last executing test programs: 25m14.49085172s ago: executing program 0 (id=10): socket$inet6(0xa, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f00000014c0)=""/215, 0x11c}], 0x1, 0x94, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$netlink(0x10, 0x3, 0x14) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f0000000540)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a0cbc000c00f0ff7f0000b402000033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435eeab29d3ef3d92c94170e5bba2e177312e081bea05d3a", 0x89) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b3a, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0xff, 0x7ff, 0xfc00, 0x10, 0x10}}) ioctl$KDSETMODE(r5, 0x4b3a, 0x0) 25m12.165601362s ago: executing program 0 (id=12): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x20000080) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000002f00090027bd7000fddbdf250400000007000b00050000006a965e43c97d2242c3ea8c51aa03af6ab596b1d7786a47ebe5664a7c174736f9a8e364d2e8350f757e68e515f7ff29d0a70f68247f9417633b6c88b6847188f8e2f0091b35dfa0fc97947b7b9259a7132f1d6fdc8fa2aa7393a18d69014e46317f61d5f73bb02c1eb37479342c7600725007f31d2853cd6435366b2bd8a4"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x1, 0x323b, 0x55}, {@remote, 0x4e27, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) 25m10.906763006s ago: executing program 0 (id=14): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8) syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000180)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@commit={'commit', 0x3d, 0x9}}, {@acl}]}, 0xff, 0x5122, &(0x7f0000006440)="$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") r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {0x1, 0x2}, [], {0x4, 0x4}}, 0x24, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}}, 0x4) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000140)="24000000010006", 0x7) r5 = memfd_secret(0x80000) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240)={r5, r5}, 0xc) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)}], 0x1, 0xe7b, 0x0, 0x0) 25m7.643677579s ago: executing program 0 (id=15): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioprio_set$pid(0x1, 0x0, 0x0) io_submit(0x0, 0x2000000000000211, &(0x7f0000000840)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x9, 0xffffffffffffffff, 0x0}]) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="03000000040000000400", @ANYRES32=0x0, @ANYBLOB="030000000100060000000000071d000003000000ccda47ef99965e6f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = getpgid(0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = pidfd_getfd(r4, r4, 0x0) close(0x3) setns(r5, 0x66020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x145091, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) 25m3.774204839s ago: executing program 0 (id=22): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0xfffffffffffffe08, &(0x7f0000000040)=0xfffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace(0x4208, r0) r1 = getpid() getrlimit(0xb, &(0x7f0000000080)) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x3) msgget(0x2, 0x217) msgctl$IPC_INFO(0x0, 0x3, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x2000) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) msgsnd(0x0, &(0x7f0000000780)={0x3}, 0x8, 0x800) 25m1.717822852s ago: executing program 0 (id=23): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a"], 0x119) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x0, 0xc93c, 0x1, 0x0, 0x340}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xafbc, 0x10000, 0x0, 0x3e6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9572, 0x20, 0x3, 0x37d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xee47, 0x400, 0x2, 0x363}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4d3d, 0x8001, 0x1, 0x58}}], 0x4, &(0x7f0000001900)={0x2e, 0x68, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x2}, 0x0, 0x0, '\x00', {0x1, 0xec2, 0x0, &(0x7f0000000900)=@buf_1k="781b692b42cf1ac2188c43549e97e38c5005be11d078c61bacce7fc6f65853efb79d5b080d3bf4d70c0dd5f7a2bbb6da05b471d86d02c90df3c807e14c87ae28b36651a8a8db910f656a5b2926a062ecda088014ff9820eb39a9153eca8752b41887a6f9e19d5329da04e349d479a7cec1918aaa1b81c2bc50c18d6fcd3d737deb6c595b1bb987bc391e2ea8f3ffb037ce4cf085387c002d02921844e63388d92836f9de88a2c4a10cbf6d7231aa26acc970cdedbddbfe12276e22c8083600e7d3fa445563f410364b7d40050808b31f1aad57d8a7ba1f9da28bc38380f91e3929ada86145406713656de047151ef1e8b970ce0dde2cf4e7ab88b5e55bc5d5a9dca9f1793c2a0584999561419072d82061b39c8b8b9e8981ad1a2c5aab1ce173db527e0d43edb2c9b5361885476b7e0bdb0e9a7f31ef50b906d4fa293f3a105c38b16fc8f77ef7e2d74897745cd7d0eccf2f722732056b91663ef43792761296d7c0ba28cfc7d2b8c77ee38cf3b5f808ccfbd7a6e95ea1313764281816607e7ffdd94a3ab75998a325a929d460d6770fed44b8d849da9dc6e1c64187513117f5202815fb62cabfe6f2fc69e19445976e2a4500df1e0a1dd18e24ad8304c118dea641a7d4033549f3b0ff73db1f2dbf895a7b17729a89307b83cd9844a9352fcf221f773c81f4abcf16483b375e5ec1abd16db31311aab95e5a50fd7cf21787fe0f990583a29f06556330d62ebacfe3900321377e7599fb90ba62299bd92ecd0e1e6c7d423c534c5bcf84d69412856095fd0e06807970e02ef30bd5a3c4c4e29d88aad745e088330915c0aaeb6e6fc352c16e1f6ddb5edbd4c0174be10fca634807395bb5f74dc8841ea99292cf7603639b96d28aa095e37e864744d9e446a5b0a52704e5e2dd35ad3e0c5ccbd4cc3b84336fb2b73c80678b6b2d8a765c0ffe2a753fec61b4daea02303cef6828b31df1fda03c159482b5f890073a3369e6f9aff6d03ee27c7234f8d5726d81fcac90d96f31ecc255c5f299b43e6e401893ababf5b4d6322b22456999b1768c435a6cfd1c13a4b0b98121ae612e8d226be637eae1cb4c3cb6d64bc61ec8c32e2719c3516edd86c25fa0b22dc385f8df65bab7b78b48779a7286cf470efa6732a38c4ee8bb764525fd5bf0efe79307578d30bf8942a56f4cc1e083459bd453eac1b5ad9c0d56b7b671d46fde91caa506b044199ffcb2e85b98e0e2746a2159db53e7eac4fba3c4e75480cf759e4a043eafb0eadfb51aa31678525e99b59ecc8c44625280be40a636d532973c8238369b06e4287436a238aa3533633fd403a1e64d2cfbce5ae8661f671f6b5041247482df3a4af5b2b7c90bdc663b7d7673942ee962eec5abce7628411ea36c5cfe8a83e27b2b8eb3b96ba41ced681742de12cf168fa298f0ae8d1f0dc9e82630db39c7bd5a4f8d"}}, &(0x7f0000001980)) r2 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffc, 0xc, 0x0, r1}) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$rxrpc(0x21, 0x2, 0x2) r4 = dup(r3) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') fcntl$setstatus(r4, 0x4, 0x4000) preadv(r5, &(0x7f0000004080)=[{&(0x7f0000000240)=""/39, 0x27}], 0x1, 0x421a, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) write$P9_RRENAME(r4, 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85512, &(0x7f0000000040)={{0x0, 0x0, 0x1000000, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}) close_range(r2, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 24m45.150085854s ago: executing program 32 (id=23): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a"], 0x119) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x0, 0xc93c, 0x1, 0x0, 0x340}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xafbc, 0x10000, 0x0, 0x3e6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9572, 0x20, 0x3, 0x37d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xee47, 0x400, 0x2, 0x363}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4d3d, 0x8001, 0x1, 0x58}}], 0x4, &(0x7f0000001900)={0x2e, 0x68, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x2}, 0x0, 0x0, '\x00', {0x1, 0xec2, 0x0, &(0x7f0000000900)=@buf_1k="781b692b42cf1ac2188c43549e97e38c5005be11d078c61bacce7fc6f65853efb79d5b080d3bf4d70c0dd5f7a2bbb6da05b471d86d02c90df3c807e14c87ae28b36651a8a8db910f656a5b2926a062ecda088014ff9820eb39a9153eca8752b41887a6f9e19d5329da04e349d479a7cec1918aaa1b81c2bc50c18d6fcd3d737deb6c595b1bb987bc391e2ea8f3ffb037ce4cf085387c002d02921844e63388d92836f9de88a2c4a10cbf6d7231aa26acc970cdedbddbfe12276e22c8083600e7d3fa445563f410364b7d40050808b31f1aad57d8a7ba1f9da28bc38380f91e3929ada86145406713656de047151ef1e8b970ce0dde2cf4e7ab88b5e55bc5d5a9dca9f1793c2a0584999561419072d82061b39c8b8b9e8981ad1a2c5aab1ce173db527e0d43edb2c9b5361885476b7e0bdb0e9a7f31ef50b906d4fa293f3a105c38b16fc8f77ef7e2d74897745cd7d0eccf2f722732056b91663ef43792761296d7c0ba28cfc7d2b8c77ee38cf3b5f808ccfbd7a6e95ea1313764281816607e7ffdd94a3ab75998a325a929d460d6770fed44b8d849da9dc6e1c64187513117f5202815fb62cabfe6f2fc69e19445976e2a4500df1e0a1dd18e24ad8304c118dea641a7d4033549f3b0ff73db1f2dbf895a7b17729a89307b83cd9844a9352fcf221f773c81f4abcf16483b375e5ec1abd16db31311aab95e5a50fd7cf21787fe0f990583a29f06556330d62ebacfe3900321377e7599fb90ba62299bd92ecd0e1e6c7d423c534c5bcf84d69412856095fd0e06807970e02ef30bd5a3c4c4e29d88aad745e088330915c0aaeb6e6fc352c16e1f6ddb5edbd4c0174be10fca634807395bb5f74dc8841ea99292cf7603639b96d28aa095e37e864744d9e446a5b0a52704e5e2dd35ad3e0c5ccbd4cc3b84336fb2b73c80678b6b2d8a765c0ffe2a753fec61b4daea02303cef6828b31df1fda03c159482b5f890073a3369e6f9aff6d03ee27c7234f8d5726d81fcac90d96f31ecc255c5f299b43e6e401893ababf5b4d6322b22456999b1768c435a6cfd1c13a4b0b98121ae612e8d226be637eae1cb4c3cb6d64bc61ec8c32e2719c3516edd86c25fa0b22dc385f8df65bab7b78b48779a7286cf470efa6732a38c4ee8bb764525fd5bf0efe79307578d30bf8942a56f4cc1e083459bd453eac1b5ad9c0d56b7b671d46fde91caa506b044199ffcb2e85b98e0e2746a2159db53e7eac4fba3c4e75480cf759e4a043eafb0eadfb51aa31678525e99b59ecc8c44625280be40a636d532973c8238369b06e4287436a238aa3533633fd403a1e64d2cfbce5ae8661f671f6b5041247482df3a4af5b2b7c90bdc663b7d7673942ee962eec5abce7628411ea36c5cfe8a83e27b2b8eb3b96ba41ced681742de12cf168fa298f0ae8d1f0dc9e82630db39c7bd5a4f8d"}}, &(0x7f0000001980)) r2 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffc, 0xc, 0x0, r1}) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$rxrpc(0x21, 0x2, 0x2) r4 = dup(r3) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') fcntl$setstatus(r4, 0x4, 0x4000) preadv(r5, &(0x7f0000004080)=[{&(0x7f0000000240)=""/39, 0x27}], 0x1, 0x421a, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) write$P9_RRENAME(r4, 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85512, &(0x7f0000000040)={{0x0, 0x0, 0x1000000, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}) close_range(r2, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 24m30.344280422s ago: executing program 3 (id=68): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8000f28, 0x5) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000e80)="2389", 0x2}], 0x1}}], 0x1, 0x4040040) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "5335572af7aa9ec3", "0bb3bbceae3b6d56e33a5c51cbf284c6", "1363cf10", "5c892ebd183c8c13"}, 0x28) recvmsg(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000380)=""/84, 0x54}], 0x1}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x28048840}, 0x0) 24m28.465033853s ago: executing program 3 (id=75): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x43, 0x3}, 0x2}}, 0x10) syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file2\x00', 0x800000, &(0x7f0000000100)=ANY=[], 0xff, 0x234, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100feffffbf000100000000000000000000000000000000000000000000000000000000ffffac1414bb000103944e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000040400000000ac1414bb000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000060000000000000000000000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd7000043500000a"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x2141, 0x59) pwrite64(r5, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 24m26.156637641s ago: executing program 3 (id=78): setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) recvfrom$phonet(0xffffffffffffffff, 0x0, 0x0, 0x40010201, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c084}, 0x4044084) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7ffcfffc}]}) 24m24.31252481s ago: executing program 3 (id=80): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e23, 0x1000004, @mcast2, 0x4}, 0x1c) write(r0, &(0x7f0000000080)="8f2a0a650000000000000006ddb55340bd8c3a3c0304000e", 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r1, 0x8800000) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000680)={{0x1}, 0xbd, 0x0, 'id0\x00', 'timer1\x00', 0x0, 0x0, 0x0, 0xc00000000000000, 0x80000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x2c060000) unshare(0x24020400) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) r5 = fsopen(&(0x7f0000000040)='qnx6\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000003c0)='mountaddr\x00', &(0x7f0000000680)='::\x05J\xa6\xaa\x90\xa8K\xc6\xa3\x13\x8d\xba\x88\x1b\xf63k.\x9c\x02E,K\x1aX\'\x86j^L>\xd7\xe7\xed\x16\xf1x\xd8*\bF\xdd\x1cS\xaa\xd8\x19\x86)Y\n\x06C\x10\xce\x9c\xcf\xd01,\xa8\xc7\x90\x87\x8a\x03u\xebg\x91\xc4\xf4\x1e\x83,\x81t\x80/\"\x81O\x9a\x06\xff\xa2\xa1\xb1,\xdbO\x95\xba-\x17\xa93\xdf4\x19\x1a\xd5 \xce\xce\x9bA\xe4\xb3\xbb(PV\xa7sz\xd3\xfa\xecZ\xe4HBc6\xc6\xcc\x8c7+GM\xb1\x18`J`\xa2\xa57@M@\xe8D\xb6R\"\x03\x11\xd7w\xf1\x98\xecP n\x0eD\xa5\xf9\xe54\xa9E\xd6\x87,\xc3\xb2.\xe3\xc9c&~\xbfPI\xda\xd9\xb1\x00\x1c`;\xc75\x0eRMv|', 0x0) sendfile(r3, r1, 0x0, 0x578410eb) 24m23.189726392s ago: executing program 3 (id=81): socket$nl_generic(0x11, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrusage(0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000000000000850000007100000095"], &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0x1d) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000044) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 24m20.886865733s ago: executing program 3 (id=85): rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000003900), 0x34aa945a513d639, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) clock_gettime(0x0, &(0x7f00000000c0)) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r5 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) getpid() 24m5.41474713s ago: executing program 33 (id=85): rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000003900), 0x34aa945a513d639, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) clock_gettime(0x0, &(0x7f00000000c0)) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r5 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) getpid() 11m1.632352401s ago: executing program 1 (id=1217): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r4, &(0x7f0000000500), 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$qrtrtun(r4, &(0x7f0000000500), 0x0) kexec_load(0x20000000, 0x2, &(0x7f0000000900)=[{0x0, 0x0, 0x200000000, 0x3e0000}, {0x0, 0x4d, 0x0, 0x8000}], 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='secret\x00', &(0x7f0000000000)='+=k\xf6A\xf0\xd2\xe2\x8e\xe6;b\xdd\v\xdf\xc8\xd9\xb5\xf62p\xd1EM\xfe\x17aS\x85\x88\x92\x8eQ\xf1\xa9\xcb\xb3\xb7R\xd4}\xacm\xf3\xd30!\xca\xed\xe2G\xc0\xb1\t\xb3A\xf2\xf8n\xbaO>+\xe89>\x96\xe6\xb9U\x8b\xde\x8e\xfdj\x02\x03m\xeb\xec/0\x9f\x93(\x95\xe2\xab\x9b\xb1\x90\xec\xd3\x8c+\xa4d\'F\xd9W\x15\x8b\xceW\x11n\x13\x02!\x87\xcb\x1d#i\x8b\xb5!\xd8x\x80\x9cA\x9f\x91\xb7>qT\x03\x93\v\xb5\x89\xfc\xf6\xc32DcAC*\xd3\xfd%UN\x01\xc1\x85\r\x18', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r5 = socket$phonet(0x23, 0x2, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/udplite6\x00') ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f00000000c0)={0x0, r5, 0x5, 0x18, 0x5, 0x9}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000540)='./file0\x00', 0x204818, &(0x7f0000000000)={[{@overriderock}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@hide}, {@mode={'mode', 0x3d, 0xf833}}, {@check_relaxed}, {@unhide}, {@map_acorn}, {@dmode={'dmode', 0x3d, 0x8}}]}, 0x1, 0x56f, &(0x7f0000000580)="$eJzs3dtuE0kawPGvc1i8XilaLSuEogBF2JWCFEzbASOLq9522Smwu63uDkquUEQcFOHAirDSJjfADbsjzTwEczkPMW+E5gVGmlEfbJzYjgdyJPr/LKiyu7rqK8vqL524qwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIjlVm27aF3KnqpR3GrgNz8/HWje7e/2vuKQcUWs+J/kcnI1fenq3z9vvhL/Ny9z6bM5ycVFTvYO7D8y3C/048iecoe9KWpnd+/FeqfTfn1cgZxD1y6N3lbXngl903TqWpnQV5Vy2b67XAtVzTR0uBZGuqncQDuRH6gF97YqVipLShfW/BWvXnUaWi24IsVK5cGdkm2X1aNCSztB6Ht3HxVCd9k0GsarJzvGm+M2D+IP4mMTqUg7TaU2tzrtpXETiBsV/0ij0rhGJbtUKhZLpWL5fuX+A9ueGnjBPkAGWhzfhxbfpiMfs4HjMpHmf5GGGPFkRVZFDX24UpVAfGmO2J7p5v9/3tWHjtuf/7tZ/urnzbOS5P/r6bPrvfz/lyt/fXh5aqK3//BYTu+xI7uyJy9kXTrSkba8PvOITvdRFy2eGAnFFyNNcZJXVPaKkoqUpSy2PJVlqUkoSmpipCFaQlmTUCLRySfKlUC0OBKJL4EoWRBXbouSolSkIkuiREtB1sSXFfGkLlVxkl42ZSt535dEWaNi7DUq7t+Q/Myb1vPdz11bSofMlvyPozvOwzdwJL918z8AAAAAALiwrOS37/H5/7RcS2o109D2WYcFAAAAAACOUfKX/7m4mI5r18Ti/B8AAAAAgIvGSq6xs0QkLzfS2qZYyeVS/BIAAAAAAIALIvn7//W4SNZAuSFWb7kUzv8BAAAAALgg/j+4xv6BNXbD1iXr518kCKat963Vf1jpWoHO9mS63+TBHqParDWTdZIU5bSYmnL1nJVLG/UWwfyUFZvj4rB6AWw7vQDefUkAl6fke7mZtrm5kZYb3S3pKPmaaeiC6zceFsVxZiYivRr95+XWfyWZ/ndec8bKyVanXXj2qrORxPI+7uX9draA4sA6isNjmZTLU/ImWW8hueZi6IynkwsxsnHzlmxuddp2//wn0t0n9o/4duaQ+X+Q+bTVfLbibX7//HPxmMXCqNlnURS/fuZZFLfSNrcWbqXFkChK46Io9Ucx/L04ehRLA1H8uj+KpSNGAQBnZXNMFrJkIO9+xVHu67K7fGF2/yALaZuF2eTAOjU75Ihuj8sr9hGz208D90AalWPjcX84kFU/xjt8HDlu2ChZ8Vs4+Wb733JlZ3fvztb2+vP28/bLUmmpbN+z7fslmU6mkRXkHgDAEP332LGG5v+xd+Gx7o05q/5b7ysFBXkmr6QjG7KYXG2QfONgaK/5vq8hLI45a80naTK9w8ti/1ldlj7fZW3/lFzl0O23tL/tkDPAfN/tZQAAuEjmD8/DE/LnXtOR+X9xzHn3/lx++Nlxvu9ubQAA4GTo4JOVj/5nBYFpPS1WKkUnWtYq8N3HKjDVulbGi3TgLjteXatW4Ee+6zfiyhNT1aEKV1otP4hUzQ9Uyw/NarJ8oMpu/R7qpuNFxg1bDe2EWrm+FzlupKomdFVr5V8NEy7rINk5bGnX1IzrRMb3VOivBK4uKBVq3dfQVLUXmZqJq55qBabpBDn1xG+sNLWq6tANTCvy0w67Yxmv5gfNpNvCWb/ZAACcEzu7ey/WO5326xOsDB04d+pTBQAAmTFZGgAAAAAAAAAAAAAAAAAAAAAAnAOncf0flQte6S4FfV7i+fYqM+cjjP7K2EPH2xM/OAE4Ub8HAAD//0v3S3w=") write(r7, &(0x7f0000000180)='0', 0x1) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r7, &(0x7f0000000400)="c12799fe90274c928999f56e25d253c7aef346a9870beac903a6c12a204776c7960f4ff86f66195e3404ce18f5a08d90445ecf58561bd237105d4f81b7b60acea0a82c1e5f5754569091c091ca50b84b493c2ec03d4e3429cacc540f6206e59e33f268b777d9e6d229e6abff4d6381df12ee519190cf4bd304a1e92c0d5665aa4207984fe380448f81f5215d1d6414d2f7c9c17d5dfc21f18b89042590b3a46e9f999149718d8d7e78b300615244cb83e640917f75bd8362ad376a1cf368669a1e3e9dd27e3ad9e25376e4a79e9714c5889d78410f323aaf76db7f338aa8328c9f054ccb5ae8b8766638779caa", 0xed) 10m58.944451689s ago: executing program 1 (id=1222): setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) recvfrom$phonet(0xffffffffffffffff, 0x0, 0x0, 0x40010201, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c084}, 0x4044084) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7ffcfffc}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = openat$udambuf(0xffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x2020, 0x1000}) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregs(0xc, r4, 0xd7d, &(0x7f0000000580)=""/190) 10m44.483319238s ago: executing program 1 (id=1244): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000006300)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f0000000e40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x4}, 0x1c) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f00000002c0)=@multiplanar_mmap={0xff, 0x5, 0x4, 0x400, 0x90, {}, {0x4, 0x0, 0x7, 0xf2, 0x7, 0x1, "b32ce756"}, 0xfffffe00, 0x1, {0x0}, 0x9}) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000040)={0x7, 0x100000, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r7, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r6, 0xffffffffffffffff, 0x0) 10m42.841659348s ago: executing program 1 (id=1248): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x3, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) shutdown(r0, 