last executing test programs: 34m59.712664526s ago: executing program 32 (id=1): inotify_init() socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x3, 0x1, 0x8001, 0x0, 0xb49, 0x200000000002, 0x9, 0x1, 0x5}, 0x0) timer_create(0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x9, 0x8, 0x9, 0x6, 0xd3, 0x8, 0x7fffffffffffffff, 0xff}, &(0x7f0000000400), 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)}], 0x1) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 34m42.557796476s ago: executing program 33 (id=20): syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x20}}, 0x40011) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0x1, 0x0, 0x0) add_key(&(0x7f00000018c0)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000100)=0x6) socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x2ed1, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x1}, 0x20) 34m20.681782111s ago: executing program 34 (id=40): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r4}) setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000240)={@remote, @local, 0x1, "d0bf4b03920f95d6d806d3a83fe9f72c2bb760a2500b563aba7db19db4506dae", 0x3, 0x3cfe, 0x0, 0x1}, 0x3c) syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x561202) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000007c0)={0x28, 0x3, r4, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) clock_gettime(0x0, &(0x7f0000000040)) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x20000080) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4) 33m42.075691867s ago: executing program 35 (id=84): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r3 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x58ee, 0x800, 0x200, 0x13c}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x20040000}) io_uring_enter(r3, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 30m24.375442379s ago: executing program 36 (id=174): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, 0x0, &(0x7f0000000640)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x8970, &(0x7f0000000680)={'tunl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x10, 0x80, 0x1000, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, 0x2, 0x6, 0x1, 0x6000000}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x378, 0x180, 0x0, 0x2e0, 0x180, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv6=@local, [], @ipv4=@private, [], @ipv6=@private1}}}, @common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x218}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000580)=""/90) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, &(0x7f0000000480)) r6 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0x8, 0x0, 0x8, {0x8, 0xffffffff}, 0xfc, 0x9}}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xa, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x3000c11, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x33, 0x2d, 0x4e, 0x3a, 0x36, 0x2f, 0x34]}}}, 0x4e}]}) 29m31.75378472s ago: executing program 37 (id=213): fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=@v2={0x2000000, [{0x7fffffff, 0xb0de}, {0x87c}]}, 0x14, 0x0) socket$netlink(0x10, 0x3, 0x9) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0xbd7, 0x0, &(0x7f0000000dc0), &(0x7f0000000080)) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000180)=[{0x0, 0xe0}], 0x1, 0x0, 0x0, 0x20008020}, 0x8880) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a30000000034a010400000000000000000a0000080900010073797a310000000008000b400000000008000540fffffffd140000001100010000"], 0x58}, 0x1, 0x0, 0x0, 0x44050}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="c9d24560ea5130fba1bd898f349867157620c6ebdf0c207bb9e1baae9adec9c506f62153df096165d220a83e3564fa2dffa5647a379480dffc5ccf2814c1b0ea6e1797ab0d61fb60e41413dc9e3bf2c8bc1a36cef268392e996770806347c4a7c39fd7c72cdc755525b236f3f9d28324c9f24ab7d85975662fa6d986b82d4fdb609a2c33d7f91f1381dab486a9dcb2753a9659766dc6dd06980676b62b58a6b4d96470252d565aeeabd1ac2d2851"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/vlan/config\x00') read$FUSE(r4, &(0x7f00000020c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000780)=0x101, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1}, &(0x7f0000000080), &(0x7f0000000100)=r3}, 0x20) r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r8 = dup3(r6, r7, 0x0) ioctl$MON_IOCG_STATS(r6, 0xc0109207, &(0x7f0000000180)) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r8, 0x800448d2, &(0x7f0000000200)={0x58, &(0x7f0000000940)=[{}, {@none}]}) socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x18, &(0x7f0000000a80)=ANY=[@ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000850800007b8af8ff00000000bfa200000000000007020000f8ffff286aa596dc3e9ecdffb703000008000000b7070000000000000000000082000000950000cda7a85debf04412bfd590c192d8160000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0x87, &(0x7f00000004c0)=""/135, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000680)=[{0x0, 0x1, 0x4, 0x5}, {0x0, 0x1, 0x8, 0x4}, {0x5, 0x5, 0x2, 0x5}], 0x10, 0xde}, 0x94) 27m53.757681648s ago: executing program 38 (id=260): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000040)=0x8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x7f, 0x584e4f53, 0x3, 0x2, 0x7, 0x7, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r2, r1, 0x0, 0x578410eb) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_emit_ethernet(0x35, &(0x7f00000000c0)={@local, @remote, @val={@void, {0x8100, 0x2, 0x1, 0x4}}, {@arp={0x806, @generic={0x18, 0x1b, 0x6, 0x3, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, "cfe455", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, "5d3eee871c77c3fe819f13d0"}}}}, &(0x7f0000000240)={0x1, 0x1, [0x318, 0x987, 0xcf8, 0xdbf]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4880}, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {r4}}, './file0\x00'}) sendmsg$rds(r5, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000001440)=""/228, 0xe4}, {&(0x7f00000001c0)=""/1, 0x1}, {&(0x7f0000000340)=""/176, 0xb0}], 0x5, 0x0, 0x0, 0x4000000}, 0x4008100) 24m12.013732011s ago: executing program 39 (id=397): pipe2(&(0x7f0000000040), 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r5, &(0x7f00000003c0)=""/83, 0x53, 0x8000000000002003, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/79, 0x4f) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x55) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) 23m36.171769988s ago: executing program 40 (id=415): r0 = syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000400, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc040564a, &(0x7f0000000000)={0x9c0000, 0xfffffffd, 0x800, 0xffffffffffffffff, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x4, 0x99, 0x80, 0x7fff, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x0, 0x80, 0x846f, 0x5}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000002c0)={'tunl0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$binfmt_elf32(r5, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfecc) read$msr(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436", 0x95}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) 21m31.238612064s ago: executing program 41 (id=516): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x770d3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$xdp(0x2c, 0x3, 0x0) landlock_create_ruleset(0xffffffffffffffff, 0x0, 0x2) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x214000, 0x800}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, 0x0, 0x0) fstat(r2, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 20m34.29400182s ago: executing program 42 (id=557): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000280)) close(0xffffffffffffffff) set_mempolicy(0x3, &(0x7f00000000c0)=0x7, 0xa) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{0x81, 0xfc, 0x7f}, {0x2}, {0x6, 0x0, 0x0, 0xf00}]}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x8}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r2, &(0x7f0000007700), 0x318, 0xfc0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)='dctcp', 0x5) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)}}], 0x1, 0x20008000) shutdown(r3, 0x1) 18m21.606234032s ago: executing program 43 (id=626): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffeffffffffffe) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_restrict_self(r3, 0x3) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0xffffffffffffff9c, 0x0, 0x2) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x404c090}, 0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r5, &(0x7f00000007c0)=[{{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, 0x0}, 0x800}, {{&(0x7f0000000680)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/18, 0x12}], 0x2}, 0x81}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)=""/32, 0x20}, {&(0x7f0000000700)=""/133, 0x85}], 0x2}, 0x3}], 0x3, 0x2, 0x0) 17m52.247595407s ago: executing program 44 (id=652): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_io_uring_setup(0x9a, &(0x7f0000000200)={0x0, 0x5c46, 0x8, 0x0, 0x1e3}, 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, r2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setuid(0xee01) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) io_uring_enter(r1, 0x24a0, 0x4c1, 0x43, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) mount$tmpfs(0x0, &(0x7f0000004f80)='.\x00', &(0x7f0000004fc0), 0x4481, &(0x7f0000000200)={[{}, {@mpol={'mpol', 0x3d, {'default', '', @val={0x3a, [0x31]}}}}]}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000000000)={0x24, r6, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x63}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4040004) 17m41.215146547s ago: executing program 45 (id=667): socket$netlink(0x10, 0x3, 0x8000000004) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018008000300", @ANYRES32=0x0, @ANYBLOB="08001000", @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0xc000) socket(0x840000000002, 0x3, 0xff) r3 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008054}, 0x4004000) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x28}}, 0x0) fsopen(&(0x7f0000000300)='hpfs\x00', 0x0) syz_pidfd_open(0x0, 0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000480)) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) timer_create(0x7, &(0x7f0000001880)={0x0, 0x2b, 0x1, @thr={0x0, 0x0}}, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) 16m47.013609627s ago: executing program 46 (id=728): r0 = syz_open_procfs$userns(0x0, &(0x7f00000001c0)) setns(r0, 0x10000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000004000000f4"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="07010000000000001800000000000000000000000002000095"], 0x0, 0x100004}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0x2b, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x2) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4952, &(0x7f0000000300)={0x0, 0xe3d6, 0x1, 0x1, 0x141}, 0x0, &(0x7f0000000380)) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) rename(0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 15m38.128104557s ago: executing program 47 (id=781): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') socket$inet6_udplite(0xa, 0x2, 0x88) pread64(r3, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) 13m25.987503433s ago: executing program 48 (id=890): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010842, &(0x7f0000000240)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) 12m35.458997756s ago: executing program 49 (id=943): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) io_getevents(0x0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0) chdir(0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x4) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x33) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84002, 0xa4) fanotify_init(0xf00, 0x1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r5, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="12e01b398adda1"], 0x1000f) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 11m39.620879982s ago: executing program 50 (id=993): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x916d, 0x0, 0x0, 0x54}, 0x9c) 11m30.267639542s ago: executing program 6 (id=1017): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x800000009) 11m28.639388827s ago: executing program 6 (id=1021): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = io_uring_setup(0x2f35, &(0x7f0000000000)={0x0, 0xfca1, 0x2, 0x2, 0x1e}) io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x13, &(0x7f0000001bc0), 0x2) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, 0x0, &(0x7f0000000440)) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r6, &(0x7f00000001c0)='N', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @private2}, 0x1c) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) 11m24.766848883s ago: executing program 6 (id=1024): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000000, 0x200000005c831, 0xffffffffffffffff, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10) 11m23.989039797s ago: executing program 6 (id=1026): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 11m23.053340367s ago: executing program 6 (id=1027): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x1, 0x0, 0xfffe, 0xa, 0x0, 0x0, 0x4}, {0x4, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0xffffffff00000001}, {}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x27}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}}, 0xe8) close(r0) 11m21.84141342s ago: executing program 51 (id=1010): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x4e20, 0x7, @mcast2}, r3, 0xffffffff}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000340), r3}}, 0x18) fcntl$getownex(r2, 0x10, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa88, 0x870, 0x1, 0x2, 0xd59f82, 0x19f5, 0xacc, 0xa, 0x0, 0x8, 0x27fd, 0xc5, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0xc1485544, &(0x7f0000000000)=0x5) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f00000000c0)={0x3, 0x1}) getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0xc00) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x1, 0x70bd26, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x8001}}}, 0x24}, 0x1, 0x0, 0x0, 0x4011}, 0xc000) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x100, 0x70bd26, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0xc0) 11m21.736912199s ago: executing program 6 (id=1030): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x42, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x0, 0xd}, 0x9c) 11m19.357848945s ago: executing program 52 (id=1030): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x42, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x0, 0xd}, 0x9c) 9m30.188562302s ago: executing program 7 (id=1197): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000006c0)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x7fffffff) ftruncate(r4, 0x2007ffb) sendfile(r4, r4, 0x0, 0x1000000201005) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x7, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0x10}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) close_range(r0, 0xffffffffffffffff, 0x0) 9m26.788690202s ago: executing program 7 (id=1204): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffffe}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4060}, 0x20008800) 9m25.784585078s ago: executing program 7 (id=1208): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) socket$can_raw(0x1d, 0x3, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x20000002}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 9m24.456635253s ago: executing program 7 (id=1210): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9m8.457590185s