last executing test programs: 3m27.270161954s ago: executing program 3 (id=106): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$kcm(0x2, 0x7, 0x2) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 3m25.951232445s ago: executing program 1 (id=107): r0 = socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, 0x0, 0x0) 3m25.682105482s ago: executing program 3 (id=108): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000001, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m24.823340012s ago: executing program 1 (id=110): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0xffffffffffffffff, 0x0, 0x4003) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x46, 0xc11, &(0x7f0000000d00)="$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") write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xc00) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4e142, 0x2e) sendfile(r4, r4, 0x0, 0xe3aa6ea) 3m23.63773762s ago: executing program 1 (id=111): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r4, &(0x7f0000000500)="01", 0x1) read(r3, &(0x7f0000000000), 0x4) sendmsg$xdp(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40) 3m23.499966823s ago: executing program 3 (id=113): r0 = socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r3 = syz_open_dev$video(&(0x7f0000000080), 0x7f, 0x0) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000000)={0x9, {0x0, 0xfffff88f, 0x200000e7}, {0x0, 0x0, 0x3, 0x3}, {0xfdfb, 0x3}}) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000040)={0x59, 0xa, 0x100, "3258c5c0d651aa231b00280000000000000000000000ed00", 0x32435750}) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)={@random="ffffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca, "5b500028003a00000000000001000001000012670000000000000000000000001122334411223344"}}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000200)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0003001000000002800000121f", 0x2e}], 0x1}, 0x20008000) 3m23.429385155s ago: executing program 1 (id=114): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000180)="707a73408b202e2f66696c65303a30", 0xf) openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/uprobe_events\x00', 0x201, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x20, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x20}, 0x1, 0x0, 0x0, 0x85}, 0x4080044) ptrace(0x10, r1) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setsig(0x4203, r1, 0x5, &(0x7f00000000c0)={0x19, 0x40, 0x7}) 3m23.178262821s ago: executing program 1 (id=117): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3m22.729451521s ago: executing program 1 (id=120): syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x1004000, &(0x7f0000000340)={[{@gid}, {@mode={'mode', 0x3d, 0x4}}, {@anchor={'anchor', 0x3d, 0x7}}, {@longad}, {@utf8}, {@unhide}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@gid_forget}, {@nostrict}, {@session}, {@gid_forget}]}, 0x1, 0xc34, &(0x7f0000001bc0)="$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") syz_mount_image$fuse(0x0, 0x0, 0x2a0000a, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) mknodat(r1, 0x0, 0x8910, 0x4) getdents64(r0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(r1, &(0x7f0000000480)='./file0\x00', 0x200) creat(0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) creat(0x0, 0x7a) pwritev2(r2, 0x0, 0x0, 0x5412, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0) 3m22.271159352s ago: executing program 32 (id=120): syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x1004000, &(0x7f0000000340)={[{@gid}, {@mode={'mode', 0x3d, 0x4}}, {@anchor={'anchor', 0x3d, 0x7}}, {@longad}, {@utf8}, {@unhide}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@gid_forget}, {@nostrict}, {@session}, {@gid_forget}]}, 0x1, 0xc34, &(0x7f0000001bc0)="$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") syz_mount_image$fuse(0x0, 0x0, 0x2a0000a, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) mknodat(r1, 0x0, 0x8910, 0x4) getdents64(r0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(r1, &(0x7f0000000480)='./file0\x00', 0x200) creat(0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) creat(0x0, 0x7a) pwritev2(r2, 0x0, 0x0, 0x5412, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0) 3m22.256640032s ago: executing program 3 (id=123): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./bus\x00', 0x10900e, 0x0, 0xfe, 0x0, &(0x7f00000000c0)) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x30480, 0x93) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x0) 3m20.321386638s ago: executing program 3 (id=126): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r2, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x8, r3, 0x0, 0x1, 0x0, 0x0, 0x5}) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x4ae60) syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') syz_open_dev$dvb_frontend(&(0x7f0000000400), 0x0, 0x84003) 3m19.477489428s ago: executing program 3 (id=129): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(0xffffffffffffffff, 0xc06c4124, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m18.95354947s ago: executing program 33 (id=129): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(0xffffffffffffffff, 0xc06c4124, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m14.769850597s ago: executing program 4 (id=296): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x18d042, 0x15) pwrite64(r0, &(0x7f0000000000), 0x0, 0x2200) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xc5) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000080)={0x1, 0x2, 0x9, 0x679a}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x14, r3, 0x300, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0x20008801) 2m14.317053748s ago: executing program 4 (id=298): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$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") prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r3}, 0xc) truncate(0x0, 0x40200) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0) 2m12.07659803s ago: executing program 4 (id=300): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = io_uring_setup(0x151a, &(0x7f00000002c0)={0x0, 0xd60e, 0x8000, 0x1, 0x39a}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prlimit64(0x0, 0xa, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 2m9.655775658s ago: executing program 4 (id=304): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'xfrm0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(0x0, 0x2, 0x200000) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) openat$dsp1(0xffffff9c, &(0x7f0000000040), 0x80040, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)='v2to_da_alloc', 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 2m6.551001861s ago: executing program 4 (id=307): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 2m6.052537313s ago: executing program 4 (id=309): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f00000000c0)={0x200, 0x8, 0x40, 0x9, 0x11, "71feaf33c32ed6fe90107884be157e88b3e578"}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x4, 0x0, 0x0, &(0x7f00007d4000/0x4000)=nil, 0x4000, 0xfffffffffffffffe}) 1m50.404978942s ago: executing program 34 (id=309): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f00000000c0)={0x200, 0x8, 0x40, 0x9, 0x11, "71feaf33c32ed6fe90107884be157e88b3e578"}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x4, 0x0, 0x0, &(0x7f00007d4000/0x4000)=nil, 0x4000, 0xfffffffffffffffe}) 34.799841959s ago: executing program 6 (id=334): mprotect(&(0x7f0000001000/0x14000)=nil, 0x14000, 0x1) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@chain={'key_or_keyring:', r2}) r3 = eventfd2(0x7ff, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x1, r3}) close_range(r1, r3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) splice(0xffffffffffffffff, &(0x7f0000000100)=0x5, 0xffffffffffffffff, &(0x7f0000000140)=0x9, 0x55b, 0x6) 29.429560785s ago: executing program 6 (id=334): mprotect(&(0x7f0000001000/0x14000)=nil, 0x14000, 0x1) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@chain={'key_or_keyring:', r2}) r3 = eventfd2(0x7ff, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x1, r3}) close_range(r1, r3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) splice(0xffffffffffffffff, &(0x7f0000000100)=0x5, 0xffffffffffffffff, &(0x7f0000000140)=0x9, 0x55b, 0x6) 24.56808943s ago: executing program 5 (id=448): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) chmod(0x0, 0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00') mkdir(&(0x7f0000000000)='./tracefs\x00', 0x196) mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs/trace_options\x00', 0x2, 0x0) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) 24.541364211s ago: executing program 0 (id=449): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) accept4$alg(r0, 0x0, 0x0, 0xc0800) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008f}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='2', 0x1) ioprio_set$pid(0x2, 0x0, 0x4004) sendto(r1, &(0x7f0000000340), 0x0, 0x40001, &(0x7f00000003c0)=@l2={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x100, 0x1}, 0x80) bind$alg(r0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x5452, &(0x7f0000000a00)={'dvmrp0\x00', @random='c\b\x00'}) recvmsg(0xffffffffffffffff, 0x0, 0x10000) close(0xffffffffffffffff) r3 = accept$alg(r0, 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffd000/0x3000)=nil) sendmmsg$alg(r3, 0x0, 0x0, 0x88811) 24.363176435s ago: executing program 6 (id=334): mprotect(&(0x7f0000001000/0x14000)=nil, 0x14000, 0x1) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@chain={'key_or_keyring:', r2}) r3 = eventfd2(0x7ff, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x1, r3}) close_range(r1, r3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) splice(0xffffffffffffffff, &(0x7f0000000100)=0x5, 0xffffffffffffffff, &(0x7f0000000140)=0x9, 0x55b, 0x6) 21.419487655s ago: executing program 5 (id=451): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) setrlimit(0xd, 0x0) setpriority(0x1, 0x0, 0x80080000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='stat\x00') r5 = fanotify_init(0x200, 0x1000) fanotify_mark(r5, 0x1, 0x48001028, 0xffffffffffffffff, 0x0) read$FUSE(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 21.418776115s ago: executing program 0 (id=452): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc0405668, &(0x7f0000000380)={0x1, 0x100, 0x5, {0x4, 0x7, 0x780000, 0xfcad}}) r2 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r2, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x6, 0x4, "e971ec7b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000b40)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b7070000000002006a0102000000000007000000000000009500000000000000561cf53109c66825d874b16b2cba"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x8, 0x1800}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) 19.349571733s ago: executing program 5 (id=453): syz_usb_connect(0x3, 0x32, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getrlimit(0xb, &(0x7f0000000100)) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x8ccbf000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x8}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x1, 0x7}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) 18.959189933s ago: executing program 0 (id=454): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89b1, &(0x7f0000000540)={'macvlan1\x00', @ifru_map={0x2, 0xf, 0xd, 0x2, 0x9, 0x8}}) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0x44, 0x4, 0x578, 0xffffffff, 0x390, 0x240, 0x390, 0xffffffff, 0xffffffff, 0x4a8, 0x4a8, 0x4a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x1f8, 0x240, 0x8502, {}, [@common=@inet=@hashlimit2={{0x150}, {'ip6erspan0\x00', {0x3ff, 0x2, 0x0, 0x2fff, 0x2fff, 0x849a, 0x1, 0x18, 0x18}, {0x8}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9, 'syz0\x00', {0x2}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @local, [0xff000000, 0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xff000000, 0xff, 0xff000000], 'pimreg0\x00', 'team_slave_1\x00', {}, {0xff}, 0x3c, 0xd3, 0x4, 0x8}, 0x0, 0x128, 0x150, 0x0, {0x0, 0x11}, [@common=@eui64={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'batadv_slave_0\x00', {0x8, 0x7, 0x101, 0x3, 0x4, 0x4, 0xfffffff8, 0x0, 0x78}, {0x9}}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x7, 0x81, 0x1, 0x0, "d13aea835ab25d2af06d2a594bd55044f3f8f4a6ee1c3d886408088b5319e5294d4192982093b0f1e78cdb4585b98822e00d4b509e74d3ebb43b153f2481c6e3"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) 18.958977903s ago: executing program 2 (id=455): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000240)=0x1, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x3c, r2, 