 0x0, &(0x7f0000000180)="e3ef7f670000ec6783b4241544940000009550f50ac311e0f0544b00aab05400f16b2882a631a8af3a439e1432fa00228f11b0f472aeeb58d909c57270d30b5b85990747c7e37312f7eb8286ea199ecd22221ad7dade9e2b670d2dce18dd851fe6b48b3188c3764958b51a9aafc271972b28397406e611e1c0d1a8ecafe2e82d1df01e507e1c0c7f8093da6e376297d1c18eecdde56d5eb156d7ddf449d9e50010acfa620c4d7f6ee20c", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x50) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x300001c) r2 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x8001) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x18, 0x39, 0x107, 0x1, 0x25dfdbfb, {0x4, 0x7c}, [@nested={0x4, 0x208c}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000005}, 0x2000c004) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000280)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0x7, 0xffffffffffffc474, 0x8, 0x5, 0x0, 0xfffffff8, 0x1}) 5.9238772s ago: executing program 5 (id=274): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, 0x0, &(0x7f0000000080)}, 0x20) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) mmap(&(0x7f000083e000/0x3000)=nil, 0x3000, 0x100000c, 0x1010, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, 0x0, 0xe042, 0x0) listxattr(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000680)=""/152, 0x98) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod(0x0, 0x4327, 0x9) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x18) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f00000064c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) fcntl$setlease(r1, 0x400, 0x1) 5.39215929s ago: executing program 4 (id=262): bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x2c}}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000000)=0xa, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 4.865275001s ago: executing program 5 (id=274): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, 0x0, &(0x7f0000000080)}, 0x20) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) mmap(&(0x7f000083e000/0x3000)=nil, 0x3000, 0x100000c, 0x1010, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, 0x0, 0xe042, 0x0) listxattr(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000680)=""/152, 0x98) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod(0x0, 0x4327, 0x9) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x18) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f00000064c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) fcntl$setlease(r1, 0x400, 0x1) 4.369819071s ago: executing program 4 (id=262): bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x2c}}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000000)=0xa, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 3.854738171s ago: executing program 5 (id=274): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, 0x0, &(0x7f0000000080)}, 0x20) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) mmap(&(0x7f000083e000/0x3000)=nil, 0x3000, 0x100000c, 0x1010, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, 0x0, 0xe042, 0x0) listxattr(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000680)=""/152, 0x98) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod(0x0, 0x4327, 0x9) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x18) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f00000064c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) fcntl$setlease(r1, 0x400, 0x1) 3.223454924s ago: executing program 4 (id=262): bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x2c}}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000000)=0xa, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 2.593942807s ago: executing program 5 (id=274): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, 0x0, &(0x7f0000000080)}, 0x20) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) mmap(&(0x7f000083e000/0x3000)=nil, 0x3000, 0x100000c, 0x1010, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, 0x0, 0xe042, 0x0) listxattr(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000680)=""/152, 0x98) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod(0x0, 0x4327, 0x9) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x18) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f00000064c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) fcntl$setlease(r1, 0x400, 0x1) 2.075432937s ago: executing program 4 (id=262): bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x2c}}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000000)=0xa, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 1.564593298s ago: executing program 5 (id=274): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, 0x0, &(0x7f0000000080)}, 0x20) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) mmap(&(0x7f000083e000/0x3000)=nil, 0x3000, 0x100000c, 0x1010, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, 0x0, 0xe042, 0x0) listxattr(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000680)=""/152, 0x98) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod(0x0, 0x4327, 0x9) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x18) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f00000064c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) fcntl$setlease(r1, 0x400, 0x1) 1.047375088s ago: executing program 4 (id=262): bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x2c}}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000000)=0xa, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 529.299299ms ago: executing program 5 (id=274): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, 0x0, &(0x7f0000000080)}, 0x20) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) mmap(&(0x7f000083e000/0x3000)=nil, 0x3000, 0x100000c, 0x1010, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, 0x0, 0xe042, 0x0) listxattr(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000680)=""/152, 0x98) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod(0x0, 0x4327, 0x9) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x18) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f00000064c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) fcntl$setlease(r1, 0x400, 0x1) 0s ago: executing program 4 (id=262): bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x2c}}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000000)=0xa, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.70' (ED25519) to the list of known hosts. [ 82.656520][ T5761] cgroup: Unknown subsys name 'net' [ 82.792093][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.496966][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.841168][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.850247][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.858133][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.866395][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.874222][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.881606][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.888029][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.913846][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.923105][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.924733][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.942397][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.952145][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.959968][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.968399][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.976874][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.976941][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.991193][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.994299][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.006026][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.013644][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.013718][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.029620][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.037949][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.093404][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.593456][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 87.721864][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 87.806567][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 87.955412][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.963315][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.970673][ T5776] bridge_slave_0: entered allmulticast mode [ 87.978477][ T5776] bridge_slave_0: entered promiscuous mode [ 88.020643][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.028182][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.035608][ T5776] bridge_slave_1: entered allmulticast mode [ 88.042993][ T5776] bridge_slave_1: entered promiscuous mode [ 88.050340][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 88.078460][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.085841][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.093085][ T5775] bridge_slave_0: entered allmulticast mode [ 88.100188][ T5775] bridge_slave_0: entered promiscuous mode [ 88.108677][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.116071][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.123649][ T5775] bridge_slave_1: entered allmulticast mode [ 88.130747][ T5775] bridge_slave_1: entered promiscuous mode [ 88.197483][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.210406][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.255360][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.267626][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.294100][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.301329][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.308702][ T5774] bridge_slave_0: entered