last executing test programs: 19m38.089423293s ago: executing program 3 (id=4): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x44000) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c0) socket$kcm(0x2, 0x200000000000001, 0x106) r0 = socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) accept$alg(r2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0x4000, 0x0, 0x9, 0x5}, {0x7, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffe}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x20044084) 19m22.515222848s ago: executing program 32 (id=4): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x44000) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c0) socket$kcm(0x2, 0x200000000000001, 0x106) r0 = socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) accept$alg(r2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0x4000, 0x0, 0x9, 0x5}, {0x7, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffe}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x20044084) 18m51.621313113s ago: executing program 1 (id=69): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x48) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dy']) chdir(&(0x7f00000000c0)='./file0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x1ff) 18m49.333772418s ago: executing program 1 (id=72): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48200, 0x0) io_uring_setup(0x4685, &(0x7f0000000440)={0x0, 0x2078, 0x20, 0x0, 0x3a3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x9, &(0x7f0000000040), 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_route_sched(r4, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001600)=@deltfilter={0x840, 0x2d, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xf}, {0xd, 0xffe0}, {0xffe0, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x810, 0x2, [@TCA_ROUTE4_POLICE={0x80c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x32006d63, 0xfffff00a, 0xff, 0x101, 0x8, 0x200, 0xbb, 0x2, 0x3, 0xfffffffb, 0x3f, 0x3, 0x5, 0xfffffff9, 0x0, 0x7, 0x5, 0x7, 0xfffffffa, 0x800, 0x7fff, 0x4, 0x1, 0x1, 0x519f, 0x0, 0x6, 0x0, 0x8, 0x3, 0x1, 0x4, 0x4, 0x5, 0xfffffff7, 0x7fff, 0x1, 0x8, 0x7, 0x3b1f, 0x5, 0x9, 0xb, 0x5, 0x400, 0x4, 0x3, 0xffffffff, 0x8, 0xffffffff, 0x3, 0x68, 0x4, 0x1, 0x7, 0x5, 0x853d642, 0x3, 0x7, 0x8, 0x64b1, 0xf59, 0xa, 0x2, 0x1, 0x4, 0x36, 0x6, 0xa, 0x5, 0x4, 0x7fff, 0x7, 0x10000, 0xa, 0x200, 0x8, 0x9, 0x10, 0x3ff, 0x9, 0x9, 0x70, 0x4, 0xd, 0x1, 0xffffb0d4, 0x2, 0x1ff, 0x7, 0x3, 0x7, 0x1, 0x1, 0x1, 0x3, 0x4, 0xc, 0x8, 0xfffffffa, 0x8aa0, 0xe0f, 0x9, 0x3, 0x1000, 0xffff, 0x10000, 0x8000, 0xd, 0x5, 0xff, 0xf, 0xd0a3, 0x80, 0x7, 0x5b72, 0x0, 0x5, 0xfffffff7, 0x6, 0x7, 0x1ff, 0x5, 0x4, 0x2, 0xb52b, 0x2, 0x3, 0x3ff, 0x1, 0x2dd9, 0x8001, 0x8, 0x5, 0x0, 0x7, 0x81, 0x80000000, 0x3, 0xe8d6, 0xffff, 0xc0eb, 0x6, 0x1, 0x7, 0x4b0, 0x8, 0x3cf1a96c, 0x6, 0x6, 0x80000000, 0x9, 0xfffffcea, 0x9, 0x10000, 0x6ce9, 0x9, 0x4e5, 0x7, 0x369c, 0x3f99, 0xffffffff, 0x4, 0x8, 0x3, 0xff, 0x1, 0x0, 0x5, 0x2, 0x5000000, 0x62, 0x10001, 0xcf8c, 0x3f18476d, 0x1f300220, 0x3, 0x4224, 0x1, 0x1, 0x2, 0x4, 0xfffffff7, 0x80000000, 0x5, 0xe, 0x5, 0x1, 0xdf60da4, 0x3, 0x82d0, 0x6, 0x4, 0x800, 0x100, 0x80000001, 0x6, 0x3, 0x7, 0x80000001, 0x7fffffff, 0x3, 0xffffffff, 0x7, 0x2, 0xfffffffd, 0x4, 0x9, 0x6, 0x0, 0xfffffe00, 0x39, 0x2, 0x8000, 0x80, 0x3, 0x4, 0x9, 0x8, 0x4, 0x3, 0x9, 0x100, 0x7, 0x2, 0x7, 0x2, 0x9, 0x19000000, 0x5, 0x4, 0x9, 0x3, 0x80000000, 0x2, 0x2, 0x7, 0x0, 0x7, 0xfff, 0xc83b, 0x401, 0xe4f0, 0xd09, 0x80000001, 0xfffffff7, 0x7812, 0x80, 0xfffffffc, 0x7, 0x0, 0xfffffffc, 0x81, 0xffff, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfff, 0x0, 0x0, 0xc4e6, 0xfffffc01, 0x459, 0x6, 0x4, 0xc, 0x3, 0x1, 0xde8, 0x4, 0x6, 0x7, 0x2, 0x7, 0x3, 0x2, 0x5, 0x339c04a7, 0x1, 0x9, 0x0, 0x5, 0x4, 0x1, 0x6, 0x5, 0x5, 0x9, 0x9, 0x2, 0x0, 0x80000001, 0x9, 0x84b250eb, 0x2, 0x5, 0x3, 0x4, 0x2f5, 0x10, 0x5, 0x7a4e, 0x5, 0xb9, 0xffffffff, 0x8, 0x8000, 0x8, 0x8, 0xff, 0xff, 0x4, 0x40, 0x7, 0x17, 0x80, 0x3, 0x4, 0x5, 0x7b34, 0x2ce, 0xb8, 0x3ff, 0xb46, 0x4, 0x8, 0x1, 0x2fce, 0x0, 0x5, 0x3, 0x4, 0x8, 0x5, 0x1, 0x0, 0xf, 0x2c8, 0x2, 0xffffffc0, 0x5ed96db, 0x400, 0x7, 0x6, 0x400, 0x1, 0x6, 0x0, 0x5, 0x2, 0x200, 0x1ff, 0x8163, 0x4306ded, 0x1de7, 0x831, 0x5, 0xffffffff, 0x7, 0x5, 0x10000, 0xfffffffc, 0x6cf, 0xf, 0x1, 0x1, 0x401, 0x8000, 0x80, 0xe, 0x6, 0x6, 0x4, 0x7, 0x7fffffff, 0xd5f3, 0x0, 0x14, 0xc23, 0xd, 0x1, 0x3, 0x1, 0x9, 0x8, 0xf, 0x800, 0x1, 0xffff, 0x9, 0xfffffff7, 0x4, 0x6, 0xc3, 0x5, 0x3, 0x2, 0x10000, 0xfff, 0x8, 0x32f4, 0x9, 0x2, 0x4, 0x0, 0xa, 0x5, 0x0, 0x3, 0x10000, 0x79a9, 0x8, 0x7, 0x6, 0x3, 0x1, 0x3e91, 0x6, 0x5, 0x6, 0xfffffff9, 0x0, 0x7, 0x5, 0x360c4ca1, 0x5, 0x40f, 0x8, 0x7ff, 0x7, 0x2, 0x1, 0xff, 0x96, 0x1, 0x2, 0xc95af3b, 0x6813, 0x4, 0x9, 0x3f, 0x5, 0x8, 0x7, 0x8, 0x1a74, 0x10000, 0x101, 0x8, 0x2, 0x13, 0x6, 0xff, 0x1, 0x0, 0x4, 0x9, 0xa, 0x7, 0x9, 0xffffff00, 0x9, 0x7, 0x1, 0x0, 0x1, 0x0, 0xfffffff8, 0x1000, 0x100000, 0x80000000, 0xffffffff, 0x80000001, 0x3ed, 0x2, 0xfffffffd, 0x6, 0x0, 0x0, 0xb, 0x5, 0x9, 0xd, 0x8, 0x4, 0x0, 0x1000, 0x4, 0x8, 0x5, 0x2, 0x4, 0x1, 0x0, 0xdcc, 0x7, 0x5, 0x5, 0x2, 0x10, 0x2, 0x217, 0x3ff, 0x200000, 0xd, 0xa990, 0x1, 0x9, 0x4, 0x2932, 0x5dd, 0x1ff, 0xe3]}]}]}}]}, 0x840}, 0x1, 0x0, 0x0, 0x20000814}, 0x8000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0xd402, 0x1, 0x0, 0x4d55ba80e15bd3d8, 0xb5a, 0x8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2000000072009fb3000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0800010001002000a58886a954d661c4e85c3bd409af9b77444610960f86577adec70a7a1ce19ff1bf805a3dd0b5f2765f7f86398a766ff07c62f3a45e98473718993877bb0b0b55af14053d5ecd974dd5bc7f2a7caad26f028485485d5c100abe6e6fc9cc95e00ad260cb7372338c406f5035c551"], 0x20}}, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1c9, 0x12) socket$inet6_udp(0xa, 0x2, 0x0) 18m46.289622569s ago: executing program 33 (id=52): syz_usb_connect(0x0, 0x57, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x2}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r4 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 18m40.324843857s ago: executing program 1 (id=82): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) unshare(0x22020600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x1) 18m39.863535813s ago: executing program 1 (id=84): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x7, 0x155f, 0x6, 0x4, 0x425cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x3, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x10004, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x10001, 0x81, 0x8a, 0x79, 0x2, 0x9, 0x0, 0x91, 0x8, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x6, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0xb6, 0xe19, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x5, 0x8e, 0xd, 0x7, 0x2, 0x899, 0x401, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x4, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x1, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0xfffffff8, 0x1ff, 0x81, 0xfffffffc, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x77, 0x9, 0x99, 0x7fffffff, 0x4, 0x5c, 0x1, 0x1000, 0xfffff801, 0x5], [0x4, 0xfffffffe, 0xffff, 0x637b, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x1, 0x800008d3, 0x200006, 0x8, 0x400, 0x82, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x1, 0x5, 0x9, 0xa, 0x3, 0x9, 0x1, 0xc7, 0xfff, 0x10000a, 0x10000002, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3436, 0x3, 0xd6, 0x3, 0x601, 0x0, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x2, 0x7a, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x6300, 0x40, 0xfb, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5395, 0x3, 0x6, 0x80007fff, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0x8, 0x32d, 0x0, 0x1ff, 0x2000803, 0xfffffffc, 0x10000, 0x0, 0x1b3a, 0x81, 0x3, 0x7, 0x3, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0x2, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf5, 0xf, 0x5, 0x6, 0x7, 0x1, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x100400}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = gettid() kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, 0xffffffffffffffff, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000000c0)={0xc}) write$cgroup_int(r2, &(0x7f0000000100), 0x12) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r7, &(0x7f0000000040)=ANY=[@ANYBLOB='lock io+me\a\x00'], 0xc) write$vga_arbiter(r7, 0x0, 0x0) r8 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 18m37.515047012s ago: executing program 1 (id=87): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32], 0x1c}}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea) 18m37.101800498s ago: executing program 1 (id=88): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000001240)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xee0, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xecc, 0x1, [@m_pedit={0xec8, 0x1, 0x0, 0x0, {{0xa}, {0xe9c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe98, 0x4, {{{0xbc6a, 0x1, 0x5, 0x6, 0xffffff15}, 0xd, 0x52, [{0x5, 0xff, 0x2, 0x7f, 0xf146, 0x7}, {0x4, 0x4055, 0x4, 0x2, 0x4, 0xc}, {0x80000000, 0x100, 0xfff, 0x2, 0x5, 0x4}, {0xffffffff, 0xfffffff8, 0x8, 0x8000, 0x4, 0x9}, {0x1be80000, 0x8, 0x40, 0x6, 0x2, 0x3}]}, [{0x7d40fb0f, 0x2, 0x9, 0x4, 0x8, 0x3}, {0x5, 0x2, 0x28fc, 0x1, 0xa723, 0x6}, {0x3c, 0x615, 0x7, 0x1, 0x5, 0x3}, {0xf, 0xffffff7f, 0x2, 0x51c, 0x80, 0x8}, {0xd, 0x8000, 0x3, 0x0, 0x8, 0x8}, {0x10000, 0x9, 0xf, 0x6, 0x4, 0x1}, {0x1, 0x8001, 0xa, 0xffffda60, 0x3, 0x101}, {0x0, 0x5, 0xa, 0x7, 0xada4, 0x9}, {0x3, 0x3, 0x1, 0xfff, 0x59a, 0x3}, {0x7, 0x2, 0x1, 0x7, 0x8001, 0x600c}, {0xd53b, 0x8, 0xdc, 0x2, 0x3}, {0x1e1a4921, 0x6, 0x5, 0x1, 0x438}, {0x0, 0x4, 0x1000, 0x1, 0xffffffff, 0x8}, {0x9, 0x0, 0x5, 0x400, 0x101, 0x8}, {0x9, 0x5, 0x9, 0x6, 0x40, 0x4}, {0x2232f37b, 0x80, 0x3, 0xffff, 0x5, 0xffff4470}, {0x1, 0x3e, 0xbc16, 0x7f, 0xfffffff7, 0xd}, {0x7, 0x9, 0x6, 0x5, 0x5, 0x4208}, {0x2, 0xcb, 0xfffff935, 0x98, 0x8001, 0x7}, {0x80000001, 0x8, 0x1, 0x4, 0x3, 0x81}, {0x10, 0x8, 0x9, 0x100, 0x0, 0xd}, {0xfffffffa, 0x4, 0x2, 0xc46, 0x8, 0x1000}, {0x8, 0x401, 0x2, 0x4, 0x8000, 0xffffd84f}, {0x1, 0x3, 0x0, 0x5, 0x6, 0x5}, {0x1, 0xfffffffa, 0xfff, 0x3, 0x1, 0x9}, {0x0, 0x9f8, 0x2, 0x9, 0x80000001, 0x9}, {0x5, 0x5, 0x141, 0x1, 0xd, 0x6}, {0x1, 0x7, 0x5, 0x10, 0x7, 0x401}, {0xf, 0xfffffffe, 0x2, 0x8, 0x8, 0x9}, {0x5, 0xfff, 0xfffff142, 0x6, 0x265c, 0x65d5}, {0x2400000, 0x0, 0xffff, 0x7, 0x6, 0x6}, {0xcfc, 0x6, 0xa45a, 0x32, 0x9, 0x7ff}, {0x3, 0x2, 0x8, 0x5, 0xfffffffd, 0x6}, {0xb71, 0x7, 0x6, 0x0, 0x4, 0x3}, {0x5, 0x7ab, 0x5, 0xf, 0x4, 0xfab}, {0x0, 0xfff, 0xffffffff, 0xd0, 0x9}, {0x9, 0x3, 0x6, 0x5, 0x3, 0xfffffffe}, {0x4a, 0x8001, 0xffff46bc, 0xfee, 0x101, 0xfff}, {0x7, 0x6, 0x4, 0x5, 0x2, 0xfffffffb}, {0x0, 0x3, 0x421, 0xfffffff8, 0x1, 0x9}, {0xbd, 0x7fffffff, 0x28, 0x6, 0x9cf, 0x3}, {0x400, 0x68, 0x2, 0x8, 0x400, 0x232e}, {0x9, 0xe, 0x550, 0xab, 0x6, 0xd}, {0x6, 0x0, 0x2f7, 0x9, 0x3, 0x4}, {0x3, 0xffff, 0x7, 0xa4ff, 0x75, 0x6}, {0x818, 0x2dd3, 0x0, 0x4e4, 0x4, 0x10000}, {0x34, 0x53, 0x6, 0x5, 0x3, 0x3}, {0x61c, 0x4, 0x2, 0x10001, 0x2, 0x4}, {0x2, 0x1, 0x6, 0x4, 0xfffffffe, 0xc5}, {0x66, 0x0, 0x2, 0xf30f, 0x6, 0x10000}, {0x8, 0x4d, 0x8, 0x3, 0x2, 0x5}, {0x7, 0x3, 0xa, 0x7, 0x8, 0x8}, {0x36d, 0x1000000, 0x7000, 0x401, 0x6, 0xb}, {0x3, 0xfbef, 0x10, 0x0, 0xfff, 0xe3c}, {0xf6, 0xfffffff9, 0x7, 0x0, 0x9, 0xf}, {0xfffffffa, 0x5, 0x7, 0x930, 0x10, 0xe}, {0xfffffff5, 0x1, 0x0, 0xf1, 0x80000000, 0x401}, {0x3, 0x3ff, 0x8, 0x0, 0xffffffff, 0x1}, {0x1ac, 0x7fff, 0x8, 0x4, 0x6, 0x4}, {0x2, 0x4, 0x7, 0x98, 0x3, 0x40}, {0x3, 0x4, 0x9a95, 0xdc7a, 0x80000001, 0x8001}, {0x6, 0x4803, 0x80000001, 0x6, 0x0, 0x1}, {0x0, 0xb91, 0x0, 0x7, 0x2}, {0x5, 0x8, 0x1, 0x35, 0x2, 0x8289}, {0x1, 0x5, 0x8, 0x8, 0x1, 0x1}, {0x0, 0x3, 0x8, 0x7, 0x53, 0xfffffff7}, {0x1, 0x5, 0x1, 0x738b, 0x92, 0x20}, {0x1, 0x9, 0xfffffffc, 0x9, 0x7, 0x300}, {0x1, 0x5, 0xe81, 0x48, 0x800}, {0x9, 0x6, 0xe33, 0x3, 0x1}, {0x3, 0x2, 0x2, 0x1a60, 0xfffffe00, 0x3}, {0x4, 0x313, 0x414bfcaa, 0x10, 0xb, 0x1}, {0x81, 0x7f, 0x0, 0x3, 0x4, 0x9f4}, {0x5, 0xffff, 0x7, 0xc, 0x4, 0x1}, {0x2, 0x1, 0x100, 0x5, 0x1ff, 0x9}, {0xfffffff9, 0x9, 0x446, 0xffff, 0x7fffffff, 0x3b}, {0x5, 0x4, 0x2, 0xc, 0x4, 0x9}, {0x101, 0x1, 0x80, 0x9, 0x7, 0x7}, {0x3, 0x6, 0xc7ba, 0x6b86, 0x1000, 0xc6}, {0x8001, 0x3ff, 0xadd, 0xd07, 0x3, 0x6}, {0xb, 0xf2ca, 0x40, 0x4, 0x7ff, 0x3}, {0x5, 0x1, 0x7, 0xb7f, 0x5, 0x6}, {0x1, 0x4, 0x2, 0x9, 0x7, 0x9}, {0x93, 0x3ff, 0x3, 0x7fff, 0x13d8, 0x3c}, {0x7fff, 0x6, 0x7, 0x9, 0xffffffff, 0x7fff}, {0x1, 0x0, 0x5, 0xe3, 0xf2}, {0x9, 0xf18, 0x0, 0x1, 0x0, 0xc1}, {0x7, 0x5, 0xc7, 0x0, 0x4, 0x1000}, {0x3ff, 0x1, 0xfffff000, 0x5, 0x9, 0x8fb}, {0x4, 0xe3, 0x31fc, 0x3, 0x2, 0xfc0}, {0x0, 0x5, 0x3, 0x8, 0x80000000, 0x6}, {0x1, 0x85000000, 0x7ae, 0x6, 0x10001, 0x9}, {0x9b7c, 0x4, 0xb84b, 0x8000, 0x34611dd6}, {0x9, 0x2, 0xa5, 0x2, 0x2, 0xdc}, {0x3, 0x3, 0x5, 0x6, 0x161, 0x7f}, {0x4c72, 0x9, 0x7, 0x0, 0x2, 0x80000000}, {0x0, 0x7, 0x80000001, 0x4, 0x6, 0xfffffff8}, {0x80000000, 0x2, 0x1000, 0x200, 0x2, 0x925}, {0xf2c, 0x4, 0x4, 0x9}, {0xffffffff, 0x4, 0x5, 0x5, 0x6, 0xffffffff}, {0xad8a, 0x8036, 0x7, 0x1, 0x4, 0x8}, {0x6, 0x6, 0x5, 0x6, 0x8d454e86, 0x101}, {0x81, 0x7, 0x8, 0x1, 0x8f08}, {0x80000001, 0x0, 0xe, 0x7, 0x10000, 0x2}, {0x3, 0x2, 0xce, 0x2a5, 0x0, 0x2}, {0x9, 0x7, 0x7ff, 0x57e70bb8, 0x6, 0x3}, {0x6, 0xb, 0x7, 0x6, 0x9, 0x7}, {0x1a0, 0x4, 0x5, 0x0, 0x6, 0x9}, {0x100, 0x80000000, 0x10001, 0x8, 0x40}, {0x800, 0x4, 0x0, 0x4, 0x1b38c3a3, 0x80000001}, {0xe6, 0x8, 0xf, 0x7, 0x10db80, 0x81}, {0x80000000, 0x3ff, 0x5, 0x30, 0x80000001, 0x9}, {0x3, 0x6, 0x91ce, 0x400000, 0x9, 0x10}, {0x4, 0xbb9d, 0x3d, 0x29, 0xb363, 0x8}, {0x6, 0x1, 0x10000, 0xf9, 0xffff, 0x689d}, {0x4, 0x3, 0x3, 0xff0, 0x9, 0xf67}, {0x4, 0x0, 0x9, 0x8, 0x5}, {0x500000, 0x0, 0x5, 0xfffffc00, 0x81, 0x1ff}, {0xc6f, 0x3, 0x1, 0x0, 0x4, 0x7}, {0x80, 0x6, 0x7, 0x2, 0x3, 0x5}, {0x1, 0x3e9, 0x9, 0x8, 0x3, 0x1ff}, {0x8, 0xffff, 0x401, 0x5, 0xb, 0x8}, {0x9, 0x40, 0x3, 0x0, 0x5, 0x400}, {0x5, 0x95d2, 0x202, 0xc20, 0x2}, {0x22, 0xb, 0xc3f3, 0x1, 0x8544, 0x800}, {0x1, 0x9, 0xe9, 0xdf, 0x401, 0x5}, {0xfffffff9, 0x5, 0x6, 0x2, 0x3, 0x8fe}, {0x1, 0x1, 0x7, 0x5, 0x2, 0x1}], [{0xedb8c04d87e93572}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x3}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {}, {0x4}, {0x1}, {0x7}, {0x1, 0x1}, {0x5}, {0x2}, {0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x1}, {0x6, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {}, {0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x1}, {0x2}, {}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x1, 0x3}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x1}, {0x4}, {}, {0x319b93c6f794b8c9}, {0x2ba5051aefc57e18}, {0x3}, {0x2, 0x5a7e9aebe47a5077}, {0x3}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x2}, {0x6}, {0x5, 0x1}, {0xd399d502e4ba11d0, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xee0}}, 0x0) fchdir(r5) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8880, 0x10) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 18m21.711436297s ago: executing program 34 (id=88): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000001240)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xee0, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xecc, 0x1, [@m_pedit={0xec8, 0x1, 0x0, 0x0, {{0xa}, {0xe9c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe98, 0x4, {{{0xbc6a, 0x1, 0x5, 0x6, 0xffffff15}, 0xd, 0x52, [{0x5, 0xff, 0x2, 0x7f, 0xf146, 0x7}, {0x4, 0x4055, 0x4, 0x2, 0x4, 0xc}, {0x80000000, 0x100, 0xfff, 0x2, 0x5, 0x4}, {0xffffffff, 0xfffffff8, 0x8, 0x8000, 0x4, 0x9}, {0x1be80000, 0x8, 0x40, 0x6, 0x2, 0x3}]}, [{0x7d40fb0f, 0x2, 0x9, 0x4, 0x8, 0x3}, {0x5, 0x2, 0x28fc, 0x1, 0xa723, 0x6}, {0x3c, 0x615, 0x7, 0x1, 0x5, 0x3}, {0xf, 0xffffff7f, 0x2, 0x51c, 0x80, 0x8}, {0xd, 0x8000, 0x3, 0x0, 0x8, 0x8}, {0x10000, 0x9, 0xf, 0x6, 0x4, 0x1}, {0x1, 0x8001, 0xa, 0xffffda60, 0x3, 0x101}, {0x0, 0x5, 0xa, 0x7, 0xada4, 0x9}, {0x3, 0x3, 0x1, 0xfff, 0x59a, 0x3}, {0x7, 0x2, 0x1, 0x7, 0x8001, 0x600c}, {0xd53b, 0x8, 0xdc, 0x2, 0x3}, {0x1e1a4921, 0x6, 0x5, 0x1, 0x438}, {0x0, 0x4, 0x1000, 0x1, 0xffffffff, 0x8}, {0x9, 0x0, 0x5, 0x400, 0x101, 0x8}, {0x9, 0x5, 0x9, 0x6, 0x40, 0x4}, {0x2232f37b, 0x80, 0x3, 0xffff, 0x5, 0xffff4470}, {0x1, 0x3e, 0xbc16, 0x7f, 0xfffffff7, 0xd}, {0x7, 0x9, 0x6, 0x5, 0x5, 0x4208}, {0x2, 0xcb, 0xfffff935, 0x98, 0x8001, 0x7}, {0x80000001, 0x8, 0x1, 0x4, 0x3, 0x81}, {0x10, 0x8, 0x9, 0x100, 0x0, 0xd}, {0xfffffffa, 0x4, 0x2, 0xc46, 0x8, 0x1000}, {0x8, 0x401, 0x2, 0x4, 0x8000, 0xffffd84f}, {0x1, 0x3, 0x0, 0x5, 0x6, 0x5}, {0x1, 0xfffffffa, 0xfff, 0x3, 0x1, 0x9}, {0x0, 0x9f8, 0x2, 0x9, 0x80000001, 0x9}, {0x5, 0x5, 0x141, 0x1, 0xd, 0x6}, {0x1, 0x7, 0x5, 0x10, 0x7, 0x401}, {0xf, 0xfffffffe, 0x2, 0x8, 0x8, 0x9}, {0x5, 0xfff, 0xfffff142, 0x6, 0x265c, 0x65d5}, {0x2400000, 0x0, 0xffff, 0x7, 0x6, 0x6}, {0xcfc, 0x6, 0xa45a, 0x32, 0x9, 0x7ff}, {0x3, 0x2, 0x8, 0x5, 0xfffffffd, 0x6}, {0xb71, 0x7, 0x6, 0x0, 0x4, 0x3}, {0x5, 0x7ab, 0x5, 0xf, 0x4, 0xfab}, {0x0, 0xfff, 0xffffffff, 0xd0, 0x9}, {0x9, 0x3, 0x6, 0x5, 0x3, 0xfffffffe}, {0x4a, 0x8001, 0xffff46bc, 0xfee, 0x101, 0xfff}, {0x7, 0x6, 0x4, 0x5, 0x2, 0xfffffffb}, {0x0, 0x3, 0x421, 0xfffffff8, 0x1, 0x9}, {0xbd, 0x7fffffff, 0x28, 0x6, 0x9cf, 0x3}, {0x400, 0x68, 0x2, 0x8, 0x400, 0x232e}, {0x9, 0xe, 0x550, 0xab, 0x6, 0xd}, {0x6, 0x0, 0x2f7, 0x9, 0x3, 0x4}, {0x3, 0xffff, 0x7, 0xa4ff, 0x75, 0x6}, {0x818, 0x2dd3, 0x0, 0x4e4, 0x4, 0x10000}, {0x34, 0x53, 0x6, 0x5, 0x3, 0x3}, {0x61c, 0x4, 0x2, 0x10001, 0x2, 0x4}, {0x2, 0x1, 0x6, 0x4, 0xfffffffe, 0xc5}, {0x66, 0x0, 0x2, 0xf30f, 0x6, 0x10000}, {0x8, 0x4d, 0x8, 0x3, 0x2, 0x5}, {0x7, 0x3, 0xa, 0x7, 0x8, 0x8}, {0x36d, 0x1000000, 0x7000, 0x401, 0x6, 0xb}, {0x3, 0xfbef, 0x10, 0x0, 0xfff, 0xe3c}, {0xf6, 0xfffffff9, 0x7, 0x0, 0x9, 0xf}, {0xfffffffa, 0x5, 0x7, 0x930, 0x10, 0xe}, {0xfffffff5, 0x1, 0x0, 0xf1, 0x80000000, 0x401}, {0x3, 0x3ff, 0x8, 0x0, 0xffffffff, 0x1}, {0x1ac, 0x7fff, 0x8, 0x4, 0x6, 0x4}, {0x2, 0x4, 0x7, 0x98, 0x3, 0x40}, {0x3, 0x4, 0x9a95, 0xdc7a, 0x80000001, 0x8001}, {0x6, 0x4803, 0x80000001, 0x6, 0x0, 0x1}, {0x0, 0xb91, 0x0, 0x7, 0x2}, {0x5, 0x8, 0x1, 0x35, 0x2, 0x8289}, {0x1, 0x5, 0x8, 0x8, 0x1, 0x1}, {0x0, 0x3, 0x8, 0x7, 0x53, 0xfffffff7}, {0x1, 0x5, 0x1, 0x738b, 0x92, 0x20}, {0x1, 0x9, 0xfffffffc, 0x9, 0x7, 0x300}, {0x1, 0x5, 0xe81, 0x48, 0x800}, {0x9, 0x6, 0xe33, 0x3, 0x1}, {0x3, 0x2, 0x2, 0x1a60, 0xfffffe00, 0x3}, {0x4, 0x313, 0x414bfcaa, 0x10, 0xb, 0x1}, {0x81, 0x7f, 0x0, 0x3, 0x4, 0x9f4}, {0x5, 0xffff, 0x7, 0xc, 0x4, 0x1}, {0x2, 0x1, 0x100, 0x5, 0x1ff, 0x9}, {0xfffffff9, 0x9, 0x446, 0xffff, 0x7fffffff, 0x3b}, {0x5, 0x4, 0x2, 0xc, 0x4, 0x9}, {0x101, 0x1, 0x80, 0x9, 0x7, 0x7}, {0x3, 0x6, 0xc7ba, 0x6b86, 0x1000, 0xc6}, {0x8001, 0x3ff, 0xadd, 0xd07, 0x3, 0x6}, {0xb, 0xf2ca, 0x40, 0x4, 0x7ff, 0x3}, {0x5, 0x1, 0x7, 0xb7f, 0x5, 0x6}, {0x1, 0x4, 0x2, 0x9, 0x7, 0x9}, {0x93, 0x3ff, 0x3, 0x7fff, 0x13d8, 0x3c}, {0x7fff, 0x6, 0x7, 0x9, 0xffffffff, 0x7fff}, {0x1, 0x0, 0x5, 0xe3, 0xf2}, {0x9, 0xf18, 0x0, 0x1, 0x0, 0xc1}, {0x7, 0x5, 0xc7, 0x0, 0x4, 0x1000}, {0x3ff, 0x1, 0xfffff000, 0x5, 0x9, 0x8fb}, {0x4, 0xe3, 0x31fc, 0x3, 0x2, 0xfc0}, {0x0, 0x5, 0x3, 0x8, 0x80000000, 0x6}, {0x1, 0x85000000, 0x7ae, 0x6, 0x10001, 0x9}, {0x9b7c, 0x4, 0xb84b, 0x8000, 0x34611dd6}, {0x9, 0x2, 0xa5, 0x2, 0x2, 0xdc}, {0x3, 0x3, 0x5, 0x6, 0x161, 0x7f}, {0x4c72, 0x9, 0x7, 0x0, 0x2, 0x80000000}, {0x0, 0x7, 0x80000001, 0x4, 0x6, 0xfffffff8}, {0x80000000, 0x2, 0x1000, 0x200, 0x2, 0x925}, {0xf2c, 0x4, 0x4, 0x9}, {0xffffffff, 0x4, 0x5, 0x5, 0x6, 0xffffffff}, {0xad8a, 0x8036, 0x7, 0x1, 0x4, 0x8}, {0x6, 0x6, 0x5, 0x6, 0x8d454e86, 0x101}, {0x81, 0x7, 0x8, 0x1, 0x8f08}, {0x80000001, 0x0, 0xe, 0x7, 0x10000, 0x2}, {0x3, 0x2, 0xce, 0x2a5, 0x0, 0x2}, {0x9, 0x7, 0x7ff, 0x57e70bb8, 0x6, 0x3}, {0x6, 0xb, 0x7, 0x6, 0x9, 0x7}, {0x1a0, 0x4, 0x5, 0x0, 0x6, 0x9}, {0x100, 0x80000000, 0x10001, 0x8, 0x40}, {0x800, 0x4, 0x0, 0x4, 0x1b38c3a3, 0x80000001}, {0xe6, 0x8, 0xf, 0x7, 0x10db80, 0x81}, {0x80000000, 0x3ff, 0x5, 0x30, 0x80000001, 0x9}, {0x3, 0x6, 0x91ce, 0x400000, 0x9, 0x10}, {0x4, 0xbb9d, 0x3d, 0x29, 0xb363, 0x8}, {0x6, 0x1, 0x10000, 0xf9, 0xffff, 0x689d}, {0x4, 0x3, 0x3, 0xff0, 0x9, 0xf67}, {0x4, 0x0, 0x9, 0x8, 0x5}, {0x500000, 0x0, 0x5, 0xfffffc00, 0x81, 0x1ff}, {0xc6f, 0x3, 0x1, 0x0, 0x4, 