0x1, 0x30bd26, 0x25dfdc00, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7ff, 0x55}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) shmctl$SHM_LOCK(0x0, 0xb) syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) 17.280806133s ago: executing program 0 (id=456): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280), 0x1, 0x51f, &(0x7f0000000600)="$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") r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) prlimit64(r1, 0xc, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f40600", @ANYRES16=r0, @ANYBLOB], 0x6f4}}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101242, 0x15) 17.117111266s ago: executing program 2 (id=457): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x22, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, &(0x7f0000000200)='./tracing\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) 17.028544658s ago: executing program 6 (id=334): mprotect(&(0x7f0000001000/0x14000)=nil, 0x14000, 0x1) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@chain={'key_or_keyring:', r2}) r3 = eventfd2(0x7ff, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x1, r3}) close_range(r1, r3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) splice(0xffffffffffffffff, &(0x7f0000000100)=0x5, 0xffffffffffffffff, &(0x7f0000000140)=0x9, 0x55b, 0x6) 13.790708835s ago: executing program 2 (id=458): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r3, @ANYRES32=r5, @ANYRESOCT=r0], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7f"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r6 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x1, 0xd59f80, 0x9, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x1c, {0x80008, 0xff7ffbff}, 0xd0, 0x9}}) 11.03407911s ago: executing program 0 (id=459): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000080)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000000500)=""/68, 0x0, 0x60000}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000340)=0x1) 11.02905229s ago: executing program 5 (id=460): socket$nl_generic(0x10, 0x3, 0x10) mq_open(0x0, 0x8c1, 0x1a2, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) openat$full(0xffffffffffffff9c, 0x0, 0x80100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) socket(0x1d, 0x2, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x13) 10.982038081s ago: executing program 2 (id=461): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r2, 0x0, 0x0, 0x1000000300) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) 10.847970644s ago: executing program 6 (id=334): mprotect(&(0x7f0000001000/0x14000)=nil, 0x14000, 0x1) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@chain={'key_or_keyring:', r2}) r3 = eventfd2(0x7ff, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x1, r3}) close_range(r1, r3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) splice(0xffffffffffffffff, &(0x7f0000000100)=0x5, 0xffffffffffffffff, &(0x7f0000000140)=0x9, 0x55b, 0x6) 4.036399435s ago: executing program 5 (id=462): syz_open_dev$evdev(0x0, 0x0, 0x80840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e2a}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB=',dmask=00000000000000000002544,errors=remount-ro,iocharset=macturkish,gid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,umask=00000000000000000000000,namecase=1,umask=00000000000000000000165,fmask=00000000000000000166141,uid=', @ANYRES16, @ANYBLOB="2c7a65726f5f73697a655f6469722c74696d655f6f66667365743d3078303030303030303030303030303030352c6572726f72733d636f6e74696e75030000213258e0b74d31428201eec914b0a1309eef6fa67f9c9acd3d0f7faecfc7606d1780acf362e8c2eb308f9f6bf0dbc2a6f3bbfd298af0966c8df51bff17a1d884d217f3d05e3184594b42b733f1401e6a7a99717441f7f836034df7231df364ad31334b3e1b0fd15371b2e2ee9dc35f553c93625b158095a0ab77f5b32eab3e4252e792f82e28c94d176244e9c652c8aa0a5b60223b3643598acaee5d91428250f1a54198f0b60a932f"], 0x1, 0x1535, &(0x7f0000001380)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac1) 4.035408105s ago: executing program 0 (id=470): openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80580, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x40000, 0x6) userfaultfd(0x1) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r0], 0x7) 4.034673765s ago: executing program 2 (id=463): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000002cc0)={&(0x7f0000000480)=ANY=[@ANYRES64], 0x58}, 0x1, 0x0, 0x0, 0x40005}, 0x2004a002) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xb8, 0x11, 0x148, 0xb8, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x10, {0x8}}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'wg2\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x0, 0x4, 0x1, 0x1], 0x0, 0x3}, {0xffffffffffffffff, [0x4, 0x0, 0x0, 0x3, 0x3, 0x4], 0x2, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r5 = socket$inet(0x2, 0xa, 0x9268) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000300)={'nat\x00', 0x0, [0x6, 0x1f, 0xfff, 0x1, 0x5]}, &(0x7f00000003c0)=0x54) read$dsp(r3, &(0x7f00000017c0)=""/4086, 0xff6) r6 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) ioctl$MEMREADOOB64(r6, 0x1269, &(0x7f00000001c0)={0xc, 0x0, 0xd, &(0x7f0000000240)="eb9a111903719052efc2ea8ed9"}) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000080)='hpfs\x00', 0x80c000, 0x0) 1.434704956s ago: executing program 5 (id=464): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write(0xffffffffffffffff, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x40000000000032a, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000040)=ANY=[], 0x150) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffc, @loopback, 0x5}, 0x1c) mkdirat(0xffffffffffffff9c, 0x0, 0x61) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x20000810) dup(0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r5, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 97.993278ms ago: executing program 6 (id=334): mprotect(&(0x7f0000001000/0x14000)=nil, 0x14000, 0x1) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@chain={'key_or_keyring:', r2}) r3 = eventfd2(0x7ff, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x1, r3}) close_range(r1, r3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) splice(0xffffffffffffffff, &(0x7f0000000100)=0x5, 0xffffffffffffffff, &(0x7f0000000140)=0x9, 0x55b, 0x6) 0s ago: executing program 2 (id=465): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x20) io_setup(0x4, &(0x7f00000001c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x1000000, 0x0, 0x0, 0x1, 0x40, r3, &(0x7f0000000200)='8', 0x1, 0x10000000005971}]) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000140)={[{@test_dummy_encryption}, {@nojournal_checksum}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nogrpid}, {@jqfmt_vfsv1}, {@test_dummy_encryption}, {@nodioread_nolock}]}, 0xff, 0x44f, &(0x7f0000000540)="$eJzs3MtvG8UfAPDvrp206eOX/Ep59AEECiLikTRpgR4QEggkLkhIcCjHkKRVqdugJki0qqAgxBVV4o44IvEXcIILAk5IiBt/AKpUoV5aOBmtvdvYjp3WqV0H/PlIG8/sjDPz9e7YsztxAhhak9mPJGJXRPweEeP1bHOFyfrDjWsXF/66dnEhiWr1zT+TWr3r1y4uFFWL5+3MM1NpRPppEgfatLty/sLp+Upl6VyeL+ePz5w6M39y6eTS2bljx44emX3+ublnNxvaQ42ZrE/X93+4fHDfa29ffn3h+OV3fvomKeJviaNHJl/coPDxarXHzQ3W7oZ0Uh5gR+hKKR97I7XxPx6lWDt44/HqJwPtHNBX1Wq1urNz8aUq8B+WxKB7AAxG8UGfXf8W212aemwJV1+qXwBlcd/It3pJOdK8zkjL9W0vTUbE8Ut/f5lt0Z/7EAAATb7L5j9Pt5v/pXFfQ73/5WtDExHx/4jYExH3RMTeiLg3olb3/oh4oMv2J1vy6+c/6ZVNBXabsvnfC/naVvP8r5j9xUQpz+2uxT+SnDhVWTqcvyZTMbIty89u0Mb3r/z6eaeyxvlftmXtF3PBvB9Xytuan7M4vzp/JzE3uvpxxP5yc/xjtZLk5kpAEhH7ImL/Jts49eTXBzuV3Tr+DfRgnan6VcQT9eN/KZqO/9oqaJaaWT3z3szK+Qtt1idntkdl6fBMcVas9/Mvn73Rqf07ir8HsuO/o+35fzP+iaRxvXalu9+/7Rblmz3/R5O3aunRfN8H86ur52YjRk83nBSlfP/c2q4iX9TP4p861H7874m1V+JARGQn8YP5wvLDed8fiYhHI+LQBjH++PJj724+/v7K4l/s6vivJUajdU/7ROn0D9/G9oZGJ7qJPzv+R2upqXxPh/e/3xozt9Ov7s9mAAAA+HdKI2JXJOn0zXSaTk/X/15+b+xIK8srq0+dWH7/7GL9OwITMZIWd7rGG+6HzuaX9UV+riV/JL9v/EVprJafXliuLA46eBhyOzuM/8wfpUH3Dug739eC4WX8w/Ay/mF4Gf8wvNqM/7FB9AO4+9p9/n80gH4Ad1/L+LfsB0PE9T8ML+MfhpfxD0NpZSxu/SV5CYl1iUi3RDf6mEjKW6IbfU1E/t9/1xcN+p0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgN/4JAAD//wUA5Iw=") setuid(0xee01) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.155' (ED25519) to the list of known hosts. [ 67.007128][ T5765] cgroup: Unknown subsys name 'net' [ 67.139359][ T5765] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.546479][ T5765] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.444549][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.455016][ T5790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.463976][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.471468][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.503277][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.524480][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.527112][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.532311][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.547160][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.547504][ T5794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.561893][ T5790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.564111][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.569992][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.577066][ T5794] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.585155][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.591256][ T5794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.597465][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.612440][ T5790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.620187][ T5794] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.621967][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.637638][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.646757][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.657790][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.665027][ T5794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.029425][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 71.099436][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 71.203640][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 71.217478][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.224807][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.232120][ T5778] bridge_slave_0: entered allmulticast mode [ 71.240291][ T5778] bridge_slave_0: entered promiscuous mode [ 71.248412][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 71.278394][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.285756][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.292870][ T5778] bridge_slave_1: entered allmulticast mode [ 71.301443][ T5778] bridge_slave_1: entered promiscuous mode [ 71.375256][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.382381][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.390167][ T5779] bridge_slave_0: entered allmulticast mode [ 71.397347][ T5779] bridge_slave_0: entered promiscuous mode [ 71.418417][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.438778][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.445972][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.453166][ T5779] bridge_slave_1: entered allmulticast mode [ 71.459838][ T5779] bridge_slave_1: entered promiscuous mode [ 71.469854][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.477185][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.486675][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.542320][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.569020][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.580601][ T5778] team0: Port device team_slave_0 added [ 71.590709][ T5778] team0: Port device team_slave_1 added [ 71.604818][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.611977][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.619223][ T5776] bridge_slave_0: entered allmulticast mode [ 71.626180][ T5776] bridge_slave_0: entered promiscuous mode [ 71.634303][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.641394][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.648865][ T5776] bridge_slave_1: entered allmulticast mode [ 71.656044][ T5776] bridge_slave_1: entered promiscuous mode [ 71.690369][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.698301][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.705579][ T5777] bridge_slave_0: entered allmulticast mode [ 71.712230][ T5777] bridge_slave_0: entered promiscuous mode [ 71.720032][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.727275][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.734464][ T5777] bridge_slave_1: entered allmulticast mode [ 71.741561][ T5777] bridge_slave_1: entered promiscuous mode [ 71.770222][ T5779] team0: Port device team_slave_0 added [ 