ago: executing program 53 (id=1210): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m59.827870729s ago: executing program 1 (id=1388): r0 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x7fffffff) ftruncate(r0, 0x2007ffb) sendfile(r0, r0, 0x0, 0x1000000201005) 7m57.97186422s ago: executing program 1 (id=1392): futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x2) syz_usb_connect(0x2, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x24, r4, 0x201, 0x3ffffd, 0x800000, {{}, {}, {0x8, 0x11, 0x84e}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x20040010) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) 7m52.495205427s ago: executing program 54 (id=1376): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) 7m51.697324519s ago: executing program 1 (id=1397): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan1\x00'}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 7m51.04586717s ago: executing program 1 (id=1400): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) close(0x3) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) 7m50.068714007s ago: executing program 1 (id=1404): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000400)={@val={0xa, 0x10}, @void, @eth={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "ee0520", 0x8, 0x2c, 0x0, @private2={0xfc, 0x2, '\x00', 0x3}, @mcast2, {[@hopopts={0x32}]}}}}}}, 0x42) 7m48.353042844s ago: executing program 1 (id=1407): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x28, r1, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x2000000, 0x5d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8810}, 0x0) socket(0x840000000002, 0x3, 0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r3, 0x0) listen(r3, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) socket$igmp(0x2, 0x3, 0x2) 7m32.861429672s ago: executing program 55 (id=1407): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x28, r1, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x2000000, 0x5d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8810}, 0x0) socket(0x840000000002, 0x3, 0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r3, 0x0) listen(r3, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) socket$igmp(0x2, 0x3, 0x2) 5m56.308777814s ago: executing program 3 (id=1592): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="19072cbd7000fddbdf250100000008000100010000000c000600030000", @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 5m55.793399401s ago: executing program 3 (id=1593): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000100000004"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x548, &(0x7f0000001300)="$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") mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) syz_io_uring_setup(0x7540, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0xfffffffc, 0x26b}, &(0x7f0000000100), &(0x7f0000000440)) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='\x00', 0x89901) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81100) move_mount(r4, 0x0, r3, 0x0, 0x46) 5m53.986276314s ago: executing program 3 (id=1595): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x50b, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x7b, 0xfe, r3}, [@IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}, @IFA_LOCAL={0x8, 0x2, @private=0xa010102}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_BROADCAST={0x8, 0x4, @multicast1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 5m52.401425981s ago: executing program 3 (id=1596): sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002bbd7000fbdbdf25"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40001) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000900)={0x44, 0x0, &(0x7f0000000740)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) r1 = add_key$user(&(0x7f0000000200), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) 5m51.609349168s ago: executing program 3 (id=1598): symlink(0x0, &(0x7f0000000000)='./file1\x00') symlink(&(0x7f0000000280)='./file1/file0\x00', &(0x7f00000002c0)='./file0\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x12) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 5m43.65990839s ago: executing program 3 (id=1612): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = io_uring_setup(0x2f35, &(0x7f0000000000)={0x0, 0xfca1, 0x2, 0x2, 0x1e}) io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x13, &(0x7f0000001bc0), 0x2) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$nl_route(r1, 0x0, 0x880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, 0x0, &(0x7f0000000440)) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r6, &(0x7f00000001c0)='N', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @private2}, 0x1c) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) 5m27.782193765s ago: executing program 56 (id=1612): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = io_uring_setup(0x2f35, &(0x7f0000000000)={0x0, 0xfca1, 0x2, 0x2, 0x1e}) io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x13, &(0x7f0000001bc0), 0x2) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$nl_route(r1, 0x0, 0x880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, 0x0, &(0x7f0000000440)) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r6, &(0x7f00000001c0)='N', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @private2}, 0x1c) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) 3m37.898139679s ago: executing program 8 (id=1857): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(0x3) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) 3m37.357036556s ago: executing program 8 (id=1860): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@orlov}, {@data_err_ignore}, {@grpquota}, {@abort}, {@resgid}, {@bh}, {@nouid32}]}, 0x1, 0x553, &(0x7f0000001080)="$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") open(&(0x7f0000000080)='./file1\x00', 0x66842, 0x90) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0xf1e0}}]}, 0x1, 0x5a4, &(0x7f0000000940)="$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") r0 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3m34.832530774s ago: executing program 8 (id=1871): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x50b, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x7b, 0xfe, r3}, [@IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}, @IFA_LOCAL={0x8, 0x2, @private=0xa010102}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_BROADCAST={0x8, 0x4, @multicast1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 3m33.815450764s ago: executing program 8 (id=1873): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00') 3m33.733435885s ago: executing program 5 (id=1874): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb0}, 0x0, 0x8400, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_io_uring_setup(0x81f, &(0x7f0000000000)={0x0, 0xfe19, 0x10, 0x0, 0x30f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f0000000200)}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0) 3m33.30569538s ago: executing program 8 (id=1875): bpf$PROG_LOAD(0x5, 0x0, 0x0) sigaltstack(&(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffed8}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000000040)=[{0x0}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3m32.683561978s ago: executing program 8 (id=1877): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x4c}}, 0x4000080) 3m30.243946325s ago: executing program 57 (id=1877): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x4c}}, 0x4000080) 3m30.143729758s ago: executing program 5 (id=1883): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x50b, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x7b, 0xfe, r3}, [@IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}, @IFA_LOCAL={0x8, 0x2, @private=0xa010102}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_BROADCAST={0x8, 0x4, @multicast1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 3m29.558470588s ago: executing program 5 (id=1884): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @private2, @loopback, 0x40, 0x7800, 0xfffffffc}}) 3m22.357531443s ago: executing program 5 (id=1894): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x4) fchdir(r1) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 3m21.571180269s ago: executing program 5 (id=1896): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@orlov}, {@data_err_ignore}, {@grpquota}, {@abort}, {@resgid}, {@bh}, {@nouid32}]}, 0x1, 0x553, &(0x7f0000001080)="$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") open(&(0x7f0000000080)='./file1\x00', 0x66842, 0x90) r0 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3m20.254643889s ago: executing program 5 (id=1898): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r0, &(0x7f0000000000)="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", 0x4e6) 3m4.716062304s ago: executing program 58 (id=1898): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r0, &(0x7f0000000000)="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", 0x4e6) 2m15.174290928s ago: executing program 4 (id=1984): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$netlink(r0, &(0x7f0000005d80)={&(0x7f0000000440)=@proc={0x10, 0x0, 0x25dfdbfc, 0x1000000}, 0xc, &(0x7f0000000140)=[{&(0x7f0000000000)=ANY=[@ANYRES8, @ANYRES16, @ANYRES64=r0, @ANYRES16=r0], 0x38}], 0x4, 0x0, 0x0, 0x20000c4}, 0x0) 2m10.15656869s ago: executing program 4 (id=1987): r0 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x200) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000240)) 2m6.700245132s ago: executing program 4 (id=1990): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_open_procfs(0x0, &(0x7f0000002340)='net/ip_mr_vif\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) openat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000001440)={0x122640, 0x10b, 0x7}, 0x18) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000120001"], 0x28}}, 0x802) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m5.397063636s ago: executing program 4 (id=1993): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) open(&(0x7f0000000080)='./bus\x00', 0x14d27e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x200, 0x0, 0x0, 0x2, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d306e6d602000000000000000000010001", [0x204]}) fallocate(r0, 0x8, 0x4000, 0x4000) 2m4.100886698s ago: executing program 4 (id=1995): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) write$vga_arbiter(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f636b20a8"], 0xc) 1m57.796455521s ago: executing program 4 (id=2001): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_open_procfs(0x0, &(0x7f0000002340)='net/ip_mr_vif\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) openat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000001440)={0x122640, 0x10b, 0x7}, 0x18) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000120001"], 0x28}}, 0x802) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m55.968256911s ago: executing program 59 (id=2001): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_open_procfs(0x0, &(0x7f0000002340)='net/ip_mr_vif\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) openat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000001440)={0x122640, 0x10b, 0x7}, 0x18) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000120001"], 0x28}}, 0x802) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 19.055239383s ago: executing program 9 (id=2106): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x2000, 0x0) msgrcv(r3, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) 18.296980459s ago: executing program 9 (id=2107): r0 = socket(0x11, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000580)=""/118, 0x76}, {0x0}], 0x2, 0x9, 0x100) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r1) sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0xf01, 0x1, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x10) setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10) r8 = socket$netlink(0x10, 0x3, 0x4) write(r8, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 12.853451788s ago: executing program 2 (id=2114): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0xfffffffffffffffc, 0x40002) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0x3cfa, 0x400, 0x2, 0x3b9}, 0x0, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), 0x0, 0x0, 0x1}) 11.238974817s ago: executing program 2 (id=2117): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000100)="ac", 0x1) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x10000) 10.725012549s ago: executing program 2 (id=2118): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 9.392282889s ago: executing program 2 (id=2119): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$packet(0x11, 0x3, 0x300) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x4) fchdir(r4) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x0, &(0x7f0000000680)={[{@data_err_abort}, {@inlinecrypt}, {@nogrpid}, {@data_journal}, {@bsdgroups}, {@i_version}, {@i_version}, {@journal_dev={'journal_dev', 0x3d, 0x60000000000000}}, {@lazytime}], [{@appraise_type}]}, 0x4, 0x414, &(0x7f0000000dc0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r5) 6.703537201s ago: executing program 9 (id=2120): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x0, &(0x7f0000000140)}) sync() io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000002c0), 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f0000000080)=ANY=[], 0xfd, 0x729, &(0x7f0000000a00)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x1, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x801c, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRESDEC], 0x3c, 0x2ad, &(0x7f0000000400)="$eJzs3c9qK2UUAPAzydw06iJF3CiKA7pwVW7dummUK4hdKRHUhQZvC5KEQgsBKxi76hO49D18BDdufAPBreCuXVRGJjPTpDb9Q42p3P5+q9P55pzvzHwlXeX0y1dHg6d7SRyd/BbtdhKNrdiK0yTWoxG17yNtBQDwzDjN8/gzv0tm2lh+NwDAKpR//0v33QsAsBoff/rZh93t7ScfZVk7Xu4cj3tJRIyOx71yvbsbX8cwduJxdOIsIj9Xxu9/sP0k0qywHm+OJuNekTn64peqfvePiGn+ZnRifXH+ZlY6z3++7i6L7u6j+odOvLQ4/+1/5sdoEr1WvPXGXP8b0Ylfv4q9GMbTKHJn+d9tZtl7+Q8n335ebFPkJ43orU3vm8mbKzoSAAAAAAAAAAAAAAAAAAAAAAAegI0sS8rxPdP5PcWl6fycca95Nl3fyGrz830m9XygpC5UzgfKoxrRM8njx3q+zuMsy/Lqxll+Gq+kkd7PUwMAAAAAAAAAAAAAAAAAAMD/y8E3h4P+cLizv5SgngZQf63/rnW25q68HoeDfvPqgmsLll5bXHl+2kDR67VtRJrGkl7LTcFzRT9Lr7w2O9xPogzqg1nqXi++WxY9HPSzaql+yYN+ctNe7frgfppfasW/bSyf/kqc5Ukyf6bt81YvZrWW9DZaLyxc+ivP89vVeef38oyqK8l0xMbtdn9UBQsfsAjal8/i56sLXvmR0VzKBw8AAAAAAAAAAAAAAAAAAHDJ7Eu/CxaPrk1t/GdNAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCKzf7/fx20I+LilUvBpEq+7p4qaMX+wT0/IgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/A3wEAAP//dDFNJg==") r0 = open(0x0, 0x143142, 0x80) ftruncate(r0, 0x2007ffb) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msgget(0x3, 0x710) msgctl$IPC_RMID(0x0, 0x0) 6.518586279s ago: executing program 7 (id=1914): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x16, 0x1}) io_uring_enter(r1, 0xd44, 0x44c1, 0x7, 0x0, 0x0) 6.412428715s ago: executing program 0 (id=2121): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000881}, 0x8000002) 5.526130183s ago: executing program 9 (id=2122): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYRES16, @ANYBLOB="000829bd7000fddbdf2504000000040006801c00098008000200f10b00000800020005000000080001002700000020000280040004000800010001"], 0xdc}}, 0x24000840) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.365861889s ago: executing program 0 (id=2123): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, r2, 0x1, 0x0, 0x25dfdbfe, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x6}}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x40000000) 4.889672203s ago: executing program 7 (id=2124): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x2000, 0x0) msgrcv(r2, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) 4.793746274s ago: executing program 9 (id=2125): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0xfffffffffffffffc, 0x40002) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0x3cfa, 0x400, 0x2, 0x3b9}, 0x0, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), 0x0, 0x0, 0x1}) 4.580770344s ago: executing program 0 (id=2126): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x7fffffff, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000100)="ac", 0x1) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x10000) 3.739091408s ago: executing program 0 (id=2127): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, 0x0, 0x0) 2.829054862s ago: executing program 9 (id=2128): r0 = socket(0x11, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000580)=""/118, 0x76}, {0x0}], 0x2, 0x9, 0x100) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r1) sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0xf01, 0x1, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x10) setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10) r8 = socket$netlink(0x10, 0x3, 0x4) write(r8, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 2.113394951s ago: executing program 0 (id=2129): socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)=ANY=[@ANYRES64=r0]) 1.460572411s ago: executing program 0 (id=2130): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pwritev(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x1000, 0x2) 935.240599ms ago: executing program 2 (id=2131): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x0, &(0x7f0000000140)}) sync() io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000002c0), 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f0000000080)=ANY=[], 0xfd, 0x729, &(0x7f0000000a00)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x1, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x801c, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRESDEC], 0x3c, 0x2ad, &(0x7f0000000400)="$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") r0 = open(0x0, 0x143142, 0x80) ftruncate(r0, 0x2007ffb) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socketpair$unix(0x1, 0x1, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msgget(0x3, 0x710) msgctl$IPC_RMID(0x0, 0x0) 0s ago: executing program 2 (id=2132): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e70543", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): C1] EXT4-fs (loop8): last error at time 1773279748: ext4_validate_block_bitmap:441 [ 1937.460770][T15956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1583'. [ 1937.475252][T15944] Quota error (device loop8): write_blk: dquota write failed [ 1937.521508][T15944] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 1937.600384][T15944] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.1581: Failed to acquire dquot type 1 [ 1937.703076][T15944] loop8: lost filesystem error report for type 5 error -117 [ 1937.750575][T15944] EXT4-fs (loop8): 1 truncate cleaned up [ 1937.824180][T15944] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1938.172611][T15709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1938.629098][T15709] veth0_vlan: entered promiscuous mode [ 1938.733950][T14516] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1938.807127][T15709] veth1_vlan: entered promiscuous mode [ 1938.892157][T13675] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1939.320576][T15709] veth0_macvtap: entered promiscuous mode [ 1939.433787][T15709] veth1_macvtap: entered promiscuous mode [ 1939.708909][T15709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1939.881165][T15709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1940.015901][T12673] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1940.066600][T12673] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1940.158942][T12673] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1940.194962][T12673] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1942.308487][T16014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1592'. [ 1942.843961][T16017] loop3: detected capacity change from 0 to 512 [ 1942.897508][T16017] EXT4-fs: Ignoring removed bh option [ 1942.970305][T16017] EXT4-fs: inline encryption not supported [ 1943.025828][T16017] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1943.248077][T16017] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1943.349276][T16017] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1593: bg 0: block 248: padding at end of block bitmap is not set [ 1943.456050][T16017] loop3: lost filesystem error report for type 5 error -117 [ 1943.462598][T16017] Quota error (device loop3): write_blk: dquota write failed [ 1943.470289][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1943.470377][ C0] EXT4-fs (loop3): last error at time 1773279754: ext4_validate_block_bitmap:441 [ 1943.598233][T16017] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1943.629521][T16017] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.1593: Failed to acquire dquot type 1 [ 1943.647411][ T9535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1943.658562][ T9535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1943.800210][T16017] loop3: lost filesystem error report for type 5 error -117 [ 1943.806567][T16017] EXT4-fs (loop3): 1 truncate cleaned up [ 1943.834167][T16017] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1944.061848][T12672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1944.091489][T12672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1944.102102][T16017] syz.3.1593 (16017) used greatest stack depth: 2832 bytes left [ 1944.279130][T16025] loop8: detected capacity change from 0 to 2048 [ 1944.380115][T16025] EXT4-fs: Ignoring removed i_version option [ 1944.407745][T13675] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1944.575266][T16025] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1944.720479][T16025] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1945.110633][T16025] EXT4-fs (loop8): shut down requested (0) [ 1945.308911][T16036] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1595'. [ 1946.293999][T14516] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1947.917397][ T29] audit: type=1804 audit(1773279759.441:280): pid=16052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.1599" name="bus" dev="ramfs" ino=81636 res=1 errno=0 [ 1947.970211][ T29] audit: type=1804 audit(1773279759.441:281): pid=16052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.1599" name="bus" dev="ramfs" ino=81636 res=1 errno=0 [ 1951.141185][T16082] loop4: detected capacity change from 0 to 512 [ 1951.181509][T16082] EXT4-fs: Ignoring removed bh option [ 1951.187102][T16082] EXT4-fs: inline encryption not supported [ 1951.253630][T16082] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1951.390042][T16082] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1951.498260][T16082] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1603: bg 0: block 248: padding at end of block bitmap is not set [ 1951.670218][T12673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1951.678226][T12673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1951.790897][T16082] loop4: lost filesystem error report for type 5 error -117 [ 1951.799714][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1951.813887][ C0] EXT4-fs (loop4): last error at time 1773279763: ext4_validate_block_bitmap:441 [ 1951.862047][T16082] Quota error (device loop4): write_blk: dquota write failed [ 1951.922497][T16082] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1952.033488][T16082] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.1603: Failed to acquire dquot type 1 [ 1952.139911][T16082] loop4: lost filesystem error report for type 5 error -117 [ 1952.164441][T16091] netlink: 27 bytes leftover after parsing attributes in process `syz.9.1605'. [ 1952.203258][T16082] EXT4-fs (loop4): 1 truncate cleaned up [ 1952.267304][T16082] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1952.318213][T12673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1952.415031][T12673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1952.926204][T13831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1953.405515][T16099] loop9: detected capacity change from 0 to 2048 [ 1955.110108][ T29] audit: type=1804 audit(1773279766.621:282): pid=16118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.1610" name="bus" dev="ramfs" ino=82633 res=1 errno=0 [ 1955.333459][ T29] audit: type=1804 audit(1773279766.671:283): pid=16118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.1610" name="bus" dev="ramfs" ino=82633 res=1 errno=0 [ 1957.112819][T16138] netlink: 27 bytes leftover after parsing attributes in process `syz.9.1616'. [ 1957.557814][T16141] loop4: detected capacity change from 0 to 512 [ 1957.593103][T16141] EXT4-fs: Ignoring removed bh option [ 1957.630234][T16141] EXT4-fs: inline encryption not supported [ 1959.488132][T16141] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1959.687037][T16141] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1959.795615][T16141] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1617: bg 0: block 248: padding at end of block bitmap is not set [ 1959.951276][T16141] loop4: lost filesystem error report for type 5 error -117 [ 1959.953126][T16141] Quota error (device loop4): write_blk: dquota write failed [ 1959.960833][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1959.960922][ C1] EXT4-fs (loop4): last error at time 1773279771: ext4_validate_block_bitmap:441 [ 1960.330147][ T30] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1960.354702][T16141] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1960.354939][T16141] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.1617: Failed to acquire dquot type 1 [ 1960.355058][T16141] loop4: lost filesystem error report for type 5 error -117 [ 1960.365677][T16141] EXT4-fs (loop4): 1 truncate cleaned up [ 1960.400051][T16141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1960.485153][ T30] usb 3-1: Using ep0 maxpacket: 16 [ 1960.493581][ T30] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1960.493709][ T30] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1960.529388][ T30] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1960.529535][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1960.529825][ T30] usb 3-1: Product: syz [ 1960.529920][ T30] usb 3-1: Manufacturer: syz [ 1960.530016][ T30] usb 3-1: SerialNumber: syz [ 1960.667153][ T30] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1960.667274][ T30] r8152-cfgselector 3-1: config 0 descriptor?? [ 1960.865961][T16154] loop8: detected capacity change from 0 to 2048 [ 1961.173161][T13831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1961.950472][T12071] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1963.075717][T12071] usb 10-1: Using ep0 maxpacket: 16 [ 1963.198490][T12071] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1963.270180][T12071] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1963.333969][T12071] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1963.399845][T12071] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1964.299015][T15557] r8152-cfgselector 3-1: USB disconnect, device number 23 [ 1964.367977][T12071] usb 10-1: config 0 descriptor?? [ 1965.165077][T12071] usb 10-1: can't set config #0, error -71 [ 1965.242144][T12071] usb 10-1: USB disconnect, device number 2 [ 1965.690829][ T29] audit: type=1804 audit(1773279777.211:284): pid=16179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.1626" name="bus" dev="ramfs" ino=81749 res=1 errno=0 [ 1965.777097][T16182] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1628'. [ 1965.799833][ T29] audit: type=1804 audit(1773279777.231:285): pid=16179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.1626" name="bus" dev="ramfs" ino=81749 res=1 errno=0 [ 1967.530707][T16197] loop8: detected capacity change from 0 to 512 [ 1967.607019][T16197] EXT4-fs: Ignoring removed bh option [ 1967.713901][T16197] EXT4-fs: inline encryption not supported [ 1967.830037][T16197] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 1968.118000][T16197] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1968.253409][T16197] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1631: bg 0: block 248: padding at end of block bitmap is not set [ 1968.333132][T16197] loop8: lost filesystem error report for type 5 error -117 [ 1968.334742][T16197] Quota error (device loop8): write_blk: dquota write failed [ 1968.342403][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1968.342493][ C1] EXT4-fs (loop8): last error at time 1773279779: ext4_validate_block_bitmap:441 [ 1968.455702][ T30] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1968.530867][T16197] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 1968.597031][T16197] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.1631: Failed to acquire dquot type 1 [ 1968.654841][ T30] usb 10-1: Using ep0 maxpacket: 32 [ 1968.708860][T16197] loop8: lost filesystem error report for type 5 error -117 [ 1968.710405][ T30] usb 10-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1968.775050][T16197] EXT4-fs (loop8): 1 truncate cleaned up [ 1968.832150][T16197] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1968.855094][ T30] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1968.931256][ T30] usb 10-1: Product: syz [ 1968.967220][ T30] usb 10-1: Manufacturer: syz [ 1968.997792][ T30] usb 10-1: SerialNumber: syz [ 1969.106556][ T30] usb 10-1: config 0 descriptor?? [ 1969.488765][T14516] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1969.824426][T16208] loop2: detected capacity change from 0 to 2048 [ 1969.865222][ T30] peak_usb 10-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 1970.198902][ T30] peak_usb 10-1:0.0: probe with driver peak_usb failed with error -71 [ 1970.383745][ T30] usb 10-1: USB disconnect, device number 3 [ 1971.210213][T15557] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1971.431185][T15557] usb 9-1: Using ep0 maxpacket: 16 [ 1971.454644][T15557] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1971.512112][T15557] usb 9-1: config 0 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1971.601874][T15557] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1971.618836][T15557] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1971.659506][T15557] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1971.732239][T15557] usb 9-1: config 0 descriptor?? [ 1971.792717][T15557] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1972.336934][T10702] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1972.363719][T10702] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1972.378020][T10702] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1972.405021][T10702] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1972.416378][T10702] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1972.476033][ T29] audit: type=1804 audit(1773279784.001:286): pid=16240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1642" name="bus" dev="ramfs" ino=81802 res=1 errno=0 [ 1972.580212][ T29] audit: type=1804 audit(1773279784.041:287): pid=16240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1642" name="bus" dev="ramfs" ino=81802 res=1 errno=0 [ 1974.378036][T15557] usb 9-1: USB disconnect, device number 16 [ 1974.394002][T16256] loop9: detected capacity change from 0 to 512 [ 1974.456405][T16256] EXT4-fs: Ignoring removed bh option [ 1974.518296][T16256] EXT4-fs: inline encryption not supported [ 1974.539973][T10702] Bluetooth: hci2: command tx timeout [ 1974.585732][T16256] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1974.703208][T16256] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1974.774037][T16256] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1644: bg 0: block 248: padding at end of block bitmap is not set [ 1974.879257][T16256] loop9: lost filesystem error report for type 5 error -117 [ 1974.879759][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 1974.894040][ C0] EXT4-fs (loop9): last error at time 1773279786: ext4_validate_block_bitmap:441 [ 1974.930760][T16256] Quota error (device loop9): write_blk: dquota write failed [ 1975.041538][T16256] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 1975.160957][T16256] EXT4-fs error (device loop9): ext4_acquire_dquot:7001: comm syz.9.1644: Failed to acquire dquot type 1 [ 1975.334170][T16256] loop9: lost filesystem error report for type 5 error -117 [ 1975.407588][T16256] EXT4-fs (loop9): 1 truncate cleaned up [ 1975.642076][T16256] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1976.489442][T15532] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1976.619979][T10702] Bluetooth: hci2: command tx timeout [ 1976.739939][ T30] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1976.922238][ T30] usb 3-1: Using ep0 maxpacket: 32 [ 1976.991810][ T30] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1977.029829][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1977.067511][ T30] usb 3-1: Product: syz [ 1977.075916][ T30] usb 3-1: Manufacturer: syz [ 1977.090383][ T30] usb 3-1: SerialNumber: syz [ 1977.138315][ T30] usb 3-1: config 0 descriptor?? [ 1977.222918][ T2958] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1977.670305][ T2958] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1977.769363][T16239] chnl_net:caif_netlink_parms(): no params data found [ 1977.924311][ T30] peak_usb 3-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 1977.974531][ T2958] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1978.312436][ T30] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 1978.384962][ T2958] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1978.430020][ T30] usb 3-1: USB disconnect, device number 24 [ 1978.701305][T10702] Bluetooth: hci2: command tx timeout [ 1979.375083][ T7966] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1979.590799][ T7966] usb 9-1: Using ep0 maxpacket: 16 [ 1979.641990][ T7966] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1979.689896][ T7966] usb 9-1: config 0 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1979.727392][ T2958] bridge_slave_1: left allmulticast mode [ 1980.700363][ T2958] bridge_slave_1: left promiscuous mode [ 1980.706977][ T2958] bridge0: port 2(bridge_slave_1) entered disabled state [ 1980.715319][ T7966] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1980.731756][ T7966] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1980.768297][ T2958] bridge_slave_0: left allmulticast mode [ 1980.780256][T10702] Bluetooth: hci2: command tx timeout [ 1980.813592][ T2958] bridge_slave_0: left promiscuous mode [ 1980.848288][ T2958] bridge0: port 1(bridge_slave_0) entered disabled state [ 1981.700019][ T7966] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1981.724499][ T7966] usb 9-1: config 0 descriptor?? [ 1981.891125][ T7966] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1982.144679][ T5837] usb 9-1: USB disconnect, device number 17 [ 1982.213750][ T29] audit: type=1804 audit(1773279793.741:288): pid=16311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1657" name="bus" dev="ramfs" ino=83029 res=1 errno=0 [ 1982.330629][ T29] audit: type=1804 audit(1773279793.781:289): pid=16311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1657" name="bus" dev="ramfs" ino=83029 res=1 errno=0 [ 1982.409223][T16314] loop4: detected capacity change from 0 to 512 [ 1982.427768][T16314] EXT4-fs: Ignoring removed bh option [ 1982.462236][T16314] EXT4-fs: inline encryption not supported [ 1982.483487][T16314] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1982.543510][ T2958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1982.557661][T16314] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1982.668161][ T2958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1982.699394][T16314] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1658: bg 0: block 248: padding at end of block bitmap is not set [ 1982.725340][ T2958] bond0 (unregistering): Released all slaves [ 1982.762701][T16314] loop4: lost filesystem error report for type 5 error -117 [ 1982.769823][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1982.783996][ C1] EXT4-fs (loop4): last error at time 1773279794: ext4_validate_block_bitmap:441 [ 1982.801260][T16314] Quota error (device loop4): write_blk: dquota write failed [ 1982.809216][T16314] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1982.899503][T16314] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.1658: Failed to acquire dquot type 1 [ 1982.972892][T16314] loop4: lost filesystem error report for type 5 error -117 [ 1982.985807][T16314] EXT4-fs (loop4): 1 truncate cleaned up [ 1983.076785][T16314] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1983.382325][T13831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1983.571407][T16239] bridge0: port 1(bridge_slave_0) entered blocking state [ 1983.610617][T16239] bridge0: port 1(bridge_slave_0) entered disabled state [ 1983.618317][T16239] bridge_slave_0: entered allmulticast mode [ 1983.638573][T16330] loop8: detected capacity change from 0 to 1024 [ 1983.682311][T16330] EXT4-fs: Ignoring removed orlov option [ 1983.688454][T16330] EXT4-fs: Ignoring removed bh option [ 1983.694598][T16239] bridge_slave_0: entered promiscuous mode [ 1983.749763][T16239] bridge0: port 2(bridge_slave_1) entered blocking state [ 1983.763430][T16239] bridge0: port 2(bridge_slave_1) entered disabled state [ 1983.786593][T16239] bridge_slave_1: entered allmulticast mode [ 1983.803819][T16330] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1983.819147][T16239] bridge_slave_1: entered promiscuous mode [ 1983.909952][ T29] audit: type=1800 audit(1773279795.371:290): pid=16330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1662" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1984.611409][T16239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1984.673240][T16239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1985.024704][T16347] loop9: detected capacity change from 0 to 256 [ 1985.073135][T14516] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1985.076145][T16239] team0: Port device team_slave_0 added [ 1985.256499][ T2958] hsr_slave_0: left promiscuous mode [ 1985.316838][ T2958] hsr_slave_1: left promiscuous mode [ 1985.363272][ T2958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1985.427951][ T2958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1985.487480][ T2958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1985.535682][ T2958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1985.683414][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1985.690311][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1985.754683][ T2958] veth1_macvtap: left promiscuous mode [ 1985.790658][ T2958] veth0_macvtap: left promiscuous mode [ 1985.850302][ T2958] veth1_vlan: left promiscuous mode [ 1985.855921][ T2958] veth0_vlan: left promiscuous mode [ 1986.265786][T16347] FAT-fs (loop9): Directory bread(block 64) failed [ 1986.302015][T16347] FAT-fs (loop9): Directory bread(block 65) failed [ 1986.347242][T16347] FAT-fs (loop9): Directory bread(block 66) failed [ 1986.371380][T16347] FAT-fs (loop9): Directory bread(block 67) failed [ 1986.410637][T16347] FAT-fs (loop9): Directory bread(block 68) failed [ 1986.417348][T16347] FAT-fs (loop9): Directory bread(block 69) failed [ 1986.483870][T16347] FAT-fs (loop9): Directory bread(block 70) failed [ 1986.529227][T16347] FAT-fs (loop9): Directory bread(block 71) failed [ 1986.563863][T16347] FAT-fs (loop9): Directory bread(block 72) failed [ 1986.596819][T16347] FAT-fs (loop9): Directory bread(block 73) failed [ 1986.942382][ T30] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1987.969817][ T30] usb 9-1: Using ep0 maxpacket: 16 [ 1987.995907][ T30] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1988.007898][ T30] usb 9-1: config 0 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1988.032428][ T30] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1988.273997][ T30] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1988.689806][ T30] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1988.812284][ T30] usb 9-1: config 0 descriptor?? [ 1989.130040][ T30] usb 9-1: can't set config #0, error -71 [ 1989.246283][ T30] usb 9-1: USB disconnect, device number 18 [ 1990.270374][ T2958] team0 (unregistering): Port device team_slave_1 removed [ 1990.328496][ T2958] team0 (unregistering): Port device team_slave_0 removed [ 1990.771121][T16368] loop4: detected capacity change from 0 to 512 [ 1990.794703][T16368] EXT4-fs: Ignoring removed bh option [ 1990.847120][T16368] EXT4-fs: inline encryption not supported [ 1990.914554][T16368] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1990.954464][T16239] team0: Port device team_slave_1 added [ 1991.013898][T16368] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1991.104771][T16368] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1672: bg 0: block 248: padding at end of block bitmap is not set [ 1991.146551][T16368] loop4: lost filesystem error report for type 5 error -117 [ 1991.148150][T16368] Quota error (device loop4): write_blk: dquota write failed [ 1991.155858][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1991.155950][ C1] EXT4-fs (loop4): last error at time 1773279802: ext4_validate_block_bitmap:441 [ 1991.230456][T16368] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1991.269907][T16368] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.1672: Failed to acquire dquot type 1 [ 1991.333853][T16368] loop4: lost filesystem error report for type 5 error -117 [ 1991.369059][T16368] EXT4-fs (loop4): 1 truncate cleaned up [ 1991.390106][T16239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1991.397210][T16239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1991.422133][T16368] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1991.474429][ T29] audit: type=1804 audit(1773279803.001:291): pid=16375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1674" name="bus" dev="ramfs" ino=84059 res=1 errno=0 [ 1991.495429][T16239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1991.496784][ T29] audit: type=1804 audit(1773279803.001:292): pid=16375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1674" name="bus" dev="ramfs" ino=84059 res=1 errno=0 [ 1991.607012][T16239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1991.640709][T16239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1991.728311][T16239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1991.813764][T13831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1992.346296][T16239] hsr_slave_0: entered promiscuous mode [ 1992.390840][T16239] hsr_slave_1: entered promiscuous mode [ 1992.402747][T16383] loop8: detected capacity change from 0 to 1024 [ 1992.433866][T16383] EXT4-fs: Ignoring removed orlov option [ 1992.480274][T16383] EXT4-fs: Ignoring removed bh option [ 1992.575201][T16383] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1992.849727][ T29] audit: type=1800 audit(1773279804.371:293): pid=16383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1677" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1994.657486][ T30] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1994.714689][T14516] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1995.709799][ T30] usb 3-1: Using ep0 maxpacket: 16 [ 1995.780340][ T30] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1995.798667][T16239] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1995.809791][ T30] usb 3-1: config 0 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1995.857672][ T30] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1995.902400][ T30] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1995.922545][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1995.928239][T16239] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1995.965182][ T30] usb 3-1: config 0 descriptor?? [ 1996.051533][T16239] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1996.064406][ T30] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1996.253839][T16239] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1997.559502][T16422] loop4: detected capacity change from 0 to 512 [ 1997.568416][T16239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1997.601591][T16422] EXT4-fs: Ignoring removed bh option [ 1997.607254][T16422] EXT4-fs: inline encryption not supported [ 1997.706111][T16422] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1997.852792][T16422] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1997.888368][T16239] 8021q: adding VLAN 0 to HW filter on device team0 [ 1997.903302][T16422] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1685: bg 0: block 248: padding at end of block bitmap is not set [ 1997.937953][ T6033] bridge0: port 1(bridge_slave_0) entered blocking state [ 1997.945502][ T6033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1998.010015][T16422] loop4: lost filesystem error report for type 5 error -117 [ 1998.011600][T16422] Quota error (device loop4): write_blk: dquota write failed [ 1998.026768][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1998.026855][ C1] EXT4-fs (loop4): last error at time 1773279809: ext4_validate_block_bitmap:441 [ 1998.138064][T15557] usb 3-1: USB disconnect, device number 25 [ 1998.158005][T16422] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1998.185547][T16422] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.1685: Failed to acquire dquot type 1 [ 1998.226414][ T2958] bridge0: port 2(bridge_slave_1) entered blocking state [ 1998.233956][ T2958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1998.273412][T16422] loop4: lost filesystem error report for type 5 error -117 [ 1998.284061][T16422] EXT4-fs (loop4): 1 truncate cleaned up [ 1998.361280][T16422] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1998.710729][T16433] loop2: detected capacity change from 0 to 512 [ 1998.724844][T16433] EXT4-fs: inline encryption not supported [ 1998.731195][T16433] EXT4-fs: Ignoring removed i_version option [ 1998.737354][T16433] EXT4-fs: Ignoring removed i_version option [ 1998.743642][T16433] ext4: Bad value for 'journal_dev' [ 2000.222037][ T29] audit: type=1804 audit(1773279811.751:294): pid=16435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.1688" name="bus" dev="ramfs" ino=83187 res=1 errno=0 [ 2000.324339][ T29] audit: type=1804 audit(1773279811.781:295): pid=16435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.1688" name="bus" dev="ramfs" ino=83187 res=1 errno=0 [ 2000.574358][T13831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 2000.901761][T16239] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2000.914212][T16239] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2000.922083][T16438] loop9: detected capacity change from 0 to 1024 [ 2000.992202][T16438] EXT4-fs: Ignoring removed orlov option [ 2000.998364][T16438] EXT4-fs: Ignoring removed bh option [ 2001.838337][T16438] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2001.872302][ T29] audit: type=1800 audit(1773279813.401:296): pid=16438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1690" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 