allmulticast mode [ 88.316843][ T5774] bridge_slave_0: entered promiscuous mode [ 88.325494][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.332662][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.339983][ T5774] bridge_slave_1: entered allmulticast mode [ 88.347532][ T5774] bridge_slave_1: entered promiscuous mode [ 88.411939][ T5775] team0: Port device team_slave_0 added [ 88.422280][ T5775] team0: Port device team_slave_1 added [ 88.431538][ T5776] team0: Port device team_slave_0 added [ 88.441055][ T5776] team0: Port device team_slave_1 added [ 88.482249][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.544480][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.563837][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.571106][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.578803][ T5773] bridge_slave_0: entered allmulticast mode [ 88.586194][ T5773] bridge_slave_0: entered promiscuous mode [ 88.595108][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.602310][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.609980][ T5773] bridge_slave_1: entered allmulticast mode [ 88.617581][ T5773] bridge_slave_1: entered promiscuous mode [ 88.625900][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.632870][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.659565][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.672479][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.681173][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.707652][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.730564][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.737918][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.764098][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.787914][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.795437][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.821737][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.836851][ T5774] team0: Port device team_slave_0 added [ 88.854652][ T5774] team0: Port device team_slave_1 added [ 88.896583][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.914047][ T5783] Bluetooth: hci1: command tx timeout [ 88.937559][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.944627][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.970641][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.994678][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.001695][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.028231][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.041887][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.073646][ T5783] Bluetooth: hci3: command tx timeout [ 89.078171][ T5785] Bluetooth: hci0: command tx timeout [ 89.090030][ T5775] hsr_slave_0: entered promiscuous mode [ 89.097119][ T5775] hsr_slave_1: entered promiscuous mode [ 89.129739][ T5773] team0: Port device team_slave_0 added [ 89.153632][ T5785] Bluetooth: hci2: command tx timeout [ 89.180860][ T5773] team0: Port device team_slave_1 added [ 89.208718][ T5774] hsr_slave_0: entered promiscuous mode [ 89.216979][ T5774] hsr_slave_1: entered promiscuous mode [ 89.223869][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.231747][ T5774] Cannot create hsr debugfs directory [ 89.243506][ T5776] hsr_slave_0: entered promiscuous mode [ 89.250238][ T5776] hsr_slave_1: entered promiscuous mode [ 89.256808][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.264492][ T5776] Cannot create hsr debugfs directory [ 89.345634][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.352651][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.378641][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.419623][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.426753][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.453081][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.633306][ T5773] hsr_slave_0: entered promiscuous mode [ 89.640286][ T5773] hsr_slave_1: entered promiscuous mode [ 89.647462][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.655639][ T5773] Cannot create hsr debugfs directory [ 89.901531][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.930755][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.942244][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.973070][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.018843][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.046778][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.057990][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.084700][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.188128][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.198405][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.219096][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.230551][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.322775][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.345636][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.360792][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.371767][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.457120][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.511548][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.539078][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.566433][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.573859][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.603029][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.610274][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.630740][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.646755][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.654009][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.693785][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.701019][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.736051][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.809757][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.821462][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.859818][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.867048][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.895574][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.936314][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.943556][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.956878][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.964116][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.997426][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.004678][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.015387][ T5785] Bluetooth: hci1: command tx timeout [ 91.147798][ T5776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.159323][ T5785] Bluetooth: hci0: command tx timeout [ 91.164870][ T5785] Bluetooth: hci3: command tx timeout [ 91.234135][ T5783] Bluetooth: hci2: command tx timeout [ 91.306573][ T5773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.500982][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.680141][ T5775] veth0_vlan: entered promiscuous mode [ 91.709708][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.756622][ T5775] veth1_vlan: entered promiscuous mode [ 91.825042][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.881992][ T5775] veth0_macvtap: entered promiscuous mode [ 91.910901][ T5775] veth1_macvtap: entered promiscuous mode [ 91.970526][ T5774] veth0_vlan: entered promiscuous mode [ 91.988070][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.007571][ T5774] veth1_vlan: entered promiscuous mode [ 92.016778][ T5776] veth0_vlan: entered promiscuous mode [ 92.031466][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.061154][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.079428][ T5776] veth1_vlan: entered promiscuous mode [ 92.099343][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.108488][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.122353][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.131600][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.206123][ T28] cfg80211: failed to load regulatory.db [ 92.257526][ T5776] veth0_macvtap: entered promiscuous mode [ 92.277585][ T5776] veth1_macvtap: entered promiscuous mode [ 92.289255][ T5774] veth0_macvtap: entered promiscuous mode [ 92.352424][ T5774] veth1_macvtap: entered promiscuous mode [ 92.362642][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.375624][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.388532][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.400118][ T5773] veth0_vlan: entered promiscuous mode [ 92.417499][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.428963][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.447407][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.458318][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.477523][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.507185][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.519401][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.531248][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.542284][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.555269][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.566462][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.575755][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.586169][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.595106][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.622912][ T5773] veth1_vlan: entered promiscuous mode [ 