0x0) 10m41.011234971s ago: executing program 1 (id=1252): r0 = socket(0x400000000010, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x2, @broadcast}}, 0x1e) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0xefe, 0x0, 0x0, 0x0, &(0x7f0000000180)) io_uring_enter(r2, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) timerfd_create(0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04300100c9"], 0x6) syz_open_pts(0xffffffffffffffff, 0x149300) ioctl$sock_bt_hci(r3, 0x400448e6, &(0x7f0000000080)) ioctl$sock_bt_hci(r3, 0x400448e7, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000240)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0}) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x300, 0x1200, 0x0, 0x3) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x60, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xc}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0xc0}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 10m36.256452987s ago: executing program 1 (id=1257): setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) recvfrom$phonet(0xffffffffffffffff, 0x0, 0x0, 0x40010201, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c084}, 0x4044084) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7ffcfffc}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = openat$udambuf(0xffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x2020, 0x1000}) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregs(0xc, r4, 0xd7d, &(0x7f0000000580)=""/190) 10m18.59492001s ago: executing program 34 (id=1257): setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) recvfrom$phonet(0xffffffffffffffff, 0x0, 0x0, 0x40010201, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c084}, 0x4044084) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7ffcfffc}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = openat$udambuf(0xffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x2020, 0x1000}) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregs(0xc, r4, 0xd7d, &(0x7f0000000580)=""/190) 9m26.616992903s ago: executing program 4 (id=1338): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd25, 0x25dfdbff, {{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x20}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x1000, 0x200000000000000}, 0x800, 0x6e6bb0, 0x0, 0x1, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x8008010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x200000000, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f00000001c0)=0x4, 0x4) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FIONCLEX(r6, 0x5450) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=']) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42032, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x2c}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x1}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 9m22.650864447s ago: executing program 4 (id=1345): socket$nl_generic(0x11, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) getrusage(0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000000000000850000007100000095"], &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0x1d) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000044) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000001040)='memory.pressure\x00', 0x2, 0x0) 9m22.516183651s ago: executing program 6 (id=1346): socket$nl_generic(0x11, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) getrusage(0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000000000000850000007100000095"], &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0x1d) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000044) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000001040)='memory.pressure\x00', 0x2, 0x0) 9m19.201925538s ago: executing program 6 (id=1348): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000006300)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f0000000e40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, 0x0, 0xb7, 0x0, &(0x7f00000003c0)) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x4}, 0x1c) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f00000002c0)=@multiplanar_mmap={0xff, 0x5, 0x4, 0x400, 0x90, {}, {0x4, 0x0, 0x7, 0xf2, 0x7, 0x1, "b32ce756"}, 0xfffffe00, 0x1, {0x0}, 0x9}) r5 = syz_pidfd_open(0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000040)={0x7, 0x100000, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r6, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r5, 0xffffffffffffffff, 0x0) 9m19.194395189s ago: executing program 4 (id=1349): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000140)=ANY=[@ANYBLOB="2cdb87a447c04c880000001600210900000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="1400060003f5ffff01000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4900, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f00004d1000/0x3000)=nil, 0x3000, 0xb635773f06ebbee7, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./cgroup/../file0/file0/file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./cgroup/../file0/file0/file0\x00') r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) inotify_init() write$cgroup_int(r4, &(0x7f0000000100)=0x1, 0x12) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x80000000000002) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="09bbbbbbbbbb0000000000000801907864010101ac1e0101030590780006001f45eb07ff00681cbda22f0e5c64010102ac14143600"/62], 0x0) 9m15.245489987s ago: executing program 4 (id=1352): r0 = socket(0x400000000010, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x2, @broadcast}}, 0x1e) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0xefe, 0x0, 0x0, 0x0, &(0x7f0000000180)) io_uring_enter(r2, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) timerfd_create(0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04300100c9"], 0x6) syz_open_pts(0xffffffffffffffff, 0x149300) ioctl$sock_bt_hci(r3, 0x400448e7, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000240)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0}) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x300, 0x1200, 0x0, 0x3) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x60, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xc}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0xc0}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 9m10.842803075s ago: executing program 6 (id=1356): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc641}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) write$tun(r1, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r2, 0x0, 0x2) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) setpgid(0x0, r6) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd}, 0x39) fchdir(r5) lstat(&(0x7f00000001c0)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x2, r0}) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0) 9m10.581519816s ago: executing program 4 (id=1358): prlimit64(0x0, 0xb, &(0x7f0000000100)={0x3, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x6}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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") r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000700), &(0x7f0000000740)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) request_key(0x0, &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000300)='^\x00', 0xfffffffffffffffb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x3, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) symlink(&(0x7f0000000100)='.\x02/file1\x00', &(0x7f0000000000)='./file0\x00') syz_mount_image$exfat(0x0, &(0x7f0000002000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x104000, 0x0, 0x1, 0x0, &(0x7f0000001fc0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) socket(0x10, 0x803, 0x0) 9m9.686002391s ago: executing program 6 (id=1359): socket$nl_generic(0x11, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrusage(0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000000000000850000007100000095"], &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0x1d) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000044) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000001040)='memory.pressure\x00', 0x2, 0x0) 9m6.195711789s ago: executing program 4 (id=1362): socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) unshare(0x48040100) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r4, &(0x7f00000000c0)='.\x00', 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f0000000280)={r4, r0, 0x1}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x4, 0x73}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') pread64(r5, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) 9m2.415673892s ago: executing program 6 (id=1363): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x122102, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) r3 = getegid() fstat(r1, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x800, 0x400, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000980)={{}, {0x1, 0x2}, [{}, {0x2, 0x4}, {0x2, 0x1}, {0x2, 0x3}, {0x2, 0x8}, {0x2, 0x6}, {}, {0x2, 0x3}, {0x2, 0x3}], {}, [{0x8, 0x2}, {0x8, 0x4, r3}, {0x8, 0x4, r4}, {0x8, 0x5, r5}], {0x10, 0x1}, {0x20, 0x1}}, 0x8c, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r6, &(0x7f00000000c0)='1\x00', 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r7, &(0x7f00000001c0)='1', 0x1) 8m57.342983495s ago: executing program 6 (id=1364): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) socket$kcm(0x2, 0x200000000000001, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x49, 0x2}, 0x50) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000001a00)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r6, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000240)={0x10, 0x1, r7}) 8m50.244833186s ago: executing program 35 (id=1362): socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) unshare(0x48040100) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r4, &(0x7f00000000c0)='.\x00', 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f0000000280)={r4, r0, 0x1}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x4, 0x73}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') pread64(r5, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) 8m41.912366149s ago: executing program 36 (id=1364): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) socket$kcm(0x2, 0x200000000000001, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x49, 0x2}, 0x50) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000001a00)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r6, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000240)={0x10, 0x1, r7}) 20.702521806s ago: executing program 2 (id=1831): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fffffff}, {0x101, 0xe7, 0x6, 0xfffffff8}]}) time(0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000140)=0x7, 0x4) sendmmsg$inet6(r0, 0x0, 0x0, 0x4048044) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) r5 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r7 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x4, r6, 0x0, 0x0}) ioctl$MEDIA_REQUEST_IOC_REINIT(r6, 0x7c81, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') writev(r4, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x1489a, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r4}}) 19.258029175s ago: executing program 2 (id=1835): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) 18.938177565s ago: executing program 2 (id=1836): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, r4) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x2) fchdir(r6) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xf00, 0x480, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0x8, 0xfffffff7}, 0xd0, 0x9}}) set_mempolicy(0x1, &(0x7f0000000080)=0x1, 0x8000) 13.578140177s ago: executing program 5 (id=1839): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f0000000000), 0xbc, 0x553, &(0x7f0000000180)="$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") execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 13.577401635s ago: executing program 2 (id=1840): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f0000000240)=ANY=[@ANYBLOB="747a3d5554432c756e695f786c6174653d312c646973636172642c757466383d302c756e695f786c6174653d312c726f6469722c757466383d312c00ee284a015f4d897833fb742704c70630c7e3804afc5fe645f66ca614e17a7c3e5fcafc620b6af31b1896c6c50b36c73b7ad41b37f80916dee79d4e30902beed2"], 0x1, 0x247, &(0x7f0000000840)="$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") ioctl$IOMMU_IOAS_UNMAP(0xffffffffffffffff, 0x3b86, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000180), 0x29, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x89) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x10, 0x0) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) ioctl$FITRIM(r1, 0xc0185879, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/disk', 0x28042, 0xb) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r3, 0x20000e) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f00000001c0)={0x5, [0xc539, 0x6], 0x2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2b, 0x1, 0x0) 13.168532566s ago: executing program 5 (id=1842): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 11.95431444s ago: executing program 2 (id=1843): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000010027bd7200fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0c040100000000001400030076657468315f746f5f626f6e640000001c001680180001"], 0x50}, 0x1, 0x0, 0x0, 0x4000840}, 0x60000090) 11.953333432s ago: executing program 7 (id=1844): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000004897}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = eventfd(0xf5e3) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0) preadv(r7, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/198, 0xc6}], 0x1, 0x7, 0x9) io_submit(0x0, 0x6, &(0x7f0000001fc0)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0xfeff, r3, &(0x7f00000004c0)="7d27e51e39eea13daf082e8757202d3cba192c24e1dae9a56c345210f82e4940d0e64a34804e9d361b59e8324f1811bd03f904d909286a8896d815b1669cd85a11e4b9fe0c03279c65793d3f9119963fee70b0", 0x53, 0x1, 0x0, 0x2}, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x8, 0x7, r2, &(0x7f0000000c40)="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", 0x1000, 0xe, 0x0, 0x7}, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x2, 0x7, r1, &(0x7f0000001c80)="0e782f928cfc8dbd9c945ec5c009a27b4e719a9c92169b4a557bcf458b27549c30729b425ac8e18482cf340413def482bc8b95cd4a5fc2e1ab232d630ec8dad39d63d82956a39d", 0x47, 0xa262, 0x0, 0x4, r4}, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x5, 0xfff, r2, &(0x7f0000001d40)="7c3a4b6079fd3e11854d7a27468543a76f92a3c9df291f70683d2486e4fae23321b1966c507b0e80f6270814e72e12393e1ca4143bf65fa91356", 0x3a, 0x8, 0x0, 0x2, r6}, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x7, 0x696e, r2, &(0x7f0000001dc0)="dcc96f3988694095ef812cb99c49b8f6bd873169c0fdbadd539b99f33a2776113145c07fa0bcf3f5b38a46158f4ea5cbd61611eab1d6b9bee189f3888eccab930529f75862171534d688915b8a4f6d27", 0x50, 0xffffffffffff8001}, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000001e80)="462a177d695674439c5d3f2c66e7e4cdb47416c274770e678fe8214c471f27ad3206b3fb5d56f05ca08dc0bdcdb71740279b39b30befe9666c30fa60141befda17e9f8645938311f87c4777a9f8878f358215863e173c501685ce16ba8a5aaf3930fab7a90393b93e5b9d65933e334ff2fd2a257f8b1225ab4e6d42f52aecfe00022463beb5c2c55b5c77c5faf6c607b343bc654bce0085a1b95a260f691f5fbff8580f4d0cde13dde42935a7f717705a69a90b5062753020f4d1f6e7d7b9953a85d4686", 0xc4, 0x4, 0x0, 0x2, r7}]) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r11}, &(0x7f0000000080), &(0x7f0000000240)=r8}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000000c0)=r12, 0x4) sendmsg$inet(r10, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000400), 0x2, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x3900}, [@RTA_DST={0x8, 0x1, @remote}]}, 0x24}}, 0x0) 11.937264309s ago: executing program 5 (id=1845): socket$inet6(0xa, 0x80803, 0x87) syz_emit_ethernet(0xaa, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000082b0020010000000000000000000000000002fe8000000000000000000000000000aa87"], 0x0) 9.597949343s ago: executing program 7 (id=1846): r0 = fsopen(&(0x7f00000001c0)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='addr\x00', &(0x7f0000000500)='127.0.0.1\x00', 0x0) 9.565343327s ago: executing program 5 (id=1847): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f00000001c0)={0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x0, 0x53, &(0x7f0000000100)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000200)=0x28) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x0, 0x53, 0x0, &(0x7f0000000200)) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x48, 0xa, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x1f90}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x48}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x3}}) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r9], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x24}}, 0x0) 9.308027087s ago: executing program 2 (id=1848): epoll_create1(0x0) epoll_create1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./myconfig/usb_gadget/g1/configs/c.1\x00', 0xdf) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0) symlinkat(&(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000640)='usbip-vudc.0', 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x100, 0x7, 0x2, 0x1000, 0xf, 0x5, 0x79, 0x3, 0x80008, 0x6, 0xffffffff, 0x1, 0x800008, 0x5, 0x100, 0x101, 0xfffffffb, 0x9, 0x7f, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b8, 0x0, 0xfffffff8]}) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000140)=ANY=[], 0x8) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000002c0)={0x0, @dev={0xac, 0x14, 0x14, 0x2c}, 0x4e20, 0x3, 'dh\x00', 0x4, 0x7, 0x2d}, 0x2c) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[], 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x400000, 0x5, 0x0, 0x32525942, 0xc, [{0x6, 0xfffffffe}, {}, {0x2, 0x8}, {0x1, 0xfffffffc}, {0x80}, {}, {0xffffc33a}, {0x200}], 0x3, 0xfe, 0x0, 0x0, 0x5}}) 8.879241946s ago: executing program 7 (id=1849): write$sndseq(0xffffffffffffffff, &(0x7f0000000600)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4, 0x5}, {}, @addr={0xec, 0x5b}}, {0x0, 0x0, 0x0, 0x0, @tick=0x1, {}, {0x5, 0x6}, @quote={{0x5, 0x5}}}, {0x0, 0x0, 0x0, 0x0, @tick=0xfe, {0x0, 0x8}, {0x2}, @addr={0x1, 0x6}}, {0x1, 0x1, 0x1, 0x0, @tick=0x7fffffff, {0x4, 0x1}, {0x7, 0x8}, @quote={{0x2, 0xd8}, 0x8}}], 0x70) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/kvm/kvm_hv_stimer_cleanup/enable\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x1, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000080)=0x2b, &(0x7f00000000c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r1, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r2, r2, 0x0, 0x9) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_io_uring_setup(0x1534, &(0x7f0000000180)={0x0, 0xa58c, 