2003.892978][T15532] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2004.500127][ T30] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 2004.690071][ T30] usb 3-1: Using ep0 maxpacket: 16 [ 2004.735500][ T30] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2004.787555][ T30] usb 3-1: config 0 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2004.838395][ T30] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2004.841412][T16239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2004.868331][ T30] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2004.903539][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2004.951624][ T30] usb 3-1: config 0 descriptor?? [ 2005.004212][ T30] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2005.552710][T16492] loop4: detected capacity change from 0 to 512 [ 2005.562209][T16492] EXT4-fs: inline encryption not supported [ 2005.568411][T16492] EXT4-fs: Ignoring removed i_version option [ 2005.575725][T16492] EXT4-fs: Ignoring removed i_version option [ 2005.587892][T16492] ext4: Bad value for 'journal_dev' [ 2008.249335][ T30] usb 3-1: USB disconnect, device number 26 [ 2011.471290][T16525] loop8: detected capacity change from 0 to 512 [ 2011.480695][T16525] EXT4-fs: inline encryption not supported [ 2011.486839][T16525] EXT4-fs: Ignoring removed i_version option [ 2011.493291][T16525] EXT4-fs: Ignoring removed i_version option [ 2011.499520][T16525] ext4: Bad value for 'journal_dev' [ 2011.994427][T16522] dummy0: entered allmulticast mode [ 2012.407490][T16513] dummy0: left allmulticast mode [ 2013.660275][T10702] Bluetooth: hci0: command 0x0406 tx timeout [ 2013.804622][T16540] loop8: detected capacity change from 0 to 512 [ 2013.821439][T16540] EXT4-fs: inline encryption not supported [ 2013.828937][T16540] EXT4-fs: Ignoring removed i_version option [ 2013.835878][T16540] EXT4-fs: Ignoring removed i_version option [ 2013.842700][T16540] ext4: Bad value for 'journal_dev' [ 2014.889060][T16239] veth0_vlan: entered promiscuous mode [ 2015.168048][T16239] veth1_vlan: entered promiscuous mode [ 2015.860437][ T30] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 2016.066127][T16546] loop4: detected capacity change from 0 to 128 [ 2016.097001][T16239] veth0_macvtap: entered promiscuous mode [ 2016.138387][ T30] usb 3-1: Using ep0 maxpacket: 16 [ 2016.160867][ T30] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2016.198695][T16546] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2016.222425][ T30] usb 3-1: config 0 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2016.243907][T16239] veth1_macvtap: entered promiscuous mode [ 2016.255773][T16546] ext4 filesystem being mounted at /156/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 2016.263391][ T30] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2016.295070][ T30] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2016.304939][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2016.342710][ T30] usb 3-1: config 0 descriptor?? [ 2016.557030][T16239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2016.696113][T16239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2017.035500][ T30] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2018.074607][ T35] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2018.164204][ T35] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2018.213203][ T35] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2018.315762][ T35] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2018.961371][T16559] usb 3-1: USB disconnect, device number 27 [ 2019.264810][T13831] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2019.932784][T16579] loop4: detected capacity change from 0 to 512 [ 2019.953717][T16579] EXT4-fs: inline encryption not supported [ 2019.961144][T16579] EXT4-fs: Ignoring removed i_version option [ 2019.967755][T16579] EXT4-fs: Ignoring removed i_version option [ 2019.974750][T16579] ext4: Bad value for 'journal_dev' [ 2022.605152][T16597] loop4: detected capacity change from 0 to 512 [ 2022.627248][T16597] EXT4-fs: inline encryption not supported [ 2022.634863][T16597] EXT4-fs: Ignoring removed i_version option [ 2022.641595][T16597] EXT4-fs: Ignoring removed i_version option [ 2022.648399][T16597] ext4: Bad value for 'journal_dev' [ 2024.362483][T16602] dummy0: entered allmulticast mode [ 2024.843254][T16598] dummy0: left allmulticast mode [ 2025.461232][T16616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2025.475734][T16617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2025.562022][ T30] IPVS: starting estimator thread 0... [ 2025.679887][T16622] IPVS: using max 240 ests per chain, 12000 per kthread [ 2026.282627][T16629] loop8: detected capacity change from 0 to 1024 [ 2026.317316][T16629] EXT4-fs: Ignoring removed orlov option [ 2026.397099][T16633] loop4: detected capacity change from 0 to 512 [ 2026.406471][T16633] EXT4-fs: inline encryption not supported [ 2026.412817][T16633] EXT4-fs: Ignoring removed i_version option [ 2026.418997][T16633] EXT4-fs: Ignoring removed i_version option [ 2026.425391][T16633] ext4: Bad value for 'journal_dev' [ 2026.449803][T16629] EXT4-fs: Ignoring removed bh option [ 2027.283057][T16629] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2027.552593][ T29] audit: type=1800 audit(1773279839.081:297): pid=16629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1732" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 2028.659947][T14516] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2029.337815][T16657] loop8: detected capacity change from 0 to 512 [ 2029.352202][T16657] EXT4-fs: inline encryption not supported [ 2029.353553][T16657] EXT4-fs: Ignoring removed i_version option [ 2029.353963][T16657] EXT4-fs: Ignoring removed i_version option [ 2029.354399][T16657] ext4: Bad value for 'journal_dev' [ 2032.616841][T14907] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2032.622750][T14907] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2032.624547][T14907] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2032.630532][T14907] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2032.634935][T14907] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2032.974369][T16680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2032.997563][T16680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2033.724473][T16687] dummy0: entered allmulticast mode [ 2033.819989][ T8006] Bluetooth: hci3: command 0x0406 tx timeout [ 2034.128977][T16693] loop8: detected capacity change from 0 to 512 [ 2034.144270][T16693] EXT4-fs: inline encryption not supported [ 2034.145428][T16693] EXT4-fs: Ignoring removed i_version option [ 2034.148413][T16693] EXT4-fs: Ignoring removed i_version option [ 2034.148569][T16693] ext4: Bad value for 'journal_dev' [ 2034.699846][T10702] Bluetooth: hci5: command tx timeout [ 2035.807218][T16684] dummy0: left allmulticast mode [ 2036.781282][T10702] Bluetooth: hci5: command tx timeout [ 2036.841001][T16676] chnl_net:caif_netlink_parms(): no params data found [ 2037.675858][ T80] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2037.882701][ T80] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2038.114636][ T80] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2038.354653][ T80] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2038.767288][T16724] loop8: detected capacity change from 0 to 2048 [ 2038.834451][T16676] bridge0: port 1(bridge_slave_0) entered blocking state [ 2038.980508][T16728] loop9: detected capacity change from 0 to 512 [ 2039.001313][T16728] EXT4-fs: inline encryption not supported [ 2039.008525][T16728] EXT4-fs: Ignoring removed i_version option [ 2039.015196][T16728] EXT4-fs: Ignoring removed i_version option [ 2039.022148][T16728] ext4: Bad value for 'journal_dev' [ 2039.130822][T10702] Bluetooth: hci5: command tx timeout [ 2039.487346][T16724] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 2039.788661][T16724] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2039.796596][T16676] bridge0: port 1(bridge_slave_0) entered disabled state [ 2039.808661][T16676] bridge_slave_0: entered allmulticast mode [ 2039.862234][T16676] bridge_slave_0: entered promiscuous mode [ 2039.888400][T16676] bridge0: port 2(bridge_slave_1) entered blocking state [ 2039.901745][T16676] bridge0: port 2(bridge_slave_1) entered disabled state [ 2039.910559][T16676] bridge_slave_1: entered allmulticast mode [ 2039.921887][T16676] bridge_slave_1: entered promiscuous mode [ 2040.800069][ T29] audit: type=1800 audit(1773279852.321:298): pid=16724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1753" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 2040.855635][T16733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2040.879317][T16733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2040.936534][T16676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2041.038442][T16676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2041.143743][T14516] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2041.186931][T10702] Bluetooth: hci5: command tx timeout [ 2041.446752][T16676] team0: Port device team_slave_0 added [ 2041.558262][T16676] team0: Port device team_slave_1 added [ 2042.178704][T16676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2042.203493][T16676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2042.292299][T16676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2042.297947][ T80] bridge_slave_1: left allmulticast mode [ 2042.298051][ T80] bridge_slave_1: left promiscuous mode [ 2042.298894][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 2042.360646][ T80] bridge_slave_0: left allmulticast mode [ 2042.360753][ T80] bridge_slave_0: left promiscuous mode [ 2042.361614][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 2042.609046][T16559] IPVS: starting estimator thread 0... [ 2042.710664][T16753] IPVS: using max 240 ests per chain, 12000 per kthread [ 2043.078650][T16756] netlink: 7 bytes leftover after parsing attributes in process `syz.8.1763'. [ 2043.530015][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2043.556257][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2043.562467][ T80] bond0 (unregistering): Released all slaves [ 2043.597684][T16676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2043.597765][T16676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2043.597907][T16676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2044.159946][ T80] hsr_slave_0: left promiscuous mode [ 2044.163646][ T80] hsr_slave_1: left promiscuous mode [ 2044.169443][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2044.169525][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2044.175590][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2044.175673][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2044.240322][ T80] veth1_macvtap: left promiscuous mode [ 2044.240461][ T80] veth0_macvtap: left promiscuous mode [ 2044.240747][ T80] veth1_vlan: left promiscuous mode [ 2044.240953][ T80] veth0_vlan: left promiscuous mode [ 2044.418803][T16764] loop9: detected capacity change from 0 to 512 [ 2044.433103][T16764] EXT4-fs: inline encryption not supported [ 2044.434587][T16764] EXT4-fs: Ignoring removed i_version option [ 2044.434809][T16764] EXT4-fs: Ignoring removed i_version option [ 2044.434968][T16764] ext4: Bad value for 'journal_dev' [ 2046.048733][T16766] loop8: detected capacity change from 0 to 2048 [ 2046.074611][T16766] EXT4-fs: Ignoring removed i_version option [ 2046.172373][T16766] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2046.172736][T16766] ext4 filesystem being mounted at /128/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2046.252072][T16766] EXT4-fs (loop8): shut down requested (0) [ 2046.672295][T14516] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2047.124914][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 2047.125156][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 2050.047630][ T5833] IPVS: starting estimator thread 0... [ 2050.247981][T16794] IPVS: using max 240 ests per chain, 12000 per kthread [ 2050.311576][ T80] team0 (unregistering): Port device team_slave_1 removed [ 2050.464220][ T80] team0 (unregistering): Port device team_slave_0 removed [ 2050.555191][T16797] netlink: 7 bytes leftover after parsing attributes in process `syz.8.1774'. [ 2051.233922][T16676] hsr_slave_0: entered promiscuous mode [ 2051.263292][T16676] hsr_slave_1: entered promiscuous mode [ 2052.339769][T16805] dummy0: entered allmulticast mode [ 2052.654591][T16802] dummy0: left allmulticast mode [ 2052.739903][T16808] loop4: detected capacity change from 0 to 2048 [ 2052.770858][T16808] EXT4-fs: Ignoring removed i_version option [ 2052.937331][T16808] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2053.070372][T16808] ext4 filesystem being mounted at /174/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2053.156477][T16808] EXT4-fs (loop4): shut down requested (0) [ 2053.576102][T13831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2054.010405][T16676] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2054.109433][T16676] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2054.868700][T16676] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2054.918938][T16676] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2057.403778][T16676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2057.414949][T16849] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1787'. [ 2057.636896][T16676] 8021q: adding VLAN 0 to HW filter on device team0 [ 2057.694924][ T9535] bridge0: port 1(bridge_slave_0) entered blocking state [ 2057.695243][ T9535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2057.784929][ T9535] bridge0: port 2(bridge_slave_1) entered blocking state [ 2057.785265][ T9535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2059.823000][T16676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2060.313039][T16875] loop4: detected capacity change from 0 to 256 [ 2060.365692][T16875] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2061.082119][ T29] audit: type=1800 audit(1773279872.591:299): pid=16875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1791" name="file1" dev="loop4" ino=1048842 res=0 errno=0 [ 2062.299329][T16898] netlink: 7 bytes leftover after parsing attributes in process `syz.8.1797'. [ 2062.573650][T16676] veth0_vlan: entered promiscuous mode [ 2062.746674][T16676] veth1_vlan: entered promiscuous mode [ 2063.150434][T16676] veth0_macvtap: entered promiscuous mode [ 2063.181919][T16676] veth1_macvtap: entered promiscuous mode [ 2063.416863][T16676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2063.675333][T16676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2063.859370][T14501] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2063.864175][T14501] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2063.864375][T14501] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2063.864562][T14501] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2065.907189][T16945] netlink: 27 bytes leftover after parsing attributes in process `syz.9.1809'. [ 2066.480701][T16949] dummy0: entered allmulticast mode [ 2066.587585][T16940] dummy0: left allmulticast mode [ 2067.817720][T16963] loop9: detected capacity change from 0 to 764 [ 2067.885556][T16963] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 2070.795569][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2070.839108][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2071.158545][T14728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2071.230640][T14728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2071.437560][T17002] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1819'. [ 2073.182323][T17018] syzkaller0: entered promiscuous mode [ 2073.188049][T17018] syzkaller0: entered allmulticast mode [ 2073.324975][T17018] tc action pedit offset must be on 32 bit boundaries [ 2073.951761][ T5833] IPVS: starting estimator thread 0... [ 2074.049956][T17031] IPVS: using max 240 ests per chain, 12000 per kthread [ 2074.711635][T17039] netlink: 27 bytes leftover after parsing attributes in process `syz.9.1832'. [ 2076.313514][T17057] syzkaller0: entered promiscuous mode [ 2076.313616][T17057] syzkaller0: entered allmulticast mode [ 2076.784648][T17065] syzkaller0: entered promiscuous mode [ 2076.784749][T17065] syzkaller0: entered allmulticast mode [ 2077.232967][T17071] loop4: detected capacity change from 0 to 1024 [ 2077.262904][T17071] EXT4-fs: Ignoring removed orlov option [ 2077.263317][T17071] EXT4-fs: Ignoring removed bh option [ 2077.374900][T17071] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2077.404544][ T29] audit: type=1800 audit(1773279888.931:300): pid=17071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1842" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 2077.654913][T17080] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1844'. [ 2078.971538][T13831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2080.221336][T17113] syzkaller0: entered promiscuous mode [ 2080.240076][T17113] syzkaller0: entered allmulticast mode [ 2080.654009][T17122] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1856'. [ 2081.396474][T17134] loop8: detected capacity change from 0 to 1024 [ 2081.441953][T17134] EXT4-fs: Ignoring removed orlov option [ 2081.482472][T17134] EXT4-fs: Ignoring removed bh option [ 2081.602358][T17134] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2081.794203][ T29] audit: type=1800 audit(1773279893.321:301): pid=17134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1860" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 2082.063235][T15557] kernel read not supported for file [fscontext] (pid: 15557 comm: kworker/0:1) [ 2082.291598][T17147] loop9: detected capacity change from 0 to 512 [ 2082.451992][T17147] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2083.096685][T15532] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2083.515727][T14516] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2084.203949][T17161] syzkaller0: entered promiscuous mode [ 2084.204051][T17161] syzkaller0: entered allmulticast mode [ 2084.277698][T17170] netlink: 27 bytes leftover after parsing attributes in process `syz.8.1871'. [ 2085.934835][ T7237] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2086.250413][ T7237] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2086.332352][T17188] loop2: detected capacity change from 0 to 512 [ 2086.368808][T17188] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 2086.446679][T17188] EXT4-fs (loop2): 1 truncate cleaned up [ 2086.448744][T17188] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2086.515349][ T7237] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2086.697410][ T7237] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2087.104342][T15709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2087.392506][ T7237] bridge_slave_1: left allmulticast mode [ 2087.392614][ T7237] bridge_slave_1: left promiscuous mode [ 2087.393480][ T7237] bridge0: port 2(bridge_slave_1) entered disabled state [ 2087.447895][ T7237] bridge_slave_0: left allmulticast mode [ 2087.447994][ T7237] bridge_slave_0: left promiscuous mode [ 2087.448829][ T7237] bridge0: port 1(bridge_slave_0) entered disabled state [ 2088.241547][ T7237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2088.267647][ T7237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2088.308085][ T7237] bond0 (unregistering): Released all slaves [ 2088.342608][T17202] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1883'. [ 2088.512637][T17203] loop2: detected capacity change from 0 to 1024 [ 2088.515847][T17203] EXT4-fs: Ignoring removed orlov option [ 2088.516247][T17203] EXT4-fs: Ignoring removed bh option [ 2088.642104][T17203] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2088.775709][ T29] audit: type=1800 audit(1773279900.301:302): pid=17203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1881" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 2088.884195][ T8006] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2088.904430][ T8006] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2088.916125][ T8006] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2088.945902][ T8006] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2088.964574][ T8006] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2089.707522][ T7237] hsr_slave_0: left promiscuous mode [ 2089.757800][ T7237] hsr_slave_1: left promiscuous mode [ 2089.762345][ T7237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2089.762428][ T7237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2089.768704][ T7237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2089.768788][ T7237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2089.816153][ T7237] veth1_macvtap: left promiscuous mode [ 2089.816289][ T7237] veth0_macvtap: left promiscuous mode [ 2089.816574][ T7237] veth1_vlan: left promiscuous mode [ 2089.816794][ T7237] veth0_vlan: left promiscuous mode [ 2089.948499][T15709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2091.029766][ T8006] Bluetooth: hci2: command tx timeout [ 2091.735608][ T7237] team_slave_1 (unregistering): left promiscuous mode [ 2091.777340][ T7237] team0 (unregistering): Port device team_slave_1 removed [ 2091.906984][ T7237] team_slave_0 (unregistering): left promiscuous mode [ 2091.966465][ T7237] team0 (unregistering): Port device team_slave_0 removed [ 2093.175059][ T8006] Bluetooth: hci2: command tx timeout [ 2095.283026][ T8006] Bluetooth: hci2: command tx timeout [ 2095.723686][ T5833] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 2095.921680][ T5833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2095.970724][ T5833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2096.004576][ T5833] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2096.056439][ T5833] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2096.091624][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2096.122618][ T5833] usb 5-1: config 0 descriptor?? [ 2096.374971][ T7237] IPVS: stop unused estimator thread 0... [ 2096.708553][ T5833] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 2096.897963][T17244] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1892'. [ 2096.950456][T17255] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 2097.070737][T17258] loop5: detected capacity change from 0 to 1024 [ 2097.081121][T17258] EXT4-fs: Ignoring removed orlov option [ 2097.087270][T17258] EXT4-fs: Ignoring removed bh option [ 2097.107462][T17255] CIFS mount error: No usable UNC path provided in device string! [ 2097.107462][T17255] [ 2097.118062][T17255] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2097.173043][T17258] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2097.345081][ T8006] Bluetooth: hci2: command tx timeout [ 2097.481572][ T29] audit: type=1800 audit(1773279908.991:303): pid=17258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1896" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 2097.656378][T17268] loop2: detected capacity change from 0 to 128 [ 2097.900472][ C1] plantronics 0003:047F:FFFF.0002: usb_submit_urb(ctrl) failed: -1 [ 2097.934609][T17206] chnl_net:caif_netlink_parms(): no params data found [ 2098.120203][T16676] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2098.684127][T17269] usb 5-1: USB disconnect, device number 5 [ 2099.190727][T17282] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1900'. [ 2099.909724][T17206] bridge0: port 1(bridge_slave_0) entered blocking state [ 2099.910115][T17206] bridge0: port 1(bridge_slave_0) entered disabled state [ 2099.910656][T17206] bridge_slave_0: entered allmulticast mode [ 2099.926431][T17206] bridge_slave_0: entered promiscuous mode [ 2099.964120][T17206] bridge0: port 2(bridge_slave_1) entered blocking state [ 2099.964521][T17206] bridge0: port 2(bridge_slave_1) entered disabled state [ 2099.965056][T17206] bridge_slave_1: entered allmulticast mode [ 2099.972466][T17206] bridge_slave_1: entered promiscuous mode [ 2100.934886][T17206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2102.056389][T17206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2103.710603][T17206] team0: Port device team_slave_0 added [ 2103.769091][T17206] team0: Port device team_slave_1 added [ 2104.168143][T17206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2104.168219][T17206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2104.168361][T17206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2104.214977][T17206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2104.215057][T17206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2104.215195][T17206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2105.772296][T17206] hsr_slave_0: entered promiscuous mode [ 2105.784292][T17206] hsr_slave_1: entered promiscuous mode [ 2105.803773][T17206] debugfs: 'hsr0' already exists in 'hsr' [ 2105.804024][T17206] Cannot create hsr debugfs directory [ 2106.311817][T17312] loop4: detected capacity change from 0 to 1024 [ 2106.351468][T17312] EXT4-fs: Ignoring removed orlov option [ 2106.351872][T17312] EXT4-fs: Ignoring removed bh option [ 2106.522545][T17312] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2106.614337][ T29] audit: type=1800 audit(1773279918.141:304): pid=17312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1907" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 2107.318181][T13831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2107.737056][ T30] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 2107.906794][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2107.906953][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2107.907083][ T30] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2107.907291][ T30] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2107.907425][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2107.925641][ T30] usb 3-1: config 0 descriptor?? [ 2108.522255][ T30] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2108.562092][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 2108.562331][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 2108.705045][T17323] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1909'. [ 2108.760558][T17333] CIFS mount error: No usable UNC path provided in device string! [ 2108.760558][T17333] [ 2108.760650][T17333] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2109.740559][ C1] plantronics 0003:047F:FFFF.0003: usb_submit_urb(ctrl) failed: -1 [ 2110.057673][T17206] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2110.267980][T17206] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2110.643330][T12071] usb 3-1: USB disconnect, device number 28 [ 2110.644279][T17206] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2110.677266][T17206] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2114.478606][T17206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2114.615623][T17361] loop4: detected capacity change from 0 to 128 [ 2114.718798][T17206] 8021q: adding VLAN 0 to HW filter on device team0 [ 2114.792449][T17361] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2114.882679][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 2114.890211][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2114.932205][T10702] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2114.950574][T10702] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2114.958986][T17361] ext4 filesystem being mounted at /199/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 2114.987925][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 2114.998536][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2115.057578][T10702] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2115.103696][T10702] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2115.115113][T10702] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2115.570720][T17368] loop2: detected capacity change from 0 to 1024 [ 2115.642034][T17368] EXT4-fs: Ignoring removed orlov option [ 2115.717630][T17368] EXT4-fs: Ignoring removed bh option [ 2116.203479][T17370] loop9: detected capacity change from 0 to 512 [ 2116.293601][T17368] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2116.437903][T17370] EXT4-fs (loop9): warning: checktime reached, running e2fsck is recommended [ 2116.591495][T17370] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2116.746560][T17370] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2116.939243][T17370] EXT4-fs error (device loop9): ext4_readdir:265: inode #2: block 3: comm syz.9.1920: path /81/file1: bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 2117.182134][ T8006] Bluetooth: hci4: command tx timeout [ 2117.838534][T15532] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2117.927096][T13831] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2118.736799][T15709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2119.262405][ T8006] Bluetooth: hci4: command tx timeout [ 2119.410659][T12071] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 2119.765368][T12071] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2120.208308][T12071] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2121.352206][ T8006] Bluetooth: hci4: command tx timeout [ 2121.430578][T12071] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2121.451987][ T53] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2121.566765][T12071] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2121.659411][T12071] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2122.151945][T12071] usb 5-1: config 0 descriptor?? [ 2122.507190][ T53] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2122.787320][T17365] chnl_net:caif_netlink_parms(): no params data found [ 2122.806446][T12071] usb 5-1: can't set config #0, error -71 [ 2122.852151][T12071] usb 5-1: USB disconnect, device number 6 [ 2123.056553][ T53] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2123.394932][ T53] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2123.431957][T10702] Bluetooth: hci4: command tx timeout [ 2123.791990][T17417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1930'. [ 2124.085227][T17206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2124.238870][T17424] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1931'. [ 2124.468403][T17428] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1932'. [ 2124.561466][ T53] bridge_slave_1: left allmulticast mode [ 2124.591785][ T53] bridge_slave_1: left promiscuous mode [ 2124.615667][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 2124.696256][ T53] bridge_slave_0: left allmulticast mode [ 2124.713663][ T53] bridge_slave_0: left promiscuous mode [ 2124.765170][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 2126.810429][T15557] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 2127.196449][T15557] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2127.301388][T15557] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2127.404920][T15557] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2127.517936][T15557] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2127.593815][T15557] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2127.771155][T15557] usb 10-1: config 0 descriptor?? [ 2127.835665][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2128.201548][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2128.499276][ T53] bond0 (unregistering): Released