71.807489][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.814680][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.840686][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.854079][ T5779] team0: Port device team_slave_1 added [ 71.861891][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.874056][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.886052][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.895987][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.902982][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.929481][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.952363][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.010695][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.019154][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.045392][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.081751][ T5776] team0: Port device team_slave_0 added [ 72.090419][ T5776] team0: Port device team_slave_1 added [ 72.097706][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.105386][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.131635][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.149399][ T5778] hsr_slave_0: entered promiscuous mode [ 72.155627][ T5778] hsr_slave_1: entered promiscuous mode [ 72.164445][ T5777] team0: Port device team_slave_0 added [ 72.188227][ T5777] team0: Port device team_slave_1 added [ 72.260970][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.268043][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.294025][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.315125][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.322085][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.348362][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.371994][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.379106][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.407515][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.429193][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.436214][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.463316][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.493833][ T5779] hsr_slave_0: entered promiscuous mode [ 72.500321][ T5779] hsr_slave_1: entered promiscuous mode [ 72.507250][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.515213][ T5779] Cannot create hsr debugfs directory [ 72.607019][ T5777] hsr_slave_0: entered promiscuous mode [ 72.613319][ T5777] hsr_slave_1: entered promiscuous mode [ 72.619432][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.627578][ T5777] Cannot create hsr debugfs directory [ 72.653796][ T5788] Bluetooth: hci3: command tx timeout [ 72.678360][ T5776] hsr_slave_0: entered promiscuous mode [ 72.684896][ T5776] hsr_slave_1: entered promiscuous mode [ 72.691427][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.699413][ T5776] Cannot create hsr debugfs directory [ 72.733322][ T5788] Bluetooth: hci0: command tx timeout [ 72.733548][ T5088] Bluetooth: hci1: command tx timeout [ 72.739061][ T5788] Bluetooth: hci2: command tx timeout [ 72.922393][ T5778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.933881][ T5778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.970926][ T5778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.983052][ T5778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.072938][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.088041][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.098264][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.116222][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.210688][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.221813][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.246423][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.266382][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.308554][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.361581][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.385465][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.397970][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.408950][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.421172][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.438783][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.477694][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.485012][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.499677][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.506847][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.520984][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.546404][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.553582][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.600137][ T3483] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.607321][ T3483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.736440][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.799657][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.812704][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.838875][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.846072][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.857657][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.864835][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.906495][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.947503][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.954684][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.000290][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.007485][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.029779][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.181080][ T5778] veth0_vlan: entered promiscuous mode [ 74.210133][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.246867][ T5778] veth1_vlan: entered promiscuous mode [ 74.316822][ T5779] veth0_vlan: entered promiscuous mode [ 74.365908][ T5778] veth0_macvtap: entered promiscuous mode [ 74.375083][ T5779] veth1_vlan: entered promiscuous mode [ 74.412790][ T5778] veth1_macvtap: entered promiscuous mode [ 74.477190][ T5779] veth0_macvtap: entered promiscuous mode [ 74.500738][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.512886][ T5779] veth1_macvtap: entered promiscuous mode [ 74.549508][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.561338][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.577235][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.591268][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.602767][ T5778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.612652][ T5778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.621802][ T5778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.630774][ T5778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.650165][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.678730][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.686165][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.699909][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.711613][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.722489][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.731548][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.740444][ T5788] Bluetooth: hci3: command tx timeout [ 74.746086][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.755058][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.813639][ T51] Bluetooth: hci1: command tx timeout [ 74.814223][ T5088] Bluetooth: hci0: command tx timeout [ 74.819128][ T5788] Bluetooth: hci2: command tx timeout [ 74.927073][ T5776] veth0_vlan: entered promiscuous mode [ 74.980211][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.995132][ T5777] veth0_vlan: entered promiscuous mode [ 75.011959][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.029680][ T3483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.039306][ T3483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.050270][ T2938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.050527][ T5777] veth1_vlan: entered promiscuous mode [ 75.067283][ T5776] veth1_vlan: entered promiscuous mode [ 75.075114][ T2938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.158745][ T1079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.176147][ T1079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.197087][ T5777] veth0_macvtap: entered promiscuous mode [ 75.209250][ T5776] veth0_macvtap: entered promiscuous mode [ 75.239561][ T5777] veth1_macvtap: entered promiscuous mode [ 75.257555][ T5776] veth1_macvtap: entered promiscuous mode [ 75.318728][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.331200][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.341609][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.352208][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.363938][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.377544][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.388194][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.398689][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.409264][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.419874][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.430977][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.442860][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.456733][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.467904][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.480976][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.492024][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.578012][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.971165][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.129881][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.227641][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.320052][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.711203][ T5846] syz.3.4[5846]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 76.823643][ T5788] Bluetooth: hci3: command tx timeout [ 76.840240][ T5846] loop3: detected capacity change from 0 to 128 [ 76.874792][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.903556][ T5788] Bluetooth: hci0: command tx timeout [ 76.909075][ T5788] Bluetooth: hci2: command tx timeout [ 76.914947][ T5846] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 77.028336][ T5088] Bluetooth: hci1: command tx timeout [ 77.060559][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.153807][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.194156][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.204149][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.215737][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.231645][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.256613][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.274020][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.296298][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.310360][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.571489][ T5791] udevd[5791]: incorrect ext4 checksum on /dev/loop3 [ 77.749409][ T5875] Zero length message leads to an empty skb [ 78.750598][ T5906] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.903731][ T51] Bluetooth: hci3: command tx timeout [ 79.053929][ T5088] Bluetooth: hci2: command tx timeout [ 79.059556][ T5788] Bluetooth: hci0: command tx timeout [ 79.065447][ T51] Bluetooth: hci1: command tx timeout [ 80.082797][ T5890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.121362][ T5890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.189120][ T5896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.197469][ T2913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.211847][ T5896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.217546][ T2913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.230106][ T5937] syzkaller0: entered promiscuous mode [ 80.237172][ T5937] syzkaller0: entered allmulticast mode [ 80.302849][ T5890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.318326][ T5890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.509487][ T5940] netlink: 'syz.0.1': attribute type 11 has an invalid length. [ 83.001477][ T5951] binder: BINDER_SET_CONTEXT_MGR already set [ 83.033293][ T5951] binder: 5950:5951 ioctl 4018620d 200000004a80 returned -16 [ 83.993191][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.733670][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 86.817889][ T9] cfg80211: failed to load regulatory.db [ 89.444660][ T5994] syzkaller0: entered promiscuous mode [ 89.450186][ T5994] syzkaller0: entered allmulticast mode [ 89.993900][ T6003] loop1: detected capacity change from 0 to 512 [ 90.097843][ T6003] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 