0x4, 0x2, 0x2e2, 0x0, r3}, &(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f0000000340)) syz_ublk_add_dev(r5, r6, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc04c560f, 0x0) write(r0, &(0x7f0000000600)='stacktrace', 0xa) 8.252043221s ago: executing program 5 (id=1850): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, r4) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x2) fchdir(r6) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xf00, 0x480, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0x8, 0xfffffff7}, 0xd0, 0x9}}) set_mempolicy(0x1, &(0x7f0000000080)=0x1, 0x8000) 6.095071119s ago: executing program 7 (id=1851): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fffffff}, {0x101, 0xe7, 0x6, 0xfffffff8}]}) time(0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000140)=0x7, 0x4) sendmmsg$inet6(r0, 0x0, 0x0, 0x4048044) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) r5 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r7 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x4, r6, 0x0, 0x0}) ioctl$MEDIA_REQUEST_IOC_REINIT(r6, 0x7c81, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') writev(r4, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x1489a, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r4}}) 2.848592591s ago: executing program 7 (id=1852): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="532e62b00bf2e1f1a5c9ed1283a7", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2.372600538s ago: executing program 7 (id=1853): r0 = socket(0x400000000010, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x2, @broadcast}}, 0x1e) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0xefe, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) timerfd_create(0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04300100c9"], 0x6) syz_open_pts(0xffffffffffffffff, 0x149300) ioctl$sock_bt_hci(r3, 0x400448e6, &(0x7f0000000080)) ioctl$sock_bt_hci(r3, 0x400448e7, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000240)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0}) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x300, 0x1200, 0x0, 0x3) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x60, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xc}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0xc0}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 0s ago: executing program 5 (id=1854): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000380)="d80000001e0081054e81f782db4cb904021d080006007c09e8fe08a10a000e800a00142603600e1208000fc00e000406a80016c008000e400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef409000000070000003a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703", 0xd2}], 0x1}, 0x240081d1) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r2, 0xff, 0x1, 0x0, &(0x7f00000012c0)) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) prlimit64(0x0, 0x4, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x9, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) socket$l2tp6(0xa, 0x2, 0x73) accept$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, &(0x7f00000002c0)=0x1c) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) gettid() ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000240)={&(0x7f000046a000/0x2000)=nil, &(0x7f000012a000/0x3000)=nil, 0x2000, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) kernel console output (not intermixed with test programs): XT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1275.928939][T14930] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1277.409917][ T5647] Bluetooth: hci5: command tx timeout [ 1277.430316][T11178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1277.444026][ T6553] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1278.444663][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1279.169264][T14244] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1279.180662][ T4940] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1279.196203][ T4940] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1279.207796][ T4940] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1279.222777][ T4940] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1279.232751][ T4940] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1279.240861][ T4940] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1279.277665][T14944] loop7: detected capacity change from 0 to 131072 [ 1279.290633][T14944] xfs: Deprecated parameter 'ikeep' [ 1279.295972][T14944] XFS: ikeep mount option is deprecated. [ 1279.421526][T14944] XFS (loop7): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 1279.430907][T14944] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop7": -EINTR [ 1279.431355][T14944] XFS (loop7): log mount failed [ 1279.494889][ T4940] Bluetooth: hci5: command tx timeout [ 1281.029372][T11178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1281.951382][ T4940] Bluetooth: hci6: command tx timeout [ 1281.959057][T14244] Bluetooth: hci5: command tx timeout [ 1282.137203][T14650] bridge0: port 2(bridge_slave_1) entered blocking state [ 1282.187607][T14650] bridge0: port 2(bridge_slave_1) entered disabled state [ 1282.248249][T14650] bridge_slave_1: entered allmulticast mode [ 1282.288466][T14650] bridge_slave_1: entered promiscuous mode [ 1284.296960][T14973] loop2: detected capacity change from 0 to 256 [ 1284.510368][ T4940] Bluetooth: hci6: command tx timeout [ 1284.515877][T14244] Bluetooth: hci5: command tx timeout [ 1284.556321][T14973] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xdbae3f17, utbl_chksum : 0xe619d30d) [ 1284.792215][ T6554] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1284.803440][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1284.824046][ T64] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1286.439766][T14982] loop7: detected capacity change from 0 to 128 [ 1287.309961][T14244] Bluetooth: hci6: command tx timeout [ 1287.343786][ T6553] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1289.323564][T14244] Bluetooth: hci6: command tx timeout [ 1290.717275][T15003] loop5: detected capacity change from 0 to 1024 [ 1290.743931][T14214] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1290.758311][ T6553] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1290.777974][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1293.296272][ T64] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1294.473733][T15023] loop2: detected capacity change from 0 to 4096 [ 1294.579842][T15023] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 1294.977980][T15035] loop5: detected capacity change from 0 to 1764 [ 1296.039084][ T3329] bridge_slave_1: left allmulticast mode [ 1296.132473][ T3329] bridge_slave_1: left promiscuous mode [ 1296.186442][ T3329] bridge0: port 2(bridge_slave_1) entered disabled state [ 1296.328624][ T6553] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1296.339887][T14214] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1296.356467][ T92] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1296.447756][ T3329] bridge_slave_0: left allmulticast mode [ 1296.676089][ T3329] bridge_slave_0: left promiscuous mode [ 1297.683761][ T3329] bridge0: port 1(bridge_slave_0) entered disabled state [ 1300.010463][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.019926][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.047330][T14214] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1300.858726][T15053] loop2: detected capacity change from 0 to 256 [ 1300.892498][T15053] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xdbae3f17, utbl_chksum : 0xe619d30d) [ 1301.345300][T15056] loop7: detected capacity change from 0 to 32768 [ 1301.449132][T15056] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1301.540189][T15056] XFS (loop7): Ending clean mount [ 1301.549404][T15056] XFS (loop7): Quotacheck needed: Please wait. [ 1301.567144][ T3329] bond0 (unregistering): Released all slaves [ 1302.792105][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1302.809544][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1303.700037][T14780] bridge0: port 1(bridge_slave_0) entered blocking state [ 1303.777305][T14780] bridge0: port 1(bridge_slave_0) entered disabled state [ 1303.821821][T14780] bridge_slave_0: entered allmulticast mode [ 1303.871452][T14780] bridge_slave_0: entered promiscuous mode [ 1303.891312][T15056] XFS (loop7): Quotacheck: Done. [ 1304.131161][ C0] Unknown status report in ack skb [ 1304.538746][ T31] audit: type=1800 audit(1785980989.679:1867): pid=15071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1520" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop7" ino=4429 res=0 errno=0 [ 1304.918759][T12888] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1306.545910][ T6343] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1308.699110][ T4940] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1308.774762][T14244] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1308.796089][ T4940] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1308.812045][ T4940] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1308.833647][ T4940] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1308.865875][T13900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1308.960506][ T4940] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1308.972975][ T4940] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1309.090545][ T6343] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1309.213878][ T5285] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1310.236106][T15098] loop2: detected capacity change from 0 to 512 [ 1310.321332][T15098] EXT4-fs: Ignoring removed bh option [ 1310.489597][T15106] ip6t_srh: unknown srh match flags FF3F [ 1310.507240][T15098] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.1528: corrupted in-inode xattr: e_value size too large [ 1311.083241][ T4940] Bluetooth: hci0: command tx timeout [ 1312.382547][ T3352] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1312.581548][T15098] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1312.583088][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1312.598780][ C0] EXT4-fs (loop2): initial error at time 1785980997: ext4_iget_extra_inode:5180: inode 15 [ 1312.608764][ C0] EXT4-fs (loop2): last error at time 1785980997: ext4_iget_extra_inode:5180: inode 15 [ 1312.876319][T15109] loop5: detected capacity change from 0 to 256 [ 1312.889980][T15098] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1528: couldn't read orphan inode 15 (err -117) [ 1313.942211][ T4940] Bluetooth: hci0: command tx timeout [ 1314.897144][T15114] loop7: detected capacity change from 0 to 256 [ 1314.953876][T14217] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1314.968892][T15098] loop2: lost filesystem error report for type 5 error -117 [ 1314.969251][T14214] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1315.084431][T15114] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xdbae3f17, utbl_chksum : 0xe619d30d) [ 1315.137682][T15098] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1315.485267][T14217] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1316.697551][ T4940] Bluetooth: hci0: command tx timeout [ 1316.721660][ T5630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1317.628909][T15120] loop5: detected capacity change from 0 to 1024 [ 1317.671760][T15120] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1318.567114][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1318.609030][ T3329] bridge_slave_0: left allmulticast mode [ 1318.671290][ T4940] Bluetooth: hci0: command tx timeout [ 1318.680259][ T3329] bridge_slave_0: left promiscuous mode [ 1318.733482][ T3329] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.816400][T15130] loop7: detected capacity change from 0 to 512 [ 1319.038649][T15130] ext2: Unknown parameter 'obj_type' [ 1320.029728][ T6553] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1320.923986][ T6554] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1321.525148][T15136] loop5: detected capacity change from 0 to 32768 [ 1321.551787][ C0] wlan1: beacon TX faster than countdown (channel/color switch) completion [ 1322.181373][ T92] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1323.262239][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1323.376611][T15136] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1323.445105][T15136] XFS (loop5): Ending clean mount [ 1323.452818][T15136] XFS (loop5): Quotacheck needed: Please wait. [ 1323.742942][ T3329] bond0 (unregistering): Released all slaves [ 1323.772473][T15136] XFS (loop5): Quotacheck: Done. [ 1324.326726][ T31] audit: type=1800 audit(1785981009.371:1868): pid=15148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1535" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=4429 res=0 errno=0 [ 1324.594033][ T5629] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1324.740137][ T3329] bond0 (unregistering): Released all slaves [ 1325.340591][T15154] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1538'. [ 1325.445117][T15155] loop2: detected capacity change from 0 to 128 [ 1326.323388][T15164] loop2: detected capacity change from 0 to 32768 [ 1326.409695][T15164] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1326.659785][T15164] XFS (loop2): Ending clean mount [ 1326.674166][T15164] XFS (loop2): Quotacheck needed: Please wait. [ 1326.974290][T15164] XFS (loop2): Quotacheck: Done. [ 1328.129840][ T6553] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1328.805222][ T3352] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1329.425528][ T5630] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1329.461458][T13900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1329.472754][ T3352] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1333.982516][T15195] loop7: detected capacity change from 0 to 256 [ 1334.091559][T15195] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xdbae3f17, utbl_chksum : 0xe619d30d) [ 1334.463723][T15188] xt_CT: No such helper "pptp" [ 1335.298684][T15207] loop2: detected capacity change from 0 to 32768 [ 1335.330300][ T6343] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1335.449910][T15207] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1335.458327][T15207] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1335.561905][T15207] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 1335.659449][T15211] loop5: detected capacity change from 0 to 2048 [ 1335.691773][T14217] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1335.708736][ T3329] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1335.720446][ T6343] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1335.763293][T13254] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1335.771708][T15211] EXT4-fs: Ignoring removed i_version option [ 1335.872022][T13254] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1335.973669][T15211] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1336.014034][ T5285] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1336.110246][T15211] ext4 filesystem being mounted at /374/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1336.364877][T14244] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1336.382564][T14244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1336.419089][T14244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1336.438280][T14244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1336.448107][T14244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1336.585409][T13254] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 658ms [ 1336.741801][T13254] gfs2: fsid=syz:syz.0: jid=0: Done [ 1336.834494][T15207] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1336.915262][T15207] gfs2: fsid=syz:syz.0: found 1 quota changes [ 1337.537188][ T31] audit: type=1800 audit(1785981021.633:1869): pid=15232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1540" name="file1" dev="loop2" ino=2341 res=0 errno=0 [ 1337.584414][T15211] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1338.047687][T15231] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 1338.269218][T15231] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 1338.351604][T15231] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:15231 [gfs2_quotad/syz] gfs2_quota_sync+0x353/0x450 [ 1338.602906][T15231] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 1339.645649][T14244] Bluetooth: hci1: command tx timeout [ 1340.506927][T15231] CPU: 0 UID: 0 PID: 15231 Comm: gfs2_quotad/syz Tainted: G L syzkaller #0 PREEMPT(full) [ 1340.506957][T15231] Tainted: [L]=SOFTLOCKUP [ 1340.506964][T15231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1340.506975][T15231] Call Trace: [ 1340.506983][T15231] [ 1340.506992][T15231] dump_stack_lvl+0xe8/0x150 [ 1340.507026][T15231] gfs2_withdraw+0xc3/0x1b0 [ 1340.507049][T15231] inode_go_instantiate+0xbc7/0x12c0 [ 1340.507070][T15231] ? preempt_schedule_thunk+0x16/0x40 [ 1340.507097][T15231] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1340.507121][T15231] ? __pfx_inode_go_instantiate+0x10/0x10 [ 1340.507144][T15231] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1340.507173][T15231] gfs2_instantiate+0x168/0x220 [ 1340.507198][T15231] gfs2_glock_wait+0x1d4/0x2a0 [ 1340.507223][T15231] do_sync+0x49c/0xbb0 [ 1340.507253][T15231] ? gfs2_quota_sync+0x353/0x450 [ 1340.507288][T15231] ? __pfx_do_sync+0x10/0x10 [ 1340.507313][T15231] ? do_raw_spin_lock+0x12b/0x2f0 [ 1340.507344][T15231] ? gfs2_quota_sync+0x353/0x450 [ 1340.507370][T15231] ? preempt_schedule_common+0x82/0xd0 [ 1340.507397][T15231] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1340.507419][T15231] ? preempt_schedule_thunk+0x16/0x40 [ 1340.507448][T15231] gfs2_quota_sync+0x353/0x450 [ 1340.507485][T15231] gfs2_quotad+0x2ab/0x6f0 [ 1340.507529][T15231] ? __pfx_gfs2_quotad+0x10/0x10 [ 1340.507556][T15231] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1340.507580][T15231] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1340.507602][T15231] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1340.507624][T15231] ? __kthread_parkme+0x71/0x1f0 [ 1340.507651][T15231] ? __kthread_parkme+0x196/0x1f0 [ 1340.507681][T15231] kthread+0x388/0x470 [ 1340.507709][T15231] ? __pfx_gfs2_quotad+0x10/0x10 [ 1340.507736][T15231] ? __pfx_kthread+0x10/0x10 [ 1340.507765][T15231] ret_from_fork+0x514/0xb70 [ 1340.507797][T15231] ? __pfx_ret_from_fork+0x10/0x10 [ 1340.507824][T15231] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1340.507846][T15231] ? __switch_to+0xc89/0x1420 [ 1340.507873][T15231] ? __pfx_kthread+0x10/0x10 [ 1340.507903][T15231] ret_from_fork_asm+0x1a/0x30 [ 1340.507935][T15231] [ 1340.942713][T15231] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 1341.267505][ T4940] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1341.411960][ T4940] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1341.533785][T15254] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1548'. [ 1341.547562][ T4940] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1341.563670][ T3352] bond0 (unregistering): Released