all slaves [ 2128.731896][T17440] netlink: 140 bytes leftover after parsing attributes in process `syz.9.1936'. [ 2128.806138][T15557] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 2128.973957][T15557] usb 10-1: USB disconnect, device number 4 [ 2129.774638][T17449] fido_id[17449]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 2129.936271][T17365] bridge0: port 1(bridge_slave_0) entered blocking state [ 2129.995139][T17365] bridge0: port 1(bridge_slave_0) entered disabled state [ 2130.028441][T17365] bridge_slave_0: entered allmulticast mode [ 2130.078148][T17365] bridge_slave_0: entered promiscuous mode [ 2130.396171][T17365] bridge0: port 2(bridge_slave_1) entered blocking state [ 2130.449502][T17461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1940'. [ 2130.462367][T17365] bridge0: port 2(bridge_slave_1) entered disabled state [ 2130.485024][T17365] bridge_slave_1: entered allmulticast mode [ 2130.513534][T17365] bridge_slave_1: entered promiscuous mode [ 2130.716419][ T53] hsr_slave_0: left promiscuous mode [ 2130.756686][ T53] hsr_slave_1: left promiscuous mode [ 2130.788151][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2130.801628][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2130.836485][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2130.861186][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2130.900351][ T53] veth1_macvtap: left promiscuous mode [ 2130.907399][ T53] veth0_macvtap: left promiscuous mode [ 2130.919070][ T53] veth1_vlan: left promiscuous mode [ 2130.935901][ T53] veth0_vlan: left promiscuous mode [ 2131.771035][T17464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2134.154964][T17477] loop9: detected capacity change from 0 to 164 [ 2134.187637][T17477] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 2134.436821][ T53] team0 (unregistering): Port device team_slave_1 removed [ 2134.509223][ T53] team0 (unregistering): Port device team_slave_0 removed [ 2134.893163][T17365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2134.976934][T17365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2135.492979][T17365] team0: Port device team_slave_0 added [ 2135.619253][T17365] team0: Port device team_slave_1 added [ 2135.642732][T17486] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1950'. [ 2135.837811][T17491] loop2: detected capacity change from 0 to 128 [ 2135.885870][T17491] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2135.974591][ T53] IPVS: stop unused estimator thread 0... [ 2136.026717][T17491] ext4 filesystem being mounted at /75/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 2136.115688][T17491] EXT4-fs error (device loop2): dx_make_map:1296: inode #2: block 18: comm syz.2.1952: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 2136.190545][T17491] EXT4-fs error (device loop2) in do_split:2027: Corrupt filesystem [ 2136.199956][T17365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2136.207047][T17365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2136.330597][T17365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2136.449961][T17365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2136.457082][T17365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2136.757560][T17365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2136.771998][T15709] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2137.894562][T17206] veth0_vlan: entered promiscuous mode [ 2141.923925][T17365] hsr_slave_0: entered promiscuous mode [ 2141.944050][T17365] hsr_slave_1: entered promiscuous mode [ 2142.231782][T17206] veth1_vlan: entered promiscuous mode [ 2142.847368][T17526] syzkaller0: entered promiscuous mode [ 2142.885817][T17526] syzkaller0: entered allmulticast mode [ 2144.651673][T17206] veth0_macvtap: entered promiscuous mode [ 2144.994183][T17206] veth1_macvtap: entered promiscuous mode [ 2148.148506][T17206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2148.342369][T17206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2148.686664][T17365] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2148.823542][T17365] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2148.960651][T17365] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2149.044516][T17365] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2153.684726][ T8006] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2155.448058][ T8006] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2155.466505][ T8006] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2155.479658][ T8006] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2155.496271][ T8006] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2157.579917][ T8006] Bluetooth: hci5: command tx timeout [ 2159.660048][ T8006] Bluetooth: hci5: command tx timeout [ 2159.773621][T17365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2160.973604][T17365] 8021q: adding VLAN 0 to HW filter on device team0 [ 2161.257831][T12673] bridge0: port 1(bridge_slave_0) entered blocking state [ 2161.265370][T12673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2161.321544][T17584] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1981'. [ 2161.491131][T17586] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1981'. [ 2161.507946][T12673] bridge0: port 2(bridge_slave_1) entered blocking state [ 2161.515462][T12673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2161.706610][T17550] chnl_net:caif_netlink_parms(): no params data found [ 2161.742899][ T8006] Bluetooth: hci5: command tx timeout [ 2164.276618][ T8006] Bluetooth: hci5: command tx timeout [ 2170.018157][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 2170.028306][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 2170.563665][T17613] loop9: detected capacity change from 0 to 256 [ 2171.768398][T17550] bridge0: port 1(bridge_slave_0) entered blocking state [ 2171.813045][T17550] bridge0: port 1(bridge_slave_0) entered disabled state [ 2171.827416][T17550] bridge_slave_0: entered allmulticast mode [ 2171.877097][T17550] bridge_slave_0: entered promiscuous mode [ 2172.594074][T17623] loop9: detected capacity change from 0 to 164 [ 2172.630764][T17550] bridge0: port 2(bridge_slave_1) entered blocking state [ 2172.638229][T17550] bridge0: port 2(bridge_slave_1) entered disabled state [ 2172.647400][T17550] bridge_slave_1: entered allmulticast mode [ 2172.683298][T17550] bridge_slave_1: entered promiscuous mode [ 2172.701052][T17623] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 2172.990256][ T53] bridge_slave_1: left allmulticast mode [ 2173.027225][ T53] bridge_slave_1: left promiscuous mode [ 2173.054461][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 2173.159020][ T53] bridge_slave_0: left allmulticast mode [ 2173.184843][ T53] bridge_slave_0: left promiscuous mode [ 2173.227725][T17629] loop4: detected capacity change from 0 to 512 [ 2173.235513][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 2173.362620][T17629] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2173.391691][T17629] ext4 filesystem being mounted at /221/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2173.571242][ T29] audit: type=1800 audit(1773279985.101:305): pid=17629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1993" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 2173.699899][T17629] loop4: detected capacity change from 512 to 0 [ 2173.706726][ C0] blk_print_req_error: 11 callbacks suppressed [ 2173.706804][ C0] I/O error, dev loop4, sector 132 op 0x0:(READ) flags 0x803000 phys_seg 1 prio class 2 [ 2173.724337][T17635] EXT4-fs error (device loop4): ext4_get_inode_loc:4920: inode #15: block 34: comm syz.4.1993: unable to read itable block [ 2173.779120][T17635] buffer_io_error: 11 callbacks suppressed [ 2173.779206][T17635] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 2173.826578][T17635] EXT4-fs (loop4): I/O error while writing superblock [ 2173.849796][T17635] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: IO failure [ 2173.880374][T17635] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 2173.907416][T17635] EXT4-fs (loop4): I/O error while writing superblock [ 2173.950237][T17635] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #15: comm syz.4.1993: mark_inode_dirty error [ 2173.970312][T17635] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 2173.992941][T17635] EXT4-fs (loop4): I/O error while writing superblock [ 2174.161436][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2174.225246][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2174.272079][ T53] bond0 (unregistering): Released all slaves [ 2174.477534][T17550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2174.510340][T12672] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4905: inode #15: block 34: comm kworker/u8:0: unable to read itable block [ 2174.556271][T12672] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 2174.573836][T17550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2174.593600][T12672] EXT4-fs (loop4): I/O error while writing superblock [ 2174.629337][T15066] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2174.659074][T15066] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 2174.688908][T15066] EXT4-fs (loop4): I/O error while writing superblock [ 2174.769312][ T53] hsr_slave_0: left promiscuous mode [ 2174.806077][ T53] hsr_slave_1: left promiscuous mode [ 2174.849884][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2174.857472][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2174.895758][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2174.914945][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2175.013058][ T53] veth1_macvtap: left promiscuous mode [ 2175.024300][ T53] veth0_macvtap: left promiscuous mode [ 2175.043704][ T53] veth1_vlan: left promiscuous mode [ 2175.070250][ T53] veth0_vlan: left promiscuous mode [ 2175.189086][T17640] loop9: detected capacity change from 0 to 1024 [ 2175.212918][T17640] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2175.402992][T17640] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2175.423379][T10702] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2175.450534][T10702] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2175.467737][T10702] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2175.514853][T10702] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2175.536554][T10702] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2175.883406][T15532] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2177.586749][T10702] Bluetooth: hci1: command tx timeout [ 2179.527547][ T53] team0 (unregistering): Port device team_slave_1 removed [ 2179.605023][ T53] team0 (unregistering): Port device team_slave_0 removed [ 2179.659924][T10702] Bluetooth: hci1: command tx timeout [ 2180.030790][T17656] loop9: detected capacity change from 0 to 512 [ 2180.082430][T17656] EXT4-fs: inline encryption not supported [ 2180.088611][T17656] EXT4-fs: Ignoring removed i_version option [ 2180.133780][T17656] EXT4-fs: Ignoring removed i_version option [ 2180.164079][T17656] ext4: Bad value for 'journal_dev' [ 2180.609457][T17550] team0: Port device team_slave_0 added [ 2180.693124][T17550] team0: Port device team_slave_1 added [ 2180.918087][T17550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2180.954122][T17550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2181.019873][T17550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2181.097034][T17550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2181.104499][T17550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2181.189920][T17550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2181.740533][T10702] Bluetooth: hci1: command tx timeout [ 2181.940658][T17550] hsr_slave_0: entered promiscuous mode [ 2181.963129][T17550] hsr_slave_1: entered promiscuous mode [ 2181.982704][T17550] debugfs: 'hsr0' already exists in 'hsr' [ 2181.988592][T17550] Cannot create hsr debugfs directory [ 2183.152997][ T8006] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2183.212184][ T8006] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2183.224325][ T8006] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2183.236632][ T8006] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2183.447821][ T8006] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2183.819907][ T8006] Bluetooth: hci1: command tx timeout [ 2185.202574][T17641] chnl_net:caif_netlink_parms(): no params data found [ 2185.670157][ T8006] Bluetooth: hci2: command tx timeout [ 2185.715471][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2185.977007][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2186.084757][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2186.501143][T17676] loop2: detected capacity change from 0 to 1024 [ 2186.512678][T17676] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2186.514244][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2186.607770][T17676] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2187.740629][ T8006] Bluetooth: hci2: command tx timeout [ 2188.202638][T15709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2189.820048][ T8006] Bluetooth: hci2: command tx timeout [ 2190.157462][T17641] bridge0: port 1(bridge_slave_0) entered blocking state [ 2190.181425][T17641] bridge0: port 1(bridge_slave_0) entered disabled state [ 2190.222509][T17641] bridge_slave_0: entered allmulticast mode [ 2190.260020][T17641] bridge_slave_0: entered promiscuous mode [ 2190.294387][T17641] bridge0: port 2(bridge_slave_1) entered blocking state [ 2190.348086][T17692] loop9: detected capacity change from 0 to 164 [ 2190.364554][T17641] bridge0: port 2(bridge_slave_1) entered disabled state [ 2190.391102][T17641] bridge_slave_1: entered allmulticast mode [ 2190.418420][T17692] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 2190.440132][T17641] bridge_slave_1: entered promiscuous mode [ 2192.311331][ T8006] Bluetooth: hci2: command tx timeout [ 2192.477348][T17661] chnl_net:caif_netlink_parms(): no params data found [ 2193.057184][T17641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2193.102327][T17641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2193.627914][T17641] team0: Port device team_slave_0 added [ 2193.713929][T17641] team0: Port device team_slave_1 added [ 2193.740531][ T53] bridge_slave_1: left allmulticast mode [ 2193.746378][ T53] bridge_slave_1: left promiscuous mode [ 2193.770460][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 2193.794061][ T53] bridge_slave_0: left allmulticast mode [ 2193.808441][ T53] bridge_slave_0: left promiscuous mode [ 2193.815700][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 2193.893807][ T53] bridge_slave_1: left allmulticast mode [ 2193.900365][ T53] bridge_slave_1: left promiscuous mode [ 2193.906798][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 2193.933268][ T53] bridge_slave_0: left allmulticast mode [ 2193.939094][ T53] bridge_slave_0: left promiscuous mode [ 2193.952531][T17708] loop9: detected capacity change from 0 to 512 [ 2193.961459][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 2194.028467][T17708] EXT4-fs: inline encryption not supported [ 2194.070406][T17708] EXT4-fs: Ignoring removed i_version option [ 2194.076605][T17708] EXT4-fs: Ignoring removed i_version option [ 2194.110512][T17708] ext4: Bad value for 'journal_dev' [ 2194.868739][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2194.893492][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2194.935699][ T53] bond0 (unregistering): Released all slaves [ 2195.271465][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2195.295629][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2195.311466][ T53] bond0 (unregistering): Released