0x7}, {0x80, 0x6, 0x7, 0x2, 0x3, 0x5}, {0x1, 0x3e9, 0x9, 0x8, 0x3, 0x1ff}, {0x8, 0xffff, 0x401, 0x5, 0xb, 0x8}, {0x9, 0x40, 0x3, 0x0, 0x5, 0x400}, {0x5, 0x95d2, 0x202, 0xc20, 0x2}, {0x22, 0xb, 0xc3f3, 0x1, 0x8544, 0x800}, {0x1, 0x9, 0xe9, 0xdf, 0x401, 0x5}, {0xfffffff9, 0x5, 0x6, 0x2, 0x3, 0x8fe}, {0x1, 0x1, 0x7, 0x5, 0x2, 0x1}], [{0xedb8c04d87e93572}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x3}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {}, {0x4}, {0x1}, {0x7}, {0x1, 0x1}, {0x5}, {0x2}, {0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x1}, {0x6, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {}, {0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x1}, {0x2}, {}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x1, 0x3}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x1}, {0x4}, {}, {0x319b93c6f794b8c9}, {0x2ba5051aefc57e18}, {0x3}, {0x2, 0x5a7e9aebe47a5077}, {0x3}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x2}, {0x6}, {0x5, 0x1}, {0xd399d502e4ba11d0, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xee0}}, 0x0) fchdir(r5) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8880, 0x10) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 12m27.451293889s ago: executing program 6 (id=406): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, 0x0, 0x804) 12m26.769663802s ago: executing program 6 (id=409): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() r2 = creat(0x0, 0xd931d3864d39dcdb) close(r2) r3 = open(&(0x7f0000000300)='./file0\x00', 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x1) r4 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r4, 0x0, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r5, &(0x7f00000000c0), 0x0) execveat(r4, 0x0, 0x0, 0x0, 0x1000) 12m25.24476802s ago: executing program 6 (id=412): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0x5ee, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 12m23.709782973s ago: executing program 6 (id=416): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="2016b0"], 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYBLOB="01"], 0xb0}}, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 12m20.925931854s ago: executing program 6 (id=424): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d004892e822a6abc02ad2602a5ad6f7007ea60864160af365935cfaea3f49d8df1931a0e64ffc4c78029ee517d34460bc06000000938037e70e457ae2bb24ef6697070000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/101, 0x65}, {&(0x7f0000000900)=""/139, 0x8b}, {&(0x7f0000004100)=""/4125, 0x101d}, {&(0x7f00000030c0)=""/4089, 0xff9}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/253, 0xfd}], 0x6}, 0x40010022) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x10182) 12m20.188515975s ago: executing program 6 (id=425): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_io_uring_setup(0x497, &(0x7f0000000480)={0x0, 0x79af, 0x3180, 0x108000, 0x166}, &(0x7f00000001c0)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x2f) syz_io_uring_submit(r0, r1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r4, &(0x7f0000000080), 0x8) 12m17.978370468s ago: executing program 5 (id=19): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf85eda"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r2 = dup(r1) read$FUSE(r2, 0x0, 0x0) 12m15.070417385s ago: executing program 5 (id=432): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$kcm(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$usbfs(&(0x7f0000000200), 0x800079, 0x18ba44) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x80, 0x8, 0x7ff, 0x0, 0x0, 0xf421, 0x0}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_CHANINFO(r1, 0x80306403, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80280, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) pselect6(0x40, &(0x7f0000000240)={0x2, 0x0, 0x0, 0x7d, 0x0, 0xa, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x9, 0xf, 0x80000006}, 0x0, 0x0) 12m12.864850718s ago: executing program 5 (id=434): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r3 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x8001, 0x40000) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4818}, 0xc080) sendmsg$NL80211_CMD_JOIN_MESH(r3, 0x0, 0x4040081) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3b0, 0xffffffff, 0xffffffff, 0x3b0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x3], 0x5, 0x14, 0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB], 0x0, 0x34, 0x0, 0x9, 0x614fc9df}, 0x28) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r2, &(0x7f0000005440)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x3ff}], 0x2, 0x100, 0x0) 12m3.432232937s ago: executing program 35 (id=425): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_io_uring_setup(0x497, &(0x7f0000000480)={0x0, 0x79af, 0x3180, 0x108000, 0x166}, &(0x7f00000001c0)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x2f) syz_io_uring_submit(r0, r1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r4, &(0x7f0000000080), 0x8) 12m1.187404849s ago: executing program 4 (id=452): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) quotactl$Q_SYNC(0xffffffff800001f5, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x1, 0x3}, 0x6) write(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000280), 0x3) signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) fsopen(&(0x7f0000000100)='ext4\x00', 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x10, 0x1c20040, 0xff, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, 0x0, 0x0, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 11m59.427911123s ago: executing program 4 (id=454): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r4 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x8001, 0x40000) sendmsg$NL80211_CMD_JOIN_MESH(r4, 0x0, 0x4040081) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r3, &(0x7f0000005440)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x3ff}], 0x2, 0x100, 0x0) 11m56.516551419s ago: executing program 36 (id=434): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r3 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x8001, 0x40000) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4818}, 0xc080) sendmsg$NL80211_CMD_JOIN_MESH(r3, 0x0, 0x4040081) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3b0, 0xffffffff, 0xffffffff, 0x3b0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x3], 0x5, 0x14, 0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB], 0x0, 0x34, 0x0, 0x9, 0x614fc9df}, 0x28) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r2, &(0x7f0000005440)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x3ff}], 0x2, 0x100, 0x0) 11m52.278088651s ago: executing program 4 (id=461): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000002ac0)={0x1, [{0x3, 0x0, 0x7, 0x0}, {0x1, 0x170, 0x6, &(0x7f0000000040)="ffac1156b0280beba63d720a2568c067d60fcda32db42a87f697aa007be0200d0d80009db19a89a3bbcc1ba6cb9b"}, {0x3, 0x0, 0x8, 0x0}, {0x1, 0x0, 0x100, 0x0}, {0x0, 0x0, 0xffffbfc0, 0x0}, {0x3, 0x0, 0x1, 0x0}, {0x3, 0x0, 0x5, 0x0}, {0x2, 0x0, 0xfffffeff, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x705, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x1f82, 0x0}, {0x0, 0x0, 0xd, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x50, 0x0}, {0x2, 0x0, 0xcb9, 0x0}]}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4eb36, 0x2) socket$kcm(0x29, 0x2, 0x0) unshare(0x82c0af769470bf75) sync_file_range(0xffffffffffffffff, 0xa06d, 0x8000, 0x4) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x3, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000180)=0x2) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 11m51.271957586s ago: executing program 4 (id=464): syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = getpgid(0x0) syz_pidfd_open(r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/mnt\x00') r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) 11m48.399588144s ago: executing program 4 (id=468): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x50}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x8840}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x59, 0xe0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, r7, 0x7d243a6ea807936d, 0x70bd2c, 0x25dfdbfa, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x815}, 0x40100) 11m39.520802746s ago: executing program 4 (id=478): socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() getrlimit(0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000240), 0x4000000000002d7, 0x4004800) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) r2 = accept4$rose(0xffffffffffffffff, 0x0, 0x0, 0x81000) getsockopt$rose(r2, 0x104, 0x5, &(0x7f0000000180), &(0x7f00000001c0)=0x4) syz_emit_ethernet(0x36, &(0x7f0000001700)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x1e, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}, {"cd82df76b7e4d15704f682c6d96a00e4a40b433f20cd8f6ecb0b28b8391858c304c82b553e2a0baef148d34ae1613873b6248f0bcaf56473fb458da83496d1cc9ec9b68be49559df69fce7c3762d96cbe98d8cac71aaebd46f3bf92bca8dea118e7f2926b7bc4208912a3f1cfa41e62cd50e44bf6a49f3c6cd2d201b946badfb6ec8934d9c27ec59136bb219cf071ab6efd04585b7cede1421ec"}}}}}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r4, 0x80044dff, 0x1000000000000) 11m23.89550777s ago: executing program 37 (id=478): socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() getrlimit(0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000240), 0x4000000000002d7, 0x4004800) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) r2 = accept4$rose(0xffffffffffffffff, 0x0, 0x0, 0x81000) getsockopt$rose(r2, 0x104, 0x5, &(0x7f0000000180), &(0x7f00000001c0)=0x4) syz_emit_ethernet(0x36, &(0x7f0000001700)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x1e, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}, {"cd82df76b7e4d15704f682c6d96a00e4a40b433f20cd8f6ecb0b28b8391858c304c82b553e2a0baef148d34ae1613873b6248f0bcaf56473fb458da83496d1cc9ec9b68be49559df69fce7c3762d96cbe98d8cac71aaebd46f3bf92bca8dea118e7f2926b7bc4208912a3f1cfa41e62cd50e44bf6a49f3c6cd2d201b946badfb6ec8934d9c27ec59136bb219cf071ab6efd04585b7cede1421ec"}}}}}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r4, 0x80044dff, 0x1000000000000) 8m4.163598224s ago: executing program 2 (id=627): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='c +'], 0xa) 8m3.373137823s ago: executing program 2 (id=629): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x13, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 7m58.521308386s ago: executing program 2 (id=631): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) 7m57.923829899s ago: executing program 2 (id=633): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000440)={[{@usrjquota}, {@data_err_ignore}, {@stripe}, {@noblock_validity}, {@grpid}]}, 0x3, 0x457, &(0x7f0000000dc0)="$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") mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) chdir(&(0x7f00000000c0)='./file0\x00') mount$nfs4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x82400, 0x184) getdents(r0, &(0x7f00000001c0)=""/109, 0x6d) getdents(r0, &(0x7f0000000000)=""/38, 0x26) 7m56.37528583s ago: executing program 2 (id=634): getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x5502000000000000, 0x0, 0x4000000}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x5608, 0x2) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="041d0506c8000400000000000000d3be8d4dd1a2ebacf0f04461e77c1ec51703ba50660cadd883bba65231802a7e2e123b11fdb31a0b31949edf79be7efef788"], 0x8) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000500)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]}) 7m55.406655518s ago: executing program 2 (id=635): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x96f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001f40)=@raw={'raw\x00', 0x8, 0x3, 0x3e8, 0x248, 0x43, 0xa0, 0x248, 0x98, 0x350, 0x178, 0x178, 0x350, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x248, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x448) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000440)='./file0\x00', &(0x7f00000004c0), 0xa25436, &(0x7f00000001c0)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r4 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fd, 0x6, 0xeeee8000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f0000000340)=[@cr4={0x1, 0x100200}], 0x1) 7m52.697149668s ago: executing program 38 (id=635): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x96f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001f40)=@raw={'raw\x00', 0x8, 0x3, 0x3e8, 0x248, 0x43, 0xa0, 0x248, 0x98, 0x350, 0x178, 0x178, 0x350, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x248, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x448) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000440)='./file0\x00', &(0x7f00000004c0), 0xa25436, &(0x7f00000001c0)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r4 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fd, 0x6, 0xeeee8000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f0000000340)=[@cr4={0x1, 0x100200}], 0x1) 6m53.346415295s ago: executing program 9 (id=676): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) mknod$loop(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x1) 6m49.244163246s ago: executing program 9 (id=679): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x121c91e, &(0x7f0000000080), 0x4, 0x503, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00'}, 0x51) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e08906200060000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 6m44.692031902s ago: executing program 9 (id=680): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000000)=ANY=[], 0x1, 0x6f6, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x2101, 0x0, 0x0) setuid(0xee01) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x11, 0xffffffffffffffff, 0xcd9f5000) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0xf0c0a85915640486, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000003840)={'\x00', 0x1, 0xf, 0x6, 0x100000000, 0x1, 0xffffffffffffffff}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4048040) 6m41.520225258s ago: executing program 9 (id=681): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="2016b0"], 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="b000", @ANYRES16, @ANYBLOB="01"], 0xb0}}, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 6m38.976738525s ago: executing program 9 (id=683): fsopen(0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) open(0x0, 0x143142, 0x43) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0000078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7b8df8e61740b9af2d4d58654a4af0fa0ce1f830cc1eaf991fd00"}, 0xd8) setsockopt$inet_tcp_int(r4, 0x6, 0x2, 0x0, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0xfffffffffffffd60, &(0x7f0000001600)=[{&(0x7f0000000240)="cd", 0xff70}], 0x1}, 0x810) socket$igmp(0x2, 0x3, 0x2) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0xbb54d000) socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 6m35.046614298s ago: executing program 9 (id=684): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x100, 0x70bd2c, 0x25dfdc05, {0x0, 0x0, 0x0, 0x0, {0xb, 0x4}, {0x10, 0xffff}, {0xfff2, 0xd}}}, 0x24}}, 0x4080) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a24"], 0x0) 6m19.326892533s ago: executing program 39 (id=684): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x100, 0x70bd2c, 0x25dfdc05, {0x0, 0x0, 0x0, 0x0, {0xb, 0x4}, {0x10, 0xffff}, {0xfff2, 0xd}}}, 0x24}}, 0x4080) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a24"], 0x0) 5m2.081884924s ago: executing program 0 (id=636): syz_usb_connect(0x5, 0x6b, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000bf4e2340e20402149a6d0102030109025900010b0010000904b8dd00022cc400052406"], 0x0) 4m59.791809556s ago: executing program 0 (id=727): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) syz_pidfd_open(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x28a6, &(0x7f0000000100)={0x0, 0xfffffffd, 0x2, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)}, 0x20) io_uring_enter(r3, 0x64f5, 0x90f4, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x0, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4, r4}, 0x0, &(0x7f0000000340)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r4, r4}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000600), &(0x7f0000000640)}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x0, 0x0, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m55.202119053s ago: executing program 0 (id=728): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=@newlink={0x54, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f26c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x7fd, 0x1, {0x1, 0x4b1, 0x5, 0x8100}}]}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x40) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d500b66", 0x8}], 0x1}}], 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000300), 0xf01c, 0x524f01) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4m53.556595388s ago: executing program 0 (id=731): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000003580), r0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, 0x0, 0x10000) 4m53.088455811s ago: executing program 0 (id=733): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) 4m48.550471684s ago: executing program 0 (id=736): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x62, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000100)=[0x9], &(0x7f0000000540), 0x8000000000000000, 0x90df519d1e66}}, 0x40) fchdir(r3) r4 = open(&(0x7f0000000100)='./bus\x00', 0x1031c2, 0x20) ftruncate(r4, 0x2007ffb) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 4m27.954661793s ago: executing program 40 (id=736): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x62, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000100)=[0x9], &(0x7f0000000540), 0x8000000000000000, 0x90df519d1e66}}, 0x40) fchdir(r3) r4 = open(&(0x7f0000000100)='./bus\x00', 0x1031c2, 0x20) ftruncate(r4, 0x2007ffb) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 1m25.741106409s ago: executing program 7 (id=893): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@quota}, {@quota}, {@barrier}, {@orlov}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000440)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', r3) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x0, 0x3, 0x2, 0x8, 0x0, 0x9, 0x0, 0x0, 0x3, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) clock_settime(0x0, 0x0) keyctl$restrict_keyring(0xa, r3, 0x0, &(0x7f0000000000)='id:cb2e') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x60000, 0x3) ioctl(r4, 0xe, &(0x7f0000000a80)="6ad6fc026cee765d89939199950b1c1010a650b9eb0b0180df6d66b2bb799d5ec09a99b29628fbe064decfbab8df118e8d604389f17122297207a86edc384fb6a98440e5e960e614ea73dfface4d9895c325fb479c07d2047afe0e867f3b1c259796b47fd96218b341b000cc3f0ba5a80ec50217fdabb66fcd4b3fea546b4ee77f234e1e538604ce") r5 = getpid() syz_pidfd_open(r5, 0x0) 1m16.148826761s ago: executing program 7 (id=896): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x8001, 0x40000) sendmsg$NL80211_CMD_JOIN_MESH(r4, 0x0, 0x4040081) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r3, &(0x7f0000005440)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x3ff}], 0x2, 0x100, 0x0) 1m12.833891556s ago: executing program 7 (id=899): timer_create(0x0, 0x0, &(0x7f0000000300)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) pidfd_getfd(r2, r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = io_uring_setup(0x28a6, &(0x7f0000000100)={0x0, 0xfffffffd, 0x2, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)}, 0x20) io_uring_enter(r5, 0x64f5, 0x90f4, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x0, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r6, r6}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x0, 0x0, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m8.927974874s ago: executing program 7 (id=901): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40), 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r2 = socket$inet(0x2b, 0x801, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, 0x0, 