92.638266][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.649299][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.659272][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.669809][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.682120][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.721084][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.730259][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.741069][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.751113][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.776864][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.787194][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.948788][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.967776][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.036035][ T5773] veth0_macvtap: entered promiscuous mode [ 93.062816][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.073337][ T5783] Bluetooth: hci1: command tx timeout [ 93.080702][ T5773] veth1_macvtap: entered promiscuous mode [ 93.087278][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.098832][ T5842] syz.1.2[5842]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.125064][ T5842] loop1: detected capacity change from 0 to 1024 [ 93.140486][ T5842] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 93.178050][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.202269][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.211817][ T5842] JBD2: no valid journal superblock found [ 93.233299][ T5783] Bluetooth: hci3: command tx timeout [ 93.234761][ T5785] Bluetooth: hci0: command tx timeout [ 93.262332][ T5842] EXT4-fs (loop1): Could not load journal inode [ 93.288920][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.309228][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.321044][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.331817][ T5785] Bluetooth: hci2: command tx timeout [ 93.342717][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.357659][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.369048][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.398417][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.459401][ T4348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.478345][ T4348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.539736][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.583310][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.614768][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.642135][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.665227][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.676549][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.688269][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.746644][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.762409][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.013589][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.023617][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.255110][ T5785] Bluetooth: hci1: command tx timeout [ 95.315637][ T5785] Bluetooth: hci0: command tx timeout [ 95.321129][ T5785] Bluetooth: hci3: command tx timeout [ 95.349727][ T4348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.363086][ T4348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.394767][ T5785] Bluetooth: hci2: command tx timeout [ 95.408613][ T5855] loop2: detected capacity change from 0 to 1024 [ 95.419735][ T5855] EXT4-fs (loop2): filesystem is read-only [ 95.425828][ T5855] EXT4-fs (loop2): Number of reserved GDT blocks insanely large: 1280 [ 95.502691][ T1005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.539949][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.782038][ T5858] netlink: 'syz.1.6': attribute type 10 has an invalid length. [ 95.801763][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.810257][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.263002][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.270337][ T5858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.278611][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.285882][ T5858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.442896][ T5865] loop0: detected capacity change from 0 to 128 [ 96.516572][ T5858] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 96.560318][ T5865] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 96.622442][ T5865] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.734630][ T5867] loop2: detected capacity change from 0 to 1024 [ 97.825611][ T5867] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.907445][ T5879] loop3: detected capacity change from 0 to 2048 [ 98.221496][ T5879] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.371861][ T27] audit: type=1800 audit(1791043013.536:2): pid=5884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 98.682730][ T27] audit: type=1800 audit(1791043013.546:3): pid=5884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 98.743619][ T5879] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.886704][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.954112][ T5879] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.243360][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.393159][ C1] sched: RT throttling activated [ 101.245397][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.276346][ T5895] loop0: detected capacity change from 0 to 64 [ 104.014921][ T5903] loop0: detected capacity change from 0 to 164 [ 106.527722][ T5920] netlink: 28 bytes leftover after parsing attributes in process `syz.2.20'. [ 108.775070][ T5941] loop0: detected capacity change from 0 to 32768 [ 108.819433][ T5939] CIFS: Attempting to mount //127.0.0.1/share [ 108.918724][ T5941] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 108.956133][ T5944] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 109.175577][ T5941] XFS (loop0): Ending clean mount [ 109.192884][ T5941] XFS (loop0): Quotacheck needed: Please wait. [ 109.572367][ T5941] XFS (loop0): Quotacheck: Done. [ 109.825222][ T5939] CIFS: VFS: Could not allocate shash TFM 'cmac(aes)' [ 109.833860][ T5939] CIFS: VFS: cifs_mount failed w/return code = -512 [ 109.863810][ T5856] IPVS: starting estimator thread 0... [ 110.084634][ T5957] IPVS: using max 15 ests per chain, 36000 per kthread [ 110.444895][ T5773] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 112.579320][ T5967] loop0: detected capacity change from 0 to 512 [ 112.616882][ T5967] EXT4-fs error (device loop0): ext4_iget_extra_inode:4752: inode #15: comm syz.0.27: corrupted in-inode xattr: invalid ea_ino [ 112.683483][ T5967] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.27: couldn't read orphan inode 15 (err -117) [ 112.777470][ T5967] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.855947][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.309292][ T27] audit: type=1326 audit(1791043031.526:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5986 comm="syz.1.29" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efe1899e159 code=0x0 [ 117.062205][ T5994] loop1: detected capacity change from 0 to 256 [ 117.104657][ T5994] ======================================================= [ 117.104657][ T5994] WARNING: The mand mount option has been deprecated and [ 117.104657][ T5994] and is ignored by this kernel. Remove the mand [ 117.104657][ T5994] option from the mount to silence this warning. [ 117.104657][ T5994] ======================================================= [ 118.139529][ T5994] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 118.573299][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 121.734341][ T6016] Zero length message leads to an empty skb [ 123.283705][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 127.651656][ T6056] wlan0 speed is unknown, defaulting to 1000 [ 127.733723][ T6056] wlan0 speed is unknown, defaulting to 1000 [ 128.034937][ T6056] wlan0 speed is unknown, defaulting to 1000 [ 128.181244][ T6056] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 128.228741][ T6056] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 128.688529][ T27] audit: type=1800 audit(1791043043.526:5): pid=6063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.50" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 129.352342][ T6065] loop3: detected capacity change from 0 to 1024 [ 129.379290][ T6065] EXT4-fs: Invalid want_extra_isize 9 [ 129.389781][ T6056] wlan0 speed is unknown, defaulting to 1000 [ 129.420346][ T6056] wlan0 speed is unknown, defaulting to 1000 [ 129.715164][ T6056] wlan0 speed is unknown, defaulting to 1000 [ 129.737800][ T6056] wlan0 speed is unknown, defaulting to 1000 [ 132.142110][ T6079] syzkaller0: entered promiscuous mode [ 132.166025][ T6079] syzkaller0: entered allmulticast mode [ 133.173941][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.181023][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.305022][ T6092] capability: warning: `syz.2.57' uses deprecated v2 capabilities in a way that may be insecure [ 133.583884][ T6094] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 133.665776][ T6098] NILFS (nullb0): couldn't find nilfs on the device [ 134.250753][ T6094] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 134.517246][ T6102] tipc: Started in network mode [ 134.522593][ T6102] tipc: Node identity 4, cluster identity 4711 [ 134.555242][ T6102] tipc: Node number set to 4 [ 136.126977][ T6116] dlm: Unknown command passed to DLM device : 3 [ 136.126977][ T6116] [ 137.179778][ T6127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.63'. [ 139.019020][ T6144] loop2: detected capacity change from 0 to 128 [ 139.071577][ T6144] EXT4-fs (loop2): Test dummy encryption mode enabled [ 139.205759][ T6144] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 139.250693][ T6144] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 141.203288][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 141.765481][ T5774] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 