all slaves [ 1341.764243][ T4940] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1341.860843][ T4940] Bluetooth: hci1: command tx timeout [ 1341.867445][ T4940] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1341.933867][ T6554] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1341.948854][T13900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1341.960648][T14217] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1341.976562][T15261] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1549'. [ 1342.175382][T15261] bridge_slave_1: left allmulticast mode [ 1342.181158][T15261] bridge_slave_1: left promiscuous mode [ 1342.186896][T15261] bridge0: port 2(bridge_slave_1) entered disabled state [ 1342.244448][T15261] bridge_slave_0: left allmulticast mode [ 1342.250095][T15261] bridge_slave_0: left promiscuous mode [ 1342.255891][T15261] bridge0: port 1(bridge_slave_0) entered disabled state [ 1342.320119][T15261] bond0: (slave bridge0): Releasing backup interface [ 1342.746720][T15083] bridge0: port 1(bridge_slave_0) entered blocking state [ 1342.789162][T15083] bridge0: port 1(bridge_slave_0) entered disabled state [ 1342.834281][T15083] bridge_slave_0: entered allmulticast mode [ 1342.848349][T15273] loop7: detected capacity change from 0 to 8192 [ 1342.877360][T15083] bridge_slave_0: entered promiscuous mode [ 1344.125293][ T5647] Bluetooth: hci1: command tx timeout [ 1344.179148][T15083] bridge0: port 2(bridge_slave_1) entered blocking state [ 1344.967265][ T5647] Bluetooth: hci5: command tx timeout [ 1345.068101][T15083] bridge0: port 2(bridge_slave_1) entered disabled state [ 1345.292351][T15083] bridge_slave_1: entered allmulticast mode [ 1345.427980][T15083] bridge_slave_1: entered promiscuous mode [ 1346.350135][ T5647] Bluetooth: hci1: command tx timeout [ 1346.534103][ T6343] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1346.696922][ T5630] gfs2: fsid=syz:syz.0: warning: assertion "gfs2_log_is_empty(sdp)" failed - function = gfs2_make_fs_ro, file = fs/gfs2/super.c, line = 566 [ 1347.217649][ T5647] Bluetooth: hci5: command tx timeout [ 1347.677441][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1347.689961][ T5630] CPU: 0 UID: 0 PID: 5630 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1347.689989][ T5630] Tainted: [L]=SOFTLOCKUP [ 1347.689996][ T5630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1347.690007][ T5630] Call Trace: [ 1347.690015][ T5630] [ 1347.690025][ T5630] dump_stack_lvl+0xe8/0x150 [ 1347.690059][ T5630] gfs2_assert_warn_i+0x18c/0x2c0 [ 1347.690088][ T5630] gfs2_make_fs_ro+0x30d/0x320 [ 1347.690116][ T5630] ? __pfx_gfs2_make_fs_ro+0x10/0x10 [ 1347.690141][ T5630] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1347.690166][ T5630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1347.690191][ T5630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1347.690212][ T5630] ? flush_work+0xd/0x30 [ 1347.690242][ T5630] gfs2_put_super+0x235/0x870 [ 1347.690272][ T5630] ? __pfx_gfs2_put_super+0x10/0x10 [ 1347.690297][ T5630] generic_shutdown_super+0x13d/0x2d0 [ 1347.690333][ T5630] kill_block_super+0x44/0x90 [ 1347.690354][ T5630] deactivate_locked_super+0xbc/0x130 [ 1347.690385][ T5630] cleanup_mnt+0x3d3/0x460 [ 1347.690408][ T5630] task_work_run+0x1d9/0x270 [ 1347.690430][ T5630] ? __pfx_task_work_run+0x10/0x10 [ 1347.690457][ T5630] exit_to_user_mode_loop+0x1fa/0x730 [ 1347.690483][ T5630] ? rcu_is_watching+0x15/0xb0 [ 1347.690503][ T5630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1347.690524][ T5630] do_syscall_64+0x353/0x580 [ 1347.690553][ T5630] ? trace_irq_disable+0x3b/0x140 [ 1347.690584][ T5630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1347.690604][ T5630] RIP: 0033:0x7fda6d99f317 [ 1347.690621][ T5630] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1347.690636][ T5630] RSP: 002b:00007fffe04a3b68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1347.690655][ T5630] RAX: 0000000000000000 RBX: 00007fda6da34474 RCX: 00007fda6d99f317 [ 1347.690668][ T5630] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffe04a3c20 [ 1347.690679][ T5630] RBP: 00007fffe04a3c20 R08: 00007fffe04a4c20 R09: 00000000ffffffff [ 1347.690693][ T5630] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffe04a4cb0 [ 1347.690705][ T5630] R13: 00007fda6da34474 R14: 00000000001464b1 R15: 00007fffe04a4cf0 [ 1347.690734][ T5630] [ 1348.961644][ T3329] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1349.822661][ T5647] Bluetooth: hci5: command tx timeout [ 1350.387915][ T3352] bond0 (unregistering): Released all slaves [ 1350.595254][T15083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1350.660931][ T5285] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1350.928455][T15083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1351.293859][T15083] team0: Port device team_slave_0 added [ 1351.326776][T15083] team0: Port device team_slave_1 added [ 1352.917821][T15083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1353.750275][T15083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1354.632586][T13900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1355.535119][T15083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1356.004111][ T6553] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1356.023445][ T92] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1356.240344][T15083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1356.307473][T15083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1356.413605][T15330] netlink: 'syz.2.1558': attribute type 1 has an invalid length. [ 1356.627756][T15083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1356.950863][T15343] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[12888] was attempted by ""[15343] [ 1357.539370][T15083] hsr_slave_0: entered promiscuous mode [ 1357.554021][T15352] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1561'. [ 1357.580695][T15083] hsr_slave_1: entered promiscuous mode [ 1359.686207][T15352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1561'. [ 1361.659708][ T6554] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1362.187849][ T6343] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1362.279544][ T3352] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1362.774276][ T92] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1364.126580][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1364.134099][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1365.479466][T15379] loop7: detected capacity change from 0 to 32768 [ 1365.882743][T15379] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1368.373325][ T31] audit: type=1800 audit(1785981049.860:1870): pid=15389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1566" name="file1" dev="loop7" ino=17059 res=0 errno=0 [ 1369.388548][ T3352] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1369.399781][T11178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1370.455844][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1370.613787][ T92] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1370.797057][T15393] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1567'. [ 1370.853427][T12888] ocfs2: Unmounting device (7,7) on (node local) [ 1371.111960][T15393] vlan3: entered allmulticast mode [ 1371.146027][T15393] dummy0: entered allmulticast mode [ 1374.200837][T15420] loop7: detected capacity change from 0 to 16 [ 1374.273402][T15420] erofs (device loop7): mounted with root inode @ nid 36. [ 1374.299164][T15422] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1571'. [ 1374.311480][ T5647] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1374.338485][ T5647] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1374.354514][ T5647] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1374.362544][ T5647] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1374.375061][ T5647] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1374.506233][T15422] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1571'. [ 1374.523503][T15222] bridge0: port 1(bridge_slave_0) entered blocking state [ 1374.596916][T15222] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.679298][T15222] bridge_slave_0: entered allmulticast mode [ 1374.761218][T15222] bridge_slave_0: entered promiscuous mode [ 1375.035927][T15222] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.085198][T15439] loop7: detected capacity change from 0 to 128 [ 1375.097161][T15222] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.133988][T15222] bridge_slave_1: entered allmulticast mode [ 1375.207113][T15222] bridge_slave_1: entered promiscuous mode [ 1375.366958][ T13] bridge_slave_1: left allmulticast mode [ 1375.387225][ T13] bridge_slave_1: left promiscuous mode [ 1375.426911][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.494518][ T13] bridge_slave_0: left allmulticast mode [ 1375.543524][ T13] bridge_slave_0: left promiscuous mode [ 1375.582120][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.155752][T15454] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5629] was attempted by ""[15454] [ 1376.168556][T15454] 9p: Bad value for 'rfdno' [ 1376.361134][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1376.385184][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1376.407759][ T13] bond0 (unregistering): Released all slaves [ 1376.627434][ T5647] Bluetooth: hci6: command tx timeout [ 1376.670482][ T6554] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1376.683607][T13900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1376.695062][ T92] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1376.713045][T11178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1376.796864][T15222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1378.861932][ T13] hsr_slave_0: left promiscuous mode [ 1378.867785][ T5647] Bluetooth: hci6: command tx timeout [ 1378.920776][ T13] hsr_slave_1: left promiscuous mode [ 1378.956225][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1379.014999][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1379.566776][T15474] netlink: 'syz.5.1579': attribute type 10 has an invalid length. [ 1379.736246][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1379.758008][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1379.920634][T15222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1379.985575][T15474] 8021q: adding VLAN 0 to HW filter on device team0 [ 1379.995095][T15474] bond0: (slave team0): Enslaving as an active interface with an up link [ 1381.712707][ T5647] Bluetooth: hci6: command tx timeout [ 1382.503167][T15496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1382.531259][ T6554] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1382.750385][T15500] loop2: detected capacity change from 0 to 512 [ 1382.815044][T15222] team0: Port device team_slave_0 added [ 1382.830179][T15500] EXT4-fs: Ignoring removed bh option [ 1382.852350][ T6554] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1382.863595][ T92] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1382.874837][T14227] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1382.943134][T15490] netlink: 'syz.7.1581': attribute type 15 has an invalid length. [ 1383.018906][T15500] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.1582: corrupted in-inode xattr: e_value size too large [ 1383.265664][T15500] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1383.266118][T15500] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1582: couldn't read orphan inode 15 (err -117) [ 1383.275374][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1383.275395][ C0] EXT4-fs (loop2): initial error at time 1785981063: ext4_iget_extra_inode:5180: inode 15 [ 1383.275426][ C0] EXT4-fs (loop2): last error at time 1785981063: ext4_iget_extra_inode:5180: inode 15 [ 1383.517178][T15222] team0: Port device team_slave_1 added [ 1383.875532][T15250] bridge0: port 1(bridge_slave_0) entered blocking state [ 1384.906782][ T5647] Bluetooth: hci6: command tx timeout [ 1384.915361][T15500] loop2: lost filesystem error report for type 5 error -117 [ 1384.926120][T15500] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1385.727790][T15250] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.797639][T15250] bridge_slave_0: entered allmulticast mode [ 1385.870983][T15250] bridge_slave_0: entered promiscuous mode [ 1386.162475][ T5630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1386.183833][T15250] bridge0: port 2(bridge_slave_1) entered blocking state [ 1386.237610][T15250] bridge0: port 2(bridge_slave_1) entered disabled state [ 1386.304783][T15250] bridge_slave_1: entered allmulticast mode [ 1386.384953][T15250] bridge_slave_1: entered promiscuous mode [ 1386.526370][T15222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1386.573525][T15222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1386.753812][T15222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1386.805141][T15222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1386.839565][T15222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1387.008035][T15222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1387.380262][T15250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1387.614362][T15250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1387.960189][T15538] loop2: detected capacity change from 0 to 32768 [ 1388.145411][T15539] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5629] was attempted by ""[15539] [ 1388.158047][T15539] 9p: Bad value for 'rfdno' [ 1388.257048][T15538] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1388.422433][ T3352] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1388.460064][T15538] XFS (loop2): Ending clean mount [ 1388.472693][T15538] XFS (loop2): Quotacheck needed: Please wait. [ 1388.487532][ T92] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1388.547081][T15222] hsr_slave_0: entered promiscuous mode [ 1388.777942][T15222] hsr_slave_1: entered promiscuous mode [ 1389.226844][ T6554] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1389.241541][ T92] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1389.310347][T15538] XFS (loop2): Quotacheck: Done. [ 1389.886489][ T31] audit: type=1800 audit(1785981069.901:1871): pid=15559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1588" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4429 res=0 errno=0 [ 1390.134897][ T5630] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1390.306029][T15250] team0: Port device team_slave_0 added [ 1390.379571][T15250] team0: Port device team_slave_1 added [ 1392.844099][ T5647] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1392.907777][T15250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1392.950478][T15250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1393.233301][T15250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1393.565127][T15577] loop2: detected capacity change from 0 to 32768 [ 1393.595945][T15577] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1591 (15577) [ 1393.623050][T15577] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1393.633601][T15577] BTRFS info (device loop2): using sha256 checksum algorithm [ 1393.707162][T15250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1393.767772][T15250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1393.887436][T15577] BTRFS info (device loop2): enabling ssd optimizations [ 1393.894399][T15577] BTRFS info (device loop2): turning on sync discard [ 1393.901151][T15577] BTRFS info (device loop2): enabling free space tree [ 1393.907941][T15577] BTRFS info (device loop2): use zlib compression, level 3 [ 1394.994098][T14217] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1395.005509][ T3329] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1395.028379][T15250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1396.068532][ T31] audit: type=1800 audit(1785981075.428:1872): pid=15600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1591" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 1396.107450][ T6343] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1397.079924][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1398.170895][T15595] loop7: detected capacity change from 0 to 1024 [ 1398.274483][T15595] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1398.854895][ T5630] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1398.869421][T15250] hsr_slave_0: entered promiscuous mode [ 1398.910716][T15250] hsr_slave_1: entered promiscuous mode [ 1398.945260][T15250] debugfs: 'hsr0' already exists in 'hsr' [ 1399.000128][T15250] Cannot create hsr debugfs directory [ 1399.344393][T12888] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1399.364743][T15615] Bluetooth: MGMT ver 1.23 [ 1400.240158][T15621] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[12888] was attempted by ""[15621] [ 1401.595591][T14244] Bluetooth: hci2: command 0x0406 tx timeout [ 1401.601660][ T5647] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1402.301153][ T3352] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1402.672079][T15632] input: syz1 as /devices/virtual/input/input14 [ 1403.319858][T15634] loop2: detected capacity change from 0 to 4096 [ 1403.421753][T15634] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 1403.550912][T14244] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1403.569462][T14244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1403.588588][T14244] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1403.604592][T14244] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1403.618378][T14244] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1403.875949][ T6553] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1403.894173][ T3352] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1403.938740][T15634] ntfs3(loop2): Failed to read $UpCase (-4). [ 1404.379122][ T5647] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1404.416217][T15424] bridge0: port 1(bridge_slave_0) entered blocking state [ 1404.426247][ T5647] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1404.444214][ T5647] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1404.470177][ T5647] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1404.487929][ T5647] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1404.607691][T15424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1404.713143][T15424] bridge_slave_0: entered allmulticast mode [ 1404.817252][T15424] bridge_slave_0: entered promiscuous mode [ 1404.926307][T15424] bridge0: port 2(bridge_slave_1) entered blocking state [ 1405.955116][T14244] Bluetooth: hci0: command tx timeout [ 1406.177958][T15424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1406.450148][T15424] bridge_slave_1: entered allmulticast mode [ 1407.463749][T14244] Bluetooth: hci7: command tx timeout [ 1407.484532][ T3352] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1408.328147][T14244] Bluetooth: hci0: command tx timeout [ 1408.349444][T15424] bridge_slave_1: entered promiscuous mode [ 1408.506570][ T3352] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1409.458690][T14214] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1409.601501][T11178] bridge_slave_1: left allmulticast mode [ 1409.676373][T11178] bridge_slave_1: left promiscuous mode [ 1409.711921][T14244] Bluetooth: hci7: command tx timeout [ 1409.745477][T11178] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.859305][T11178] bridge_slave_0: left allmulticast mode [ 1410.070708][ T6343] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1411.078310][T14244] Bluetooth: hci0: command tx timeout [ 1411.099992][T11178] bridge_slave_0: left promiscuous mode [ 1411.928144][T11178] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.116656][T14244] Bluetooth: hci7: command tx timeout [ 1413.980330][T14244] Bluetooth: hci0: command tx timeout [ 1414.087281][T11178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1414.120763][T14214] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1414.138228][T11178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1414.159877][T11178] bond0 (unregistering): Released all slaves [ 1414.192796][T15424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1414.210277][ T3352] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1414.256072][T15424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1414.491918][T14244] Bluetooth: hci7: command tx timeout [ 1414.592126][T11178] hsr_slave_0: left promiscuous mode [ 1414.692140][T11178] hsr_slave_1: left promiscuous mode [ 1414.903387][T11178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1415.944292][T14214] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1416.756206][T11178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1418.029208][ T6553] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1419.278977][T11178] team0 (unregistering): Port device team_slave_1 removed [ 1419.339244][T11178] team0 (unregistering): Port device team_slave_0 removed [ 1420.720324][T14227] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1420.741980][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1421.783039][T15721] batadv_slave_0: entered promiscuous mode [ 1421.789362][T15719] batadv_slave_0: left promiscuous mode [ 1421.919685][T15424] team0: Port device team_slave_0 added [ 1422.105178][T15424] team0: Port device team_slave_1 added [ 1424.507619][T14214] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1424.520741][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1425.284538][T15424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1425.354329][T15424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1426.163272][T15424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1426.283486][T15424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1426.441663][T15424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1426.824650][T15424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1427.903408][T13900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1427.915318][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1428.773052][T15756] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1620'. [ 1429.565046][T15424] hsr_slave_0: entered promiscuous mode [ 1429.608992][T15424] hsr_slave_1: entered promiscuous mode [ 1429.656498][T11178] bridge_slave_1: left allmulticast mode [ 1429.693210][T11178] bridge_slave_1: left promiscuous mode [ 1429.726737][T11178] bridge0: port 2(bridge_slave_1) entered disabled state [ 1429.770608][T11178] bridge_slave_0: left allmulticast mode [ 1429.807671][T11178] bridge_slave_0: left promiscuous mode [ 1429.844091][T11178] bridge0: port 1(bridge_slave_0) entered disabled state [ 1430.148920][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1430.165684][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1430.884247][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1431.209294][ T64] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1432.628606][T11178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1432.660066][T15782] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 1432.692774][T15782] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 1432.777689][T11178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1432.816999][T11178] bond0 (unregistering): Released all slaves [ 1433.243763][T11178] hsr_slave_0: left promiscuous mode [ 1433.289752][T11178] hsr_slave_1: left promiscuous mode [ 1433.324425][T11178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1433.367696][T11178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1435.348648][ T6554] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1435.360499][ T64] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1435.714890][T15796] dlm: no local IP address has been set [ 1435.738797][T15796] dlm: cannot start dlm midcomms -107 [ 1436.978094][T11178] team0 (unregistering): Port device team_slave_1 removed [ 1437.929941][T11178] team0 (unregistering): Port device team_slave_0 removed [ 1438.230576][T15793] tipc: Started in network mode [ 1438.235475][T15793] tipc: Node identity 4, cluster identity 4711 [ 1438.241807][T15793] tipc: Node number set to 4 [ 1438.466138][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1438.478700][T14227] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1438.871160][T15808] loop7: detected capacity change from 0 to 512 [ 1438.976348][T15808] EXT4-fs: Ignoring removed bh option [ 1439.047968][T15812] trusted_key: encrypted_key: key user:syz not found [ 1439.195040][T15808] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.1629: corrupted in-inode xattr: e_value size too large [ 1439.289193][ T187] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1439.424888][T15808] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1439.425333][T15808] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1629: couldn't read orphan inode 15 (err -117) [ 1439.434521][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1439.434540][ C0] EXT4-fs (loop7): initial error at time 1785981116: ext4_iget_extra_inode:5180: inode 15 [ 1439.434574][ C0] EXT4-fs (loop7): last error at time 1785981116: ext4_iget_extra_inode:5180: inode 15 [ 1439.576670][ T187] usb 3-1: Using ep0 maxpacket: 16 [ 1439.633091][ T187] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1439.732069][ T187] usb 3-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1439.783798][ T5647] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1439.810046][ T5647] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1439.821886][ T5647] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1439.835085][ T5647] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1439.847671][ T5647] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1439.968323][ T187] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1440.010001][T15808] loop7: lost filesystem error report for type 5 error -117 [ 1440.037487][T15808] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1440.078193][ T187] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1440.183929][ T187] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1440.254674][ T187] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1440.497896][ T187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.854291][ T187] usb 3-1: Product: syz [ 1440.887495][ T187] usb 3-1: Manufacturer: syz [ 1440.916426][ T187] usb 3-1: SerialNumber: syz [ 1440.971624][ T187] usb 3-1: config 0 descriptor?? [ 1440.993126][T14227] bridge_slave_1: left allmulticast mode [ 1441.005281][T15814] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1441.018287][T14227] bridge_slave_1: left promiscuous mode [ 1441.051667][T14227] bridge0: port 2(bridge_slave_1) entered disabled state [ 1441.084896][T14227] bridge_slave_0: left allmulticast mode [ 1441.103922][T14227] bridge_slave_0: left promiscuous mode [ 1441.250362][T13900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1441.264849][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1441.303895][T14227] bridge0: port 1(bridge_slave_0) entered disabled state [ 1441.328800][T15813] comedi comedi3: pcl812: I/O base address or length out of range [ 1441.384817][T15814] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1441.442931][ T187] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input15 [ 1441.711732][T15813] loop2: detected capacity change from 0 to 512 [ 1441.768447][T15813] EXT4-fs: Ignoring removed mblk_io_submit option [ 1441.861748][T15813] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ee029, mo2=0002] [ 1441.895408][T14227] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1441.933312][T15813] System zones: 1-12 [ 1441.995156][T15813] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #11: block 10: comm syz.2.1628: lblock 0 mapped to illegal pblock 10 (length 1) [ 1442.011906][T14227] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1442.106445][ T5647] Bluetooth: hci1: command tx timeout [ 1442.124148][T14227] bond0 (unregistering): Released all slaves [ 1442.142990][T15813] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1442.143715][T15813] EXT4-fs (loop2): Remounting filesystem read-only [ 1442.152934][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1442.152955][ C0] EXT4-fs (loop2): initial error at time 1785981118: ext4_map_blocks:791: inode 11: block 10 [ 1442.152992][ C0] EXT4-fs (loop2): last error at time 1785981118: ext4_map_blocks:791: inode 11: block 10 [ 1442.512210][T15813] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 1442.578005][T15813] EXT4-fs (loop2): 1 orphan inode deleted [ 1442.629407][T15813] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1442.677810][T14227] hsr_slave_0: left promiscuous mode [ 1442.688789][T14227] hsr_slave_1: left promiscuous mode [ 1442.709626][T12888] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1442.735377][T14227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1442.783013][T14227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1442.878845][T13252] usb 3-1: USB disconnect, device number 6 [ 1442.903411][ T5630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1444.221826][ T64] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1445.056650][ T5647] Bluetooth: hci1: command tx timeout [ 1445.069972][ T6343] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1445.478225][T15863] loop2: detected capacity change from 0 to 40427 [ 1445.520544][T15863] F2FS-fs (loop2): build fault injection rate: 174 [ 1445.527078][T15863] F2FS-fs (loop2): build fault injection type: 0x3bfe8c [ 1445.535370][T15863] F2FS-fs (loop2): invalid crc value [ 1445.595980][T15863] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1445.609822][T15863] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1445.727817][T15863] F2FS-fs (loop2): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0 [ 1445.743007][T15863] F2FS-fs (loop2): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8c1/0xdf0 [ 1445.755758][T15863] F2FS-fs (loop2): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0] [ 1445.779078][T15863] F2FS-fs (loop2): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0 [ 1445.798773][T15863] F2FS-fs (loop2): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0 [ 1445.817853][T15863] F2FS-fs (loop2): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0 [ 1445.836238][T15863] F2FS-fs (loop2): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0 [ 1445.854747][T15863] F2FS-fs (loop2): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0 [ 1445.873315][T15863] F2FS-fs (loop2): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0 [ 1445.891671][T15863] F2FS-fs (loop2): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0 [ 1445.911445][T15863] CPU: 0 UID: 0 PID: 15863 Comm: syz.2.1636 Tainted: G L syzkaller #0 PREEMPT(full) [ 1445.911474][T15863] Tainted: [L]=SOFTLOCKUP [ 1445.911482][T15863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1445.911493][T15863] Call Trace: [ 1445.911501][T15863] [ 1445.911510][T15863] dump_stack_lvl+0xe8/0x150 [ 1445.911543][T15863] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1445.911572][T15863] ? f2fs_map_blocks+0x3b60/0x46d0 [ 1445.911600][T15863] f2fs_balance_fs+0x349/0x870 [ 1445.911630][T15863] ? f2fs_map_blocks+0x3b60/0x46d0 [ 1445.911656][T15863] ? __pfx_f2fs_balance_fs+0x10/0x10 [ 1445.911681][T15863] ? rcu_is_watching+0x15/0xb0 [ 1445.911700][T15863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1445.911722][T15863] ? __up_read+0x29c/0x930 [ 1445.911754][T15863] ? __pfx___up_read+0x10/0x10 [ 1445.911776][T15863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1445.911798][T15863] ? trace_lock_elapsed_time_end+0xf1/0xbc0 [ 1445.911824][T15863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1445.911845][T15863] ? restore_priority+0x1af/0x450 [ 1445.911877][T15863] f2fs_map_blocks+0x3b60/0x46d0 [ 1445.911906][T15863] ? __lock_acquire+0x683/0x2cf0 [ 1445.911943][T15863] ? __kmalloc_noprof+0x1ad/0x720 [ 1445.911990][T15863] ? __pfx_f2fs_map_blocks+0x10/0x10 [ 1445.912018][T15863] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 1445.912045][T15863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1445.912066][T15863] ? lockdep_hardirqs_on+0x7a/0x110 [ 1445.912092][T15863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1445.912113][T15863] ? seqcount_lockdep_reader_access+0xea/0x100 [ 1445.912140][T15863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1445.912161][T15863] ? ktime_get_coarse_real_ts64_mg+0x1c5/0x1e0 [ 1445.912195][T15863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1445.912217][T15863] ? current_time+0x22f/0x380 [ 1445.912242][T15863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1445.912263][T15863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1445.912293][T15863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1445.912314][T15863] ? fault_in_iov_iter_readable+0x1d5/0x310 [ 1445.912346][T15863] f2fs_file_write_iter+0x17a8/0x28e0 [ 1445.912394][T15863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1445.912420][T15863] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 1445.912455][T15863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1445.912476][T15863] ? __asan_memset+0x22/0x50 [ 1445.912507][T15863] iter_file_splice_write+0xa31/0x1240 [ 1445.912559][T15863] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1445.912599][T15863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1445.912625][T15863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1445.912648][T15863] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1445.912679][T15863] direct_splice_actor+0x101/0x160 [ 1445.912711][T15863] splice_direct_to_actor+0x57b/0xcb0 [ 1445.912764][T15863] ? __pfx_direct_splice_actor+0x10/0x10 [ 1445.912793][T15863] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1445.912833][T15863] do_splice_direct+0x195/0x290 [ 1445.912865][T15863] ? __pfx_do_splice_direct+0x10/0x10 [ 1445.912896][T15863] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1445.912920][T15863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1445.912942][T15863] ? rw_verify_area+0x203/0x4c0 [ 1445.912960][T15863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1445.912986][T15863] do_sendfile+0x52e/0x7c0 [ 1445.913019][T15863] ? __pfx_do_sendfile+0x10/0x10 [ 1445.913050][T15863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1445.913071][T15863] ? __se_sys_futex+0x3a8/0x450 [ 1445.913095][T15863] __se_sys_sendfile64+0x144/0x1a0 [ 1445.913122][T15863] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1445.913145][T15863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1445.913173][T15863] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1445.913196][T15863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.913217][T15863] do_syscall_64+0x174/0x580 [ 1445.913242][T15863] ? trace_irq_disable+0x3b/0x140 [ 1445.913273][T15863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.913292][T15863] RIP: 0033:0x7fda6d99e0d9 [ 1445.913311][T15863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1445.913327][T15863] RSP: 002b:00007fda6bbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1445.913346][T15863] RAX: ffffffffffffffda RBX: 00007fda6dc25fa0 RCX: 00007fda6d99e0d9 [ 1445.913361][T15863] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 1445.913373][T15863] RBP: 00007fda6da35024 R08: 0000000000000000 R09: 0000000000000000 [ 1445.913385][T15863] R10: 000000000e3aa6ea R11: 0000000000000246 R12: 0000000000000000 [ 1445.913398][T15863] R13: 00007fda6dc26038 R14: 00007fda6dc25fa0 R15: 00007fffe04a48f8 [ 1445.913429][T15863] [ 1445.913437][T15863] F2FS-fs (loop2): Stopped filesystem due to reason: 1 [ 1446.468592][T14227] team0 (unregistering): Port device team_slave_1 removed [ 1446.533334][T14227] team0 (unregistering): Port device team_slave_0 removed [ 1447.245217][ T64] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1447.259807][T11178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1447.305682][ T5647] Bluetooth: hci1: command tx timeout [ 1447.503557][T15643] bridge0: port 1(bridge_slave_0) entered blocking state [ 1447.543285][T15643] bridge0: port 1(bridge_slave_0) entered disabled state [ 1447.591534][T15643] bridge_slave_0: entered allmulticast mode [ 1447.623503][T15643] bridge_slave_0: entered promiscuous mode [ 1447.655845][T15643] bridge0: port 2(bridge_slave_1) entered blocking state [ 1447.689409][T15643] bridge0: port 2(bridge_slave_1) entered disabled state [ 1447.726312][T15643] bridge_slave_1: entered allmulticast mode [ 1447.763094][T15643] bridge_slave_1: entered promiscuous mode [ 1448.215650][ T31] audit: type=1800 audit(1785981124.289:1873): pid=15878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1640" name="ipv4_address" dev="configfs" ino=48424 res=0 errno=0 [ 1448.395409][ T31] audit: type=1800 audit(1785981124.317:1874): pid=15878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1640" name="ipv4_port" dev="configfs" ino=48427 res=0 errno=0 [ 1448.567966][T15643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1448.610131][ T31] audit: type=1800 audit(1785981124.317:1875): pid=15878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1640" name="num" dev="configfs" ino=48428 res=0 errno=0 [ 1448.697413][T15643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1448.763133][T15657] bridge0: port 1(bridge_slave_0) entered blocking state [ 1448.813155][ T31] audit: type=1800 audit(1785981124.326:1876): pid=15878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1640" name="local" dev="configfs" ino=48429 res=0 errno=0 [ 1448.847418][T15657] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.901254][T15657] bridge_slave_0: entered allmulticast mode [ 1448.954363][T15878] block device autoloading is deprecated and will be removed. [ 1448.989385][T15657] bridge_slave_0: entered promiscuous mode [ 1448.999217][ T31] audit: type=1800 audit(1785981124.493:1877): pid=15882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1640" name="dev" dev="configfs" ino=48440 res=0 errno=0 [ 1449.075700][T15657] bridge0: port 2(bridge_slave_1) entered blocking state [ 1449.175819][T15657] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.242100][T15657] bridge_slave_1: entered allmulticast mode [ 1449.344501][T15657] bridge_slave_1: entered promiscuous mode [ 1449.557451][ T5647] Bluetooth: hci1: command tx timeout [ 1451.432910][T13900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1451.808647][T15643] team0: Port device team_slave_0 added [ 1451.870031][T15643] team0: Port device team_slave_1 added [ 1452.077520][T15657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1452.258918][T15657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1452.328222][T15643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1452.401481][T15643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1452.438361][T15905] loop7: detected capacity change from 0 to 4096 [ 1452.476128][T15905] nilfs2: Unknown parameter 'o Õi/|Ûæ‘i±‚!