90.163902][ T6003] System zones: 1-12 [ 90.210132][ T6003] EXT4-fs error (device loop1): ext4_iget_extra_inode:4740: inode #15: comm syz.1.15: corrupted in-inode xattr: e_value size too large [ 90.281005][ T6003] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.15: couldn't read orphan inode 15 (err -117) [ 91.263279][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 91.635661][ T6003] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.119387][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.823293][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 95.316357][ T6032] tipc: Started in network mode [ 95.321359][ T6032] tipc: Node identity 7e5dde102eba, cluster identity 4711 [ 95.337110][ T6032] tipc: Enabled bearer , priority 0 [ 95.394434][ T6033] syzkaller0: entered promiscuous mode [ 95.399957][ T6033] syzkaller0: entered allmulticast mode [ 95.508464][ T6032] tipc: Resetting bearer [ 95.565018][ T6031] tipc: Resetting bearer [ 95.664584][ T6031] tipc: Disabling bearer [ 99.546944][ T6062] loop0: detected capacity change from 0 to 128 [ 99.684198][ T6062] ======================================================= [ 99.684198][ T6062] WARNING: The mand mount option has been deprecated and [ 99.684198][ T6062] and is ignored by this kernel. Remove the mand [ 99.684198][ T6062] option from the mount to silence this warning. [ 99.684198][ T6062] ======================================================= [ 100.249268][ T6062] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 100.473261][ T6062] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 100.808669][ T6074] bridge0: entered promiscuous mode [ 100.833485][ T6074] vlan2: entered promiscuous mode [ 100.862564][ T5776] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.872790][ T6065] syz.3.35 (6065) used greatest stack depth: 20752 bytes left [ 102.339537][ T23] Process accounting resumed [ 103.008157][ T6104] loop0: detected capacity change from 0 to 128 [ 107.402808][ T6138] Illegal XDP return value 4294967274 on prog (id 9) dev N/A, expect packet loss! [ 110.451712][ T6166] syzkaller0: entered promiscuous mode [ 110.502391][ T6166] syzkaller0: entered allmulticast mode [ 110.628037][ T6173] wg1: entered promiscuous mode [ 110.633969][ T6173] wg1: entered allmulticast mode [ 110.662584][ T6166] tipc: Started in network mode [ 110.673818][ T6166] tipc: Node identity 3e6f527adc87, cluster identity 4711 [ 110.681373][ T6166] tipc: Enabled bearer , priority 0 [ 110.750641][ T6162] tipc: Resetting bearer [ 110.877927][ T6162] tipc: Disabling bearer [ 111.743319][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 113.106839][ T6190] syzkaller0: entered promiscuous mode [ 113.189384][ T6190] syzkaller0: entered allmulticast mode [ 113.528184][ T6194] tipc: Started in network mode [ 113.716388][ T6194] tipc: Node identity 82f97e140d4f, cluster identity 4711 [ 113.821266][ T6194] tipc: Enabled bearer , priority 0 [ 113.906314][ T6189] tipc: Resetting bearer [ 113.967165][ T6189] tipc: Disabling bearer [ 114.020985][ T6203] syz_tun: entered allmulticast mode [ 115.217402][ T6223] loop3: detected capacity change from 0 to 256 [ 117.383068][ C1] sched: RT throttling activated [ 118.020647][ T6265] loop3: detected capacity change from 0 to 128 [ 118.044825][ T6265] EXT4-fs: Ignoring removed bh option [ 118.080432][ T6265] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 118.122535][ T6265] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.338818][ T5779] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.645301][ T6271] loop3: detected capacity change from 0 to 1024 [ 119.414415][ T5886] hfsplus: bad catalog file entry [ 119.677653][ T6283] FAULT_INJECTION: forcing a failure. [ 119.677653][ T6283] name failslab, interval 1, probability 0, space 0, times 1 [ 119.695121][ T6283] CPU: 1 PID: 6283 Comm: syz.3.80 Not tainted syzkaller #0 [ 119.702374][ T6283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.712466][ T6283] Call Trace: [ 119.715766][ T6283] [ 119.718714][ T6283] dump_stack_lvl+0x18c/0x250 [ 119.723438][ T6283] ? show_regs_print_info+0x20/0x20 [ 119.728664][ T6283] ? load_image+0x420/0x420 [ 119.733207][ T6283] should_fail_ex+0x394/0x4c0 [ 119.737924][ T6283] should_failslab+0x9/0x20 [ 119.742457][ T6283] slab_pre_alloc_hook+0x59/0x300 [ 119.747518][ T6283] ? proc_self_get_link+0xe5/0x180 [ 119.752829][ T6283] __kmem_cache_alloc_node+0x53/0x250 [ 119.758239][ T6283] ? proc_self_get_link+0xe5/0x180 [ 119.763374][ T6283] kmalloc_trace+0x2a/0xe0 [ 119.767824][ T6283] proc_self_get_link+0xe5/0x180 [ 119.772791][ T6283] ? proc_setup_self+0x2c0/0x2c0 [ 119.777756][ T6283] pick_link+0x6a8/0xdd0 [ 119.782034][ T6283] step_into+0xc18/0xee0 [ 119.786312][ T6283] ? set_root+0x3a0/0x3a0 [ 119.790665][ T6283] ? lookup_fast+0x14a/0x4c0 [ 119.795280][ T6283] ? security_inode_permission+0xb0/0xf0 [ 119.800953][ T6283] link_path_walk+0x748/0xe40 [ 119.805673][ T6283] ? handle_lookup_down+0x130/0x130 [ 119.810917][ T6283] path_openat+0x291/0x3270 [ 119.815469][ T6283] ? do_sys_openat2+0xda/0x1d0 [ 119.820259][ T6283] ? __x64_sys_openat+0x139/0x160 [ 119.825311][ T6283] ? verify_lock_unused+0x140/0x140 [ 119.830536][ T6283] ? do_filp_open+0x430/0x430 [ 119.835256][ T6283] do_filp_open+0x1f2/0x430 [ 119.839793][ T6283] ? vfs_tmpfile+0x620/0x620 [ 119.844442][ T6283] ? _raw_spin_unlock+0x28/0x40 [ 119.849319][ T6283] ? alloc_fd+0x590/0x640 [ 119.853681][ T6283] do_sys_openat2+0x134/0x1d0 [ 119.858388][ T6283] ? do_sys_open+0xe0/0xe0 [ 119.862838][ T6283] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 119.868855][ T6283] ? lock_chain_count+0x20/0x20 [ 119.873737][ T6283] __x64_sys_openat+0x139/0x160 [ 119.878619][ T6283] do_syscall_64+0x55/0xb0 [ 119.883058][ T6283] ? clear_bhb_loop+0x40/0x90 [ 119.887754][ T6283] ? clear_bhb_loop+0x40/0x90 [ 119.892455][ T6283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 119.898384][ T6283] RIP: 0033:0x7fbd0f15e98e [ 119.902834][ T6283] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 119.922478][ T6283] RSP: 002b:00007fbd1010eec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 119.930933][ T6283] RAX: ffffffffffffffda RBX: 00007fbd1010f6c0 RCX: 00007fbd0f15e98e [ 119.938938][ T6283] RDX: 0000000000000002 RSI: 00007fbd1010ef90 RDI: ffffffffffffff9c [ 119.946942][ T6283] RBP: 00007fbd0f23503b R08: 0000000000000000 R09: 0000000000000000 [ 119.954939][ T6283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.962936][ T6283] R13: 00007fbd0f426128 R14: 00007fbd0f426090 R15: 00007ffdeff1b7f8 [ 119.970955][ T6283] [ 121.783431][ T6300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.87'. [ 122.021476][ T6303] loop2: detected capacity change from 0 to 16 [ 122.180026][ T6303] erofs: (device loop2): mounted with root inode @ nid 36. [ 122.633178][ T27] audit: type=1800 audit(1789057163.942:2): pid=6303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.86" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 122.893893][ T6309] loop2: detected capacity change from 0 to 1024 [ 122.901401][ T6309] EXT4-fs: Ignoring removed oldalloc option [ 122.918967][ T6309] EXT4-fs: Ignoring removed oldalloc option [ 122.928791][ T6300] team0: Port device team_slave_0 removed [ 122.956498][ T6309] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 123.011444][ T6309] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.282548][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.421548][ T6332] capability: warning: `syz.0.94' uses 32-bit capabilities (legacy support in use) [ 129.524084][ T6356] tipc: Cannot configure node identity twice [ 131.813690][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 132.897372][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.948436][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.392996][ T6340] syz.1.96 (6340) used greatest stack depth: 20328 bytes left [ 134.783541][ T6440] loop1: detected capacity change from 0 to 2048 [ 135.065505][ T6440] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.005959][ T6453] tipc: Cannot configure node identity twice [ 136.038442][ T6453] tipc: Enabled bearer , priority 0 [ 136.074071][ T6453] tipc: Resetting bearer [ 136.125215][ T6453] tipc: Disabling bearer [ 136.137495][ T6458] netlink: 'syz.2.116': attribute type 1 has an invalid length. [ 136.168548][ T6458] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.209858][ T6460] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 137.385891][ T6470] loop3: detected capacity change from 0 to 512 [ 137.436721][ T6470] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 137.506941][ T6470] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 137.748998][ T6470] EXT4-fs (loop3): 1 truncate cleaned up [ 137.766024][ T5088] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 137.768325][ T6470] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.789316][ T5088] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 137.797691][ T5088] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 137.917994][ T5088] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 137.929287][ T5088] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 137.940542][ T5088] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 139.036766][ T5779] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 139.126699][ T5779] EXT4-fs (loop3): Remounting filesystem read-only [ 139.378675][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.395010][ T6481] chnl_net:caif_netlink_parms(): no params data found [ 139.519221][ T3436] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.785732][ T3436] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.013211][ T5088] Bluetooth: hci3: command tx timeout [ 140.109677][ T3436] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.170494][ T6481] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.196081][ T6481] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.203392][ T6481] bridge_slave_0: entered allmulticast mode [ 140.211156][ T6481] bridge_slave_0: entered promiscuous mode [ 140.246245][ T3436] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.267835][ T6481] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.282832][ T6481] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.298743][ T6481] bridge_slave_1: entered allmulticast mode [ 140.322291][ T6481] bridge_slave_1: entered promiscuous mode [ 140.357535][ T6502] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 140.434699][ T6481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.486323][ T6481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.625103][ T6481] team0: Port device team_slave_0 added [ 140.696192][ T6481] team0: Port device team_slave_1 added [ 140.806300][ T6481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.928354][ T6481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.014867][ T6481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.027613][ T6481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.035046][ T6481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.062436][ T6481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.078728][ T3436] tipc: Left network mode [ 141.984345][ T6481] hsr_slave_0: entered promiscuous mode [ 142.031013][ T6481] hsr_slave_1: entered promiscuous mode [ 142.081965][ T6481] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.113221][ T5088] Bluetooth: hci3: command tx timeout [ 142.133141][ T6481] Cannot create hsr debugfs directory [ 142.344165][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 142.356243][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 142.374983][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 142.390412][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 142.404906][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 142.417878][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 143.304052][ T6544] fuse: Bad value for 'fd' [ 144.193210][ T51] Bluetooth: hci3: command tx timeout [ 144.573395][ T51] Bluetooth: hci2: command tx timeout [ 145.048916][ T6481] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 145.093289][ T6527] chnl_net:caif_netlink_parms(): no params data found [ 145.140709][ T6568] netlink: 'syz.2.143': attribute type 1 has an invalid length. [ 145.212844][ T6481] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 145.331724][ T6570] veth3: entered allmulticast mode [ 145.357401][ T6570] bond2: (slave veth3): Enslaving as an active interface with a down link [ 145.520418][ T6575] bond1: (slave veth0_to_bond): Releasing backup interface [ 145.551639][ T6575] bond2: (slave veth0_to_bond): making interface the new active one [ 145.575131][ T6575] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 145.671070][ T6481] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 