0x4) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0xa0000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4000009c}]}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x9007}, 0x4) sendfile(r3, r3, 0x0, 0x2000fb) 1m7.081970437s ago: executing program 7 (id=902): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @random="d61fa74c04e8", 'vcan0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000080)) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 1m6.123607874s ago: executing program 7 (id=903): r0 = fsopen(&(0x7f0000000580)='overlay\x00', 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x20801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200)={0x0, 0x20000800, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48}) recvfrom(r1, &(0x7f00000002c0)=""/187, 0xbb, 0x2102, &(0x7f0000000380)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, 0x80) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0x1b8, 0x0, 0x1b8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}, {0x5}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000180)=ANY=[], 0x110) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r6, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r6, 0x40044620, 0x0) r7 = dup(0xffffffffffffffff) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x6600, 0x0) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0xff, "810000cc2b000000000000fa25ffff00ffffff"}) r10 = syz_open_pts(r9, 0x141601) fcntl$setstatus(r10, 0x4, 0x102800) write(r10, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r8, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 49.759138631s ago: executing program 41 (id=903): r0 = fsopen(&(0x7f0000000580)='overlay\x00', 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x20801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200)={0x0, 0x20000800, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48}) recvfrom(r1, &(0x7f00000002c0)=""/187, 0xbb, 0x2102, &(0x7f0000000380)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, 0x80) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0x1b8, 0x0, 0x1b8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}, {0x5}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000180)=ANY=[], 0x110) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r6, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r6, 0x40044620, 0x0) r7 = dup(0xffffffffffffffff) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x6600, 0x0) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0xff, "810000cc2b000000000000fa25ffff00ffffff"}) r10 = syz_open_pts(r9, 0x141601) fcntl$setstatus(r10, 0x4, 0x102800) write(r10, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r8, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 11.828392918s ago: executing program 8 (id=935): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r4 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x8001, 0x40000) sendmsg$NL80211_CMD_JOIN_MESH(r4, 0x0, 0x4040081) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r3, &(0x7f0000005440)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x3ff}], 0x2, 0x100, 0x0) 8.889944385s ago: executing program 8 (id=936): preadv2(0xffffffffffffffff, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/161, 0xa1}, {0x0}], 0x4, 0xfff, 0x2, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000000)={[{@i_version}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@errors_remount}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x470, &(0x7f0000000bc0)="$eJzs281rHGUYAPBnJh9t7UdirR+tVaNFCIpJk1btwYui4KGioId6jMm2hG4baaLYUmwqUi+CFPQsHgX/Am8iiHoSvOrFkxSK9tLqKTKzM+1mm02N2WRi9veDzb7vzrs7z5P5eud9dwPoWkPZnyRiR0T8EhEDjeriBkONpxvXzk/+de38ZBILC6//keTtrl87P1k2Ld+3vagMpxHph0mxksVmz547OVGv184U9dG5U2+Pzp4999S7pyZO1E7UTo8fOXL40Nizz4w/3ZE8s7yu73t/Zv/el9+8/Mrksctv/fBVFu+OYnlzHp0ylCX+50KuddnjnV5ZxXY2lZPeCgNhRXoiIttcffnxPxA9cWvjDcRLH1QaHLCmsmvTlvaL5xeATSyJqiMAqlFe6LP73/KxTl2PDeHq840boCzvG8WjsaQ30qJNX8v9bScNRcSx+b8/zx6xRuMQAADNPp787Gh/U7/jVv8jjfvy59/yv7uKOZTBiLg7InZHxD0RsSci7o3I294fEQ+sMp7b+z/plVV+5LKy/t9zxdzW4v5f2fuLwZ6itjPPvy85Pl2vHSz+J8PRtyWrjy2zjm9e/PmTdsua+3/ZI1t/2Rcs4rjS2zJANzUxN5F3Sjvg6sWIfb1L5Z/cnAlIImJvROxb2UfvKgvTT3y5v12jO+e/jA7MMy18kaU3n+U/Hy35l5Lm+cnp2+YnR7dGvXZwtNwrbvfjT5dea7f+VeXfAVdrjeem7d/aZDBpnq+dXfk6Lv36Udt7mv+4/6f9yRv5PHN/8dp7E3NzZ8Yi+pOjeX3R6+O33lvWy/bZ/j98YOnjf3fxniz/ByMi24kfioiHI+KRIvZHI+KxiDiwTP7fv9B+WZl/pBVt/4sRU0ue/27u/y3bf+WFnpPffd1u/f9u+x/OS8PFK/n57w6WCic7XbQGuJr/HQAAAPxfpPl34JN05GY5TUdGGt/h3xN3pfWZ2bknj8+8c3qq8V35wehLy5GugWI8tD5dr40l88UnNsZHx4ux4nK89FAxbvxpz7a8PjI5U5+qOHfodtvbHP+Z33uqjg5YY9uWfHW8f90DASrQOo+eLq5eeDWcDGCz8ntt6F53OP7T9YoDWH+u/9C9ljr+L7TUzQXA5uT6D93L8Q9dKv226giACrn+Q1daze/617CwdWOEUU1ho26UvBBRFtINEY/CGhWqPjMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0xj8BAAD//02e6R0=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r3, 0x4b45, 0x3) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r4, 0x0, &(0x7f0000000540)=""/210}, 0x20) 5.194068302s ago: executing program 8 (id=937): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="b7000000d0000000bca30000000000002403000040feffff7b1af0ff0000000079a4f0ff000000001f030000000000002e030200000000002604fdffffff000e61141800000000001d430000000000007a0a00fe0000001f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c88629a6c921c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71ca3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300000000000000000000000000000000062c7cf52e9624806a4833e1c0059e5a703ab9c2e9b38779270dc5e80af75d509b1a31fe6ed3f8c0172659256dc88de4e377c8a07e95ec5549ae47dc43b93a159a201be254048b9e0857ea3c736c761e686f9b3d0690f035617a12055b2cb3a03794d67b95e7f4fc6af323120c09d0503c8ce92e869e22bb2590299ad76d541f844d32f96184f74d433793bbd75ec15fb1497ce835445212421cb4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) 1.68005872s ago: executing program 8 (id=938): r0 = socket$kcm(0xa, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.202324193s ago: executing program 8 (id=939): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @random="d61fa74c04e8", 'vcan0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 0s ago: executing program 8 (id=940): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[], 0x41, 0x61d0, &(0x7f000000b800)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x4020, &(0x7f0000006900)=ANY=[], 0xb, 0x0, &(0x7f0000001b40)) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000100)='./bus\x00', 0x800c40, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x1, 0x373, &(0x7f0000000980)="$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") r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, &(0x7f0000000b40)=""/4096, 0x1000) kernel console output (not intermixed with test programs): [ 1027.441844][ T1134] bridge_slave_0: left allmulticast mode [ 1027.448226][ T1134] bridge_slave_0: left promiscuous mode [ 1027.454483][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.469401][ T1134] bridge_slave_1: left allmulticast mode [ 1027.475233][ T1134] bridge_slave_1: left promiscuous mode [ 1027.482430][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.499007][ T1134] bridge_slave_0: left allmulticast mode [ 1027.505178][ T1134] bridge_slave_0: left promiscuous mode [ 1027.512113][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.672423][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1027.687978][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1027.718345][ T1134] bond0 (unregistering): Released all slaves [ 1027.979527][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1027.993632][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1028.014424][ T1134] bond0 (unregistering): Released all slaves [ 1028.025236][ T9687] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.037929][ T9687] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.046220][ T9687] bridge_slave_1: entered allmulticast mode [ 1028.055864][ T9687] bridge_slave_1: entered promiscuous mode [ 1028.103934][ T9715] netlink: 15 bytes leftover after parsing attributes in process `syz.7.704'. [ 1028.114902][ T9715] netlink: 15 bytes leftover after parsing attributes in process `syz.7.704'. [ 1028.128943][ T9715] netlink: 15 bytes leftover after parsing attributes in process `syz.7.704'. [ 1028.141914][ T9715] netlink: 15 bytes leftover after parsing attributes in process `syz.7.704'. [ 1028.154060][ T9715] netlink: 15 bytes leftover after parsing attributes in process `syz.7.704'. [ 1028.163611][ T9715] netlink: 15 bytes leftover after parsing attributes in process `syz.7.704'. [ 1028.175261][ T9715] netlink: 15 bytes leftover after parsing attributes in process `syz.7.704'. [ 1028.186024][ T9715] netlink: 15 bytes leftover after parsing attributes in process `syz.7.704'. [ 1028.211237][ T9715] netlink: 15 bytes leftover after parsing attributes in process `syz.7.704'. [ 1028.221171][ T9715] netlink: 15 bytes leftover after parsing attributes in process `syz.7.704'. [ 1028.554239][ T9684] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.576952][ T9684] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.604053][ T9684] bridge_slave_0: entered allmulticast mode [ 1028.620594][ T9684] bridge_slave_0: entered promiscuous mode [ 1028.670351][ T1134] hsr_slave_0: left promiscuous mode [ 1028.683746][ T1134] hsr_slave_1: left promiscuous mode [ 1028.692964][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1028.704894][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1028.740826][ T1134] hsr_slave_0: left promiscuous mode [ 1028.764438][ T1134] hsr_slave_1: left promiscuous mode [ 1028.773324][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1028.797416][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1028.816735][ T5096] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1028.998918][ T5096] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 1029.011088][ T5096] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1029.030820][ T5096] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1029.060255][ T5096] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1029.073071][ T5096] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1029.087508][ T5096] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1029.100153][ T5096] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1029.112073][ T5096] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1029.123571][ T5096] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1029.151151][ T5096] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1029.164384][ T5096] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1029.175390][ T5096] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1029.188243][ T5096] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1029.201418][ T5096] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1029.211008][ T1134] team0 (unregistering): Port device team_slave_1 removed [ 1029.218895][ T5096] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1029.243477][ T5096] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1029.245585][ T1134] team0 (unregistering): Port device team_slave_0 removed [ 1029.278981][ T5096] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1029.292955][ T5096] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1029.304611][ T5096] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1029.349492][ T5096] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1029.360145][ T5096] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1029.380127][ T5096] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1029.404551][ T5096] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1029.414725][ T5096] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1029.426751][ T5096] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1029.443900][ T5096] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1029.462506][ T5096] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1029.474666][ T5096] usb 8-1: Product: syz [ 1029.480003][ T5096] usb 8-1: Manufacturer: syz [ 1029.485071][ T5096] usb 8-1: SerialNumber: syz [ 1029.506977][ T5096] usb 8-1: config 0 descriptor?? [ 1029.551202][ T5096] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 1029.776385][ T9389] usb 8-1: USB disconnect, device number 19 [ 1029.808134][ T9389] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 1029.921750][ T1134] team0 (unregistering): Port device team_slave_1 removed [ 1029.942401][ T1134] team0 (unregistering): Port device team_slave_0 removed [ 1030.177708][ T9687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1030.191720][ T9684] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.207887][ T9684] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.216114][ T9684] bridge_slave_1: entered allmulticast mode [ 1030.226875][ T9684] bridge_slave_1: entered promiscuous mode [ 1030.349643][ T9687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1030.424391][ T9684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1030.483383][ T9684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1030.546958][ T9687] team0: Port device team_slave_0 added [ 1030.622228][ T9687] team0: Port device team_slave_1 added [ 1030.825879][ T9684] team0: Port device team_slave_0 added [ 1031.373471][ T9684] team0: Port device team_slave_1 added [ 1031.730149][ T9687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1031.745302][ T9687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1031.823648][ T9687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1031.851999][ T9687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1031.862077][ T9687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1031.892067][ T9687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1032.074117][ T9684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1032.089988][ T9684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1032.117073][ T9684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1032.138884][ T9684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1032.146299][ T9684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1032.176210][ T9684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1032.417784][ T9687] hsr_slave_0: entered promiscuous mode [ 1032.429384][ T9687] hsr_slave_1: entered promiscuous mode [ 1032.441242][ T9687] debugfs: 'hsr0' already exists in 'hsr' [ 1032.449097][ T9687] Cannot create hsr debugfs directory [ 1032.610028][ T9684] hsr_slave_0: entered promiscuous mode [ 1032.621323][ T9684] hsr_slave_1: entered promiscuous mode [ 1032.630435][ T9684] debugfs: 'hsr0' already exists in 'hsr' [ 1032.636312][ T9684] Cannot create hsr debugfs directory [ 1032.646231][ T9723] loop7: detected capacity change from 0 to 32768 [ 1032.675159][ T9723] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.707 (9723) [ 1032.727220][ T9630] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1032.744967][ T9723] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1032.766780][ T9723] BTRFS info (device loop7): using blake2b checksum algorithm [ 1032.804220][ T9630] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1032.978378][ T9723] BTRFS info (device loop7): enabling ssd optimizations [ 1033.007113][ T9723] BTRFS info (device loop7): turning on async discard [ 1033.014187][ T9723] BTRFS info (device loop7): enabling free space tree [ 1033.034698][ T9723] BTRFS info (device loop7): use zstd compression, level 3 [ 1033.043469][ T9630] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1033.100601][ T9630] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1033.112957][ T29] audit: type=1800 audit(1771152012.653:17): pid=9723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.707" name="file1" dev="loop7" ino=260 res=0 errno=0 [ 1033.565260][ T7657] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1034.143884][ T9621] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1034.228238][ T9621] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1034.293756][ T9621] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1034.388454][ T9621] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1035.761384][ T9630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1036.296020][ T9630] 8021q: adding VLAN 0 to HW filter on device team0 [ 1036.476111][ T9687] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1036.813591][ T2962] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.821130][ T2962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1036.885323][ T9687] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1037.006130][ T9465] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.013797][ T9465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1037.062805][ T9687] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1037.168879][ T9687] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1038.661778][ T9621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1038.971100][ T9684] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1039.048665][ T9684] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1039.128649][ T9684] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1039.261782][ T9621] 8021q: adding VLAN 0 to HW filter on device team0 [ 1039.298865][ T9684] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1039.513266][ T6173] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.520864][ T6173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1039.613857][ T6173] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.621453][ T6173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1039.853538][ T9687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1040.303434][ T9687] 8021q: adding VLAN 0 to HW filter on device team0 [ 1040.588832][ T6174] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.596398][ T6174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1040.692619][ T9630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1040.883438][ T6174] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.891017][ T6174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1041.903214][ T9630] veth0_vlan: entered promiscuous mode [ 1042.005155][ T9684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1042.320370][ T9630] veth1_vlan: entered promiscuous mode [ 1042.408898][ T9684] 8021q: adding VLAN 0 to HW filter on device team0 [ 1042.578369][ T8348] bridge0: port 1(bridge_slave_0) entered blocking state [ 1042.585967][ T8348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1042.805378][ T8348] bridge0: port 2(bridge_slave_1) entered blocking state [ 1042.812915][ T8348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1043.428762][ T9630] veth0_macvtap: entered promiscuous mode [ 1043.618249][ T9621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1043.635229][ T9630] veth1_macvtap: entered promiscuous mode [ 1044.701588][ T9630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1044.908146][ T9630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1045.104138][ T9687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1045.151788][ T9465] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.185327][ T9465] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.319112][ T9465] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.357656][ T9465] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.807995][ T9621] veth0_vlan: entered promiscuous mode [ 1046.115258][ T9621] veth1_vlan: entered promiscuous mode [ 1046.381932][ T9687] veth0_vlan: entered promiscuous mode [ 1046.604384][ T9687] veth1_vlan: entered promiscuous mode [ 1046.711060][ T9684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1046.866341][ T9621] veth0_macvtap: entered promiscuous mode [ 1047.033041][ T9621] veth1_macvtap: entered promiscuous mode [ 1047.324781][ T9621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1047.483908][ T9687] veth0_macvtap: entered promiscuous mode [ 1047.551959][ T9621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1047.678612][ T9687] veth1_macvtap: entered promiscuous mode [ 1047.693285][ T6173] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.730043][ T6173] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.788960][ T6173] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.806788][ T6173] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.956836][ T9808] loop7: detected capacity change from 0 to 32768 [ 1048.032441][ T9808] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.715 (9808) [ 1048.038786][ T9687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1048.186241][ T9808] BTRFS info (device loop7): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 1048.219681][ T9687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1048.255956][ T9808] BTRFS info (device loop7): using xxhash64 checksum algorithm [ 1048.363169][ T9808] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 1048.367867][ T9808] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1048.433026][ T9808] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1048.457761][ T8794] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.487662][ T9808] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1048.488706][ T9808] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1048.538158][ T9808] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1048.560725][ T8794] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.618074][ T9808] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1048.618848][ T9808] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1048.650247][ T8794] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.691322][ T9808] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1048.692141][ T9808] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1048.720011][ T8794] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.760326][ T9808] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1048.761059][ T9808] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1048.802442][ T9808] BTRFS error (device loop7): open_ctree failed: -12 [ 1049.603285][ T9684] veth0_vlan: entered promiscuous mode [ 1049.859643][ T9684] veth1_vlan: entered promiscuous mode [ 1050.623732][ T9684] veth0_macvtap: entered promiscuous mode [ 1050.771785][ T9684] veth1_macvtap: entered promiscuous mode [ 1051.163532][ T9684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1051.289326][ T9684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1051.446788][ T1116] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.455870][ T1116] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.611984][ T1116] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.666966][ T1116] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.497981][ T8418] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1053.515005][ T8418] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1053.867297][ T8418] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1053.891139][ T8418] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1053.910907][ T8418] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1056.522045][ T8418] Bluetooth: hci1: command tx timeout [ 1056.837169][ T5783] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1056.853593][ T5783] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1056.863816][ T5783] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1056.935285][ T5783] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1056.957515][ T5783] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1057.950362][ T137] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.202731][ T137] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.512500][ T137] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.586959][ T5783] Bluetooth: hci1: command tx timeout [ 1058.911916][ T9896] chnl_net:caif_netlink_parms(): no params data found [ 1058.986195][ T137] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.066693][ T5783] Bluetooth: hci6: command tx timeout [ 1059.988061][ T9921] loop7: detected capacity change from 0 to 32768 [ 1060.667335][ T5783] Bluetooth: hci1: command tx timeout [ 1061.158596][ T5783] Bluetooth: hci6: command tx timeout [ 1061.447179][ T8348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1061.455196][ T8348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1061.607831][ T137] bridge_slave_1: left allmulticast mode [ 1061.613665][ T137] bridge_slave_1: left promiscuous mode [ 1061.667784][ T137] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.753224][ T137] bridge_slave_0: left allmulticast mode [ 1061.806145][ T137] bridge_slave_0: left promiscuous mode [ 1061.840611][ T137] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.751672][ T5783] Bluetooth: hci1: command tx timeout [ 1062.982832][ T137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1063.038567][ T137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1063.086210][ T137] bond0 (unregistering): Released all slaves [ 1063.227129][ T5783] Bluetooth: hci6: command tx timeout [ 1063.574037][ T9917] chnl_net:caif_netlink_parms(): no params data found [ 1063.719780][ T137] hsr_slave_0: left promiscuous mode [ 1063.747764][ T137] hsr_slave_1: left promiscuous mode [ 1063.765672][ T137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1063.806709][ T137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1063.850371][ T137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1063.876811][ T137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1064.001832][ T137] veth1_macvtap: left promiscuous mode [ 1064.017683][ T137] veth0_macvtap: left promiscuous mode [ 1064.023543][ T137] veth1_vlan: left promiscuous mode [ 1064.039559][ T137] veth0_vlan: left promiscuous mode [ 1064.459297][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1064.470945][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1065.306733][ T5783] Bluetooth: hci6: command tx timeout [ 1065.428387][ T137] team0 (unregistering): Port device team_slave_1 removed [ 1065.468519][ T137] team0 (unregistering): Port device team_slave_0 removed [ 1066.139348][ T9896] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.167686][ T9896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.191350][ T9896] bridge_slave_0: entered allmulticast mode [ 1066.220280][ T9896] bridge_slave_0: entered promiscuous mode [ 1066.289560][ T8348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1066.314922][ T9896] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.333533][ T8348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1066.366323][ T9896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.421943][ T9896] bridge_slave_1: entered allmulticast mode [ 1066.439967][ T9896] bridge_slave_1: entered promiscuous mode [ 1067.433364][ T9896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1067.528389][ T9896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1067.613081][ T9417] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1067.828172][ T9417] usb 1-1: config 11 has an invalid interface number: 184 but max is 0 [ 1067.886410][ T9417] usb 1-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config [ 1067.907713][ T9465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1067.981222][ T9465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1068.005075][ T9417] usb 1-1: config 11 has no interface number 0 [ 1068.053021][ T9417] usb 1-1: config 11 interface 184 has no altsetting 0 [ 1068.093083][ T9417] usb 1-1: New USB device found, idVendor=04e2, idProduct=1402, bcdDevice=6d.9a [ 1068.123851][ T9417] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.227421][ T9417] usb 1-1: Product: syz [ 1068.231779][ T9417] usb 1-1: Manufacturer: syz [ 1068.259954][ T9896] team0: Port device team_slave_0 added [ 1068.282946][ T9417] usb 1-1: SerialNumber: syz [ 1068.568904][ T9896] team0: Port device team_slave_1 added [ 1068.604426][ T5935] usb 1-1: USB disconnect, device number 4 [ 1068.753977][ T137] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.001602][ T137] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.163181][ T8348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.199372][ T8348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1073.832116][ T137] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.618672][ T9896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1074.701896][ T9896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1074.903947][ T9896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1074.997296][ T9896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1075.009066][ T9896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1075.075864][ T9896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1075.359130][ T137] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.487353][ T9917] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.495118][ T9917] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.524928][ T9917] bridge_slave_0: entered allmulticast mode [ 1075.554947][ T9917] bridge_slave_0: entered promiscuous mode [ 1075.653277][ T9917] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.667157][ T9917] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.674886][ T9917] bridge_slave_1: entered allmulticast mode [ 1075.721867][ T9917] bridge_slave_1: entered promiscuous mode [ 1076.304864][ T9896] hsr_slave_0: entered promiscuous mode [ 1076.383864][ T9896] hsr_slave_1: entered promiscuous mode [ 1080.517289][ T9917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1080.812115][ T9917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1087.210861][ T9917] team0: Port device team_slave_0 added [ 1088.817496][ T9917] team0: Port device team_slave_1 added [ 1091.477828][ T137] bridge_slave_1: left allmulticast mode [ 1091.483676][ T137] bridge_slave_1: left promiscuous mode [ 1091.581280][ T137] bridge0: port 2(bridge_slave_1) entered disabled state [ 1091.746367][ T137] bridge_slave_0: left allmulticast mode [ 1091.752443][ T137] bridge_slave_0: left promiscuous mode [ 1091.821961][ T137] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.865853][ T137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1101.992611][ T137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1102.052099][ T137] bond0 (unregistering): Released all slaves [ 1102.422615][ T9917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1102.435686][ T9917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1102.528646][ T9917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1103.164530][ T137] hsr_slave_0: left promiscuous mode [ 1103.221902][ T137] hsr_slave_1: left promiscuous mode [ 1103.259268][ T137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1103.267344][ T8418] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1103.277682][ T8418] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1103.301918][ T8418] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1103.319022][ T8418] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1103.337204][ T8418] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1103.337691][ T137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1103.474093][ T137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1103.488190][ T137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1103.607610][ T137] veth1_macvtap: left promiscuous mode [ 1103.613357][ T137] veth0_macvtap: left promiscuous mode [ 1103.657139][ T137] veth1_vlan: left promiscuous mode [ 1103.662692][ T137] veth0_vlan: left promiscuous mode [ 1105.329460][ T137] team0 (unregistering): Port device team_slave_1 removed [ 1105.391760][ T137] team0 (unregistering): Port device team_slave_0 removed [ 1105.466791][ T8418] Bluetooth: hci2: command tx timeout [ 1106.157037][ T9917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1106.172977][ T9917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1106.235871][ T9917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1107.354813][ T9917] hsr_slave_0: entered promiscuous mode [ 1107.421410][ T9917] hsr_slave_1: entered promiscuous mode [ 1107.640909][ T8418] Bluetooth: hci2: command tx timeout [ 1107.690194][ T9917] debugfs: 'hsr0' already exists in 'hsr' [ 1107.696034][ T9917] Cannot create hsr debugfs directory [ 1108.199223][ T137] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.152927][ T137] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.749059][ T8418] Bluetooth: hci2: command tx timeout [ 1111.251881][ T137] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.808565][ T8418] Bluetooth: hci2: command tx timeout [ 1113.602778][ T137] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.176199][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1114.190518][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1114.217527][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1114.244971][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1114.259845][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1116.347128][ T5783] Bluetooth: hci3: command tx timeout [ 1118.415589][T10185] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1118.422919][T10185] overlayfs: failed to set xattr on upper [ 1118.429053][ T5783] Bluetooth: hci3: command tx timeout [ 1118.434750][T10185] overlayfs: ...falling back to redirect_dir=nofollow. [ 1118.441951][T10185] overlayfs: ...falling back to index=off. [ 1118.448023][T10185] overlayfs: ...falling back to uuid=null. [ 1118.462223][T10186] overlayfs: failed to resolve './file1/file0': -2 [ 1119.736229][T10129] chnl_net:caif_netlink_parms(): no params data found [ 1119.805155][ T137] bridge_slave_1: left allmulticast mode [ 1119.815869][ T137] bridge_slave_1: left promiscuous mode [ 1119.856070][ T137] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.980585][ T137] bridge_slave_0: left allmulticast mode [ 1120.015622][ T8418] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1120.026263][ T137] bridge_slave_0: left promiscuous mode [ 1120.032073][ T8418] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1120.034123][ T8418] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1120.061316][ T8418] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1120.080576][ T8418] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1120.128648][ T137] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.527016][ T8418] Bluetooth: hci3: command tx timeout [ 1121.610114][ T137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1121.697350][ T137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1121.756032][ T137] bond0 (unregistering): Released all slaves [ 1122.186871][ T8418] Bluetooth: hci1: command tx timeout [ 1122.586912][ T8418] Bluetooth: hci3: command tx timeout [ 1124.267558][ T8418] Bluetooth: hci1: command tx timeout [ 1124.892622][ T137] hsr_slave_0: left promiscuous mode [ 1124.927778][ T137] hsr_slave_1: left promiscuous mode [ 1124.935893][ T137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1124.946836][ T137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1124.987137][ T137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1124.994765][ T137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1125.058151][ T137] veth1_macvtap: left promiscuous mode [ 1125.063873][ T137] veth0_macvtap: left promiscuous mode [ 1125.097122][ T137] veth1_vlan: left promiscuous mode [ 1125.102664][ T137] veth0_vlan: left promiscuous mode [ 1125.402222][T10233] loop7: detected capacity change from 0 to 512 [ 1125.456834][T10233] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1125.560118][T10233] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1125.664477][T10233] EXT4-fs (loop7): 1 truncate cleaned up [ 1125.698203][T10233] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1125.890448][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1125.897288][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1126.349532][ T8418] Bluetooth: hci1: command tx timeout [ 1126.752739][ T137] team0 (unregistering): Port device team_slave_1 removed [ 1126.928225][ T137] team0 (unregistering): Port device team_slave_0 removed [ 1126.940550][ T7657] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1128.500048][ T8418] Bluetooth: hci1: command tx timeout [ 1128.605520][T10129] bridge0: port 1(bridge_slave_0) entered blocking state [ 1128.613891][T10129] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.622017][T10129] bridge_slave_0: entered allmulticast mode [ 1128.645977][T10129] bridge_slave_0: entered promiscuous mode [ 1128.664404][T10129] bridge0: port 2(bridge_slave_1) entered blocking state [ 1128.678874][T10129] bridge0: port 2(bridge_slave_1) entered disabled state [ 1128.715876][T10129] bridge_slave_1: entered allmulticast mode [ 1128.757395][T10129] bridge_slave_1: entered promiscuous mode [ 1129.393425][T10129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1129.488532][T10129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1129.539458][ T1124] bridge_slave_1: left allmulticast mode [ 1129.551745][ T1124] bridge_slave_1: left promiscuous mode [ 1129.602292][ T1124] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.632443][ T1124] bridge_slave_0: left allmulticast mode [ 1129.660798][ T1124] bridge_slave_0: left promiscuous mode [ 1129.707635][ T1124] bridge0: port 1(bridge_slave_0) entered disabled state [ 1129.774987][ T1124] bridge_slave_1: left allmulticast mode [ 1129.796063][ T1124] bridge_slave_1: left promiscuous mode [ 1129.821240][ T1124] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.877641][ T1124] bridge_slave_0: left allmulticast mode [ 1129.883420][ T1124] bridge_slave_0: left promiscuous mode [ 1129.914528][ T1124] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.422253][ T1124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1130.480888][ T1124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1130.554095][ T1124] bond0 (unregistering): Released all slaves [ 1131.062704][ T1124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1131.088283][ T1124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1131.155984][ T1124] bond0 (unregistering): Released all slaves [ 1131.474359][T10169] chnl_net:caif_netlink_parms(): no params data found [ 1131.987174][ T1124] hsr_slave_0: left promiscuous mode [ 1132.014398][ T1124] hsr_slave_1: left promiscuous mode [ 1132.049116][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1132.088634][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1132.186699][ T1124] hsr_slave_0: left promiscuous mode [ 1132.216710][ T1124] hsr_slave_1: left promiscuous mode [ 1132.236893][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1132.269179][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1133.609874][ T1124] team0 (unregistering): Port device team_slave_1 removed [ 1135.268716][ T1124] team0 (unregistering): Port device team_slave_0 removed [ 1136.888528][T10292] loop7: detected capacity change from 0 to 32768 [ 1136.902660][T10292] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.771 (10292) [ 1136.941983][T10292] BTRFS info (device loop7): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1136.952567][T10292] BTRFS info (device loop7): using crc32c checksum algorithm [ 1136.972378][T10292] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1137.166650][T10292] BTRFS info (device loop7): rebuilding free space tree [ 1137.195762][T10292] BTRFS info (device loop7): disabling free space tree [ 1137.203105][T10292] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1137.213123][T10292] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1137.235829][T10292] BTRFS info (device loop7): enabling ssd optimizations [ 1137.243403][T10292] BTRFS info (device loop7): turning on async discard [ 1137.250900][T10292] BTRFS info (device loop7): enabling disk space caching [ 1137.258257][T10292] BTRFS info (device loop7): force clearing of disk cache [ 1137.265552][T10292] BTRFS info (device loop7): use zstd compression, level 3 [ 1138.095941][ T1124] team0 (unregistering): Port device team_slave_1 removed [ 1138.302024][ T29] audit: type=1804 audit(1771152117.743:18): pid=10317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.771" name="/newroot/181/file1/bus" dev="loop7" ino=263 res=1 errno=0 [ 1138.435996][ T1124] team0 (unregistering): Port device team_slave_0 removed [ 1139.581607][T10129] team0: Port device team_slave_0 added [ 1140.153023][T10129] team0: Port device team_slave_1 added [ 1140.200115][ T7657] BTRFS info (device