141.902730][ T6157] loop0: detected capacity change from 0 to 164 [ 142.019421][ T27] audit: type=1800 audit(1791043057.226:6): pid=6161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.76" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 143.414458][ T6164] rock: directory entry would overflow storage [ 143.421085][ T6164] rock: sig=0x4f50, size=4, remaining=3 [ 143.427031][ T6164] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 143.607141][ T6162] syz.3.76 (6162) used greatest stack depth: 20008 bytes left [ 144.777740][ T28] IPVS: starting estimator thread 0... [ 145.158643][ T6172] loop3: detected capacity change from 0 to 32768 [ 145.416451][ T6172] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 145.426141][ T6171] IPVS: using max 17 ests per chain, 40800 per kthread [ 145.547008][ T6172] XFS (loop3): Ending clean mount [ 145.834165][ T6188] loop2: detected capacity change from 0 to 2048 [ 146.187643][ T6188] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.410326][ T6172] XFS (loop3): Quotacheck needed: Please wait. [ 146.541656][ T6172] XFS (loop3): Quotacheck: Done. [ 148.883999][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 149.337078][ T5776] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 150.878527][ T6205] sctp: failed to load transform for md5: -2 [ 152.614753][ T6219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'. [ 152.628812][ T6219] netlink: 36 bytes leftover after parsing attributes in process `syz.1.74'. [ 152.637878][ T6219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.74'. [ 152.647256][ T6219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'. [ 154.581453][ T6225] warning: `syz.1.87' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 154.927850][ T6225] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-4] [ 154.937255][ T6225] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-4] [ 154.946574][ T6225] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-4] [ 154.956945][ T6225] Error parsing options; rc = [-22] [ 156.563133][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 157.687181][ T6244] loop2: detected capacity change from 0 to 1024 [ 158.157171][ T6244] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 158.169426][ T6244] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.475595][ T6251] input: syz0 as /devices/virtual/input/input5 [ 158.562388][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 160.840030][ T6267] loop1: detected capacity change from 0 to 128 [ 160.946115][ T6267] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 160.969687][ T6245] udevd[6245]: incorrect ext4 checksum on /dev/loop1 [ 161.306129][ T6273] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 167.735839][ T6301] FAULT_INJECTION: forcing a failure. [ 167.735839][ T6301] name failslab, interval 1, probability 0, space 0, times 1 [ 167.749013][ T6301] CPU: 0 PID: 6301 Comm: syz.0.101 Not tainted syzkaller #0 [ 167.756364][ T6301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 167.766489][ T6301] Call Trace: [ 167.769824][ T6301] [ 167.772800][ T6301] dump_stack_lvl+0x18c/0x250 [ 167.777555][ T6301] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 167.783253][ T6301] ? show_regs_print_info+0x20/0x20 [ 167.788514][ T6301] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 167.794227][ T6301] should_fail_ex+0x394/0x4c0 [ 167.798973][ T6301] should_failslab+0x9/0x20 [ 167.803565][ T6301] slab_pre_alloc_hook+0x59/0x300 [ 167.808650][ T6301] ? rng_is_initialized+0x40/0x40 [ 167.813780][ T6301] ? ceph_create_client+0x6f/0x300 [ 167.818965][ T6301] __kmem_cache_alloc_node+0x53/0x250 [ 167.824403][ T6301] ? ceph_create_client+0x6f/0x300 [ 167.829593][ T6301] kmalloc_trace+0x2a/0xe0 [ 167.834164][ T6301] ceph_create_client+0x6f/0x300 [ 167.839162][ T6301] ceph_get_tree+0x1ca/0x1800 [ 167.843906][ T6301] vfs_get_tree+0x8c/0x280 [ 167.848373][ T6301] vfs_cmd_create+0xe3/0x230 [ 167.853020][ T6301] __se_sys_fsconfig+0x70a/0x850 [ 167.858024][ T6301] ? __x64_sys_fsconfig+0xc0/0xc0 [ 167.863223][ T6301] ? lockdep_hardirqs_on+0x98/0x150 [ 167.869286][ T6301] ? __x64_sys_fsconfig+0x20/0xc0 [ 167.874386][ T6301] do_syscall_64+0x55/0xb0 [ 167.878871][ T6301] ? clear_bhb_loop+0x40/0x90 [ 167.883623][ T6301] ? clear_bhb_loop+0x40/0x90 [ 167.888351][ T6301] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 167.894314][ T6301] RIP: 0033:0x7f23a079e159 [ 167.898787][ T6301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.918541][ T6301] RSP: 002b:00007f23a16c8028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 167.927014][ T6301] RAX: ffffffffffffffda RBX: 00007f23a0a26180 RCX: 00007f23a079e159 [ 167.935103][ T6301] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 167.943120][ T6301] RBP: 00007f23a083506b R08: 0000000000000000 R09: 0000000000000000 [ 167.951137][ T6301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.959154][ T6301] R13: 00007f23a0a26218 R14: 00007f23a0a26180 R15: 00007ffd5c85b078 [ 167.967188][ T6301] [ 168.915992][ T6304] loop1: detected capacity change from 0 to 1024 [ 168.955033][ T6304] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 169.126508][ T6310] netlink: 16 bytes leftover after parsing attributes in process `syz.0.104'. [ 169.822578][ T6304] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 2: comm syz.1.100: lblock 2 mapped to illegal pblock 2 (length 1) [ 170.386473][ T6317] loop3: detected capacity change from 0 to 40427 [ 170.445091][ T6304] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 170.474920][ T6317] F2FS-fs (loop3): invalid crc_offset: 4177530876 [ 170.515688][ T6317] F2FS-fs (loop3): Wrong journal entry on segno 65538 [ 170.523210][ T6317] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 171.244459][ T6304] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 48: comm syz.1.100: lblock 0 mapped to illegal pblock 48 (length 1) [ 171.419843][ T6304] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 171.546886][ T6304] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.100: Failed to acquire dquot type 0 [ 171.628763][ T6304] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 173.329623][ T6304] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.100: mark_inode_dirty error [ 173.399037][ T6304] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 173.453589][ T6304] EXT4-fs (loop1): 1 orphan inode deleted [ 173.475926][ T4348] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 173.512814][ T6304] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.623237][ T4348] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 173.631895][ T4348] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:9: Failed to release dquot type 0 [ 177.612136][ T6344] loop0: detected capacity change from 0 to 128 [ 177.663317][ T6344] EXT4-fs (loop0): Test dummy encryption mode enabled [ 177.699017][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.735584][ T5775] EXT4-fs error (device loop1): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 177.783769][ T6344] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 177.805098][ T5775] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 177.838322][ T6344] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 177.848778][ T5775] EXT4-fs error (device loop1): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 177.979702][ T6348] loop3: detected capacity change from 0 to 1024 [ 179.182760][ T5773] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 179.284212][ T6354] xt_cgroup: invalid path, errno=-2 [ 179.737442][ T6356] loop0: detected capacity change from 0 to 512 [ 179.774904][ T6356] EXT4-fs: inline encryption not supported [ 179.947187][ T6356] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 180.000950][ T6356] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 180.456920][ T6356] EXT4-fs (loop0): Invalid default hash set in the superblock [ 181.075572][ T6363] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 185.098769][ T6391] sd 0:0:1:0: PR command failed: 1026 [ 185.104628][ T6391] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 185.111714][ T6391] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 185.533173][ T6395] gadgetfs: bound to dummy_udc driver [ 187.533365][ T6407] loop2: detected capacity change from 0 to 1024 [ 188.477212][ T6407] hfsplus: invalid btree flag [ 188.482466][ T6407] hfsplus: failed to load catalog file [ 192.304754][ T6431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.133'. [ 192.314368][ T6431] netlink: 32 bytes leftover after parsing attributes in process `syz.3.133'. [ 196.228323][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.235834][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.474144][ T6455] loop1: detected capacity change from 0 to 512 [ 199.367134][ T6455] fscrypt: Error allocating hmac(sha512): -2 [ 202.643827][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 203.053327][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 204.011569][ T6489] comedi comedi0: comedi_test: 1000000 microvolt, 100000 microsecond waveform attached [ 204.518248][ T6489] comedi comedi0: Buffer allocation failed [ 206.023105][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 209.373278][ T6514] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.323148][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 212.889757][ T5790] Bluetooth: hci1: command 0x0406 tx timeout [ 212.895950][ T5790] Bluetooth: hci0: command 0x0406 tx timeout [ 212.902144][ T5790] Bluetooth: hci2: command 0x0406 tx timeout [ 212.910526][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 222.345728][ T6566] xt_TCPMSS: Only works on TCP SYN packets [ 225.384796][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 