×I¡rder' [ 1452.609416][T15643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1452.702323][T15643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1452.761464][T15643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1452.801987][ T64] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1452.855344][ T6343] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1452.982164][T15643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1453.162756][T15918] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1453.178068][T15918] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1453.195052][T15918] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1453.213313][T15918] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1453.232101][T15918] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1453.387839][T15657] team0: Port device team_slave_0 added [ 1453.477277][T15657] team0: Port device team_slave_1 added [ 1457.747504][T15643] hsr_slave_0: entered promiscuous mode [ 1457.777195][T15643] hsr_slave_1: entered promiscuous mode [ 1457.812274][T15657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1457.839941][T15657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1457.881368][T14227] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1457.945472][T15657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1457.990063][T15657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1458.022800][T15657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1458.127931][T15657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1458.572446][T11178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1458.583540][T14227] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1459.189783][T15657] hsr_slave_0: entered promiscuous mode [ 1459.228992][T15657] hsr_slave_1: entered promiscuous mode [ 1459.270039][T15657] debugfs: 'hsr0' already exists in 'hsr' [ 1459.315395][T15657] Cannot create hsr debugfs directory [ 1459.681129][T15955] loop7: detected capacity change from 0 to 32768 [ 1459.831956][T15955] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1459.844245][T15955] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1459.868976][T15955] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 1459.877339][T15955] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 4 2076, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 466 [ 1459.893200][T15955] gfs2: fsid=syz:syz.0: G: s:SH n:2/81c f:aqonN t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 1459.902457][T15955] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:15955 [syz.7.1650] gfs2_lookup_meta+0xaf/0x180 [ 1459.913136][T15955] gfs2: fsid=syz:syz.0: I: n:4/2076 t:4 f:0x00 d:0x00000201 s:7696581398296 p:0 [ 1459.922283][T15955] CPU: 0 UID: 0 PID: 15955 Comm: syz.7.1650 Tainted: G L syzkaller #0 PREEMPT(full) [ 1459.922310][T15955] Tainted: [L]=SOFTLOCKUP [ 1459.922318][T15955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1459.922330][T15955] Call Trace: [ 1459.922338][T15955] [ 1459.922346][T15955] dump_stack_lvl+0xe8/0x150 [ 1459.922380][T15955] gfs2_withdraw+0xc3/0x1b0 [ 1459.922403][T15955] inode_go_instantiate+0xbc7/0x12c0 [ 1459.922433][T15955] ? __pfx_inode_go_instantiate+0x10/0x10 [ 1459.922452][T15955] ? do_raw_spin_unlock+0xf5/0x210 [ 1459.922478][T15955] ? __pfx_wake_bit_function+0x10/0x10 [ 1459.922506][T15955] gfs2_instantiate+0x168/0x220 [ 1459.922530][T15955] gfs2_glock_wait+0x1d4/0x2a0 [ 1459.922556][T15955] gfs2_lookupi+0x3dd/0x640 [ 1459.922585][T15955] ? __pfx_gfs2_lookupi+0x10/0x10 [ 1459.922611][T15955] ? gfs2_lookup_meta+0xaf/0x180 [ 1459.922635][T15955] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1459.922657][T15955] ? sprintf+0xe7/0x140 [ 1459.922681][T15955] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1459.922703][T15955] ? crc32_le+0x250/0x2c0 [ 1459.922735][T15955] gfs2_lookup_meta+0xaf/0x180 [ 1459.922764][T15955] ? __pfx_gfs2_lookup_meta+0x10/0x10 [ 1459.922788][T15955] ? init_journal+0x127b/0x2330 [ 1459.922808][T15955] ? init_journal+0x127b/0x2330 [ 1459.922836][T15955] init_journal+0x12d4/0x2330 [ 1459.922867][T15955] ? init_inodes+0xdb/0x320 [ 1459.922893][T15955] ? __pfx_init_journal+0x10/0x10 [ 1459.922913][T15955] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1459.922948][T15955] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1459.922970][T15955] ? snprintf+0xe8/0x140 [ 1459.922993][T15955] ? init_inodes+0xdb/0x320 [ 1459.923014][T15955] ? __pfx_snprintf+0x10/0x10 [ 1459.923035][T15955] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1459.923057][T15955] ? gfs2_glock_nq_num+0x13d/0x170 [ 1459.923085][T15955] init_inodes+0xdb/0x320 [ 1459.923108][T15955] gfs2_fill_super+0x1942/0x20b0 [ 1459.923141][T15955] ? __pfx_gfs2_fill_super+0x10/0x10 [ 1459.923161][T15955] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1459.923187][T15955] ? init_locking+0xb8/0x210 [ 1459.923206][T15955] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1459.923228][T15955] ? sb_set_blocksize+0x155/0x240 [ 1459.923259][T15955] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1459.923281][T15955] ? setup_bdev_super+0x4c1/0x5b0 [ 1459.923305][T15955] get_tree_bdev_flags+0x430/0x4f0 [ 1459.923327][T15955] ? __pfx_gfs2_fill_super+0x10/0x10 [ 1459.923348][T15955] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1459.923371][T15955] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1459.923400][T15955] gfs2_get_tree+0x51/0x1e0 [ 1459.923425][T15955] vfs_get_tree+0x92/0x2a0 [ 1459.923447][T15955] do_new_mount+0x319/0xdc0 [ 1459.923473][T15955] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1459.923500][T15955] ? __pfx_do_new_mount+0x10/0x10 [ 1459.923528][T15955] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1459.923550][T15955] ? ns_capable+0x89/0xe0 [ 1459.923575][T15955] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1459.923597][T15955] ? path_mount+0x647/0x1040 [ 1459.923626][T15955] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1459.923648][T15955] ? user_path_at+0xd4/0x160 [ 1459.923680][T15955] __se_sys_mount+0x31d/0x420 [ 1459.923713][T15955] ? __pfx___se_sys_mount+0x10/0x10 [ 1459.923739][T15955] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1459.923772][T15955] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1459.923794][T15955] ? __x64_sys_mount+0x20/0xc0 [ 1459.923821][T15955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1459.923843][T15955] do_syscall_64+0x174/0x580 [ 1459.923867][T15955] ? trace_irq_disable+0x3b/0x140 [ 1459.923901][T15955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1459.923922][T15955] RIP: 0033:0x7fc46639f34a [ 1459.923941][T15955] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1459.923958][T15955] RSP: 002b:00007fc467247e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1459.923977][T15955] RAX: ffffffffffffffda RBX: 00007fc467247ee0 RCX: 00007fc46639f34a [ 1459.923990][T15955] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007fc467247ea0 [ 1459.924004][T15955] RBP: 00002000000124c0 R08: 00007fc467247ee0 R09: 0000000000000000 [ 1459.924016][T15955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 1459.924028][T15955] R13: 00007fc467247ea0 R14: 000000000001265b R15: 0000200000000180 [ 1459.924059][T15955] [ 1460.344879][T15955] gfs2: fsid=syz:syz.0: can't find local "sc" file#0: -5 [ 1460.682297][T15955] loop7: detected capacity change from 0 to 512 [ 1460.842072][ T31] audit: type=1800 audit(1785981135.811:1878): pid=15955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1650" name="file1" dev="loop7" ino=1048744 res=0 errno=0 [ 1464.121889][ T6343] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1464.973851][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1464.997080][T11178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1465.008611][ T3306] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1469.467007][T16000] loop2: detected capacity change from 0 to 512 [ 1469.474092][T16000] EXT4-fs: Ignoring removed oldalloc option [ 1469.633888][T16000] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1469.671432][ T6554] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1469.722378][T16000] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1656: invalid indirect mapped block 83886080 (level 1) [ 1469.736501][T16000] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1469.741727][T16000] EXT4-fs (loop2): Remounting filesystem read-only [ 1469.751068][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1469.751085][ C0] EXT4-fs (loop2): initial error at time 1785981144: ext4_free_branches:1023: inode 16 [ 1469.751115][ C0] EXT4-fs (loop2): last error at time 1785981144: ext4_free_branches:1023: inode 16 [ 1469.786729][T16000] EXT4-fs (loop2): 1 orphan inode deleted [ 1469.792501][T16000] EXT4-fs (loop2): 1 truncate cleaned up [ 1469.799663][T16000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1470.092175][ T5630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1470.574682][T14244] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1470.589661][T14244] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1470.601048][T14244] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1470.609761][T14244] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1470.621397][T14244] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1471.060970][T14214] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1471.072076][ T6343] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1471.091125][T11178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1472.085218][T15823] bridge0: port 1(bridge_slave_0) entered blocking state [ 1473.122771][T14244] Bluetooth: hci5: command tx timeout [ 1473.593036][T16024] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1659'. [ 1473.624863][T15823] bridge0: port 1(bridge_slave_0) entered disabled state [ 1473.638739][T16016] loop2: detected capacity change from 0 to 2048 [ 1473.673530][T16025] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1659'. [ 1473.712532][T15823] bridge_slave_0: entered allmulticast mode [ 1473.821933][T16016] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1473.865792][T15823] bridge_slave_0: entered promiscuous mode [ 1474.041725][T15823] bridge0: port 2(bridge_slave_1) entered blocking state [ 1475.380318][T14244] Bluetooth: hci5: command tx timeout [ 1475.888668][T15823] bridge0: port 2(bridge_slave_1) entered disabled state [ 1475.888865][T15823] bridge_slave_1: entered allmulticast mode [ 1475.900273][ T64] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1475.910073][T15823] bridge_slave_1: entered promiscuous mode [ 1477.057595][ T5647] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1477.063560][ T5647] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1477.067195][ T5647] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1477.070644][ T5647] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1477.073711][ T5647] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1477.077689][T15823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1477.135143][T15823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1477.633429][ T5647] Bluetooth: hci5: command tx timeout [ 1478.004348][T15823] team0: Port device team_slave_0 added [ 1478.006770][T15823] team0: Port device team_slave_1 added [ 1478.206824][T16046] bridge_slave_0: left allmulticast mode [ 1478.206848][T16046] bridge_slave_0: left promiscuous mode [ 1478.211219][T16046] bridge0: port 1(bridge_slave_0) entered disabled state [ 1478.263584][T16046] bridge_slave_1: left allmulticast mode [ 1478.263608][T16046] bridge_slave_1: left promiscuous mode [ 1478.263760][T16046] bridge0: port 2(bridge_slave_1) entered disabled state [ 1478.308216][T16046] bond0: (slave 30): Releasing backup interface [ 1478.345567][T16046] bond0: (slave bond_slave_1): Releasing backup interface [ 1478.388751][T16046] team0: Port device team_slave_0 removed [ 1478.412098][T16046] team0: Port device team_slave_1 removed [ 1478.426016][T16046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1478.426036][T16046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1478.427295][T16046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1478.427312][T16046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1478.439011][T16046] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1478.463209][T16051] team0: Port device xfrm0 added [ 1478.562252][T16053] tipc: Enabled bearer , priority 0 [ 1478.564235][T14214] bridge_slave_1: left allmulticast mode [ 1478.564258][T14214] bridge_slave_1: left promiscuous mode [ 1478.564679][T14214] bridge0: port 2(bridge_slave_1) entered disabled state [ 1478.569308][T14214] bridge_slave_0: left allmulticast mode [ 1478.569327][T14214] bridge_slave_0: left promiscuous mode [ 1478.569481][T14214] bridge0: port 1(bridge_slave_0) entered disabled state [ 1478.838960][T14214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1478.844164][T14214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1478.861133][T14214] bond0 (unregistering): Released all slaves [ 1479.025026][T15823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1479.025044][T15823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1479.025068][T15823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1479.227075][T15823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1479.227093][T15823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1479.227118][T15823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1479.310688][ T5647] Bluetooth: hci3: unexpected event for opcode 0x042d [ 1479.344956][T14214] hsr_slave_0: left promiscuous mode [ 1479.354420][T14214] hsr_slave_1: left promiscuous mode [ 1479.355096][T14214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1479.363299][T14214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1479.443943][ T64] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1479.444385][ T64] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1479.452875][ T5647] Bluetooth: hci6: command tx timeout [ 1479.886056][ T5647] Bluetooth: hci5: command tx timeout [ 1480.286007][T16072] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1481.403453][ T6554] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1481.488707][ T6554] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1481.716687][ T5647] Bluetooth: hci6: command tx timeout [ 1482.192481][T16080] loop2: detected capacity change from 0 to 32768 [ 1482.251142][T14214] team0 (unregistering): Port device team_slave_1 removed [ 1482.268073][T16080] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1482.323136][T16080] XFS (loop2): Ending clean mount [ 1482.325907][T14214] team0 (unregistering): Port device team_slave_0 removed [ 1482.335747][T16080] XFS (loop2): Quotacheck needed: Please wait. [ 1482.337997][T16088] 9p: Bad value for 'rfdno' [ 1482.494107][T16080] XFS (loop2): Quotacheck: Done. [ 1483.066835][ T31] audit: type=1800 audit(1785981156.444:1879): pid=16091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1668" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4430 res=0 errno=0 [ 1483.713982][T15823] hsr_slave_0: entered promiscuous mode [ 1483.720106][T15823] hsr_slave_1: entered promiscuous mode [ 1483.965315][ T5647] Bluetooth: hci6: command tx timeout [ 1483.998790][ T5630] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1484.489879][T14214] bridge_slave_1: left allmulticast mode [ 1484.520945][T14214] bridge_slave_1: left promiscuous mode [ 1484.542945][T14214] bridge0: port 2(bridge_slave_1) entered disabled state [ 1484.604648][T14214] bridge_slave_0: left allmulticast mode [ 1484.636479][T14214] bridge_slave_0: left promiscuous mode [ 1484.668939][T14214] bridge0: port 1(bridge_slave_0) entered disabled state [ 1484.772075][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1485.132474][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1485.145774][T14214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1485.175173][ T10] usb 8-1: config 0 has an invalid interface number: 42 but max is 0 [ 1485.471580][T16115] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5630] was attempted by ""[16115] [ 1485.508018][ T10] usb 8-1: config 0 has no interface number 0 [ 1485.514439][T14214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1485.538497][ T10] usb 8-1: config 0 interface 42 has no altsetting 0 [ 1485.558529][T14214] bond0 (unregistering): Released all slaves [ 1485.569905][ T10] usb 8-1: New USB device found, idVendor=0923, idProduct=010f, bcdDevice=b4.a9 [ 1485.585464][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.603760][ T10] usb 8-1: Product: syz [ 1485.609711][ T3306] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1485.622047][T14227] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1485.669173][ T10] usb 8-1: Manufacturer: syz [ 1485.700005][ T10] usb 8-1: SerialNumber: syz [ 1485.742671][ T10] usb 8-1: config 0 descriptor?? [ 1486.071492][T14214] hsr_slave_0: left promiscuous mode [ 1486.084568][ T10] gspca_main: tv8532-2.14.0 probing 0923:010f [ 1486.100735][T14214] hsr_slave_1: left promiscuous mode [ 1486.123173][T14214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1486.152826][T14214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1486.211877][ T5647] Bluetooth: hci6: command tx timeout [ 1486.353927][ T10] usb 8-1: USB disconnect, device number 4 [ 1486.906741][T11178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1486.988296][ T5647] Bluetooth: hci4: unexpected event 0x03 length: 13 > 11 [ 1487.076969][T14214] team0 (unregistering): Port device team_slave_1 removed [ 1487.153652][T14214] team0 (unregistering): Port device team_slave_0 removed [ 1488.550105][ T6554] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1492.115208][T13900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1492.145530][T14227] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1492.936731][T16144] loop7: detected capacity change from 0 to 512 [ 1492.943821][T16144] EXT4-fs: Ignoring removed oldalloc option [ 1492.972839][T16144] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1493.006012][T16144] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.1686: invalid indirect mapped block 83886080 (level 1) [ 1493.020074][T16144] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1493.021325][T16144] EXT4-fs (loop7): Remounting filesystem read-only [ 1493.030554][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1493.030578][ C0] EXT4-fs (loop7): initial error at time 1785981165: ext4_free_branches:1023: inode 16 [ 1493.030608][ C0] EXT4-fs (loop7): last error at time 1785981165: ext4_free_branches:1023: inode 16 [ 1493.064978][T16144] EXT4-fs (loop7): 1 orphan inode deleted [ 1493.070847][T16144] EXT4-fs (loop7): 1 truncate cleaned up [ 1493.078026][T16144] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1493.354314][T12888] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1495.556413][T11178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1495.936876][T16157] loop7: detected capacity change from 0 to 32768 [ 1496.078922][T16157] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1496.187485][T16157] XFS (loop7): Ending clean mount [ 1496.196150][T16157] XFS (loop7): Quotacheck needed: Please wait. [ 1496.487513][T16157] XFS (loop7): Quotacheck: Done. [ 1496.702852][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1496.716964][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1497.073672][ T31] audit: type=1800 audit(1785981169.388:1880): pid=16177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1688" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop7" ino=4429 res=0 errno=0 [ 1497.468001][T16176] loop2: detected capacity change from 0 to 512 [ 1497.527790][T16176] EXT4-fs: Ignoring removed bh option [ 1497.642301][T16176] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.1693: corrupted in-inode xattr: e_value size too large [ 1497.745315][T16176] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1497.747692][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1497.763665][ C0] EXT4-fs (loop2): initial error at time 1785981170: ext4_iget_extra_inode:5180: inode 15 [ 1497.773616][ C0] EXT4-fs (loop2): last error at time 1785981170: ext4_iget_extra_inode:5180: inode 15 [ 1497.788113][T16176] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1693: couldn't read orphan inode 15 (err -117) [ 1497.847591][T16176] loop2: lost filesystem error report for type 5 error -117 [ 1497.849547][T16176] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1498.778324][ T3306] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1498.814530][ T5630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1498.964130][T16189] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1499.108500][T14214] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1499.454968][T15823] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1499.471782][T14214] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1499.594082][T15823] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1499.711073][T15823] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1499.925816][T15823] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1500.996238][T15823] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1501.182246][T16202] overlayfs: failed to clone upperpath [ 1503.093983][ T6553] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1504.053415][T15823] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1504.342523][T15823] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1504.415283][T15823] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1504.671101][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1504.781175][T12888] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1504.922437][T16012] bridge0: port 1(bridge_slave_0) entered blocking state [ 1504.968291][T16012] bridge0: port 1(bridge_slave_0) entered disabled state [ 1505.011336][T16012] bridge_slave_0: entered allmulticast mode [ 1505.022350][T14217] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1505.107362][T16012] bridge_slave_0: entered promiscuous mode [ 1505.248799][T16041] bridge0: port 1(bridge_slave_0) entered blocking state [ 1505.316180][T16041] bridge0: port 1(bridge_slave_0) entered disabled state [ 1505.382949][T16041] bridge_slave_0: entered allmulticast mode [ 1505.456760][T16041] bridge_slave_0: entered promiscuous mode [ 1505.517303][T16012] bridge0: port 2(bridge_slave_1) entered blocking state [ 1505.744527][ T6553] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1505.756891][T16012] bridge0: port 2(bridge_slave_1) entered disabled state [ 1506.832229][T16012] bridge_slave_1: entered allmulticast mode [ 1506.901224][T16012] bridge_slave_1: entered promiscuous mode [ 1506.948576][T16041] bridge0: port 2(bridge_slave_1) entered blocking state [ 1507.030896][T14244] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1507.044950][T14244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1507.056510][T16041] bridge0: port 2(bridge_slave_1) entered disabled state [ 1507.070074][T14244] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1507.080779][T14244] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1507.088848][T14244] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1507.172368][T16041] bridge_slave_1: entered allmulticast mode [ 1509.291309][T16041] bridge_slave_1: entered promiscuous mode [ 1509.349854][T14244] Bluetooth: hci0: command tx timeout [ 1510.196719][ T6554] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1510.256442][T16242] loop7: detected capacity change from 0 to 1024 [ 1510.562895][ T6554] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1511.013876][T16248] loop7: detected capacity change from 0 to 1024 [ 1511.057853][T16249] input: syz1 as /devices/virtual/input/input18 [ 1511.077098][T16248] EXT4-fs: Ignoring removed orlov option [ 1511.339760][ T6343] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1511.368554][T16248] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1512.388184][T14244] Bluetooth: hci0: command tx timeout [ 1513.239862][ T3306] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1513.261233][T16041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1513.543559][T16012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1514.635116][T14244] Bluetooth: hci0: command tx timeout [ 1514.643528][T16012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1515.432362][T16260] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 1515.775811][T16041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1516.038570][T14244] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1516.095459][T12888] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1517.618119][T14244] Bluetooth: hci0: command tx timeout [ 1517.635198][ T6343] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1517.649345][T14214] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1518.282838][ T5647] Bluetooth: hci3: unexpected cc 0x042f length: 1 < 7 [ 1518.289925][ T5647] Bluetooth: hci3: unexpected event for opcode 0x042f [ 1519.532089][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1519.585711][ T3306] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1521.901546][T16041] team0: Port device team_slave_0 added [ 1522.079442][T16041] team0: Port device team_slave_1 added [ 1522.098695][ T5647] Bluetooth: hci4: unexpected event for opcode 0x0c38 [ 1522.211116][T16012] team0: Port device team_slave_0 added [ 1524.413703][ T6553] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1524.457339][ T6554] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1524.550386][T16012] team0: Port device team_slave_1 added [ 1525.847891][T14214] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1525.860704][T13900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1526.458395][T16041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1526.511243][T16041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1526.638554][T16308] IPv6: addrconf: prefix option has invalid lifetime [ 1526.670231][T16041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1527.123399][T16012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1527.155768][T16012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1528.133465][T16318] loop2: detected capacity change from 0 to 2048 [ 1528.249501][T16323] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1528.305468][T16012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1528.373425][T16041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1528.876073][T16041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1529.973613][T14217] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1530.565895][T16329] netlink: 4548 bytes leftover after parsing attributes in process `syz.2.1727'. [ 1530.710215][T14227] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1532.083142][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1532.637862][T16041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1532.855673][ T64] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1533.697705][T16012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1533.728532][T16012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1533.815614][T16012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1534.064143][T16041] hsr_slave_0: entered promiscuous mode [ 1534.080601][T16041] hsr_slave_1: entered promiscuous mode [ 1534.098815][T16041] debugfs: 'hsr0' already exists in 'hsr' [ 1534.108110][T16041] Cannot create hsr debugfs directory [ 1536.912575][ T3329] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1537.077723][T14244] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1537.090726][T14244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1537.100685][T14244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1537.111141][T14244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1537.119266][T14244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1537.397299][ T13] bridge_slave_1: left allmulticast mode [ 1537.438838][ T13] bridge_slave_1: left promiscuous mode [ 1537.460364][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1537.543645][ T13] bridge_slave_0: left allmulticast mode [ 1537.600438][ T3329] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1537.624766][ T13] bridge_slave_0: left promiscuous mode [ 1537.650476][T14244] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 1537.691285][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1538.343465][ T5647] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1538.355965][ T5647] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1538.368318][ T5647] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1538.385503][ T5647] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1538.397440][ T5647] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1538.560270][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1539.124782][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1539.161545][T14217] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1539.243562][ T13] bond0 (unregistering): Released all slaves [ 1539.334091][T14244] Bluetooth: hci1: command tx timeout [ 1539.930952][ T13] hsr_slave_0: left promiscuous mode [ 1540.008908][ T13] hsr_slave_1: left promiscuous mode [ 1540.060494][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1540.359200][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1541.384631][T14244] Bluetooth: hci5: command tx timeout [ 1542.142966][T14244] Bluetooth: hci1: command tx timeout [ 1542.454195][ T3306] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1543.007534][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1543.110255][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1543.144973][ T6343] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1544.492548][T14244] Bluetooth: hci5: command tx timeout [ 1544.500490][ T5647] Bluetooth: hci1: command tx timeout [ 1544.540768][ T3352] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1545.366869][T14214] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1545.597413][ T5285] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1546.105291][ T5647] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 1546.211585][T15338] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1546.360056][ T13] bridge_slave_1: left allmulticast mode [ 1546.400511][ T13] bridge_slave_1: left promiscuous mode [ 1546.456739][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1546.465399][T15338] usb 8-1: Using ep0 maxpacket: 32 [ 1546.514657][T15338] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1546.546830][ T13] bridge_slave_0: left allmulticast mode [ 1546.745246][ T5647] Bluetooth: hci1: command tx timeout [ 1546.750699][T14244] Bluetooth: hci5: command tx timeout [ 1546.767754][T15338] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1547.095796][ T13] bridge_slave_0: left promiscuous mode [ 1547.131337][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1547.142873][T15338] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1547.231087][T15338] usb 8-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 1547.256425][ T13] bridge_slave_1: left allmulticast mode [ 1547.285687][ T13] bridge_slave_1: left promiscuous mode [ 1547.291407][T15338] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.312393][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1547.332651][T15338] usb 8-1: Product: syz [ 1547.461719][T15338] usb 8-1: Manufacturer: syz [ 1547.473781][ T13] bridge_slave_0: left allmulticast mode [ 1547.490046][T15338] usb 8-1: SerialNumber: syz [ 1547.506088][ T13] bridge_slave_0: left promiscuous mode [ 1547.538653][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1547.853159][T15338] usb 8-1: 1:1 : no or invalid class specific endpoint descriptor [ 1547.886732][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1547.898550][T15338] usb 8-1: 1:1 : format type 0 is detected, processed as PCM [ 1547.930193][T15338] usb 8-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 1547.958899][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1547.987650][T16412] loop2: detected capacity change from 0 to 40427 [ 1548.011656][ T13] bond0 (unregistering): Released all slaves [ 1548.027907][T16412] F2FS-fs (loop2): Image doesn't support compression [ 1548.066039][T16412] F2FS-fs (loop2): build fault injection rate: 7 [ 1548.104144][T16412] F2FS-fs (loop2): build fault injection type: 0x1da6 [ 1548.153201][ C0] f2fs_printk: 1 callbacks suppressed [ 1548.153217][ C0] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x57b/0xe50 [ 1548.205302][T16412] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of build_curseg+0x105c/0x30c0 [ 1548.280588][ C0] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x57b/0xe50 [ 1548.303621][T16412] F2FS-fs (loop2): inject kvmalloc in f2fs_kvmalloc of f2fs_build_segment_manager+0x3209/0x4a30 [ 1548.375318][T16412] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-12) [ 1548.598709][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1548.634077][T16449] loop7: detected capacity change from 0 to 128 [ 1548.685018][T16449] FAT-fs (loop7): bogus logical sector size 0 [ 1548.698542][T14214] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1548.712916][ T3329] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1548.735504][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1548.761771][T15338] usb 8-1: USB disconnect, device number 5 [ 1548.788297][T16449] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 1548.851875][ T13] bond0 (unregistering): Released all slaves [ 1548.873927][T16449] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1548.950138][T16433] Bluetooth: hci5: command tx timeout [ 1549.616921][ T5285] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1549.843568][ T13] hsr_slave_0: left promiscuous mode [ 1550.077785][ T13] hsr_slave_1: left promiscuous mode [ 1550.404702][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1550.612095][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1550.631363][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1551.698166][T14217] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1551.709718][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1552.588149][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1552.696433][T16433] Bluetooth: hci4: unexpected event for opcode 0x0c7c [ 1552.952682][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1552.990218][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1553.330269][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1553.370827][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1554.015331][T16433] Bluetooth: hci2: unexpected event for opcode 0x200c [ 1554.299375][T16488] loop7: detected capacity change from 0 to 16 [ 1555.378042][ T6343] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1555.390605][ T3329] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1556.180240][T16488] erofs (device loop7): mounted with root inode @ nid 36. [ 1556.363757][T16228] bridge0: port 1(bridge_slave_0) entered blocking state [ 1556.431774][T16228] bridge0: port 1(bridge_slave_0) entered disabled state [ 1556.475202][T16228] bridge_slave_0: entered allmulticast mode [ 1556.537305][T16228] bridge_slave_0: entered promiscuous mode [ 1556.608990][T16228] bridge0: port 2(bridge_slave_1) entered blocking state [ 1556.652475][T16228] bridge0: port 2(bridge_slave_1) entered disabled state [ 1556.701037][T16228] bridge_slave_1: entered allmulticast mode [ 1556.750768][T16228] bridge_slave_1: entered promiscuous mode [ 1557.613180][T16504] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[12888] was attempted by ""[16504] [ 1558.141173][T14227] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1559.220873][ T6343] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1559.546470][T16228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1559.772959][T16228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1560.005413][T16516] loop2: detected capacity change from 0 to 64 [ 1561.957677][ T6553] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1562.070151][T13900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1562.281337][T16228] team0: Port device team_slave_0 added [ 1562.343631][T16228] team0: Port device team_slave_1 added [ 1563.914765][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1563.925219][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1565.011052][T16228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1565.070944][ T3329] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1565.088933][T16228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1565.147594][T16541] loop7: detected capacity change from 0 to 256 [ 1565.262250][T16228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1565.333168][ T6553] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1565.370536][T16228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1565.413533][T16228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1565.448802][T13252] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 1565.569611][T16228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1565.665948][T13252] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1565.724118][T13252] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1565.796998][T13252] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1565.850757][T13252] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.218630][T16557] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[12888] was