145.681494][ T6481] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 145.852462][ T3436] hsr_slave_0: left promiscuous mode [ 145.874141][ T3436] hsr_slave_1: left promiscuous mode [ 145.924934][ T3436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.963169][ T3436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.989384][ T3436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.012121][ T3436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.021011][ T3436] bridge_slave_1: left allmulticast mode [ 146.027484][ T3436] bridge_slave_1: left promiscuous mode [ 146.037434][ T3436] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.919422][ T51] Bluetooth: hci3: command tx timeout [ 146.924975][ T5088] Bluetooth: hci2: command tx timeout [ 146.957532][ T3436] bridge_slave_0: left allmulticast mode [ 146.968521][ T3436] bridge_slave_0: left promiscuous mode [ 146.983352][ T3436] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.080883][ T3436] veth1_macvtap: left promiscuous mode [ 147.093354][ T3436] veth0_macvtap: left promiscuous mode [ 147.099139][ T3436] veth1_vlan: left promiscuous mode [ 147.112258][ T3436] veth0_vlan: left promiscuous mode [ 149.574899][ T51] Bluetooth: hci2: command tx timeout [ 149.809389][ T3436] team0 (unregistering): Port device team_slave_1 removed [ 149.864994][ T3436] team0 (unregistering): Port device team_slave_0 removed [ 149.919040][ T3436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.975440][ T3436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.462678][ T6620] "syz.2.154" (6620) uses obsolete ecb(arc4) skcipher [ 151.325620][ T6624] netlink: 168 bytes leftover after parsing attributes in process `syz.0.151'. [ 151.613152][ T51] Bluetooth: hci2: command tx timeout [ 151.626785][ T6630] process 'syz.0.158' launched '/dev/fd/-1/./proc' with NULL argv: empty string added [ 151.655300][ T3436] bond0 (unregistering): Released all slaves [ 151.922812][ T6527] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.953011][ T6527] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.963693][ T6527] bridge_slave_0: entered allmulticast mode [ 151.980722][ T6527] bridge_slave_0: entered promiscuous mode [ 151.991102][ T6527] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.998556][ T6527] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.016888][ T6527] bridge_slave_1: entered allmulticast mode [ 152.031197][ T6527] bridge_slave_1: entered promiscuous mode [ 152.058732][ T6634] netlink: 28 bytes leftover after parsing attributes in process `syz.0.160'. [ 152.952886][ T6527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.965669][ T6527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.049679][ T6481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.205696][ T6648] netlink: 'syz.2.162': attribute type 4 has an invalid length. [ 153.256012][ T6527] team0: Port device team_slave_0 added [ 153.274595][ T6527] team0: Port device team_slave_1 added [ 153.292755][ T6648] netlink: 'syz.2.162': attribute type 4 has an invalid length. [ 153.329057][ T6481] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.348376][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.361263][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.389948][ T6527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.430456][ T1079] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.437713][ T1079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.490173][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.497461][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.518586][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.528737][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.562060][ T6527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.729515][ T6527] hsr_slave_0: entered promiscuous mode [ 153.755033][ T6527] hsr_slave_1: entered promiscuous mode [ 153.792015][ T6527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.800742][ T6527] Cannot create hsr debugfs directory [ 154.363970][ T5784] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 154.833257][ T5784] usb 3-1: config index 0 descriptor too short (expected 78, got 18) [ 154.841618][ T5784] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.914584][ T5784] usb 3-1: config 0 has no interfaces? [ 154.946736][ T5784] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 154.973691][ T5784] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 155.002702][ T5784] usb 3-1: Product: syz [ 155.022888][ T5784] usb 3-1: Manufacturer: syz [ 155.028887][ T6527] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 155.030597][ T5784] usb 3-1: SerialNumber: syz [ 155.048586][ T6527] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 155.074875][ T5784] usb 3-1: config 0 descriptor?? [ 155.090644][ T6527] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 155.122236][ T6527] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 155.197282][ T6481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.321357][ T6527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.355210][ T6527] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.387854][ T5917] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.395080][ T5917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.418750][ T6668] tipc: Enabled bearer , priority 0 [ 155.453830][ T5158] usb 3-1: USB disconnect, device number 2 [ 155.508969][ T6667] tipc: Disabling bearer [ 155.531199][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.538425][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.927218][ T6481] veth0_vlan: entered promiscuous mode [ 155.966904][ T6481] veth1_vlan: entered promiscuous mode [ 156.999051][ T6527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.028307][ T6481] veth0_macvtap: entered promiscuous mode [ 157.058845][ T6481] veth1_macvtap: entered promiscuous mode [ 157.127708][ T6481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.163121][ T6481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.172981][ T6481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.223316][ T6481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.229583][ T6722] loop2: detected capacity change from 0 to 512 [ 157.256225][ T6481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.278525][ T6722] EXT4-fs (loop2): orphan cleanup on readonly fs [ 157.283197][ T6481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.297203][ T6481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.308392][ T6481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.320236][ T6481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.330585][ T6481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.341304][ T6481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.354676][ T6481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.365201][ T6481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.377716][ T6481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.395851][ T6722] EXT4-fs error (device loop2): ext4_find_extent:947: inode #4: comm syz.2.172: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 157.440457][ T6481] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.459858][ T6481] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.476071][ T6481] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.493229][ T6722] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=-117 [ 157.503003][ T6722] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 157.508774][ T6481] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.545750][ T6722] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 157.573937][ T6722] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 157.785268][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.824075][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.920704][ T5917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.963978][ T5917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.154485][ T6527] veth0_vlan: entered promiscuous mode [ 158.170898][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.208642][ T6527] veth1_vlan: entered promiscuous mode [ 158.280178][ T6738] netlink: 'syz.4.121': attribute type 1 has an invalid length. [ 158.320203][ T6527] veth0_macvtap: entered promiscuous mode [ 158.405722][ T6527] veth1_macvtap: entered promiscuous mode [ 158.450664][ T6741] syzkaller0: entered promiscuous mode [ 158.458077][ T6741] syzkaller0: entered allmulticast mode [ 158.526924][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.572162][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.587709][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.598532][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.609466][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.620268][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.641399][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.658568][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.670347][ T6527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.765131][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.784363][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.817660][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.843742][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.890537][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.932325][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.960484][ T6527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.003231][ T6527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.030264][ T6527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.035673][ T6754] Bluetooth: MGMT ver 1.22 [ 159.087258][ T6527] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.117292][ T6527] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.163137][ T6527] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.171883][ T6527] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.360886][ T6750] loop4: detected capacity change from 0 to 40427 [ 159.412102][ T6750] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 159.466636][ T6750] F2FS-fs (loop4): Image doesn't support compression [ 159.480627][ T5917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.509710][ T6750] F2FS-fs (loop4): Image doesn't support compression [ 159.525354][ T5917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.557974][ T6750] F2FS-fs (loop4): invalid crc value [ 159.599238][ T6750] F2FS-fs (loop4): Found nat_bits in checkpoint [ 159.616128][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.644982][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.759929][ T6750] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 159.794477][ T6761] binder: 6760:6761 ioctl c0306201 200000000380 returned -14 [ 160.324335][ T6788] tipc: Enabling of bearer rejected, failed to enable media [ 160.427788][ T6794] netdevsim netdevsim5: loading /lib/firmware// failed with error -22 [ 160.436451][ T6794] netdevsim netdevsim5: Direct firmware load for / failed with error -22 [ 160.445045][ T6794] netdevsim netdevsim5: Falling back to sysfs fallback for: / [ 161.562180][ T6481] F2FS-fs (loop4): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x4c3/0x1910 [ 161.643696][ T6481] F2FS-fs (loop4): invalid blkaddr: 1535, type: 10, run fsck to fix. [ 162.852804][ T6812] syz_tun: entered promiscuous mode [ 162.888861][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.187'. [ 162.918529][ T6812] syz_tun: left promiscuous mode [ 162.969259][ T6816] syz_tun: entered promiscuous mode [ 162.996959][ T6816] bridge0: port 3(syz_tun) entered blocking state [ 163.005207][ T6816] bridge0: port 3(syz_tun) entered disabled state [ 163.012041][ T6816] syz_tun: entered allmulticast mode [ 163.021073][ T6816] bridge0: port 3(syz_tun) entered blocking state [ 163.028422][ T6816] bridge0: port 3(syz_tun) entered forwarding state [ 163.047490][ T6824] loop4: detected capacity change from 0 to 256 [ 165.248933][ T6843] ip_tables: iptables: counters copy to user failed while replacing table [ 165.402868][ T6850] syzkaller0: entered promiscuous mode [ 165.442511][ T6850] syzkaller0: entered allmulticast mode [ 165.656975][ T6859] binder: 6858:6859 ioctl c0306201 200000000080 returned -14 [ 165.672310][ T6859] loop5: detected capacity change from 0 to 512 [ 165.690147][ T6859] EXT4-fs: Ignoring removed orlov option [ 165.701640][ T6859] EXT4-fs: Ignoring removed nomblk_io_submit option [ 165.725073][ T6859] EXT4-fs: Mount option(s) incompatible with ext2 [ 167.045022][ T6859] binder: 6858:6859 ioctl c0306201 2000000003c0 returned -14 [ 167.289557][ T6873] netlink: 'syz.4.203': attribute type 4 has an invalid length. [ 168.260837][ T6885] syzkaller0: entered promiscuous mode [ 168.293163][ T6885] syzkaller0: entered