226.111510][ T6587] FAULT_INJECTION: forcing a failure. [ 226.111510][ T6587] name fail_futex, interval 1, probability 0, space 0, times 1 [ 226.124662][ T6587] CPU: 0 PID: 6587 Comm: syz.0.163 Not tainted syzkaller #0 [ 226.132021][ T6587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 226.142136][ T6587] Call Trace: [ 226.145500][ T6587] [ 226.148487][ T6587] dump_stack_lvl+0x18c/0x250 [ 226.153271][ T6587] ? show_regs_print_info+0x20/0x20 [ 226.158557][ T6587] ? load_image+0x420/0x420 [ 226.163148][ T6587] should_fail_ex+0x394/0x4c0 [ 226.167955][ T6587] get_futex_key+0x136/0x1030 [ 226.172695][ T6587] ? finish_task_switch+0x25d/0x8f0 [ 226.177992][ T6587] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 226.184043][ T6587] ? futex_setup_timer+0xc0/0xc0 [ 226.189108][ T6587] futex_wake+0x127/0x4f0 [ 226.193513][ T6587] ? futex_wake_mark+0x150/0x150 [ 226.198518][ T6587] ? __schedule+0x15b6/0x4660 [ 226.203267][ T6587] do_futex+0x35d/0x3e0 [ 226.207482][ T6587] ? __ia32_sys_get_robust_list+0x110/0x110 [ 226.213446][ T6587] __se_sys_futex+0x3a9/0x440 [ 226.218194][ T6587] ? __x64_sys_fsconfig+0xc0/0xc0 [ 226.223291][ T6587] ? __x64_sys_futex+0xf0/0xf0 [ 226.228187][ T6587] ? __x64_sys_futex+0x21/0xf0 [ 226.233072][ T6587] do_syscall_64+0x55/0xb0 [ 226.237661][ T6587] ? clear_bhb_loop+0x40/0x90 [ 226.242493][ T6587] ? clear_bhb_loop+0x40/0x90 [ 226.247319][ T6587] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 226.253288][ T6587] RIP: 0033:0x7f23a079e159 [ 226.257777][ T6587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.277583][ T6587] RSP: 002b:00007f23a16c80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 226.286081][ T6587] RAX: ffffffffffffffda RBX: 00007f23a0a26188 RCX: 00007f23a079e159 [ 226.294106][ T6587] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f23a0a2618c [ 226.302160][ T6587] RBP: 00007f23a0a26180 R08: 0000000000745d1e R09: 0000000000000000 [ 226.310303][ T6587] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 226.318502][ T6587] R13: 00007f23a0a26218 R14: 00007ffd5c85af90 R15: 00007ffd5c85b078 [ 226.326547][ T6587] [ 226.329740][ C0] vkms_vblank_simulate: vblank timer overrun [ 227.941559][ T6599] mmap: syz.1.165 (6599) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 227.994383][ T6595] block device autoloading is deprecated and will be removed. [ 228.136093][ T6595] syz.3.166: attempt to access beyond end of device [ 228.136093][ T6595] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 229.804825][ T6615] loop2: detected capacity change from 0 to 8192 [ 231.303746][ T6615] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 231.318750][ T6615] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 231.328480][ T6615] REISERFS (device loop2): using ordered data mode [ 231.335441][ T6615] reiserfs: using flush barriers [ 231.349518][ T6615] REISERFS warning (device loop2): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 233.800379][ T6626] loop2: detected capacity change from 0 to 2048 [ 233.835161][ T6628] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 234.658087][ T6626] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 235.002050][ T27] audit: type=1800 audit(1791043150.216:7): pid=6631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.176" name="c_srate" dev="configfs" ino=10577 res=0 errno=0 [ 235.420118][ T6635] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 235.429903][ T6635] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 236.116064][ T6638] netlink: 'syz.1.178': attribute type 10 has an invalid length. [ 236.142415][ T6638] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.150091][ T6638] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.208810][ T6638] netlink: 'syz.1.178': attribute type 10 has an invalid length. [ 236.278103][ T6638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.291973][ T6638] team0: Port device bond0 added [ 236.305259][ T6640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.173'. [ 236.859851][ T6648] Console: switching to colour VGA+ 80x25 [ 236.948139][ T6648] Console: switching to colour frame buffer device 128x48 [ 241.682147][ T6687] loop2: detected capacity change from 0 to 1024 [ 241.939670][ T5838] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 242.344395][ T5838] usb 2-1: Using ep0 maxpacket: 8 [ 242.483397][ T5838] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 242.491945][ T5838] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 242.536648][ T5838] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 242.589647][ T5838] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 242.637940][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.123279][ T5838] usbtmc 2-1:16.0: bulk endpoints not found [ 243.727094][ T27] audit: type=1800 audit(1791043158.916:8): pid=6692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.190" name="UDC" dev="configfs" ino=9450 res=0 errno=0 [ 244.591313][ T6701] loop3: detected capacity change from 0 to 512 [ 245.719907][ T6701] ext4: Unknown parameter 'smackfstransmute' [ 245.736550][ T9] usb 2-1: USB disconnect, device number 2 [ 248.290175][ T6721] ip6t_REJECT: ECHOREPLY is not supported [ 248.707911][ T6730] ip_tables: iptables: counters copy to user failed while replacing table [ 249.117177][ T6728] loop1: detected capacity change from 0 to 1024 [ 249.581879][ T6728] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.707836][ T6735] netlink: 'syz.3.200': attribute type 1 has an invalid length. [ 249.719787][ T6735] netlink: 'syz.3.200': attribute type 2 has an invalid length. [ 249.804555][ T6735] tipc: New replicast peer: 255.255.255.255 [ 249.851553][ T6735] tipc: Enabled bearer , priority 10 [ 250.104355][ T27] audit: type=1800 audit(1791043165.296:9): pid=6739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.198" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 250.349595][ T27] audit: type=1800 audit(1791043165.306:10): pid=6739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.198" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 250.490210][ T6741] program syz.0.201 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 250.667245][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.954716][ T6755] syz.1.202 (6755): attempted to duplicate a private mapping with mremap. This is not supported. [ 252.543241][ T6765] process 'syz.2.197' launched './file1' with NULL argv: empty string added [ 256.092915][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.100534][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.353713][ T5817] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 260.554317][ T5817] usb 1-1: Using ep0 maxpacket: 8 [ 260.615217][ T5817] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 260.686033][ T5817] usb 1-1: config 179 has no interface number 0 [ 260.757365][ T5817] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 260.885866][ T5817] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 260.931848][ T5817] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 260.956857][ T5817] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 260.988897][ T5817] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 261.039372][ T5817] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 261.056663][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.088279][ T6811] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 262.406808][ T5817] usb 1-1: USB disconnect, device number 2 [ 262.406873][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 262.421172][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 266.171014][ T6843] loop2: detected capacity change from 0 to 512 [ 266.199740][ T6843] EXT4-fs: inline encryption not supported [ 266.217136][ T6843] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 266.307078][ T6843] EXT4-fs error (device loop2): ext4_iget_extra_inode:4752: inode #15: comm syz.2.221: corrupted in-inode xattr: e_value size too large [ 266.358511][ T6843] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.221: couldn't read orphan inode 15 (err -117) [ 266.377190][ T6843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.745303][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.666936][ T27] audit: type=1326 audit(1791043185.836:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.0.227" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f23a079e159 code=0x0 [ 272.342111][ T6897] loop2: detected capacity change from 0 to 512 [ 272.365270][ T6897] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 272.396532][ T6897] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 272.413348][ T6897] System zones: 1-12 [ 273.142540][ T6897] EXT4-fs error (device loop2): ext4_quota_enable:7140: comm syz.2.235: Bad quota inum: 2934046720, type: 1 [ 273.192112][ T6897] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=2934046720). Please run e2fsck to fix. [ 273.212901][ T6897] EXT4-fs (loop2): mount failed [ 276.455434][ T6918] futex_wake_op: syz.3.239 tries to shift op by 144; fix this program [ 276.472269][ T6918] loop3: detected capacity change from 0 to 256 [ 276.853575][ T6918] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 276.947128][ T27] audit: type=1800 audit(1791043192.096:12): pid=6918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.239" name="file1" dev="loop3" ino=1048609 res=0 errno=0 [ 277.751630][ T6928] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 277.897059][ T6933] netlink: 'syz.1.243': attribute type 1 has an invalid length. [ 278.340264][ T6933] 8021q: adding VLAN 0 to HW filter on device bond1 [ 278.805442][ T6938] 8021q: adding VLAN 0 to HW filter on device bond1 [ 278.830495][ T6938] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 278.842689][ T6938] bond1: (slave gre1): Error -95 calling set_mac_address [ 278.883261][ T6939] gretap1: entered promiscuous mode [ 278.900133][ T6939] bond1: (slave gretap1): making interface the new active one [ 279.164411][ T27] audit: type=1800 audit(1791043194.366:13): pid=6947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.246" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 280.389609][ T6939] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 282.265926][ T6933] macvlan2: entered promiscuous mode [ 282.271325][ T6933] macvlan2: entered allmulticast mode [ 282.347820][ T6933] bond1: entered promiscuous mode [ 282.386633][ T6933] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 282.446723][ T6933] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 282.461466][ T6960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.248'. [ 282.481560][ T6960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.248'. [ 282.512623][ T6933] bond1: left promiscuous mode [ 288.615892][ T6985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.255'. [ 289.897512][ T5782] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 290.094126][ T5782] usb 4-1: Using ep0 maxpacket: 8 [ 290.188475][ T5782] usb 4-1: config 0 has no interfaces? [ 290.256957][ T5782] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 290.393676][ T5782] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.574650][ T5782] usb 4-1: config 0 descriptor?? [ 291.041534][ T6987] loop3: detected capacity change from 0 to 2048 [ 291.124568][ T6987] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 291.263456][ T5785] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 291.273613][ T5785] CPU: 1 PID: 5785 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 291.281222][ T5785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 291.291348][ T5785] Workqueue: hci2 hci_rx_work [ 291.296150][ T5785] Call Trace: [ 291.299581][ T5785] [ 291.302560][ T5785] dump_stack_lvl+0x18c/0x250 [ 291.307314][ T5785] ? show_regs_print_info+0x20/0x20 [ 291.312574][ T5785] ? load_image+0x420/0x420 [ 291.317152][ T5785] sysfs_create_dir_ns+0x26e/0x2a0 [ 291.322338][ T5785] ? __lock_acquire+0x7eb0/0x7eb0 [ 291.327420][ T5785] ? sysfs_warn_dup+0xa0/0xa0 [ 291.332158][ T5785] ? do_raw_spin_unlock+0x121/0x230 [ 291.337454][ T5785] kobject_add_internal+0x617/0xc90 [ 291.342719][ T5785] kobject_add+0x164/0x240 [ 291.347231][ T5785] ? preempt_schedule_thunk+0x1a/0x30 [ 291.352690][ T5785] ? kobject_init+0x1d0/0x1d0 [ 291.357443][ T5785] ? get_device_parent+0x366/0x390 [ 291.362621][ T5785] device_add+0x3fa/0xc40 [ 291.367013][ T5785] hci_conn_add_sysfs+0xd5/0x1e0 [ 291.372008][ T5785] le_conn_complete_evt+0xe9a/0x1480 [ 291.377455][ T5785] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 291.383772][ T5785] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 291.389489][ T5785] ? mutex_unlock+0x10/0x10 [ 291.394054][ T5785] ? skb_pull_data+0xf0/0x1f0 [ 291.398802][ T5785] hci_le_conn_complete_evt+0x187/0x440 [ 291.404418][ T5785] ? hci_remote_host_features_evt+0x150/0x150 [ 291.410549][ T5785] hci_event_packet+0x7b4/0x1280 [ 291.415563][ T5785] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 291.421271][ T5785] ? bis_list+0x290/0x290 [ 291.425663][ T5785] ? kcov_remote_start+0x1b7/0x810 [ 291.430837][ T5785] ? hci_send_to_monitor+0xd7/0x4f0 [ 291.436146][ T5785] hci_rx_work+0x43a/0xd60 [ 291.440642][ T5785] ? process_scheduled_works+0x975/0x1600 [ 291.446424][ T5785] process_scheduled_works+0xa60/0x1600 [ 291.452061][ T5785] ? worker_attach_to_pool+0x370/0x370 [ 291.457619][ T5785] ? assign_work+0x3cc/0x5d0 [ 291.462295][ T5785] worker_thread+0xa5e/0xfe0 [ 291.467072][ T5785] kthread+0x2fa/0x390 [ 291.471195][ T5785] ? pr_cont_work+0x550/0x550 [ 291.475948][ T5785] ? kthread_blkcg+0xd0/0xd0 [ 291.480588][ T5785] ret_from_fork+0x48/0x80 [ 291.485058][ T5785] ? kthread_blkcg+0xd0/0xd0 [ 291.489726][ T5785] ret_from_fork_asm+0x11/0x20 [ 291.494569][ T5785] [ 291.500829][ T5785] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 291.515415][ T5785] Bluetooth: hci2: failed to register connection device [ 291.867899][ T6987] netlink: 'syz.3.257': attribute type 49 has an invalid length. [ 295.290214][ T5818] usb 4-1: USB disconnect, device number 2 [ 296.118343][ T7031] loop3: detected capacity change from 0 to 256 [ 296.438607][ T7031] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 296.915895][ T7031] syz.3.265: attempt to access beyond end of device [ 296.915895][ T7031] loop3: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 297.038991][ T7031] syz.3.265: attempt to access beyond end of device [ 297.038991][ T7031] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 297.142631][ T27] audit: type=1800 audit(1791043212.316:14): pid=7031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.265" name="file1" dev="loop3" ino=1048610 res=0 errno=0 [ 297.271370][ T7040] program syz.0.267 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 297.500491][ T7046] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 297.526923][ T7046] CIFS: Attempting to mount //127.0.0.1/share [ 297.545328][ T7046] CIFS: VFS: Error connecting to socket. Aborting operation. [ 297.553789][ T7046] CIFS: VFS: cifs_mount failed w/return code = -111 [ 297.955630][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 298.297399][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 298.308326][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 298.324350][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 298.337740][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 298.346424][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 298.359050][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 298.470848][ T7052] tipc: Started in network mode [ 298.502399][ T7052] tipc: Node identity 4, cluster identity 4711 [ 298.511117][ T7052] tipc: Node number set to 4 [ 298.657161][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.364414][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.707268][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.875515][ T7067] program syz.1.273 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 299.884973][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.921120][ T7066] wlan0 speed is unknown, defaulting to 1000 [ 299.933577][ T7066] wlan0 speed is unknown, defaulting to 1000 [ 299.944295][ T7066] wlan0 speed is unknown, defaulting to 1000 [ 300.013467][ T7066] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 300.086076][ T7066] wlan0 speed is unknown, defaulting to 1000 [ 300.258527][ T7066] wlan0 speed is unknown, defaulting to 1000 [ 300.406436][ T7066] wlan0 speed is unknown, defaulting to 1000 [ 300.441319][ T7066] wlan0 speed is unknown, defaulting to 1000 [ 301.105061][ T49] tipc: Disabling bearer [ 301.170085][ T49] tipc: Left network mode [ 301.234384][ T7084] program syz.1.277 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 301.704533][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 301.835100][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 301.876161][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 301.883979][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 301.898701][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 301.992003][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 302.089066][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 302.101728][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 302.117162][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 302.139449][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 302.146256][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 302.156119][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 302.582472][ T7102] CIFS: Attempting to mount //127.0.0.1/share [ 303.373580][ T7102] CIFS: VFS: Error connecting to socket. Aborting operation. [ 303.381396][ T7102] CIFS: VFS: cifs_mount failed w/return code = -4 [ 303.992052][ T27] audit: type=1800 audit(1791043219.196:15): pid=7114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.281" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 306.833422][ T7119] program syz.1.283 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 307.082485][ T7128] loop1: detected capacity change from 0 to 128 [ 307.138600][ T7128] EXT4-fs (loop1): Test dummy encryption mode enabled [ 307.188212][ T7128] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 307.229991][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 307.245514][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 307.262867][ T7128] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 307.288522][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 307.298225][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 307.314459][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 307.328028][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 307.624078][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 307.635936][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 308.229198][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 308.238741][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 308.254185][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 308.261787][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 308.497191][ T5775] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 309.041671][ T49] hsr_slave_0: left promiscuous mode [ 309.059889][ T49] hsr_slave_1: left promiscuous mode [ 309.080745][ T7147] program syz.0.293 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 309.091287][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.116675][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.145627][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.173343][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.188083][ T49] bridge_slave_1: left allmulticast mode [ 309.208840][ T49] bridge_slave_1: left promiscuous mode [ 309.235742][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.239723][ T7151] program syz.1.286 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 309.290129][ T49] bridge_slave_0: left allmulticast mode [ 309.296415][ T49] bridge_slave_0: left promiscuous mode [ 309.302296][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.196799][ T49] veth1_macvtap: left promiscuous mode [ 311.206061][ T49] veth0_macvtap: left promiscuous mode [ 311.211816][ T49] veth1_vlan: left promiscuous mode [ 311.243642][ T49] veth0_vlan: left promiscuous mode [ 311.604383][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 311.616454][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 311.625806][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 311.637938][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 311.652085][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 311.660257][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 311.822067][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 311.832332][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 311.842156][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 311.851082][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 311.860058][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 311.867610][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 313.696270][ T7178] loop0: detected capacity change from 0 to 256 [ 313.758614][ T7178] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 314.038359][ T7178] syz.0.289: attempt to access beyond end of device [ 314.038359][ T7178] loop0: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 314.233405][ T7178] syz.0.289: attempt to access beyond end of device [ 314.233405][ T7178] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 314.613300][ T27] audit: type=1800 audit(1791043229.806:16): pid=7178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.289" name="file1" dev="loop0" ino=1048631 res=0 errno=0 [ 314.867576][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 314.886346][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 314.918095][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 314.957513][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 314.968475][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 314.977210][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 315.073880][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 315.093725][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 315.103731][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 315.112213][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 315.122556][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 315.130547][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 315.392632][ T7194] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 315.401991][ T7194] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 316.730988][ T49] team0 (unregistering): Port device team_slave_1 removed [ 316.847696][ T7199] program syz.1.296 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.859116][ T49] team0 (unregistering): Port device team_slave_0 removed [ 317.148929][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.482783][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.489589][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.657875][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.893200][ T7207] program syz.1.297 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 318.035200][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 318.066795][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 318.085470][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 318.104622][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 318.112580][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 318.122785][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 318.452117][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 318.491532][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 318.507660][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 318.555240][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 318.567069][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 318.581017][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 318.951790][ T49] bond0 (unregistering): Released all slaves [ 319.391523][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 319.403362][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 319.418591][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 319.429285][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 319.468566][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 319.479869][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 319.847825][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.011532][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.051975][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 320.065176][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 320.077617][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 320.091560][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 320.101001][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.108198][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 320.119553][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 320.209238][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.868435][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 320.881201][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 320.907647][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 320.918135][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 320.927837][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 320.936195][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 321.581948][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 321.597369][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 321.610339][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 321.621775][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 321.634427][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 321.642994][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 321.711137][ T49] hsr_slave_0: left promiscuous mode [ 321.747911][ T49] hsr_slave_1: left promiscuous mode [ 321.756423][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.766866][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.776755][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.788541][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.800801][ T49] bridge_slave_1: left allmulticast mode [ 321.809665][ T49] bridge_slave_1: left promiscuous mode [ 321.817357][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.838122][ T49] bridge_slave_0: left allmulticast mode [ 321.847232][ T49] bridge_slave_0: left promiscuous mode [ 321.853531][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.900024][ T49] veth1_macvtap: left promiscuous mode [ 321.911060][ T49] veth0_macvtap: left promiscuous mode [ 321.917509][ T49] veth1_vlan: left promiscuous mode [ 321.922940][ T49] veth0_vlan: left promiscuous mode [ 322.517502][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 322.527957][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 322.558280][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 322.569488][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 322.584107][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 322.591626][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 323.082578][ T49] team0 (unregistering): Port device team_slave_1 removed [ 323.152939][ T49] team0 (unregistering): Port device team_slave_0 removed [ 323.229696][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.289532][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 323.317765][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 323.318696][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.340762][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 323.354071][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 323.369644][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 323.381486][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 323.938385][ T49] bond0 (unregistering): Released all slaves [ 324.247334][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 324.284788][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 324.299727][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 324.309326][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 324.322422][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 324.332716][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 324.470894][ T49] IPVS: stop unused estimator thread 0... [ 324.889335][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 324.898098][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 324.906716][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 324.918167][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 324.928053][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 324.937663][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 325.384601][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 325.397981][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 325.407211][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 325.417164][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 325.425632][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 325.433292][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 325.928585][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 