loop7): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1140.914059][T10129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1140.940759][T10129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1141.011066][T10129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1141.114128][T10129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1141.163123][T10129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1141.273872][T10129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1141.927383][T10197] chnl_net:caif_netlink_parms(): no params data found [ 1142.291884][T10129] hsr_slave_0: entered promiscuous mode [ 1142.314933][T10129] hsr_slave_1: entered promiscuous mode [ 1143.201954][T10169] bridge0: port 1(bridge_slave_0) entered blocking state [ 1143.227203][T10169] bridge0: port 1(bridge_slave_0) entered disabled state [ 1143.275800][T10169] bridge_slave_0: entered allmulticast mode [ 1143.307092][ T5783] Bluetooth: hci0: command 0x0406 tx timeout [ 1143.338667][T10169] bridge_slave_0: entered promiscuous mode [ 1143.425676][T10169] bridge0: port 2(bridge_slave_1) entered blocking state [ 1143.460088][T10169] bridge0: port 2(bridge_slave_1) entered disabled state [ 1143.495937][T10169] bridge_slave_1: entered allmulticast mode [ 1143.536915][T10169] bridge_slave_1: entered promiscuous mode [ 1144.312427][T10169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1144.412765][T10169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1144.727826][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1144.886596][T10169] team0: Port device team_slave_0 added [ 1144.919672][ T10] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1144.946634][ T10] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1144.979509][ T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1145.002608][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1145.035133][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1145.062780][ T10] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1145.083094][ T10] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1145.106705][ T10] usb 9-1: Product: syz [ 1145.111174][ T10] usb 9-1: Manufacturer: syz [ 1145.113406][T10169] team0: Port device team_slave_1 added [ 1145.161984][ T10] cdc_wdm 9-1:1.0: skipping garbage [ 1145.180539][ T10] cdc_wdm 9-1:1.0: skipping garbage [ 1145.197524][ T10] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1145.203625][ T10] cdc_wdm 9-1:1.0: Unknown control protocol [ 1145.285275][T10197] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.301539][T10197] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.327302][T10197] bridge_slave_0: entered allmulticast mode [ 1145.340692][T10197] bridge_slave_0: entered promiscuous mode [ 1145.394014][T10197] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.412375][T10197] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.430962][T10197] bridge_slave_1: entered allmulticast mode [ 1145.443704][T10197] bridge_slave_1: entered promiscuous mode [ 1145.773284][T10169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1145.794938][T10169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1145.846950][T10169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1145.965778][T10169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1145.990769][T10169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1146.061635][T10169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1146.150902][ T9389] usb 9-1: USB disconnect, device number 2 [ 1146.241081][T10197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1146.420008][T10197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1146.774109][T10169] hsr_slave_0: entered promiscuous mode [ 1146.808467][T10169] hsr_slave_1: entered promiscuous mode [ 1146.869694][T10169] debugfs: 'hsr0' already exists in 'hsr' [ 1146.875752][T10169] Cannot create hsr debugfs directory [ 1147.135785][T10197] team0: Port device team_slave_0 added [ 1147.372887][T10197] team0: Port device team_slave_1 added [ 1148.587514][T10372] loop7: detected capacity change from 0 to 32768 [ 1148.694303][T10197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1148.706724][T10372] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.776 (10372) [ 1148.746812][T10197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1148.876841][T10197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1148.961202][T10197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1149.012753][T10197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1149.111339][T10197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1150.287581][T10197] hsr_slave_0: entered promiscuous mode [ 1150.314658][T10197] hsr_slave_1: entered promiscuous mode [ 1150.339820][T10197] debugfs: 'hsr0' already exists in 'hsr' [ 1150.345729][T10197] Cannot create hsr debugfs directory [ 1150.766661][ T10] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 1150.952907][ T10] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1150.984446][ T10] usb 8-1: config 0 has no interface number 0 [ 1151.012069][ T10] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1151.056137][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.080911][ T10] usb 8-1: config 0 descriptor?? [ 1151.144648][ T10] usb 8-1: selecting invalid altsetting 1 [ 1151.184453][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 1151.214490][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1151.461870][T10129] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1154.248712][T10129] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1154.367695][ T10] DVB: Unable to find symbol cx22700_attach() [ 1154.765343][T10129] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1154.869187][ T10] DVB: Unable to find symbol tda10046_attach() [ 1154.927024][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1154.999346][ T10] usb 8-1: USB disconnect, device number 20 [ 1155.145680][T10129] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1157.521544][T10169] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1157.641646][T10169] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1157.728907][T10169] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1157.754120][ T10] IPVS: starting estimator thread 0... [ 1157.886998][T10434] IPVS: using max 192 ests per chain, 9600 per kthread [ 1157.966994][T10169] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1159.351481][T10441] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1159.358773][T10441] overlayfs: failed to set xattr on upper [ 1159.364619][T10441] overlayfs: ...falling back to redirect_dir=nofollow. [ 1159.371816][T10441] overlayfs: ...falling back to index=off. [ 1159.377902][T10441] overlayfs: ...falling back to uuid=null. [ 1159.383892][T10441] overlayfs: conflicting lowerdir path [ 1160.063652][T10197] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1160.581473][T10197] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1161.092648][T10197] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1161.191746][T10197] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1161.909165][T10129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1162.441604][T10129] 8021q: adding VLAN 0 to HW filter on device team0 [ 1162.625634][ T6187] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.633037][ T6187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1163.636291][T10169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1165.630046][ T5783] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1165.651542][ T5783] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1165.664273][ T5783] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1165.684388][ T5783] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1165.705161][ T5783] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1166.196140][T10169] 8021q: adding VLAN 0 to HW filter on device team0 [ 1166.621500][ T8794] bridge0: port 1(bridge_slave_0) entered blocking state [ 1166.629241][ T8794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1166.705658][ T8794] bridge0: port 2(bridge_slave_1) entered blocking state [ 1166.713233][ T8794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1166.945002][T10197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1167.571644][T10197] 8021q: adding VLAN 0 to HW filter on device team0 [ 1167.761439][ T6187] bridge0: port 1(bridge_slave_0) entered blocking state [ 1167.769011][ T6187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1167.789063][ T8418] Bluetooth: hci5: command tx timeout [ 1168.671674][T10494] loop8: detected capacity change from 0 to 32768 [ 1168.697380][T10494] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.799 (10494) [ 1168.733537][T10494] BTRFS info (device loop8): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1168.743994][T10494] BTRFS info (device loop8): using crc32c checksum algorithm [ 1168.751885][T10494] BTRFS warning (device loop8): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1168.799080][T10484] loop7: detected capacity change from 0 to 32768 [ 1168.852600][ T6187] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.860192][ T6187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1168.953402][T10484] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 1169.038244][T10484] JBD2: Ignoring recovery information on journal [ 1169.071482][T10494] BTRFS info (device loop8): rebuilding free space tree [ 1169.112593][T10494] BTRFS info (device loop8): disabling free space tree [ 1169.120026][T10494] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1169.130547][T10494] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1169.227162][T10494] BTRFS info (device loop8): enabling ssd optimizations [ 1169.234496][T10494] BTRFS info (device loop8): turning on async discard [ 1169.243856][T10494] BTRFS info (device loop8): enabling disk space caching [ 1169.251157][T10494] BTRFS info (device loop8): force clearing of disk cache [ 1169.258599][T10494] BTRFS info (device loop8): use zstd compression, level 3 [ 1169.298293][T10484] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1169.790374][T10514] OCFS2: ERROR (device loop7): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid fs_generation of #1 [ 1169.875619][ T8418] Bluetooth: hci5: command tx timeout [ 1169.937760][T10514] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1169.960855][T10514] OCFS2: File system is now read-only. [ 1169.987478][T10514] (syz.7.797,10514,1):ocfs2_search_chain:1888 ERROR: status = -30 [ 1170.001201][T10514] (syz.7.797,10514,1):ocfs2_search_chain:2011 ERROR: status = -30 [ 1170.028957][T10514] (syz.7.797,10514,0):ocfs2_claim_suballoc_bits:2098 ERROR: status = -30 [ 1170.122826][ T29] audit: type=1804 audit(1771152149.633:19): pid=10518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.799" name="/newroot/35/file1/bus" dev="loop8" ino=263 res=1 errno=0 [ 1170.257194][T10514] (syz.7.797,10514,0):ocfs2_claim_suballoc_bits:2151 ERROR: status = -30 [ 1170.332522][T10514] (syz.7.797,10514,0):__ocfs2_claim_clusters:2532 ERROR: status = -30 [ 1170.395991][T10514] (syz.7.797,10514,0):__ocfs2_claim_clusters:2540 ERROR: status = -30 [ 1170.437058][T10514] (syz.7.797,10514,0):ocfs2_local_alloc_new_window:1197 ERROR: status = -30 [ 1170.526873][T10514] (syz.7.797,10514,0):ocfs2_local_alloc_new_window:1222 ERROR: status = -30 [ 1170.582999][T10514] (syz.7.797,10514,0):ocfs2_local_alloc_slide_window:1296 ERROR: status = -30 [ 1170.652037][T10514] (syz.7.797,10514,0):ocfs2_local_alloc_slide_window:1315 ERROR: status = -30 [ 1170.687725][T10514] (syz.7.797,10514,0):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -30 [ 1170.762867][T10514] (syz.7.797,10514,0):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30 [ 1170.800813][T10514] (syz.7.797,10514,0):ocfs2_reserve_clusters_with_limit:1241 ERROR: status = -30 [ 1170.861863][T10514] (syz.7.797,10514,0):ocfs2_reserve_clusters_with_limit:1290 ERROR: status = -30 [ 1170.932799][T10514] (syz.7.797,10514,0):ocfs2_mknod:361 ERROR: status = -30 [ 1170.997802][T10514] (syz.7.797,10514,0):ocfs2_mknod:506 ERROR: status = -30 [ 1171.056998][T10514] (syz.7.797,10514,0):ocfs2_mkdir:662 ERROR: status = -30 [ 1171.857221][ T7657] ocfs2: Unmounting device (7,7) on (node local) [ 1171.968426][ T8418] Bluetooth: hci5: command tx timeout [ 1172.368269][ T9684] BTRFS info (device loop8): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1173.145746][T10526] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1173.153164][T10526] overlayfs: failed to set xattr on upper [ 1173.159212][T10526] overlayfs: ...falling back to redirect_dir=nofollow. [ 1173.166189][T10526] overlayfs: ...falling back to index=off. [ 1173.172229][T10526] overlayfs: ...falling back to uuid=null. [ 1173.178298][T10526] overlayfs: conflicting lowerdir path [ 1173.726956][T10478] chnl_net:caif_netlink_parms(): no params data found [ 1174.074125][ T5783] Bluetooth: hci5: command tx timeout [ 1174.081564][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1174.092168][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1174.102896][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1174.120120][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1174.140394][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1175.047576][ T2974] bridge_slave_1: left allmulticast mode [ 1175.053421][ T2974] bridge_slave_1: left promiscuous mode [ 1175.163191][ T2974] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.357181][ T2974] bridge_slave_0: left allmulticast mode [ 1175.406648][ T2974] bridge_slave_0: left promiscuous mode [ 1175.483098][ T2974] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.192147][ T5783] Bluetooth: hci2: command tx timeout [ 1177.332505][T10555] netlink: 'syz.7.804': attribute type 5 has an invalid length. [ 1177.645273][ T2974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1177.660491][ T2974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1177.710802][ T2974] bond0 (unregistering): Released all slaves [ 1178.176226][ T2974] hsr_slave_0: left promiscuous mode [ 1178.267171][ T5783] Bluetooth: hci2: command tx timeout [ 1178.276016][ T2974] hsr_slave_1: left promiscuous mode [ 1178.368432][ T2974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1178.442819][ T2974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1179.462812][ T2974] team0 (unregistering): Port device team_slave_1 removed [ 1179.592126][ T2974] team0 (unregistering): Port device team_slave_0 removed [ 1180.356670][ T5783] Bluetooth: hci2: command tx timeout [ 1180.630238][ T8418] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1180.642447][ T8418] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1180.675710][ T8418] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1180.698593][ T8418] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1180.720054][ T8418] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1181.623174][T10579] loop8: detected capacity change from 0 to 32768 [ 1181.687808][T10579] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.808 (10579) [ 1181.717600][T10579] BTRFS info (device loop8): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1181.728063][T10579] BTRFS info (device loop8): using crc32c checksum algorithm [ 1181.737952][T10579] BTRFS warning (device loop8): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1181.913189][T10579] BTRFS info (device loop8): rebuilding free space tree [ 1181.940405][T10579] BTRFS info (device loop8): disabling free space tree [ 1181.948535][T10579] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1181.958442][T10579] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1182.005712][T10579] BTRFS info (device loop8): enabling ssd optimizations [ 1182.013612][T10579] BTRFS info (device loop8): turning on async discard [ 1182.020774][T10579] BTRFS info (device loop8): enabling disk space caching [ 1182.030745][T10579] BTRFS info (device loop8): force clearing of disk cache [ 1182.038322][T10579] BTRFS info (device loop8): use zstd compression, level 3 [ 1182.426779][ T8418] Bluetooth: hci2: command tx timeout [ 1182.688989][ T29] audit: type=1804 audit(1771152162.213:20): pid=10596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.808" name="/newroot/40/file1/bus" dev="loop8" ino=263 res=1 errno=0 [ 1183.567725][ T8418] Bluetooth: hci3: command tx timeout [ 1183.737935][T10478] bridge0: port 1(bridge_slave_0) entered blocking state [ 1183.745479][T10478] bridge0: port 1(bridge_slave_0) entered disabled state [ 1184.107999][T10478] bridge_slave_0: entered allmulticast mode [ 1184.142169][T10478] bridge_slave_0: entered promiscuous mode [ 1184.244063][ T9684] BTRFS info (device loop8): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1184.513553][T10478] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.539805][T10478] bridge0: port 2(bridge_slave_1) entered disabled state [ 1184.572627][T10478] bridge_slave_1: entered allmulticast mode [ 1184.606294][T10478] bridge_slave_1: entered promiscuous mode [ 1185.450420][T10604] overlayfs: failed to resolve './bus': -2 [ 1185.686869][ T8418] Bluetooth: hci3: command tx timeout [ 1186.717832][T10478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1187.349498][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1187.356788][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1187.442581][T10478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1187.884790][ T8418] Bluetooth: hci3: command tx timeout [ 1188.670402][T10478] team0: Port device team_slave_0 added [ 1188.844201][T10478] team0: Port device team_slave_1 added [ 1189.812768][T10478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1189.847085][T10478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1190.010276][ T8418] Bluetooth: hci3: command tx timeout [ 1190.020602][T10478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1190.049999][T10478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1190.057447][T10478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1190.083900][T10478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1190.318832][T10534] chnl_net:caif_netlink_parms(): no params data found [ 1191.531729][ T2974] bridge_slave_1: left allmulticast mode [ 1191.539137][ T2974] bridge_slave_1: left promiscuous mode [ 1191.545928][ T2974] bridge0: port 2(bridge_slave_1) entered disabled state [ 1191.570378][ T2974] bridge_slave_0: left allmulticast mode [ 1191.576206][ T2974] bridge_slave_0: left promiscuous mode [ 1191.595556][ T2974] bridge0: port 1(bridge_slave_0) entered disabled state [ 1192.834649][ T2974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1192.856212][ T2974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1192.904351][ T2974] bond0 (unregistering): Released all slaves [ 1193.632646][T10645] loop8: detected capacity change from 0 to 32768 [ 1193.658022][T10645] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.816 (10645) [ 1193.694849][T10645] BTRFS info (device loop8): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1193.705334][T10645] BTRFS info (device loop8): using crc32c checksum algorithm [ 1193.717037][T10645] BTRFS warning (device loop8): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1193.740499][ T2974] hsr_slave_0: left promiscuous mode [ 1193.795639][ T2974] hsr_slave_1: left promiscuous mode [ 1193.861292][ T2974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1193.902445][T10645] BTRFS info (device loop8): rebuilding free space tree [ 1193.928973][ T2974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1193.974039][T10645] BTRFS info (device loop8): disabling free space tree [ 1193.981619][T10645] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1193.997397][T10645] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1194.048650][T10645] BTRFS info (device loop8): enabling ssd optimizations [ 1194.055968][T10645] BTRFS info (device loop8): turning on async discard [ 1194.063403][T10645] BTRFS info (device loop8): enabling disk space caching [ 1194.070783][T10645] BTRFS info (device loop8): force clearing of disk cache [ 1194.078274][T10645] BTRFS info (device loop8): use zstd compression, level 3 [ 1195.789706][ T29] audit: type=1804 audit(1771152174.463:21): pid=10670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.816" name="/newroot/47/file1/bus" dev="loop8" ino=263 res=1 errno=0 [ 1196.208699][ T2974] team0 (unregistering): Port device team_slave_1 removed [ 1196.358619][ T2974] team0 (unregistering): Port device team_slave_0 removed [ 1196.966970][ T9684] BTRFS info (device loop8): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1197.174213][T10478] hsr_slave_0: entered promiscuous mode [ 1197.208746][T10478] hsr_slave_1: entered promiscuous mode [ 1197.283291][T10575] chnl_net:caif_netlink_parms(): no params data found [ 1198.777276][T10534] bridge0: port 1(bridge_slave_0) entered blocking state [ 1198.784822][T10534] bridge0: port 1(bridge_slave_0) entered disabled state [ 1198.817676][T10534] bridge_slave_0: entered allmulticast mode [ 1198.887917][T10534] bridge_slave_0: entered promiscuous mode [ 1199.068510][T10534] bridge0: port 2(bridge_slave_1) entered blocking state [ 1199.075986][T10534] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.137642][T10534] bridge_slave_1: entered allmulticast mode [ 1199.169212][T10534] bridge_slave_1: entered promiscuous mode [ 1201.615284][T10534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1201.880802][T10534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1201.952618][T10575] bridge0: port 1(bridge_slave_0) entered blocking state [ 1201.966296][T10575] bridge0: port 1(bridge_slave_0) entered disabled state [ 1201.989759][T10575] bridge_slave_0: entered allmulticast mode [ 1202.006242][T10575] bridge_slave_0: entered promiscuous mode [ 1202.302610][T10575] bridge0: port 2(bridge_slave_1) entered blocking state [ 1202.328986][T10575] bridge0: port 2(bridge_slave_1) entered disabled state [ 1202.340624][T10575] bridge_slave_1: entered allmulticast mode [ 1202.353862][T10575] bridge_slave_1: entered promiscuous mode [ 1203.002968][T10534] team0: Port device team_slave_0 added [ 1203.049288][T10575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1203.107789][T10534] team0: Port device team_slave_1 added [ 1203.192113][T10575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1203.380702][T10534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1203.395397][T10534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1203.456405][T10534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1203.671961][T10534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1203.687716][T10534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1203.764289][T10534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1204.019182][T10575] team0: Port device team_slave_0 added [ 1204.235439][T10704] loop8: detected capacity change from 0 to 32768 [ 1204.253223][T10704] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.826 (10704) [ 1204.358988][T10704] BTRFS info (device loop8): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1204.372342][T10704] BTRFS info (device loop8): using crc32c checksum algorithm [ 1204.380108][T10704] BTRFS warning (device loop8): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1204.434406][T10575] team0: Port device team_slave_1 added [ 1204.493993][T10704] BTRFS info (device loop8): rebuilding free space tree [ 1204.532526][T10704] BTRFS info (device loop8): disabling free space tree [ 1204.539797][T10704] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1204.549741][T10704] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1204.591308][T10704] BTRFS info (device loop8): enabling ssd optimizations [ 1204.598881][T10704] BTRFS info (device loop8): turning on async discard [ 1204.605764][T10704] BTRFS info (device loop8): enabling disk space caching [ 1204.613110][T10704] BTRFS info (device loop8): force clearing of disk cache [ 1204.620464][T10704] BTRFS info (device loop8): use zstd compression, level 3 [ 1205.282464][ T29] audit: type=1804 audit(1771152184.813:22): pid=10725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.826" name="/newroot/50/file1/bus" dev="loop8" ino=263 res=1 errno=0 [ 1206.688549][ T9684] BTRFS info (device loop8): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1206.851398][ T2974] bridge_slave_1: left allmulticast mode [ 1206.862761][ T2974] bridge_slave_1: left promiscuous mode [ 1206.890122][ T2974] bridge0: port 2(bridge_slave_1) entered disabled state [ 1206.930624][ T2974] bridge_slave_0: left allmulticast mode [ 1206.996869][ T2974] bridge_slave_0: left promiscuous mode [ 1207.003114][ T2974] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.549034][T10728] overlayfs: failed to resolve './bus': -2 [ 1208.530474][ T2974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1208.571728][ T2974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1208.623428][ T2974] bond0 (unregistering): Released all slaves [ 1208.691698][T10575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1208.737115][T10575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1208.796813][T10575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1208.878566][T10575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1208.885760][T10575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1208.986972][T10575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1209.100902][T10534] hsr_slave_0: entered promiscuous mode [ 1209.135158][T10534] hsr_slave_1: entered promiscuous mode [ 1209.143536][T10534] debugfs: 'hsr0' already exists in 'hsr' [ 1209.156891][T10534] Cannot create hsr debugfs directory [ 1209.228974][ T2974] hsr_slave_0: left promiscuous mode [ 1209.254529][ T2974] hsr_slave_1: left promiscuous mode [ 1209.272705][ T2974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1209.329544][ T2974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1210.638132][ T2974] team0 (unregistering): Port device team_slave_1 removed [ 1210.741043][ T2974] team0 (unregistering): Port device team_slave_0 removed [ 1212.370944][T10575] hsr_slave_0: entered promiscuous mode [ 1212.393952][T10575] hsr_slave_1: entered promiscuous mode [ 1212.409729][T10575] debugfs: 'hsr0' already exists in 'hsr' [ 1212.426235][T10575] Cannot create hsr debugfs directory [ 1212.657078][T10478] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1212.767264][T10478] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1212.799554][T10478] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1213.593469][T10478] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1214.174247][T10746] loop8: detected capacity change from 0 to 32768 [ 1214.186933][T10746] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.835 (10746) [ 1214.256728][T10746] BTRFS info (device loop8): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1214.267257][T10746] BTRFS info (device loop8): using crc32c checksum algorithm [ 1214.274898][T10746] BTRFS warning (device loop8): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1214.702415][T10746] BTRFS info (device loop8): rebuilding free space tree [ 1214.742256][T10746] BTRFS info (device loop8): disabling free space tree [ 1214.751864][T10746] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1214.762183][T10746] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1214.812298][T10746] BTRFS info (device loop8): enabling ssd optimizations [ 1214.819657][T10746] BTRFS info (device loop8): turning on async discard [ 1214.828812][T10746] BTRFS info (device loop8): enabling disk space caching [ 1214.836042][T10746] BTRFS info (device loop8): force clearing of disk cache [ 1214.843577][T10746] BTRFS info (device loop8): use zstd compression, level 3 [ 1215.821608][T10763] overlayfs: failed to resolve './file1': -2 [ 1215.836790][T10763] overlayfs: failed to resolve './file1/file0': -2 [ 1216.030391][ T29] audit: type=1804 audit(1771152195.273:23): pid=10765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.835" name="/newroot/56/file1/bus" dev="loop8" ino=263 res=1 errno=0 [ 1217.596088][T10772] loop7: detected capacity change from 0 to 512 [ 1217.698889][T10772] EXT4-fs: Ignoring removed i_version option [ 1217.748326][ T9684] BTRFS info (device loop8): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1217.754001][T10772] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1217.798997][T10772] EXT4-fs warning (device loop7): ext4_xattr_inode_get:560: inode #11: comm syz.7.839: EA inode hash validation failed [ 1217.812680][T10772] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1217.847436][T10772] EXT4-fs error (device loop7): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.7.839: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 1217.862993][T10772] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1217.864177][T10772] EXT4-fs (loop7): Remounting filesystem read-only [ 1217.873799][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1217.873891][ C0] EXT4-fs (loop7): initial error at time 1771152197: ext4_xattr_inode_update_ref:1037: inode 11 [ 1217.874046][ C0] EXT4-fs (loop7): last error at time 1771152197: ext4_xattr_inode_update_ref:1037: inode 11 [ 1217.915094][T10772] EXT4-fs warning (device loop7): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.7.839: ea_inode dec ref err=-117 [ 1217.929327][T10772] EXT4-fs warning (device loop7): ext4_evict_inode:275: xattr delete (err -30) [ 1217.939059][T10772] EXT4-fs (loop7): 1 orphan inode deleted [ 1217.948261][T10772] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1219.652898][T10478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1220.752602][ T7657] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1220.875129][T10478] 8021q: adding VLAN 0 to HW filter on device team0 [ 1221.136595][ T8177] bridge0: port 1(bridge_slave_0) entered blocking state [ 1221.144061][ T8177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1221.216191][ T8177] bridge0: port 2(bridge_slave_1) entered blocking state [ 1221.223874][ T8177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1222.689145][T10788] overlayfs: failed to resolve './file1': -2 [ 1222.699810][T10788] overlayfs: failed to resolve './file1/file0': -2 [ 1223.395501][T10534] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1223.515975][T10534] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1223.750118][T10534] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1223.848747][T10534] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1224.481478][T10575] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1224.634370][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1224.650571][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1224.661057][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1224.681967][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1224.850404][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1225.343987][T10575] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1225.365252][T10802] loop8: detected capacity change from 0 to 32768 [ 1225.389696][T10802] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.847 (10802) [ 1225.415377][T10802] BTRFS info (device loop8): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1225.427013][T10802] BTRFS info (device loop8): using crc32c checksum algorithm [ 1225.434728][T10802] BTRFS warning (device loop8): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1225.508152][T10575] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1225.584016][T10575] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1226.259102][T10802] BTRFS info (device loop8): rebuilding free space tree [ 1226.305960][T10802] BTRFS info (device loop8): disabling free space tree [ 1226.321892][T10802] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1226.339395][T10802] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1226.992947][ T5783] Bluetooth: hci1: command tx timeout [ 1227.015370][T10802] BTRFS info (device loop8): enabling ssd optimizations [ 1227.022687][T10802] BTRFS info (device loop8): turning on async discard [ 1227.029858][T10802] BTRFS info (device loop8): enabling disk space caching [ 1227.037238][T10802] BTRFS info (device loop8): force clearing of disk cache [ 1227.044533][T10802] BTRFS info (device loop8): use zstd compression, level 3 [ 1227.978981][ T9684] BTRFS info (device loop8): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1228.265879][T10534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1228.773923][T10534] 8021q: adding VLAN 0 to HW filter on device team0 [ 1228.916548][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1228.924012][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1229.066957][ T5783] Bluetooth: hci1: command tx timeout [ 1229.159967][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1229.167472][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1229.236158][T10575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1229.413896][T10799] chnl_net:caif_netlink_parms(): no params data found [ 1230.195459][T10575] 8021q: adding VLAN 0 to HW filter on device team0 [ 1230.555600][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1230.563154][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1231.148161][ T5783] Bluetooth: hci1: command tx timeout [ 1231.342641][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1231.350260][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1232.425699][T10575] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1232.486810][T10575] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1232.884867][ T1116] bridge_slave_1: left allmulticast mode [ 1232.954790][ T1116] bridge_slave_1: left promiscuous mode [ 1232.995547][ T1116] bridge0: port 2(bridge_slave_1) entered disabled state [ 1233.094493][ T1116] bridge_slave_0: left allmulticast mode [ 1233.136630][ T1116] bridge_slave_0: left promiscuous mode [ 1233.205671][ T1116] bridge0: port 1(bridge_slave_0) entered disabled state [ 1233.226787][ T5783] Bluetooth: hci1: command tx timeout [ 1233.313415][ T5783] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 1234.081806][ T5096] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1234.276719][ T5096] usb 8-1: Using ep0 maxpacket: 8 [ 1234.289757][ T8418] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1234.311520][ T8418] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1234.324534][ T8418] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1234.342323][ T5096] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 1234.343855][ T8418] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1234.385796][ T8418] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1234.407918][ T5096] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1234.409521][ T1116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1234.480698][ T5096] usb 8-1: config 0 has no interface number 0 [ 1234.487478][ T5096] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1234.496894][ T5096] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.506087][ T1116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1234.529046][ T5096] usb 8-1: config 0 descriptor?? [ 1234.553681][ T5096] ldusb 8-1:0.55: Interrupt in endpoint not found [ 1234.612256][ T1116] bond0 (unregistering): Released all slaves [ 1234.760065][ T9389] usb 8-1: USB disconnect, device number 21 [ 1235.120328][ T1116] hsr_slave_0: left promiscuous mode [ 1235.193186][ T1116] hsr_slave_1: left promiscuous mode [ 1235.209237][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1235.251598][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1236.015466][T10851] loop7: detected capacity change from 0 to 1024 [ 1236.042707][T10851] EXT4-fs: inline encryption not supported [ 1236.168504][T10851] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1236.344869][ T29] audit: type=1804 audit(1771152215.883:24): pid=10851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.855" name="/newroot/220/file1/bus" dev="loop7" ino=18 res=1 errno=0 [ 1236.473314][ T29] audit: type=1800 audit(1771152215.883:25): pid=10851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.855" name="bus" dev="loop7" ino=18 res=0 errno=0 [ 1236.506827][ T5783] Bluetooth: hci5: command tx timeout [ 1236.549346][ T1116] team0 (unregistering): Port device team_slave_1 removed [ 1236.612104][ T1116] team0 (unregistering): Port device team_slave_0 removed [ 1236.695869][ T7657] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1237.292969][T10858] loop7: detected capacity change from 0 to 2048 [ 1237.428488][T10859] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1237.905292][T10799] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.987586][T10799] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.995292][T10799] bridge_slave_0: entered allmulticast mode [ 1238.097201][T10799] bridge_slave_0: entered promiscuous mode [ 1238.337546][T10799] bridge0: port 2(bridge_slave_1) entered blocking state [ 1238.345032][T10799] bridge0: port 2(bridge_slave_1) entered disabled state [ 1238.407750][T10799] bridge_slave_1: entered allmulticast mode [ 1238.434465][T10799] bridge_slave_1: entered promiscuous mode [ 1238.586843][ T5783] Bluetooth: hci5: command tx timeout [ 1238.953907][T10871] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1238.972082][T10799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1239.019065][T10799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1239.463633][T10575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1240.190744][T10799] team0: Port device team_slave_0 added [ 1240.552345][T10879] loop7: detected capacity change from 0 to 1764 [ 1240.726327][ T5783] Bluetooth: hci5: command tx timeout [ 1241.236641][T10799] team0: Port device team_slave_1 added [ 1242.579647][T10799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1242.589721][T10799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1242.650974][T10799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1242.709118][T10799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1242.726797][T10799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1242.757130][ T5783] Bluetooth: hci5: command tx timeout [ 1242.786842][T10799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1243.682796][T10883] loop7: detected capacity change from 0 to 4096 [ 1243.698572][T10799] hsr_slave_0: entered promiscuous mode [ 1243.709188][ T8418] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1243.719145][ T8418] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1243.728608][ T8418] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1243.741787][T10799] hsr_slave_1: entered promiscuous mode [ 1243.751864][ T8418] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1243.770365][ T8418] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1245.866706][ T5783] Bluetooth: hci2: command tx timeout [ 1247.621659][T10846] chnl_net:caif_netlink_parms(): no params data found [ 1247.653497][ T137] bridge_slave_1: left allmulticast mode [ 1247.666878][ T137] bridge_slave_1: left promiscuous mode [ 1247.687659][ T137] bridge0: port 2(bridge_slave_1) entered disabled state [ 1247.709636][ T137] bridge_slave_0: left allmulticast mode [ 1247.724819][ T137] bridge_slave_0: left promiscuous mode [ 1247.741066][ T137] bridge0: port 1(bridge_slave_0) entered disabled state [ 1247.948860][ T5783] Bluetooth: hci2: command tx timeout [ 1248.508145][ T137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1248.676182][ T137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1248.717615][ T137] bond0 (unregistering): Released all slaves [ 1248.781889][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1248.788802][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1249.292228][T10897] loop8: detected capacity change from 0 to 64 [ 1249.365443][ T137] hsr_slave_0: left promiscuous mode [ 1249.401595][ T137] hsr_slave_1: left promiscuous mode [ 1249.421627][ T137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1249.443648][ T29] audit: type=1800 audit(1771152228.983:26): pid=10897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.865" name="file1" dev="loop8" ino=22 res=0 errno=0 [ 1249.467374][ T137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1250.026834][ T5783] Bluetooth: hci2: command tx timeout [ 1250.323212][T10904] loop8: detected capacity change from 0 to 256 [ 1250.608923][T10904] exFAT-fs (loop8): Invalid boot checksum (boot checksum : 0x0519ac00, checksum : 0x1119ac00) [ 1250.698307][T10904] exFAT-fs (loop8): invalid boot region [ 1250.723867][T10904] exFAT-fs (loop8): failed to recognize exfat type [ 1250.785883][ T137] team0 (unregistering): Port device team_slave_1 