allmulticast mode [ 168.536412][ T6895] bridge_slave_0: left allmulticast mode [ 168.546479][ T6895] bridge_slave_0: left promiscuous mode [ 168.553794][ T6895] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.589886][ T6895] bridge_slave_1: left allmulticast mode [ 168.616344][ T6895] bridge_slave_1: left promiscuous mode [ 168.634478][ T6895] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.694288][ T6895] bond0: (slave bond_slave_0): Releasing backup interface [ 168.772407][ T6895] bond0: (slave bond_slave_1): Releasing backup interface [ 168.842160][ T6895] team0: Port device team_slave_0 removed [ 168.891236][ T6895] team0: Port device team_slave_1 removed [ 168.910190][ T6895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.929536][ T6895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.950699][ T6895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.958443][ T970] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 168.973831][ T6895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.182890][ T970] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 169.211036][ T970] usb 6-1: config 0 has no interface number 0 [ 169.243520][ T970] usb 6-1: config 0 interface 41 has no altsetting 0 [ 169.265051][ T970] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 169.290033][ T970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.319629][ T970] usb 6-1: Product: syz [ 169.325037][ T970] usb 6-1: Manufacturer: syz [ 169.329673][ T970] usb 6-1: SerialNumber: syz [ 169.364193][ T970] usb 6-1: config 0 descriptor?? [ 170.064648][ T6943] loop2: detected capacity change from 0 to 512 [ 170.140534][ T6943] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.202932][ T6943] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.224991][ T970] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 170.371262][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.488658][ T6953] syzkaller0: entered promiscuous mode [ 170.500013][ T6953] syzkaller0: entered allmulticast mode [ 172.354827][ T970] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffe0 [ 172.864051][ T970] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffe0 [ 173.255611][ T6974] loop2: detected capacity change from 0 to 4096 [ 173.362336][ T6978] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 173.516555][ T27] audit: type=1800 audit(1789057215.202:3): pid=6974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.226" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 173.548724][ T970] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 173.589075][ T970] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 173.628053][ T970] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 173.657082][ T970] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 173.675673][ T970] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 173.720458][ T970] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 173.754994][ T970] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 173.778169][ T970] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 173.810583][ T970] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0336:ffffffb9 [ 173.833737][ T970] CoreChips: probe of 6-1:0.41 failed with error -71 [ 173.873986][ T970] usb 6-1: USB disconnect, device number 2 [ 173.923140][ T9] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 176.407247][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 177.693850][ T9] usb 3-1: no configurations [ 177.698506][ T9] usb 3-1: can't read configurations, error -22 [ 178.350362][ T7022] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7022] [ 178.598352][ T7032] lo: entered allmulticast mode [ 178.604183][ T7032] bond0: entered allmulticast mode [ 178.611969][ T7032] dummy0: entered allmulticast mode [ 178.618542][ T7032] eql: entered allmulticast mode [ 178.625560][ T7032] ifb0: entered allmulticast mode [ 178.631340][ T7032] ifb1: entered allmulticast mode [ 178.637502][ T7032] virtio_net virtio1 eth0: entered allmulticast mode [ 178.645929][ T7032] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 178.657463][ T7032] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 178.668039][ T7032] hwsim0: entered allmulticast mode [ 178.674568][ T7032] ieee802154 phy0 wpan0: entered allmulticast mode [ 178.710936][ T7032] ieee802154 phy1 wpan1: entered allmulticast mode [ 178.732765][ T7032] teql0: entered allmulticast mode [ 178.755619][ T7032] tunl0: entered allmulticast mode [ 178.785842][ T7032] gre0: entered allmulticast mode [ 178.808655][ T7032] gretap0: entered allmulticast mode [ 178.829900][ T7032] erspan0: entered allmulticast mode [ 178.854903][ T7032] ip_vti0: entered allmulticast mode [ 178.885488][ T7032] ip6_vti0: entered allmulticast mode [ 178.915870][ T7032] sit0: entered allmulticast mode [ 178.960890][ T7032] ip6tnl0: entered allmulticast mode [ 179.011450][ T7032] ip6gre0: entered allmulticast mode [ 179.062774][ T7032] nr0: entered allmulticast mode [ 179.123514][ T7032] nr1: entered allmulticast mode [ 179.210540][ T7032] nr2: entered allmulticast mode [ 179.751202][ T7032] nr3: entered allmulticast mode [ 180.610598][ T7032] nr4: entered allmulticast mode [ 180.629152][ T7032] nr5: entered allmulticast mode [ 180.643934][ T7032] nr6: entered allmulticast mode [ 180.649109][ T7032] nr7: entered allmulticast mode [ 180.668577][ T7032] nr8: entered allmulticast mode [ 180.675479][ T7032] nr9: entered allmulticast mode [ 180.680638][ T7032] nr10: entered allmulticast mode [ 180.836030][ T7032] nr11: entered allmulticast mode [ 180.841789][ T7032] nr12: entered allmulticast mode [ 180.847395][ T7032] nr13: entered allmulticast mode [ 180.852527][ T7032] nr14: entered allmulticast mode [ 180.866548][ T7032] nr15: entered allmulticast mode [ 180.871887][ T7032] nr16: entered allmulticast mode [ 180.877060][ T7032] nr17: entered allmulticast mode [ 180.882840][ T7032] nr18: entered allmulticast mode [ 180.891693][ T7032] nr19: entered allmulticast mode [ 180.913198][ T7032] nr20: entered allmulticast mode [ 180.938746][ T7032] nr21: entered allmulticast mode [ 180.949472][ T7032] nr22: entered allmulticast mode [ 180.959914][ T7032] nr23: entered allmulticast mode [ 180.971823][ T7032] nr24: entered allmulticast mode [ 180.979274][ T7032] nr25: entered allmulticast mode [ 180.988916][ T7032] nr26: entered allmulticast mode [ 181.133170][ T7032] nr27: entered allmulticast mode [ 181.138335][ T7032] nr28: entered allmulticast mode [ 181.182779][ T7032] nr29: entered allmulticast mode [ 181.243192][ T7032] nr30: entered allmulticast mode [ 181.248367][ T7032] nr31: entered allmulticast mode [ 181.265104][ T7032] rose0: entered allmulticast mode [ 181.270337][ T7032] rose1: entered allmulticast mode [ 181.284910][ T7032] rose2: entered allmulticast mode [ 181.290145][ T7032] rose3: entered allmulticast mode [ 181.313537][ T7032] rose4: entered allmulticast mode [ 181.318797][ T7032] rose5: entered allmulticast mode [ 181.343829][ T7032] rose6: entered allmulticast mode [ 181.349089][ T7032] rose7: entered allmulticast mode [ 181.373377][ T7032] rose8: entered allmulticast mode [ 181.398273][ T7032] rose9: entered allmulticast mode [ 181.415143][ T7032] rose10: entered allmulticast mode [ 181.420478][ T7032] rose11: entered allmulticast mode [ 181.451049][ T7032] rose12: entered allmulticast mode [ 181.473351][ T7032] rose13: entered allmulticast mode [ 181.479139][ T7032] rose14: entered allmulticast mode [ 181.494967][ T7032] rose15: entered allmulticast mode [ 181.500404][ T7032] rose16: entered allmulticast mode [ 181.509619][ T7032] rose17: entered allmulticast mode [ 181.518726][ T7032] rose18: entered allmulticast mode [ 181.527741][ T7032] rose19: entered allmulticast mode [ 181.537310][ T7032] rose20: entered allmulticast mode [ 181.543710][ T7032] rose21: entered allmulticast mode [ 181.549081][ T7032] rose22: entered allmulticast mode [ 181.559205][ T7032] rose23: entered allmulticast mode [ 181.572879][ T7032] rose24: entered allmulticast mode [ 181.582572][ T7032] rose25: entered allmulticast mode [ 181.591488][ T7032] rose26: entered allmulticast mode [ 181.599417][ T7032] rose27: entered allmulticast mode [ 181.608332][ T7032] rose28: entered allmulticast mode [ 181.616274][ T7032] rose29: entered allmulticast mode [ 181.628275][ T7032] rose30: entered allmulticast mode [ 181.636377][ T7032] rose31: entered allmulticast mode [ 181.642092][ T7032] bpq0: entered allmulticast mode [ 181.650942][ T7032] lapb0: entered allmulticast mode [ 181.659416][ T7032] bpq1: entered allmulticast mode [ 181.668253][ T7032] lapb1: entered allmulticast mode [ 181.678607][ T7032] bpq2: entered allmulticast mode [ 181.689346][ T7032] lapb2: entered allmulticast mode [ 181.701819][ T7032] bpq3: entered allmulticast mode [ 181.712642][ T7032] lapb3: entered allmulticast mode [ 181.721179][ T7032] bpq4: entered allmulticast mode [ 181.729907][ T7032] lapb4: entered allmulticast mode [ 181.738115][ T7032] bpq5: entered allmulticast mode [ 181.746921][ T7032] lapb5: entered allmulticast mode [ 181.752783][ T7032] lowpan0: entered allmulticast mode [ 181.761238][ T7032] netdevsim netdevsim3 eth1: entered allmulticast mode [ 181.772163][ T7032] netdevsim netdevsim3 eth2: entered allmulticast mode [ 181.783330][ T7032] netdevsim netdevsim3 eth3: entered allmulticast mode [ 181.796087][ T7032] netdevsim netdevsim3 eth4: entered allmulticast mode [ 181.803439][ T7032] bpq6: entered allmulticast mode [ 181.808991][ T7032] lapb6: entered allmulticast mode [ 181.814768][ T7032] bpq7: entered allmulticast mode [ 181.819935][ T7032] lapb7: entered allmulticast mode [ 181.825470][ T7032] bpq8: entered allmulticast mode [ 181.830793][ T7032] lapb8: entered allmulticast mode [ 181.836402][ T7032] bpq9: entered allmulticast mode [ 181.841694][ T7032] lapb9: entered allmulticast mode [ 184.274600][ T7107] loop4: detected capacity change from 0 to 256 [ 184.281997][ T7107] exfat: Deprecated parameter 'utf8' [ 185.437670][ T7107] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x265d2142, utbl_chksum : 0xe619d30d) [ 187.123557][ T5158] IPVS: starting estimator thread 0... [ 187.220558][ T7120] IPVS: using max 20 ests per chain, 48000 per kthread [ 188.633980][ T7158] syzkaller0: entered promiscuous mode [ 188.639857][ T7158] syzkaller0: entered allmulticast mode [ 188.674850][ T7158] tipc: Started in network mode [ 188.679778][ T7158] tipc: Node identity a61f3cfa72d1, cluster identity 4711 [ 188.721778][ T7158] tipc: Enabled bearer , priority 0 [ 188.789485][ T7158] tipc: Resetting bearer [ 188.891811][ T7157] tipc: Resetting bearer [ 189.728011][ T7157] tipc: Disabling bearer [ 190.509456][ T7188] syz.4.265 uses obsolete (PF_INET,SOCK_PACKET) [ 190.742490][ T7191] loop5: detected capacity change from 0 to 128 [ 190.786238][ T7183] netlink: 'syz.4.265': attribute type 9 has an invalid length. [ 190.840765][ T7183] netlink: 399 bytes leftover after parsing attributes in process `syz.4.265'. [ 190.982173][ T7188] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.100259][ T7194] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 191.167936][ T7194] kvm: pic: level sensitive irq not supported [ 191.168602][ T7194] kvm: pic: non byte read [ 191.197641][ T7194] kvm: pic: level sensitive irq not supported [ 191.197712][ T7194] kvm: pic: non byte read [ 191.212561][ T7188] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.228631][ T7194] kvm: pic: level sensitive irq not supported [ 191.228803][ T7194] kvm: pic: non byte read [ 191.267864][ T7194] kvm: pic: level sensitive irq not supported [ 191.268985][ T7194] kvm: pic: non byte read [ 192.037545][ T7194] kvm: pic: level sensitive irq not supported [ 192.037845][ T7194] kvm: pic: non byte read [ 192.061459][ T7194] kvm: pic: level sensitive irq not supported [ 192.061530][ T7194] kvm: pic: non byte read [ 192.129835][ T7194] kvm: pic: level sensitive irq not supported [ 192.129904][ T7194] kvm: pic: non byte read [ 192.322862][ T7188] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.545595][ T7188] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.572240][ T7217] tipc: New replicast peer: 172.20.20.187 [ 192.591547][ T7217] tipc: Enabled bearer , priority 10 [ 192.725088][ T7188] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.747262][ T7188] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.783658][ T7188] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.825656][ T7188] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.253925][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 193.663501][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 193.770439][ T5854] tipc: Node number set to 3570285818 [ 194.066644][ T7244] loop4: detected capacity