attempted by ""[16557] [ 1566.318320][T13252] usb 3-1: Product: syz [ 1566.344141][T13252] usb 3-1: Manufacturer: syz [ 1566.377353][T13252] usb 3-1: SerialNumber: syz [ 1567.298754][T13252] usb 3-1: 0:2 : does not exist [ 1567.484803][T13252] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1567.685532][T16228] hsr_slave_0: entered promiscuous mode [ 1567.730985][T16228] hsr_slave_1: entered promiscuous mode [ 1567.831424][ T5285] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1567.844301][ T6343] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1568.009632][T13252] usb 3-1: USB disconnect, device number 7 [ 1568.103422][T14227] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1568.220054][T16577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1788'. [ 1568.573211][T16234] udevd[16234]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1569.478595][T16591] 9p: Bad value for 'rfdno' [ 1570.183146][T16373] bridge0: port 1(bridge_slave_0) entered blocking state [ 1570.229541][T16373] bridge0: port 1(bridge_slave_0) entered disabled state [ 1570.276496][T16373] bridge_slave_0: entered allmulticast mode [ 1570.327192][T16373] bridge_slave_0: entered promiscuous mode [ 1570.366086][T16373] bridge0: port 2(bridge_slave_1) entered blocking state [ 1570.398230][T16373] bridge0: port 2(bridge_slave_1) entered disabled state [ 1570.414090][T16373] bridge_slave_1: entered allmulticast mode [ 1570.446790][T16373] bridge_slave_1: entered promiscuous mode [ 1570.480146][T16353] bridge0: port 1(bridge_slave_0) entered blocking state [ 1570.498052][T16353] bridge0: port 1(bridge_slave_0) entered disabled state [ 1570.533151][T16353] bridge_slave_0: entered allmulticast mode [ 1570.576608][T16353] bridge_slave_0: entered promiscuous mode [ 1570.682572][T16353] bridge0: port 2(bridge_slave_1) entered blocking state [ 1570.715345][T16353] bridge0: port 2(bridge_slave_1) entered disabled state [ 1570.738607][T16353] bridge_slave_1: entered allmulticast mode [ 1570.767454][T16353] bridge_slave_1: entered promiscuous mode [ 1570.849154][T16373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1570.874804][T14227] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1570.915492][T16373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1571.018434][T16353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1571.095288][ T5285] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1571.105984][T16353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1571.245388][T16616] loop7: detected capacity change from 0 to 64 [ 1571.253933][ T13] bridge_slave_1: left allmulticast mode [ 1571.281594][ T13] bridge_slave_1: left promiscuous mode [ 1571.333733][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1571.460262][ T13] bridge_slave_0: left allmulticast mode [ 1571.538522][ T13] bridge_slave_0: left promiscuous mode [ 1571.569040][T14227] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1571.598241][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1571.832371][T16619] loop2: detected capacity change from 0 to 32768 [ 1571.932545][T16619] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1572.014823][T16619] XFS (loop2): Ending clean mount [ 1572.029347][T16619] XFS (loop2): Quotacheck needed: Please wait. [ 1572.093122][T16631] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1798'. [ 1572.229961][ T4940] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1572.244420][ T4940] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1572.253933][ T4940] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1572.269983][ T4940] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1572.279600][ T4940] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1572.477499][T16619] XFS (loop2): Quotacheck: Done. [ 1572.766790][ T31] audit: type=1800 audit(1785981239.182:1881): pid=16619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1796" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4429 res=0 errno=0 [ 1572.917710][ T5630] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1572.938067][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1573.000713][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1573.080460][ T13] bond0 (unregistering): Released all slaves [ 1573.100554][T16637] loop7: detected capacity change from 0 to 2048 [ 1573.208986][T16637] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1573.372634][T16353] team0: Port device team_slave_0 added [ 1573.433187][T16373] team0: Port device team_slave_0 added [ 1573.475289][T16373] team0: Port device team_slave_1 added [ 1573.535822][ T13] hsr_slave_0: left promiscuous mode [ 1573.576136][ T13] hsr_slave_1: left promiscuous mode [ 1573.605142][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1573.647423][ T6343] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1573.667281][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1574.513505][ T4940] Bluetooth: hci0: command tx timeout [ 1574.861728][ T3329] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1576.374213][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1576.410756][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1576.422236][T14214] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1576.767670][ T4940] Bluetooth: hci0: command tx timeout [ 1577.102276][T16650] 9p: Bad value for 'rfdno' [ 1577.197329][T16353] team0: Port device team_slave_1 added [ 1577.703934][T16373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1577.782660][T16373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1577.826421][ T92] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1578.080407][T16373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1579.120114][ T4940] Bluetooth: hci0: command tx timeout [ 1579.155910][T16373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1579.163783][T16373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1579.887164][T13900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1579.908381][T16373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1579.935345][T16353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1579.956122][T16353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1580.172182][T16353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1580.189494][T16669] IPv6: NLM_F_CREATE should be specified when creating new route [ 1580.279109][T16353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1580.347715][T16353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1580.565036][T16353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1581.159405][T16353] hsr_slave_0: entered promiscuous mode [ 1581.173106][T16684] loop7: detected capacity change from 0 to 2048 [ 1581.237586][T16353] hsr_slave_1: entered promiscuous mode [ 1581.266452][T16684] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1581.360868][ T4940] Bluetooth: hci0: command tx timeout [ 1581.417888][T16373] hsr_slave_0: entered promiscuous mode [ 1581.481923][T16373] hsr_slave_1: entered promiscuous mode [ 1581.518493][T16373] debugfs: 'hsr0' already exists in 'hsr' [ 1581.564750][T16373] Cannot create hsr debugfs directory [ 1581.966720][T14227] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1583.052614][T11178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1584.137269][T14214] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1586.173100][T14214] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1588.386725][T16729] loop7: detected capacity change from 0 to 64 [ 1589.592963][ T6554] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1591.059538][ T6343] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1591.071259][ T6554] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1592.367443][ T6343] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1594.694221][T16632] bridge0: port 1(bridge_slave_0) entered blocking state [ 1594.753757][T16632] bridge0: port 1(bridge_slave_0) entered disabled state [ 1594.921480][T16632] bridge_slave_0: entered allmulticast mode [ 1594.970396][T16632] bridge_slave_0: entered promiscuous mode [ 1595.027763][T16766] loop7: detected capacity change from 0 to 1024 [ 1595.039485][T16632] bridge0: port 2(bridge_slave_1) entered blocking state [ 1595.254961][T16632] bridge0: port 2(bridge_slave_1) entered disabled state [ 1595.303505][T16766] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1595.327020][T16632] bridge_slave_1: entered allmulticast mode [ 1595.377864][T16632] bridge_slave_1: entered promiscuous mode [ 1595.390890][T16766] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1595.402876][ T6554] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1595.588049][T16766] EXT4-fs warning (device loop7): ext4_empty_dir:3104: inode #12: comm syz.7.1830: directory missing '..' [ 1595.651983][T16632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1595.709920][T16632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1595.759213][T12888] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1598.204675][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1599.161722][ T6553] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1599.175459][T16632] team0: Port device team_slave_0 added [ 1601.056960][ T3329] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1601.324518][T16632] team0: Port device team_slave_1 added [ 1601.613496][T16632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1601.634157][T16632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1601.698397][T16632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1601.728165][T16632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1601.747086][T16632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1601.805655][T16632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1601.968254][T16632] hsr_slave_0: entered promiscuous mode [ 1601.984427][T16632] hsr_slave_1: entered promiscuous mode [ 1601.996693][T16632] debugfs: 'hsr0' already exists in 'hsr' [ 1602.022927][T16632] Cannot create hsr debugfs directory [ 1602.201581][T16817] loop2: detected capacity change from 0 to 128 [ 1602.226170][T16373] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1602.364206][T16373] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1602.455945][T16373] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1602.569334][T16373] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1602.791682][T16373] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1602.899935][T16373] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1602.967429][T16433] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1602.987780][T16433] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1602.997990][T16433] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1603.013070][T16433] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1603.023691][T16433] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1605.090572][T16840] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1843'. [ 1605.783429][T16433] Bluetooth: hci6: command tx timeout [ 1605.819728][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1606.233162][T13900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1606.829065][T14227] bridge_slave_1: left allmulticast mode [ 1606.891253][ T4940] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1606.909440][ T4940] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1606.921654][ T4940] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1606.931244][ T4940] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1606.944162][ T4940] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1607.029292][T14227] bridge_slave_1: left promiscuous mode [ 1607.040316][T11178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1607.115289][T14227] bridge0: port 2(bridge_slave_1) entered disabled state [ 1607.962242][ T4940] Bluetooth: hci6: command tx timeout [ 1609.262751][ T4940] Bluetooth: hci1: command tx timeout [ 1609.277199][T14227] bridge_slave_0: left allmulticast mode [ 1609.362590][T14227] bridge_slave_0: left promiscuous mode [ 1609.449007][T14227] bridge0: port 1(bridge_slave_0) entered disabled state [ 1610.735307][ T4940] Bluetooth: hci6: command tx timeout [ 1611.557050][ T4940] Bluetooth: hci1: command tx timeout [ 1611.777884][T14214] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1612.299767][T16887] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[12888] was attempted by ""[16887] [ 1612.470467][T14214] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1612.526026][T14227] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1612.581864][T14227] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1612.624486][T14227] bond0 (unregistering): Released all slaves [ 1612.990974][ T4940] Bluetooth: hci6: command tx timeout [ 1613.768246][ T4940] Bluetooth: hci1: command tx timeout [ 1613.890845][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1615.686126][T14227] hsr_slave_0: left promiscuous mode [ 1615.746688][T14227] hsr_slave_1: left promiscuous mode [ 1615.787228][T14227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1615.821889][T16855] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 1615.863471][T14227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1615.909457][T16855] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000f2: 0000 [#1] SMP KASAN NOPTI [ 1615.921520][T16855] KASAN: null-ptr-deref in range [0x0000000000000790-0x0000000000000797] [ 1615.929917][T16855] CPU: 0 UID: 0 PID: 16855 Comm: syz.2.1848 Tainted: G L syzkaller #0 PREEMPT(full) [ 1615.940839][T16855] Tainted: [L]=SOFTLOCKUP [ 1615.945140][T16855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1615.955177][T16855] RIP: 0010:uvcg_video_init+0x4e7/0x630 [ 1615.960724][T16855] Code: 89 63 60 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 5a e0 67 fa 48 8b 1b 4c 8d bb 90 07 00 00 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 3a e0 67 fa 4d 8b 3f 49 83 c7 30 [ 1615.980316][T16855] RSP: 0018:ffffc90003477710 EFLAGS: 00010212 [ 1615.986388][T16855] RAX: 00000000000000f2 RBX: 0000000000000000 RCX: 0000000000080000 [ 1615.994342][T16855] RDX: ffffc90006a59000 RSI: 000000000002d3e2 RDI: 000000000002d3e3 [ 1616.002296][T16855] RBP: 1ffff1100be26114 R08: ffffffff90579e37 R09: 1ffffffff20af3c6 [ 1616.010283][T16855] R10: dffffc0000000000 R11: fffffbfff20af3c7 R12: fffffffffffffffc [ 1616.018238][T16855] R13: dffffc0000000000 R14: ffff88805f1308a0 R15: 0000000000000790 [ 1616.026195][T16855] FS: 00007fda6bbf66c0(0000) GS:ffff888124f4b000(0000) knlGS:0000000000000000 [ 1616.035110][T16855] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1616.041704][T16855] CR2: 00007f06146bc440 CR3: 00000000719f9000 CR4: 0000000000350ef0 [ 1616.049662][T16855] Call Trace: [ 1616.052925][T16855] [ 1616.055842][T16855] uvc_function_bind+0x1076/0x15a0 [ 1616.060965][T16855] usb_add_function+0x2e1/0x9f0 [ 1616.065817][T16855] configfs_composite_bind+0xde0/0x1410 [ 1616.071368][T16855] ? __pfx_configfs_composite_bind+0x10/0x10 [ 1616.077338][T16855] gadget_bind_driver+0x2ca/0x9e0 [ 1616.082367][T16855] ? __pfx_gadget_bind_driver+0x10/0x10 [ 1616.087913][T16855] really_probe+0x254/0xae0 [ 1616.092417][T16855] __driver_probe_device+0x1e8/0x360 [ 1616.097698][T16855] driver_probe_device+0x4f/0x240 [ 1616.102720][T16855] __driver_attach+0x339/0x600 [ 1616.107478][T16855] bus_for_each_dev+0x23b/0x2c0 [ 1616.112313][T16855] ? __pfx___driver_attach+0x10/0x10 [ 1616.117591][T16855] ? __pfx_bus_for_each_dev+0x10/0x10 [ 1616.123053][T16855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1616.128727][T16855] ? do_raw_spin_unlock+0xf5/0x210 [ 1616.133841][T16855] bus_add_driver+0x345/0x670 [ 1616.138512][T16855] driver_register+0x23a/0x320 [ 1616.143307][T16855] usb_gadget_register_driver_owner+0xf9/0x270 [ 1616.149485][T16855] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 1616.155117][T16855] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 1616.161269][T16855] configfs_write_iter+0x337/0x430 [ 1616.166399][T16855] vfs_write+0x612/0xba0 [ 1616.170736][T16855] ? __pfx_vfs_write+0x10/0x10 [ 1616.175497][T16855] ? __fget_files+0x2a/0x420 [ 1616.180084][T16855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1616.185773][T16855] ksys_write+0x150/0x270 [ 1616.190111][T16855] ? __pfx_ksys_write+0x10/0x10 [ 1616.194975][T16855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1616.201036][T16855] do_syscall_64+0x174/0x580 [ 1616.205639][T16855] ? trace_irq_disable+0x3b/0x140 [ 1616.210660][T16855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1616.216537][T16855] RIP: 0033:0x7fda6d99e0d9 [ 1616.220935][T16855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1616.240530][T16855] RSP: 002b:00007fda6bbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1616.248936][T16855] RAX: ffffffffffffffda RBX: 00007fda6dc25fa0 RCX: 00007fda6d99e0d9 [ 1616.256910][T16855] RDX: 000000000000000c RSI: 0000200000000640 RDI: 0000000000000006 [ 1616.264861][T16855] RBP: 00007fda6da35024 R08: 0000000000000000 R09: 0000000000000000 [ 1616.272813][T16855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1616.280765][T16855] R13: 00007fda6dc26038 R14: 00007fda6dc25fa0 R15: 00007fffe04a48f8 [ 1616.288734][T16855] [ 1616.291758][T16855] Modules linked in: [ 1616.298176][T16855] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1616.351474][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1616.370059][ T4940] Bluetooth: hci1: command tx timeout [ 1616.444103][ T5629] process 7131 (syz.5.239) no longer affine to cpu1 [ 1617.270623][ T5630] process 9313 (syz.2.589) no longer affine to cpu1 [ 1617.697007][ T3352] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1618.120319][T14227] team0 (unregistering): Port device team_slave_1 removed [ 1618.132402][T14227] team0 (unregistering): Port device team_slave_0 removed [ 1618.142106][T16855] RIP: 0010:uvcg_video_init+0x4e7/0x630 [ 1618.153807][T16855] Code: 89 63 60 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 5a e0 67 fa 48 8b 1b 4c 8d bb 90 07 00 00 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 3a e0 67 fa 4d 8b 3f 49 83 c7 30 [ 1618.206928][T16855] RSP: 0018:ffffc90003477710 EFLAGS: 00010212 [ 1618.223528][T16855] RAX: 00000000000000f2 RBX: 0000000000000000 RCX: 0000000000080000 [ 1618.242075][T16855] RDX: ffffc90006a59000 RSI: 000000000002d3e2 RDI: 000000000002d3e3 [ 1618.352867][T16855] RBP: 1ffff1100be26114 R08: ffffffff90579e37 R09: 1ffffffff20af3c6 [ 1618.406828][T16855] R10: dffffc0000000000 R11: fffffbfff20af3c7 R12: fffffffffffffffc [ 1618.475721][T16855] R13: dffffc0000000000 R14: ffff88805f1308a0 R15: 0000000000000790 [ 1618.567624][T14227] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1618.593243][T16855] FS: 00007fda6bbf66c0(0000) GS:ffff888124f4b000(0000) knlGS:0000000000000000 [ 1618.644438][T16855] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1618.695664][T16855] CR2: 00007ffc90ce0138 CR3: 00000000719f9000 CR4: 0000000000350ef0 [ 1618.707715][ T6554] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1618.764794][T16855] Kernel panic - not syncing: Fatal exception [ 1618.770911][T16855] Kernel Offset: disabled [ 1618.775218][T16855] Rebooting in 86400 seconds..