removed [ 1251.920397][ T137] team0 (unregistering): Port device team_slave_0 removed [ 1253.001735][ T5783] Bluetooth: hci2: command tx timeout [ 1253.746055][T10912] loop7: detected capacity change from 0 to 16 [ 1253.815333][T10912] erofs (device loop7): mounted with root inode @ nid 36. [ 1254.002741][ T5783] erofs (device loop7): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 1254.049616][T10912] erofs (device loop7): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 1254.155505][T10912] erofs (device loop7): read error -117 @ 1 of nid 89 [ 1254.290698][ T29] audit: type=1800 audit(1771152233.803:27): pid=10912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.870" name="file2" dev="loop7" ino=89 res=0 errno=0 [ 1257.571387][T10884] chnl_net:caif_netlink_parms(): no params data found [ 1257.740580][T10846] bridge0: port 1(bridge_slave_0) entered blocking state [ 1257.758848][T10846] bridge0: port 1(bridge_slave_0) entered disabled state [ 1257.772802][T10846] bridge_slave_0: entered allmulticast mode [ 1257.783971][T10846] bridge_slave_0: entered promiscuous mode [ 1258.139642][T10846] bridge0: port 2(bridge_slave_1) entered blocking state [ 1258.162430][T10846] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.178960][T10846] bridge_slave_1: entered allmulticast mode [ 1258.191478][T10846] bridge_slave_1: entered promiscuous mode [ 1259.064176][T10846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1259.134527][T10846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1259.403264][T10799] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1259.563622][T10799] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1259.676124][T10846] team0: Port device team_slave_0 added [ 1259.758555][T10846] team0: Port device team_slave_1 added [ 1259.915648][T10799] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1259.998709][T10799] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1262.412256][T10846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1262.457496][T10846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1262.508887][T10846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1262.639346][ T137] bridge_slave_1: left allmulticast mode [ 1262.645218][ T137] bridge_slave_1: left promiscuous mode [ 1262.664852][ T137] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.711155][ T137] bridge_slave_0: left allmulticast mode [ 1262.717260][ T137] bridge_slave_0: left promiscuous mode [ 1262.723792][ T137] bridge0: port 1(bridge_slave_0) entered disabled state [ 1265.668072][ T137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1265.678181][T10964] __nla_validate_parse: 128 callbacks suppressed [ 1265.678257][T10964] netlink: 32 bytes leftover after parsing attributes in process `syz.8.882'. [ 1265.810042][ T137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1265.911755][ T137] bond0 (unregistering): Released all slaves [ 1266.120768][T10846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1266.147212][T10846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1266.281563][T10846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1266.331897][T10884] bridge0: port 1(bridge_slave_0) entered blocking state [ 1266.352646][T10884] bridge0: port 1(bridge_slave_0) entered disabled state [ 1266.370885][T10884] bridge_slave_0: entered allmulticast mode [ 1266.399521][T10884] bridge_slave_0: entered promiscuous mode [ 1266.659642][ T137] hsr_slave_0: left promiscuous mode [ 1266.711018][ T137] hsr_slave_1: left promiscuous mode [ 1266.750654][ T137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1266.792925][ T137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1269.587194][T10972] loop8: detected capacity change from 0 to 4096 [ 1269.643907][T10972] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512). [ 1269.818566][ T137] team0 (unregistering): Port device team_slave_1 removed [ 1269.859592][ T137] team0 (unregistering): Port device team_slave_0 removed [ 1270.047090][T10972] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 1270.121349][T10972] ntfs3(loop8): ino=19, mi_enum_attr [ 1270.467398][T10884] bridge0: port 2(bridge_slave_1) entered blocking state [ 1270.490251][T10884] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.527314][T10884] bridge_slave_1: entered allmulticast mode [ 1270.557022][T10884] bridge_slave_1: entered promiscuous mode [ 1271.115129][T10884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1271.248205][T10846] hsr_slave_0: entered promiscuous mode [ 1271.266772][ T9399] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 1271.288041][T10846] hsr_slave_1: entered promiscuous mode [ 1271.302916][T10846] debugfs: 'hsr0' already exists in 'hsr' [ 1271.315507][T10846] Cannot create hsr debugfs directory [ 1271.358047][T10884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1271.444457][ T9399] usb 9-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1271.675210][T10884] team0: Port device team_slave_0 added [ 1271.859445][T10884] team0: Port device team_slave_1 added [ 1272.063300][ T9399] usb 9-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1272.078895][ T9399] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1272.085850][ T9399] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 1272.095286][ T9399] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.111653][ T9399] usb 9-1: config 0 descriptor?? [ 1272.836960][T10884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1272.844183][T10884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1272.914659][ T9399] pyra 0003:1E7D:2C24.0003: ignoring exceeding usage max [ 1272.954006][T10884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1273.014853][T10884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1273.046989][ T9399] pyra 0003:1E7D:2C24.0003: hidraw0: USB HID v0.07 Device [HID 1e7d:2c24] on usb-dummy_hcd.8-1/input0 [ 1273.061007][T10884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1273.135316][T10884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1273.734817][ T9399] pyra 0003:1E7D:2C24.0003: couldn't init struct pyra_device [ 1273.820423][ T9399] pyra 0003:1E7D:2C24.0003: couldn't install mouse [ 1273.862844][ T9399] pyra 0003:1E7D:2C24.0003: probe with driver pyra failed with error -71 [ 1273.991535][ T9399] usb 9-1: USB disconnect, device number 3 [ 1274.273459][T10884] hsr_slave_0: entered promiscuous mode [ 1274.290940][T10884] hsr_slave_1: entered promiscuous mode [ 1274.319847][T10884] debugfs: 'hsr0' already exists in 'hsr' [ 1274.325753][T10884] Cannot create hsr debugfs directory [ 1275.558386][T10799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1277.764247][T10990] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1279.956398][T10799] 8021q: adding VLAN 0 to HW filter on device team0 [ 1280.730508][ T6173] bridge0: port 1(bridge_slave_0) entered blocking state [ 1280.738040][ T6173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1280.883873][ T6173] bridge0: port 2(bridge_slave_1) entered blocking state [ 1280.891379][ T6173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1283.431105][T11004] loop8: detected capacity change from 0 to 2048 [ 1283.497218][T11004] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found! [ 1283.623985][T11004] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1283.642485][T11008] loop7: detected capacity change from 0 to 512 [ 1283.704000][T11008] EXT4-fs: Ignoring removed orlov option [ 1283.815932][T11008] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1283.847007][T11008] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1283.997345][T11008] EXT4-fs (loop7): 1 truncate cleaned up [ 1284.068097][T11008] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1284.975211][T10846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1285.523332][T11024] fscrypt (loop7): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1285.963761][T10846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1286.317964][T10846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1286.701247][T10846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1287.218959][ T8418] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1287.267472][ T8418] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1287.281917][ T8418] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1287.313864][ T8418] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1287.325435][ T8418] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1289.387133][ T8418] Bluetooth: hci3: command tx timeout [ 1289.721293][T10884] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1290.139072][T10884] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1290.338059][T10884] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1291.508548][ T8418] Bluetooth: hci3: command tx timeout [ 1291.945477][T10884] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1292.089795][ T7657] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1292.733509][T10846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1292.893105][T11034] chnl_net:caif_netlink_parms(): no params data found [ 1293.813852][ T8418] Bluetooth: hci3: command tx timeout [ 1295.128347][T11057] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1296.214898][ T8418] Bluetooth: hci3: command tx timeout [ 1300.578166][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1300.601042][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1300.614827][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1300.645784][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1300.680256][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1301.295714][T10884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1302.261723][T11034] bridge0: port 1(bridge_slave_0) entered blocking state [ 1302.280493][T11034] bridge0: port 1(bridge_slave_0) entered disabled state [ 1302.305549][T11034] bridge_slave_0: entered allmulticast mode [ 1302.351107][T11034] bridge_slave_0: entered promiscuous mode [ 1302.438674][T11034] bridge0: port 2(bridge_slave_1) entered blocking state [ 1302.446009][T11034] bridge0: port 2(bridge_slave_1) entered disabled state [ 1302.746830][ T5783] Bluetooth: hci1: command tx timeout [ 1302.755600][T11034] bridge_slave_1: entered allmulticast mode [ 1302.818610][T11034] bridge_slave_1: entered promiscuous mode [ 1303.603236][T11034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1303.714310][T11034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1303.742714][T11095] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1304.197489][T11098] overlayfs: missing 'lowerdir' [ 1304.367117][ T6187] bridge_slave_1: left allmulticast mode [ 1304.372889][ T6187] bridge_slave_1: left promiscuous mode [ 1304.380295][ T6187] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.413496][ T6187] bridge_slave_0: left allmulticast mode [ 1304.439726][ T6187] bridge_slave_0: left promiscuous mode [ 1304.445978][ T6187] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.880765][ T5783] Bluetooth: hci1: command tx timeout [ 1306.936836][ T5783] Bluetooth: hci1: command tx timeout [ 1307.671103][T11106] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1308.987063][ T5783] Bluetooth: hci1: command tx timeout [ 1310.206338][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1310.213803][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1310.464130][ T8418] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1310.473547][ T8418] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1310.483167][ T8418] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1310.496074][ T8418] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1310.512278][ T8418] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1310.590497][ T6187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1311.090883][ T6187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1312.103664][ T6187] bond0 (unregistering): Released all slaves [ 1312.587056][ T8418] Bluetooth: hci2: command tx timeout [ 1314.463842][T11034] team0: Port device team_slave_0 added [ 1314.670227][ T8418] Bluetooth: hci2: command tx timeout [ 1315.017120][T11034] team0: Port device team_slave_1 added [ 1315.148871][ T9] IPVS: starting estimator thread 0... [ 1315.192255][ T6187] hsr_slave_0: left promiscuous mode [ 1315.206889][ T6187] hsr_slave_1: left promiscuous mode [ 1315.219832][ T6187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1315.259351][ T6187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1315.297008][T11126] IPVS: using max 240 ests per chain, 12000 per kthread [ 1316.283559][ T6187] team0 (unregistering): Port device team_slave_1 removed [ 1316.346421][ T6187] team0 (unregistering): Port device team_slave_0 removed [ 1316.746858][ T8418] Bluetooth: hci2: command tx timeout [ 1318.635815][T11034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1318.662043][T11034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1318.731076][T11034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1318.828632][ T8418] Bluetooth: hci2: command tx timeout [ 1319.308058][T11034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1319.315179][T11034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1319.343286][T11034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1320.096063][T11136] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1323.070764][T11081] chnl_net:caif_netlink_parms(): no params data found [ 1323.187813][ T5783] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1323.201170][ T5783] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1323.228104][ T5783] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1323.280089][ T5783] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1323.292581][ T5783] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1324.963075][T11034] hsr_slave_0: entered promiscuous mode [ 1325.398565][ T5783] Bluetooth: hci5: command tx timeout [ 1325.428978][T11034] hsr_slave_1: entered promiscuous mode [ 1327.517193][ T5783] Bluetooth: hci5: command tx timeout [ 1329.012074][T11081] bridge0: port 1(bridge_slave_0) entered blocking state [ 1329.028967][T11081] bridge0: port 1(bridge_slave_0) entered disabled state [ 1329.043426][T11081] bridge_slave_0: entered allmulticast mode [ 1329.055455][T11081] bridge_slave_0: entered promiscuous mode [ 1329.223572][T11081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1329.242909][T11081] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.252122][T11081] bridge_slave_1: entered allmulticast mode [ 1329.269283][T11081] bridge_slave_1: entered promiscuous mode [ 1329.546952][ T5783] Bluetooth: hci5: command tx timeout [ 1329.595235][T11081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1329.727152][ T9399] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1329.752855][T11081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1329.923539][ T9399] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1329.948753][ T9399] usb 9-1: config 255 has an invalid interface number: 201 but max is 0 [ 1329.967447][ T9399] usb 9-1: config 255 has no interface number 0 [ 1329.975606][ T9399] usb 9-1: config 255 interface 201 has no altsetting 0 [ 1329.998938][ T9399] usb 9-1: New USB device found, idVendor=f92d, idProduct=ffff, bcdDevice=55.ff [ 1330.021565][ T9399] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.034669][ T9399] usb 9-1: Product: syz [ 1330.040048][ T9399] usb 9-1: Manufacturer: syz [ 1330.045134][ T9399] usb 9-1: SerialNumber: syz [ 1330.300296][T11081] team0: Port device team_slave_0 added [ 1330.365637][ T9399] usb 9-1: USB disconnect, device number 4 [ 1330.541297][T11081] team0: Port device team_slave_1 added [ 1330.676217][T11112] chnl_net:caif_netlink_parms(): no params data found [ 1331.025303][T11081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1331.072272][T11081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1331.132758][T11081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1331.289887][T11081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1331.320899][T11081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1331.392551][T11081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1331.626957][ T5783] Bluetooth: hci5: command tx timeout [ 1331.832002][T11201] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1332.415023][T11081] hsr_slave_0: entered promiscuous mode [ 1332.461360][T11081] hsr_slave_1: entered promiscuous mode [ 1332.509617][T11081] debugfs: 'hsr0' already exists in 'hsr' [ 1332.515582][T11081] Cannot create hsr debugfs directory [ 1333.572668][T11034] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1333.692182][T11034] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1333.818730][T11152] chnl_net:caif_netlink_parms(): no params data found [ 1334.201005][T11034] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1334.352250][T11034] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1335.118104][T11112] bridge0: port 1(bridge_slave_0) entered blocking state [ 1335.168960][T11112] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.234716][T11112] bridge_slave_0: entered allmulticast mode [ 1335.279543][T11112] bridge_slave_0: entered promiscuous mode [ 1335.429447][T11112] bridge0: port 2(bridge_slave_1) entered blocking state [ 1335.458685][T11231] loop8: detected capacity change from 0 to 512 [ 1335.493093][T11231] EXT4-fs: Ignoring removed i_version option [ 1335.513366][T11112] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.541873][T11112] bridge_slave_1: entered allmulticast mode [ 1335.568378][T11231] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1335.570297][T11112] bridge_slave_1: entered promiscuous mode [ 1335.629022][T11231] EXT4-fs warning (device loop8): ext4_xattr_inode_get:560: inode #11: comm syz.8.922: EA inode hash validation failed [ 1335.654482][ T6187] bridge_slave_1: left allmulticast mode [ 1335.678385][ T6187] bridge_slave_1: left promiscuous mode [ 1335.684855][ T6187] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.728031][T11231] EXT4-fs error (device loop8): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.8.922: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 1335.771288][T11231] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1335.772526][T11231] EXT4-fs (loop8): Remounting filesystem read-only [ 1335.782021][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1335.782112][ C0] EXT4-fs (loop8): initial error at time 1771152315: ext4_xattr_inode_update_ref:1037: inode 11 [ 1335.782280][ C0] EXT4-fs (loop8): last error at time 1771152315: ext4_xattr_inode_update_ref:1037: inode 11 [ 1335.837232][T11231] EXT4-fs warning (device loop8): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.8.922: ea_inode dec ref err=-117 [ 1335.853525][ T6187] bridge_slave_0: left allmulticast mode [ 1335.860869][ T6187] bridge_slave_0: left promiscuous mode [ 1335.873649][T11231] EXT4-fs warning (device loop8): ext4_evict_inode:275: xattr delete (err -30) [ 1335.884674][ T6187] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.895401][T11231] EXT4-fs (loop8): 1 orphan inode deleted [ 1335.917328][T11231] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1335.942174][ T6187] bridge_slave_1: left allmulticast mode [ 1335.963477][ T6187] bridge_slave_1: left promiscuous mode [ 1336.168214][ T6187] bridge0: port 2(bridge_slave_1) entered disabled state [ 1336.221719][ T6187] bridge_slave_0: left allmulticast mode [ 1336.249072][ T6187] bridge_slave_0: left promiscuous mode [ 1336.284130][ T6187] bridge0: port 1(bridge_slave_0) entered disabled state [ 1337.039592][ T6187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1337.058486][ T6187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1337.076387][ T6187] bond0 (unregistering): Released all slaves [ 1337.157917][ T9684] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1337.405756][ T6187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1337.471626][ T6187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1337.552155][ T6187] bond0 (unregistering): Released all slaves [ 1339.959467][T11112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1340.020003][ T6187] hsr_slave_0: left promiscuous mode [ 1340.047019][ T6187] hsr_slave_1: left