change from 0 to 1024 [ 194.239528][ T7244] EXT4-fs: Ignoring removed oldalloc option [ 194.259024][ T7244] EXT4-fs: Ignoring removed orlov option [ 195.434457][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.443134][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.508402][ T7244] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.573908][ T7244] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.015282][ T7261] mmap: syz.4.277 (7261) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 196.248507][ T7261] syz.4.277 (7261) used greatest stack depth: 20248 bytes left [ 196.413366][ T5794] Bluetooth: hci1: command 0x0406 tx timeout [ 196.415471][ T5788] Bluetooth: hci0: command 0x0406 tx timeout [ 196.618652][ T6481] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 201.723396][ T7319] netlink: 'syz.4.288': attribute type 1 has an invalid length. [ 201.830521][ T7319] 8021q: adding VLAN 0 to HW filter on device bond1 [ 201.843552][ T7328] netlink: 24 bytes leftover after parsing attributes in process `syz.4.288'. [ 203.075306][ T7333] netlink: 2 bytes leftover after parsing attributes in process `syz.5.290'. [ 203.120303][ T7328] veth3: entered allmulticast mode [ 203.147528][ T7328] bond1: (slave veth3): Enslaving as an active interface with a down link [ 203.214308][ T7319] bond1: (slave veth0_to_bond): making interface the new active one [ 203.254958][ T7319] veth0_to_bond: entered promiscuous mode [ 203.261123][ T7319] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 203.335447][ T7336] bond1: entered promiscuous mode [ 203.340785][ T7336] bond1: entered allmulticast mode [ 203.353929][ T7336] veth0_to_bond: entered allmulticast mode [ 203.371039][ T7337] macvlan2: entered promiscuous mode [ 203.903518][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 204.217650][ T7337] macvlan2: entered allmulticast mode [ 204.246336][ T7337] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 204.304365][ T7337] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth3 [ 204.448801][ T7351] warning: `syz.2.295' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 204.841817][ T7362] tc action pedit unable to extract header offset for header type (0x4) [ 204.850629][ T7362] tc action pedit unable to extract header offset for header type (0x4) [ 204.859086][ T7362] tc action pedit unable to extract header offset for header type (0x4) [ 204.867828][ T7362] tc action pedit unable to extract header offset for header type (0x4) [ 204.876215][ T7362] tc action pedit unable to extract header offset for header type (0x4) [ 204.884611][ T7362] tc action pedit unable to extract header offset for header type (0x4) [ 204.892986][ T7362] tc action pedit unable to extract header offset for header type (0x4) [ 204.901382][ T7362] tc action pedit unable to extract header offset for header type (0x4) [ 204.909772][ T7362] tc action pedit unable to extract header offset for header type (0x4) [ 204.918153][ T7362] tc action pedit unable to extract header offset for header type (0x4) [ 204.926548][ T7362] 0: reclassify loop, rule prio 0, protocol 800 [ 205.148628][ T7368] loop4: detected capacity change from 0 to 2048 [ 205.251046][ T7368] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.339443][ T7368] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.584623][ T6481] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.865972][ T51] Bluetooth: hci2: link tx timeout [ 214.871358][ T51] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 214.881873][ T51] Bluetooth: hci2: link tx timeout [ 214.887193][ T51] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 214.986341][ T51] Bluetooth: hci2: link tx timeout [ 214.991710][ T51] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 217.113291][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 217.430866][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 221.635244][ T7492] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 223.702868][ T7494] overlayfs: failed to clone upperpath [ 225.827884][ T27] audit: type=1804 audit(1789057267.512:4): pid=6481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/30/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 226.142065][ T7516] syzkaller0: entered promiscuous mode [ 226.149929][ T7516] syzkaller0: entered allmulticast mode [ 226.171025][ T7516] tipc: Enabled bearer , priority 0 [ 226.187685][ T7516] tipc: Resetting bearer [ 227.123794][ T7515] tipc: Resetting bearer [ 227.183820][ T7515] tipc: Disabling bearer [ 227.442881][ T5142] udevd[5142]: could not touch /run/udev/queue: No such file or directory [ 230.433878][ T5788] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 230.444078][ T5788] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 230.453373][ T5788] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 230.463291][ T5788] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 230.473471][ T5788] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 230.480815][ T5788] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 230.494383][ T7549] kvm: pic: level sensitive irq not supported [ 230.494788][ T7549] kvm: pic: level sensitive irq not supported [ 230.547917][ T7549] kvm: pic: level sensitive irq not supported [ 230.577694][ T7549] kvm: pic: level sensitive irq not supported [ 230.615647][ T7549] kvm: pic: level sensitive irq not supported [ 230.665055][ T7549] kvm: pic: level sensitive irq not supported [ 230.707035][ T7549] kvm: pic: level sensitive irq not supported [ 231.012991][ T5896] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.217280][ T5896] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.978006][ T5896] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.087395][ T5896] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.451508][ T7562] tipc: Enabling of bearer rejected, failed to enable media [ 233.094087][ T7577] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 233.133900][ T7577] netlink: 'syz.0.337': attribute type 2 has an invalid length. [ 233.187373][ T7576] netlink: 68 bytes leftover after parsing attributes in process `syz.5.341'. [ 233.268798][ T5088] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 233.284040][ T5088] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 233.295857][ T5088] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 233.311833][ T5088] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 233.321694][ T5088] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 233.330230][ T5088] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 234.113606][ T7583] fuse: Bad value for 'fd' [ 236.740114][ T5088] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 237.602282][ T5088] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 237.611955][ T5088] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 237.622292][ T5088] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 237.629934][ T5088] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 237.637349][ T5088] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 238.763195][ T5896] hsr_slave_0: left promiscuous mode [ 238.793629][ T5896] hsr_slave_1: left promiscuous mode [ 238.814777][ T5896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.839332][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.881061][ T5896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.923134][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.977493][ T5896] bridge_slave_1: left allmulticast mode [ 238.987529][ T5896] bridge_slave_1: left promiscuous mode [ 239.000660][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.019253][ T5896] bridge_slave_0: left allmulticast mode [ 239.033116][ T5896] bridge_slave_0: left promiscuous mode [ 239.043983][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.232680][ T5896] veth1_macvtap: left promiscuous mode [ 239.239368][ T5896] veth0_macvtap: left promiscuous mode [ 239.253219][ T5896] veth1_vlan: left promiscuous mode [ 239.263458][ T5896] veth0_vlan: left promiscuous mode [ 240.353696][ T5896] bond1 (unregistering): (slave veth3): Releasing active interface [ 241.669063][ T7635] overlayfs: overlapping lowerdir path [ 242.595288][ T7635] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 242.837391][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 242.848061][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 242.856546][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 242.874209][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 242.882914][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 242.890853][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 244.620771][ T5896] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 244.642035][ T5896] veth0_to_bond (unregistering): left allmulticast mode [ 244.651564][ T5896] veth0_to_bond (unregistering): left promiscuous mode [ 244.690529][ T5896] bond1 (unregistering): Released all slaves [ 245.313778][ T27] audit: type=1800 audit(1789057286.932:5): pid=7654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.353" name="max_speed" dev="configfs" ino=13590 res=0 errno=0 [ 249.535412][ T5088] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 249.561503][ T5088] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 249.574334][ T5088] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 249.603807][ T5088] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 249.633328][ T5088] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 249.640634][ T5088] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 249.729155][ T5896] team0 (unregistering): Port device team_slave_1 removed [ 249.973859][ T5896] team0 (unregistering): Port device team_slave_0 removed [ 250.162270][ T5896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.384631][ T5896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.437223][ T5896] bond0 (unregistering): Released all slaves [ 253.481477][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 253.515874][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 253.532387][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 253.541928][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 253.550957][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 253.563768][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 254.120352][ T7704] kvm: kvm [7700]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080 [ 255.792499][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.814158][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.094860][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 256.129016][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 256.137206][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 256.145774][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 256.161460][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 256.173489][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 256.400784][ T5896] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.037445][ T5896] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.201800][ T5896] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.298310][ T5896] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.613425][ T27] audit: type=1800 audit(1789057302.282:6): pid=7792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.374" name="file0" dev="overlay" ino=564 res=0 errno=0 [ 262.563639][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 263.959003][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 263.967428][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 263.985177][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 264.014098][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 264.022927][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 264.168582][ T5896] hsr_slave_0: left promiscuous mode [ 264.223446][ T5896] hsr_slave_1: left promiscuous mode [ 264.234259][ T5896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.241698][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.296268][ T5896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.323106][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.353956][ T5896] bridge_slave_1: left allmulticast mode [ 264.359652][ T5896] bridge_slave_1: left promiscuous mode [ 264.383405][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.464070][ T5896] bridge_slave_0: left allmulticast mode [ 264.469772][ T5896] bridge_slave_0: left promiscuous mode [ 264.514590][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.723550][ T5896] veth1_macvtap: left promiscuous mode [ 264.729905][ T5896] veth0_macvtap: left promiscuous mode [ 264.774544][ T5896] veth1_vlan: left promiscuous mode [ 264.779926][ T5896] veth0_vlan: left promiscuous mode [ 270.142076][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 