325.938780][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 325.949552][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 325.958647][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 325.966769][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 325.974566][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 326.511619][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 326.520896][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 326.531649][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 326.545482][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 326.554485][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 326.561888][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 327.001388][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 327.012225][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 327.021370][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 327.032064][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 327.040093][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 327.049110][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 327.500833][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 327.511319][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 327.520339][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 327.529429][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 327.539079][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 327.546670][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 328.001812][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 328.011687][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 328.020348][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 328.030664][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 328.041369][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 328.049030][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 328.510188][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 328.520064][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 328.530234][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 328.539682][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 328.547582][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 328.556598][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 329.046043][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 329.056654][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 329.067073][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 329.077393][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 329.086595][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 329.094530][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 329.570645][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 329.581139][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 329.590356][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 329.599779][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 329.610452][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 329.617926][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 330.091683][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 330.103225][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 330.113000][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 330.126409][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 330.136149][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 330.144801][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 330.591804][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 330.602971][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 330.615250][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 330.625283][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 330.633274][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 330.640829][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 331.126902][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 331.137366][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 331.145926][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 331.162578][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 331.170620][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 331.178996][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 331.644244][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 331.655167][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 331.665359][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 331.677386][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 331.685605][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 331.693119][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 332.147990][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 332.159725][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 332.168949][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 332.178008][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 332.188382][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 332.196054][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 332.662621][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 332.671540][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 332.684594][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 332.696242][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 332.706223][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 332.714815][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 333.411979][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 333.422527][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 333.431380][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 333.440438][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 333.449466][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 333.458269][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 333.922774][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 333.935413][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 333.946197][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 333.956180][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 333.968964][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 333.976563][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 334.431454][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 334.443280][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 334.451688][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 334.460336][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 334.470516][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 334.478864][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 334.962481][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 334.973664][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 334.982559][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 334.993174][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 335.001715][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 335.009676][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 335.460605][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 335.469484][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 335.479848][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 335.488376][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 335.502496][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 335.511737][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 335.986444][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 335.998079][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 336.007316][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 336.018093][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 336.027470][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 336.035663][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=4 req=262 state=3 status=67 (errno 32: Broken pipe) [ 336.988321][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.120729][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.200902][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.366202][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.024964][ T49] bond1: (slave gretap1): Releasing active interface [ 338.335711][ T49] hsr_slave_0: left promiscuous mode [ 338.342286][ T49] hsr_slave_1: left promiscuous mode [ 338.350731][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.360574][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.369006][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.377000][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.385457][ T49] bridge_slave_1: left allmulticast mode [ 338.391183][ T49] bridge_slave_1: left promiscuous mode [ 338.397296][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.409370][ T49] bridge_slave_0: left allmulticast mode [ 338.415243][ T49] bridge_slave_0: left promiscuous mode [ 338.421030][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.449776][ T49] veth1_macvtap: left promiscuous mode [ 338.455529][ T49] veth0_macvtap: left promiscuous mode [ 338.461156][ T49] veth1_vlan: left promiscuous mode [ 338.467307][ T49] veth0_vlan: left promiscuous mode [ 338.730654][ T49] bond1 (unregistering): Released all slaves [ 339.330378][ T49] team0 (unregistering): Port device team_slave_1 removed [ 339.385919][ T49] team0 (unregistering): Port device team_slave_0 removed [ 339.436179][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.492719][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.882130][ T49] team0 (unregistering): Port device bond0 removed [ 339.922930][ T49] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 339.933979][ T49] bond0 (unregistering): Released all slaves [ 340.319609][ T49] IPVS: stop unused estimator thread 0...