promiscuous mode [ 1340.054934][ T6187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1340.093822][ T6187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1340.166012][ T6187] hsr_slave_0: left promiscuous mode [ 1340.214863][ T6187] hsr_slave_1: left promiscuous mode [ 1340.222923][ T6187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1340.233434][ T6187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1340.811358][ T6187] team0 (unregistering): Port device team_slave_1 removed [ 1340.859406][ T6187] team0 (unregistering): Port device team_slave_0 removed [ 1341.291732][T11264] netlink: 'syz.8.926': attribute type 1 has an invalid length. [ 1341.538558][ T6187] team0 (unregistering): Port device team_slave_1 removed [ 1341.564060][ T6187] team0 (unregistering): Port device team_slave_0 removed [ 1341.904490][T11112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1342.141630][T11264] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1342.214224][T11265] bond1: (slave ip6gretap1): making interface the new active one [ 1342.229310][T11265] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1342.305841][T11266] veth3: entered promiscuous mode [ 1342.338316][T11266] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1342.456836][T11152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1342.467591][T11152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1342.475313][T11152] bridge_slave_0: entered allmulticast mode [ 1342.514554][T11152] bridge_slave_0: entered promiscuous mode [ 1342.652325][T11112] team0: Port device team_slave_0 added [ 1342.683937][T11112] team0: Port device team_slave_1 added [ 1343.231897][T11081] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1343.331122][T11152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1343.357811][T11276] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1343.374366][T11152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1343.382891][T11152] bridge_slave_1: entered allmulticast mode [ 1343.393190][T11152] bridge_slave_1: entered promiscuous mode [ 1343.484660][T11152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1343.506708][T11152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1343.713300][T11081] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1344.115906][T11112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1344.152309][T11112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1344.192059][T11112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1344.205795][T11081] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1344.993491][T11152] team0: Port device team_slave_0 added [ 1345.132380][T11152] team0: Port device team_slave_1 added [ 1345.214580][T11112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1345.253967][T11112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1345.350631][T11112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1345.421794][T11081] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1345.733450][ T6187] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.192073][ T8418] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1346.202315][ T8418] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1346.213094][ T8418] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1346.245837][ T8418] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1346.292723][ T8418] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1346.430185][ T6187] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.640123][T11152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1346.667055][T11152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1346.745539][T11152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1346.988294][ T6187] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.105983][T11298] loop8: detected capacity change from 0 to 512 [ 1347.124625][T11298] EXT4-fs: Ignoring removed i_version option [ 1347.141509][ T6187] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.176236][T11298] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1347.267994][T11152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1347.275211][T11152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1347.328955][T11298] EXT4-fs warning (device loop8): ext4_xattr_inode_get:560: inode #11: comm syz.8.929: EA inode hash validation failed [ 1347.369557][T11298] EXT4-fs error (device loop8): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.8.929: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 1347.436783][T11152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1347.437147][T11298] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1347.485861][T11112] hsr_slave_0: entered promiscuous mode [ 1347.490385][T11298] EXT4-fs (loop8): Remounting filesystem read-only [ 1347.500994][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1347.501083][ C0] EXT4-fs (loop8): initial error at time 1771152327: ext4_xattr_inode_update_ref:1037: inode 11 [ 1347.501247][ C0] EXT4-fs (loop8): last error at time 1771152327: ext4_xattr_inode_update_ref:1037: inode 11 [ 1347.571797][T11112] hsr_slave_1: entered promiscuous mode [ 1347.597354][T11112] debugfs: 'hsr0' already exists in 'hsr' [ 1347.600391][T11298] EXT4-fs warning (device loop8): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.8.929: ea_inode dec ref err=-117 [ 1347.616413][T11112] Cannot create hsr debugfs directory [ 1347.646036][T11298] EXT4-fs warning (device loop8): ext4_evict_inode:275: xattr delete (err -30) [ 1347.680212][T11298] EXT4-fs (loop8): 1 orphan inode deleted [ 1347.694171][T11298] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1348.346907][ T8418] Bluetooth: hci4: command tx timeout [ 1348.968874][ T9684] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1349.724617][T11152] hsr_slave_0: entered promiscuous mode [ 1349.758266][T11152] hsr_slave_1: entered promiscuous mode [ 1349.792831][T11152] debugfs: 'hsr0' already exists in 'hsr' [ 1349.807079][T11152] Cannot create hsr debugfs directory [ 1350.439051][ T8418] Bluetooth: hci4: command tx timeout [ 1350.888423][ T6187] bridge_slave_1: left allmulticast mode [ 1350.896068][ T6187] bridge_slave_1: left promiscuous mode [ 1350.932115][ T6187] bridge0: port 2(bridge_slave_1) entered disabled state [ 1350.945782][ T6187] bridge_slave_0: left allmulticast mode [ 1350.952002][ T6187] bridge_slave_0: left promiscuous mode [ 1350.960046][ T6187] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.685529][ T6187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1351.754532][ T6187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1351.813991][ T6187] bond0 (unregistering): Released all slaves [ 1352.506817][ T8418] Bluetooth: hci4: command tx timeout [ 1353.341751][T11335] loop8: detected capacity change from 0 to 512 [ 1353.500743][T11335] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1353.597402][T11335] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1353.687765][ T6187] hsr_slave_0: left promiscuous mode [ 1353.704253][ T6187] hsr_slave_1: left promiscuous mode [ 1353.712569][ T6187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1353.743203][ T6187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1353.781124][ T6187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1353.799720][ T6187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1353.851910][ T6187] veth1_macvtap: left promiscuous mode [ 1353.865491][ T6187] veth0_macvtap: left promiscuous mode [ 1353.894369][ T6187] veth1_vlan: left promiscuous mode [ 1353.917527][ T6187] veth0_vlan: left promiscuous mode [ 1354.154962][ T9684] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1354.585531][T11354] hub 8-0:1.0: USB hub found [ 1354.593327][T11354] hub 8-0:1.0: 1 port detected [ 1354.687865][ T8418] Bluetooth: hci4: command tx timeout [ 1356.286987][ T6187] team0 (unregistering): Port device team_slave_1 removed [ 1356.425158][ T6187] team0 (unregistering): Port device team_slave_0 removed [ 1358.079928][T11292] chnl_net:caif_netlink_parms(): no params data found [ 1358.478374][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1358.488850][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1358.503713][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1358.532292][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1358.543650][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1359.215284][ T6187] IPVS: stop unused estimator thread 0... [ 1360.589159][ T5783] Bluetooth: hci3: command tx timeout [ 1360.645220][T11378] loop8: detected capacity change from 0 to 512 [ 1360.724365][T11378] EXT4-fs: Ignoring removed i_version option [ 1360.788030][T11378] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1360.808970][T11378] EXT4-fs warning (device loop8): ext4_xattr_inode_get:560: inode #11: comm syz.8.936: EA inode hash validation failed [ 1360.874382][T11378] EXT4-fs error (device loop8): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.8.936: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 1360.891053][T11378] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1360.896614][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1360.897877][T11378] EXT4-fs (loop8): Remounting filesystem read-only [ 1360.905899][ C0] EXT4-fs (loop8): initial error at time 1771152340: ext4_xattr_inode_update_ref:1037: inode 11 [ 1360.929930][ C0] EXT4-fs (loop8): last error at time 1771152340: ext4_xattr_inode_update_ref:1037: inode 11 [ 1360.989686][T11378] EXT4-fs warning (device loop8): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.8.936: ea_inode dec ref err=-117 [ 1361.031511][T11378] EXT4-fs warning (device loop8): ext4_evict_inode:275: xattr delete (err -30) [ 1361.090060][T11378] EXT4-fs (loop8): 1 orphan inode deleted [ 1361.144348][T11378] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1362.185253][T11152] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1362.318747][T11152] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1362.394011][T11152] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1362.453318][T11152] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1362.667013][ T5783] Bluetooth: hci3: command tx timeout [ 1363.332078][T11292] bridge0: port 1(bridge_slave_0) entered blocking state [ 1363.370984][T11292] bridge0: port 1(bridge_slave_0) entered disabled state [ 1363.400334][T11292] bridge_slave_0: entered allmulticast mode [ 1363.424930][T11292] bridge_slave_0: entered promiscuous mode [ 1363.677872][T11292] bridge0: port 2(bridge_slave_1) entered blocking state [ 1363.696362][T11292] bridge0: port 2(bridge_slave_1) entered disabled state [ 1363.729224][T11292] bridge_slave_1: entered allmulticast mode [ 1363.762934][T11292] bridge_slave_1: entered promiscuous mode [ 1363.817090][ T9684] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1364.214837][T11292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1364.766886][ T5783] Bluetooth: hci3: command tx timeout [ 1366.057345][T11368] chnl_net:caif_netlink_parms(): no params data found [ 1366.153030][T11292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1366.754898][T11292] team0: Port device team_slave_0 added [ 1366.826907][ T5783] Bluetooth: hci3: command tx timeout [ 1366.833915][T11292] team0: Port device team_slave_1 added [ 1367.560126][T11424] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 1367.587456][ C0] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 1367.762070][ T8418] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1367.762097][T11292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1367.764079][ T8418] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1367.785856][ T8418] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1367.799686][T11292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1367.838473][ T8418] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1367.872661][ T8418] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1367.885212][T11292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1367.905385][T11292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1367.914396][T11292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1367.941475][T11292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1368.050040][ T6187] bridge_slave_1: left allmulticast mode [ 1368.055888][ T6187] bridge_slave_1: left promiscuous mode [ 1368.116067][ T6187] bridge0: port 2(bridge_slave_1) entered disabled state [ 1368.176196][ T6187] bridge_slave_0: left allmulticast mode [ 1368.206065][ T6187] bridge_slave_0: left promiscuous mode [ 1368.235486][ T6187] bridge0: port 1(bridge_slave_0) entered disabled state [ 1368.904527][ T6187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1369.028873][ T6187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1369.062818][ T6187] bond0 (unregistering): Released all slaves [ 1369.508704][ T6187] hsr_slave_0: left promiscuous mode [ 1369.531224][ T6187] hsr_slave_1: left promiscuous mode [ 1369.549792][ T6187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1369.570672][ T6187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1370.028316][ T5783] Bluetooth: hci1: command tx timeout [ 1370.059069][ T6187] team0 (unregistering): Port device team_slave_1 removed [ 1370.101710][ T6187] team0 (unregistering): Port device team_slave_0 removed [ 1370.740836][T11292] hsr_slave_0: entered promiscuous mode [ 1370.755584][T11292] hsr_slave_1: entered promiscuous mode [ 1370.892889][T11368] bridge0: port 1(bridge_slave_0) entered blocking state [ 1370.907387][T11368] bridge0: port 1(bridge_slave_0) entered disabled state [ 1370.925652][T11368] bridge_slave_0: entered allmulticast mode [ 1370.940248][T11368] bridge_slave_0: entered promiscuous mode [ 1371.034875][T11368] bridge0: port 2(bridge_slave_1) entered blocking state [ 1371.050333][T11438] loop8: detected capacity change from 0 to 32768 [ 1371.056919][T11368] bridge0: port 2(bridge_slave_1) entered disabled state [ 1371.066314][T11368] bridge_slave_1: entered allmulticast mode [ 1371.099962][T11368] bridge_slave_1: entered promiscuous mode [ 1371.105905][T11438] [ 1371.105905][T11438] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1371.105905][T11438] [ 1371.163328][T11438] ERROR: (device loop8): diWrite: ixpxd invalid [ 1371.163328][T11438] [ 1371.187653][T11438] ERROR: (device loop8): remounting filesystem as read-only [ 1371.195171][T11438] ERROR: (device loop8): txAbort: [ 1371.195171][T11438] [ 1371.264396][T11438] ERROR: (device loop8): dtReadFirst: btstack overrun [ 1371.264396][T11438] [ 1371.294527][T11438] ERROR: (device loop8): remounting filesystem as read-only [ 1371.342193][T11438] btstack dump: [ 1371.345808][T11438] bn = 0, index = 0 [ 1371.351976][T11438] bn = 30, index = 0 [ 1371.356025][T11438] bn = 0, index = 0 [ 1371.371915][T11438] bn = 30, index = 0 [ 1371.376070][T11438] bn = 0, index = 0 [ 1371.384203][T11438] bn = 30, index = 0 [ 1371.389890][T11438] bn = 0, index = 0 [ 1371.417816][T11438] ===================================================== [ 1371.424999][T11438] BUG: KMSAN: uninit-value in BT_STACK_DUMP+0x5e5/0x600 [ 1371.432708][T11438] BT_STACK_DUMP+0x5e5/0x600 [ 1371.437633][T11438] dtReadFirst+0xe8e/0xec0 [ 1371.442231][T11438] jfs_readdir+0x11b5/0x6cd0 [ 1371.447230][T11438] wrap_directory_iterator+0xda/0x180 [ 1371.452790][T11438] shared_jfs_readdir+0x3d/0x50 [ 1371.458062][T11438] iterate_dir+0x459/0x630 [ 1371.462647][T11438] __se_sys_getdents+0x182/0x560 [ 1371.467990][T11438] __x64_sys_getdents+0x97/0xe0 [ 1371.476812][T11438] x64_sys_call+0x1150/0x3ea0 [ 1371.481796][T11438] do_syscall_64+0x134/0xf80 [ 1371.487371][T11438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1371.493436][T11438] [ 1371.495824][T11438] Local variable btstack created at: [ 1371.501651][T11438] jfs_readdir+0xde/0x6cd0 [ 1371.506243][T11438] wrap_directory_iterator+0xda/0x180 [ 1371.512104][T11438] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1371.514540][T11438] CPU: 1 UID: 0 PID: 11438 Comm: syz.8.940 Not tainted syzkaller #0 PREEMPT(full) [ 1371.524466][T11438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1371.536402][T11438] ===================================================== [ 1371.543651][T11438] Disabling lock debugging due to kernel taint [ 1371.567696][T11438] Kernel panic - not syncing: kmsan.panic set ... [ 1371.574297][T11438] CPU: 0 UID: 0 PID: 11438 Comm: syz.8.940 Tainted: G B syzkaller #0 PREEMPT(full) [ 1371.585339][T11438] Tainted: [B]=BAD_PAGE [ 1371.589581][T11438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1371.599853][T11438] Call Trace: [ 1371.603255][T11438] [ 1371.606353][T11438] __dump_stack+0x26/0x30 [ 1371.610857][T11438] dump_stack_lvl+0x50/0x1c0 [ 1371.615615][T11438] ? dump_stack+0x12/0x25 [ 1371.620116][T11438] dump_stack+0x1e/0x25 [ 1371.624431][T11438] vpanic+0x7b4/0x1430 [ 1371.628705][T11438] panic+0x15d/0x160 [ 1371.632818][T11438] kmsan_report+0x31a/0x320 [ 1371.637494][T11438] ? __msan_warning+0x1b/0x30 [ 1371.642328][T11438] ? BT_STACK_DUMP+0x5e5/0x600 [ 1371.647245][T11438] ? dtReadFirst+0xe8e/0xec0 [ 1371.651994][T11438] ? jfs_readdir+0x11b5/0x6cd0 [ 1371.656919][T11438] ? wrap_directory_iterator+0xda/0x180 [ 1371.662635][T11438] ? shared_jfs_readdir+0x3d/0x50 [ 1371.667850][T11438] ? iterate_dir+0x459/0x630 [ 1371.672599][T11438] ? __se_sys_getdents+0x182/0x560 [ 1371.677883][T11438] ? __x64_sys_getdents+0x97/0xe0 [ 1371.683094][T11438] ? x64_sys_call+0x1150/0x3ea0 [ 1371.688132][T11438] ? do_syscall_64+0x134/0xf80 [ 1371.693049][T11438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1371.699291][T11438] ? vprintk_emit+0xb60/0xba0 [ 1371.704185][T11438] ? vprintk_default+0x3f/0x50 [ 1371.709143][T11438] ? vprintk+0x36/0x50 [ 1371.713365][T11438] ? _printk+0x17e/0x1b0 [ 1371.717830][T11438] ? kmsan_get_metadata+0xf1/0x160 [ 1371.723122][T11438] __msan_warning+0x1b/0x30 [ 1371.727785][T11438] BT_STACK_DUMP+0x5e5/0x600 [ 1371.732549][T11438] dtReadFirst+0xe8e/0xec0 [ 1371.737163][T11438] jfs_readdir+0x11b5/0x6cd0 [ 1371.741894][T11438] ? kmsan_get_metadata+0xf1/0x160 [ 1371.747171][T11438] ? ksm_next_page_pmd_entry+0x400/0x1150 [ 1371.753099][T11438] ? kmsan_get_metadata+0xf1/0x160 [ 1371.758372][T11438] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1371.764367][T11438] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1371.770351][T11438] ? __rcu_read_unlock+0x6c/0xd0 [ 1371.775623][T11438] ? aa_file_perm+0x417/0x27c0 [ 1371.780548][T11438] ? aa_file_perm+0x532/0x27c0 [ 1371.785457][T11438] ? __pfx_futex_wake_mark+0x10/0x10 [ 1371.790922][T11438] ? kmsan_get_metadata+0xf1/0x160 [ 1371.796190][T11438] ? kmsan_get_metadata+0xf1/0x160 [ 1371.801500][T11438] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1371.808003][T11438] ? kmsan_get_metadata+0xf1/0x160 [ 1371.813287][T11438] wrap_directory_iterator+0xda/0x180 [ 1371.818817][T11438] ? __pfx_jfs_readdir+0x10/0x10 [ 1371.823905][T11438] ? __pfx_shared_jfs_readdir+0x10/0x10 [ 1371.829628][T11438] shared_jfs_readdir+0x3d/0x50 [ 1371.834653][T11438] iterate_dir+0x459/0x630 [ 1371.839227][T11438] __se_sys_getdents+0x182/0x560 [ 1371.844412][T11438] ? __pfx_filldir+0x10/0x10 [ 1371.849171][T11438] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1371.855241][T11438] __x64_sys_getdents+0x97/0xe0 [ 1371.860247][T11438] x64_sys_call+0x1150/0x3ea0 [ 1371.865107][T11438] do_syscall_64+0x134/0xf80 [ 1371.869872][T11438] ? clear_bhb_loop+0x50/0xa0 [ 1371.874710][T11438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1371.880757][T11438] RIP: 0033:0x7fc0ded9bf79 [ 1371.885279][T11438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1371.905048][T11438] RSP: 002b:00007fc0dfc3a028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 1371.913611][T11438] RAX: ffffffffffffffda RBX: 00007fc0df015fa0 RCX: 00007fc0ded9bf79 [ 1371.921695][T11438] RDX: 0000000000001000 RSI: 0000200000000b40 RDI: 0000000000000004 [ 1371.929854][T11438] RBP: 00007fc0dee327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1371.937922][T11438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1371.945989][T11438] R13: 00007fc0df016038 R14: 00007fc0df015fa0 R15: 00007ffdb4469e88 [ 1371.954100][T11438] [ 1371.957605][T11438] Kernel Offset: disabled [ 1371.961977][T11438] Rebooting in 86400 seconds..