270.152093][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 270.161367][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 270.170046][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 270.177847][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 270.192426][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 273.643704][ T5896] team0 (unregistering): Port device team_slave_1 removed [ 273.760524][ T5896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.798109][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 273.820130][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 273.848944][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 273.889546][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 273.903374][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 273.910797][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 273.943276][ T5896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.518428][ T7892] netlink: 24 bytes leftover after parsing attributes in process `syz.5.393'. [ 277.955123][ T5896] bond0 (unregistering): Released all slaves [ 279.572141][ T5088] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 279.582795][ T5088] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 279.593350][ T5088] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 279.602382][ T5088] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 279.610395][ T5088] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 279.618124][ T5088] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 285.144043][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 285.154371][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 285.162596][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 285.196783][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 285.204642][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 285.212602][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 289.254088][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 289.267510][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 289.276465][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 289.286225][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 289.297696][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 289.305968][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 293.833721][ T8023] loop2: detected capacity change from 0 to 256 [ 293.841276][ T8023] FAT-fs (loop2): Unrecognized mount option "shortname=winmt" or missing value [ 294.134877][ T5088] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 294.145338][ T5088] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 294.154082][ T5088] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 294.164534][ T5088] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 294.172806][ T5088] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 294.180704][ T5088] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 294.729243][ T7997] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 297.235394][ T8037] overlayfs: failed to clone upperpath [ 297.327784][ T5854] libceph: connect (1)[c::]:6789 error -101 [ 297.334527][ T5854] libceph: mon0 (1)[c::]:6789 connect error [ 297.459288][ T8037] ceph: No mds server is up or the cluster is laggy [ 297.933748][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 297.942856][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 297.951222][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 297.959017][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 297.966584][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 297.973848][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 304.004299][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 304.022547][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 304.031779][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 304.041489][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 304.049283][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 304.057805][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 308.666354][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 308.677612][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 308.686305][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 308.695601][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 308.703189][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 308.710425][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 309.182168][ T8121] netlink: 16 bytes leftover after parsing attributes in process `syz.2.436'. [ 310.259952][ T8131] bridge_slave_0: left allmulticast mode [ 310.281985][ T8131] bridge_slave_0: left promiscuous mode [ 310.298182][ T8131] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.331048][ T8131] bridge_slave_1: left allmulticast mode [ 310.352581][ T8131] bridge_slave_1: left promiscuous mode [ 310.381281][ T8131] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.459329][ T8131] bond2: (slave veth0_to_bond): Releasing active interface [ 310.525583][ T8131] bond0: (slave bond_slave_0): Releasing backup interface [ 310.569916][ T8131] bond0: (slave bond_slave_1): Releasing backup interface [ 310.676172][ T8131] team0: Port device team_slave_0 removed [ 310.714465][ T8131] team0: Port device team_slave_1 removed [ 310.738438][ T8131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.773172][ T8131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.799301][ T8131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.826698][ T8131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.903767][ T8131] bond2: (slave veth3): Releasing active interface [ 310.941247][ T8134] team0: Port device xfrm0 added [ 310.999072][ T8135] tipc: Enabled bearer , priority 0 [ 312.025980][ T5158] tipc: Node number set to 3806876282 [ 314.864265][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 314.874261][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 314.884511][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 314.895204][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 314.904177][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 314.911815][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 316.142939][ T8167] IPv6: NLM_F_REPLACE set, but no existing node found! [ 316.451973][ T8168] loop2: detected capacity change from 0 to 2048 [ 316.502528][ T8168] Alternate GPT is invalid, using primary GPT. [ 316.509317][ T8168] loop2: p1 p2 p3 [ 316.513214][ T8168] loop2: partition table partially beyond EOD, truncated [ 317.219145][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.225573][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.002389][ C0] hrtimer: interrupt took 1393250 ns [ 318.799370][ T8183] loop2: detected capacity change from 0 to 256 [ 318.809889][ T8183] exfat: Deprecated parameter 'namecase' [ 318.816734][ T8183] exfat: Deprecated parameter 'namecase' [ 320.014772][ T8183] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 320.393348][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 320.413955][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 320.425856][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 320.453615][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 320.465504][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 320.480148][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 320.596051][ T8195] binder: 8191:8195 ioctl 4018620d 0 returned -22 [ 326.635040][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 326.645905][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 326.662564][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 326.671294][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 326.679413][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 326.687956][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 335.384928][ T5088] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 335.396275][ T5088] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 335.409444][ T5088] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 335.443437][ T5088] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 335.452506][ T5088] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 335.460227][ T5088] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 335.667208][ T8241] SET target dimension over the limit! [ 337.603328][ T5088] Bluetooth: hci3: command tx timeout [ 339.259056][ T8246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.997331][ T5788] Bluetooth: hci2: command 0x0406 tx timeout [ 341.246317][ T8259] loop2: detected capacity change from 0 to 512 [ 341.306422][ T8259] EXT4-fs (loop2): Test dummy encryption mode enabled [ 341.314567][ T8259] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 341.341739][ T8259] EXT4-fs (loop2): 1 truncate cleaned up [ 341.354097][ T8259] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=6 req=334 state=3 status=67 (errno 9: Bad file descriptor) [ 341.832742][ T7893] bridge0: port 3(syz_tun) entered disabled state [ 341.919495][ T7893] syz_tun (unregistering): left allmulticast mode [ 341.927876][ T7893] syz_tun (unregistering): left promiscuous mode [ 341.935817][ T7893] bridge0: port 3(syz_tun) entered disabled state [ 341.958720][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.436314][ T3436] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.594040][ T5777] syz_tun (unregistering): left allmulticast mode [ 342.716892][ T3436] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.887031][ T3436] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.012118][ T3436] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.248860][ T3436] tipc: Disabling bearer [ 343.272522][ T3436] tipc: Left network mode [ 344.042659][ T3436] hsr_slave_0: left promiscuous mode [ 344.048854][ T3436] hsr_slave_1: left promiscuous mode [ 344.057589][ T3436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.065527][ T3436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.074842][ T3436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.082889][ T3436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.091622][ T3436] bridge_slave_1: left allmulticast mode [ 344.099597][ T3436] bridge_slave_1: left promiscuous mode [ 344.111788][ T3436] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.121631][ T3436] bridge_slave_0: left allmulticast mode [ 344.127796][ T3436] bridge_slave_0: left promiscuous mode [ 344.135336][ T3436] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.171827][ T3436] veth1_macvtap: left promiscuous mode [ 344.184632][ T3436] veth0_macvtap: left promiscuous mode [ 344.190333][ T3436] veth1_vlan: left promiscuous mode [ 344.198681][ T3436] veth0_vlan: left promiscuous mode [ 344.918571][ T3436] team0 (unregistering): Port device team_slave_1 removed [ 344.975528][ T3436] team0 (unregistering): Port device team_slave_0 removed [ 345.029794][ T3436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.082403][ T3436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.528713][ T3436] bond0 (unregistering): Released all slaves [ 346.009746][ T3436] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.088334][ T3436] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.166645][ T3436] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.233038][ T3436] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.446379][ T3436] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.541202][ T3436] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.627336][ T3436] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.727648][ T3436] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.947073][ T3436] tipc: Disabling bearer [ 346.965031][ T3436] tipc: Left network mode [ 346.991090][ T3436] tipc: Left network mode [ 347.575966][ T3436] team0: Port device xfrm0 removed [ 348.411291][ T3436] hsr_slave_0: left promiscuous mode [ 348.421620][ T3436] hsr_slave_1: left promiscuous mode [ 348.435071][ T3436] hsr_slave_0: left promiscuous mode [ 348.441086][ T3436] hsr_slave_1: left promiscuous mode [ 348.484488][ T3436] veth1_macvtap: left promiscuous mode [ 348.490103][ T3436] veth0_macvtap: left promiscuous mode [ 348.503166][ T3436] veth1_vlan: left promiscuous mode [ 348.508537][ T3436] veth0_vlan: left promiscuous mode [ 348.525408][ T3436] veth1_macvtap: left promiscuous mode [ 348.530970][ T3436] veth0_macvtap: left promiscuous mode [ 348.536707][ T3436] veth1_vlan: left promiscuous mode [ 348.542033][ T3436] veth0_vlan: left promiscuous mode [ 348.820767][ T3436] bond2 (unregistering): Released all slaves [ 348.971524][ T3436] bond1 (unregistering): Released all slaves [ 350.126315][ T3436] bond0 (unregistering): Released all slaves [ 351.046759][ T3436] bond0 (unregistering): Released all slaves