all slaves [ 2195.629322][T17641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2195.660103][T17641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2195.690341][T17641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2195.754720][T17550] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2195.828462][T17641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2195.867264][T17641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2195.895443][T17641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2195.992986][T17661] bridge0: port 1(bridge_slave_0) entered blocking state [ 2196.001220][T17661] bridge0: port 1(bridge_slave_0) entered disabled state [ 2196.008828][T17661] bridge_slave_0: entered allmulticast mode [ 2196.021036][T17661] bridge_slave_0: entered promiscuous mode [ 2196.036205][T17550] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2196.085583][T17661] bridge0: port 2(bridge_slave_1) entered blocking state [ 2196.101178][T17661] bridge0: port 2(bridge_slave_1) entered disabled state [ 2196.109238][T17661] bridge_slave_1: entered allmulticast mode [ 2196.128009][T17661] bridge_slave_1: entered promiscuous mode [ 2196.146754][T17550] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2196.172877][T17550] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2196.561910][ T53] hsr_slave_0: left promiscuous mode [ 2196.582687][ T53] hsr_slave_1: left promiscuous mode [ 2196.595997][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2196.607023][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2196.641006][ T53] hsr_slave_0: left promiscuous mode [ 2196.649029][ T53] hsr_slave_1: left promiscuous mode [ 2196.666447][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2196.684599][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2196.697948][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2196.711940][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2196.754943][ T53] veth1_macvtap: left promiscuous mode [ 2196.764643][ T53] veth0_macvtap: left promiscuous mode [ 2196.777498][ T53] veth1_vlan: left promiscuous mode [ 2196.784678][ T53] veth0_vlan: left promiscuous mode [ 2197.891917][ T53] team0 (unregistering): Port device team_slave_1 removed [ 2197.930614][ T53] team0 (unregistering): Port device team_slave_0 removed [ 2198.846062][T17716] loop9: detected capacity change from 0 to 1024 [ 2198.847751][ T53] team0 (unregistering): Port device team_slave_1 removed [ 2198.869375][T17716] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2198.911499][ T53] team0 (unregistering): Port device team_slave_0 removed [ 2198.975514][T17716] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2199.481386][T17661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2199.535445][T17641] hsr_slave_0: entered promiscuous mode [ 2199.548926][T17641] hsr_slave_1: entered promiscuous mode [ 2199.589801][T17661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2199.794903][T15532] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2200.101480][T17661] team0: Port device team_slave_0 added [ 2200.206501][T17661] team0: Port device team_slave_1 added [ 2200.541789][T17661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2200.558179][ T53] IPVS: stop unused estimator thread 0... [ 2200.561907][T17661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2200.629739][T17661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2200.666097][T17661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2200.684169][T17661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2200.747694][T17661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2201.316446][T17661] hsr_slave_0: entered promiscuous mode [ 2201.326563][T17661] hsr_slave_1: entered promiscuous mode [ 2201.337308][T17661] debugfs: 'hsr0' already exists in 'hsr' [ 2201.344601][T17661] Cannot create hsr debugfs directory [ 2201.532758][T17730] syzkaller0: entered promiscuous mode [ 2201.539053][T17730] syzkaller0: entered allmulticast mode [ 2202.270092][T17732] dummy0: entered allmulticast mode [ 2202.407739][T17732] dummy0: left allmulticast mode [ 2202.769218][T17550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2203.002434][T17550] 8021q: adding VLAN 0 to HW filter on device team0 [ 2203.155634][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 2203.163294][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2203.273024][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 2203.280576][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2203.502642][T17641] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2203.563249][T17641] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2203.679895][T17641] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2203.743303][T17641] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2204.729014][T17661] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2204.784810][T17661] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2204.872126][T17661] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2204.961014][T17661] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2205.416995][T17641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2205.656643][T17550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2205.749463][T17641] 8021q: adding VLAN 0 to HW filter on device team0 [ 2205.987979][T14727] bridge0: port 1(bridge_slave_0) entered blocking state [ 2205.995535][T14727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2206.093112][ T6131] bridge0: port 2(bridge_slave_1) entered blocking state [ 2206.100683][ T6131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2206.731402][T17661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2206.971860][T17661] 8021q: adding VLAN 0 to HW filter on device team0 [ 2207.056002][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 2207.063598][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2207.213666][ T9535] bridge0: port 2(bridge_slave_1) entered blocking state [ 2207.221246][ T9535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2208.122622][T17550] veth0_vlan: entered promiscuous mode [ 2208.323081][T17550] veth1_vlan: entered promiscuous mode [ 2208.712956][T17641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2208.936739][T17550] veth0_macvtap: entered promiscuous mode [ 2209.076122][T17550] veth1_macvtap: entered promiscuous mode [ 2209.357642][T17550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2209.472294][T17550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2209.797919][T17661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2210.222234][T17788] loop9: detected capacity change from 0 to 512 [ 2210.231672][T17788] EXT4-fs: inline encryption not supported [ 2210.237834][T17788] EXT4-fs: Ignoring removed i_version option [ 2210.244143][T17788] EXT4-fs: Ignoring removed i_version option [ 2210.250475][T17788] ext4: Bad value for 'journal_dev' [ 2212.009870][T17661] veth0_vlan: entered promiscuous mode [ 2212.350906][T17661] veth1_vlan: entered promiscuous mode [ 2212.523145][T10702] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2212.535745][T10702] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2212.548746][T10702] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2212.578354][T10702] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2212.590292][T10702] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2212.663518][T17802] loop9: detected capacity change from 0 to 1024 [ 2212.724237][T17802] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2212.931064][T17661] veth0_macvtap: entered promiscuous mode [ 2212.962200][T17802] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2213.171180][T17661] veth1_macvtap: entered promiscuous mode [ 2213.637765][T15532] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2213.796074][T17641] veth0_vlan: entered promiscuous mode [ 2214.018939][T17661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2214.180789][T17641] veth1_vlan: entered promiscuous mode [ 2214.223571][T17661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2214.487213][ T1015] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2214.519817][ T1015] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2214.528803][ T1015] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2214.730750][ T8006] Bluetooth: hci4: command tx timeout [ 2214.880502][ T1015] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2216.139847][T17829] dummy0: entered allmulticast mode [ 2216.167990][T17829] dummy0: left allmulticast mode [ 2216.779792][ T8006] Bluetooth: hci4: command tx timeout [ 2216.890193][T17641] veth0_macvtap: entered promiscuous mode [ 2217.105756][T17641] veth1_macvtap: entered promiscuous mode [ 2218.496039][T17849] loop9: detected capacity change from 0 to 512 [ 2218.505403][T17849] EXT4-fs: inline encryption not supported [ 2218.511740][T17849] EXT4-fs: Ignoring removed i_version option [ 2218.517904][T17849] EXT4-fs: Ignoring removed i_version option [ 2218.524231][T17849] ext4: Bad value for 'journal_dev' [ 2219.527255][ T8006] Bluetooth: hci4: command tx timeout [ 2220.564726][T17641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2220.812597][T17799] chnl_net:caif_netlink_parms(): no params data found [ 2221.582641][ T8006] Bluetooth: hci4: command tx timeout [ 2221.749907][T17641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2222.016563][ T57] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2222.044272][ T57] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2222.112261][ T7237] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2222.223236][ T7237] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2222.454544][T17862] loop9: detected capacity change from 0 to 1024 [ 2222.560390][T12672] bridge_slave_1: left allmulticast mode [ 2222.568266][T12672] bridge_slave_1: left promiscuous mode [ 2222.577451][T17862] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2222.651114][T12672] bridge0: port 2(bridge_slave_1) entered disabled state [ 2222.758019][T12672] bridge_slave_0: left allmulticast mode [ 2222.780223][T12672] bridge_slave_0: left promiscuous mode [ 2222.786783][T12672] bridge0: port 1(bridge_slave_0) entered disabled state [ 2222.792113][T17862] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2222.932187][T15532] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2223.592784][T12672] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2223.639409][T12672] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2223.682223][T12672] bond0 (unregistering): Released all slaves [ 2224.596704][T17887] dummy0: entered allmulticast mode [ 2224.769787][T17879] dummy0: left allmulticast mode [ 2226.594931][T12672] hsr_slave_0: left promiscuous mode [ 2226.713673][T12672] hsr_slave_1: left promiscuous mode [ 2226.763431][T12672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2226.839867][T12672] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2226.966629][T12672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2227.009916][T12672] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2227.166990][T12672] veth1_macvtap: left promiscuous mode [ 2227.189168][T12672] veth0_macvtap: left promiscuous mode [ 2227.210604][T12672] veth1_vlan: left promiscuous mode [ 2227.217764][T12672] veth0_vlan: left promiscuous mode [ 2228.611319][T17901] loop2: detected capacity change from 0 to 512 [ 2228.631547][T17901] EXT4-fs: inline encryption not supported [ 2228.638732][T17901] EXT4-fs: Ignoring removed i_version option [ 2228.645598][T17901] EXT4-fs: Ignoring removed i_version option [ 2228.652479][T17901] ext4: Bad value for 'journal_dev' [ 2229.658856][T17905] loop9: detected capacity change from 0 to 1024 [ 2229.691632][T17905] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2229.764302][T17905] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2229.906813][T15532] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2230.262837][T12672] team0 (unregistering): Port device team_slave_1 removed [ 2230.347893][T12672] team0 (unregistering): Port device team_slave_0 removed [ 2231.139293][T17799] bridge0: port 1(bridge_slave_0) entered blocking state [ 2231.166600][T17799] bridge0: port 1(bridge_slave_0) entered disabled state [ 2231.184383][T17799] bridge_slave_0: entered allmulticast mode [ 2231.229990][T17799] bridge_slave_0: entered promiscuous mode [ 2231.287335][T17799] bridge0: port 2(bridge_slave_1) entered blocking state [ 2231.306776][T17799] bridge0: port 2(bridge_slave_1) entered disabled state [ 2231.346734][T17799] bridge_slave_1: entered allmulticast mode [ 2231.375343][T17799] bridge_slave_1: entered promiscuous mode [ 2231.456683][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 2231.464405][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 2231.690039][T17799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2231.817537][T17799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2232.205146][T17799] team0: Port device team_slave_0 added [ 2232.351491][T17799] team0: Port device team_slave_1 added [ 2233.008603][T17927] dummy0: entered allmulticast mode [ 2233.015700][T17927] dummy0: left allmulticast mode [ 2233.161949][T17799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2233.195222][T17799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2233.259082][T17799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2233.317950][T17799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2233.336965][T17799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2233.434605][T17799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2234.783133][T17799] hsr_slave_0: entered promiscuous mode [ 2234.823348][T17799] hsr_slave_1: entered promiscuous mode [ 2234.865429][T17799] debugfs: 'hsr0' already exists in 'hsr' [ 2234.901899][T17799] Cannot create hsr debugfs directory [ 2237.485549][T17963] loop9: detected capacity change from 0 to 512 [ 2237.494931][T17963] EXT4-fs: inline encryption not supported [ 2237.501328][T17963] EXT4-fs: Ignoring removed i_version option [ 2237.507501][T17963] EXT4-fs: Ignoring removed i_version option [ 2237.515885][T17963] ext4: Bad value for 'journal_dev' [ 2237.609452][T10702] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2237.629260][T10702] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2237.641597][T10702] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2237.680099][T10702] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2237.702390][T10702] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2238.919959][T12673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2238.927987][T12673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2239.633716][T17975] loop9: detected capacity change from 0 to 164 [ 2239.742267][ T8006] Bluetooth: hci5: command tx timeout [ 2239.795090][T17975] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 2240.094315][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2240.150700][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2241.428900][T12673] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2241.686635][T12673] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2241.829975][T10702] Bluetooth: hci5: command tx timeout [ 2242.014218][T12673] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2242.678153][T12673] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2243.920819][T10702] Bluetooth: hci5: command tx timeout [ 2244.458333][T18013] loop9: detected capacity change from 0 to 512 [ 2244.467576][T18013] EXT4-fs: inline encryption not supported [ 2244.473874][T18013] EXT4-fs: Ignoring removed i_version option [ 2244.484296][T18013] EXT4-fs: Ignoring removed i_version option [ 2244.490609][T18013] ext4: Bad value for 'journal_dev' [ 2245.471026][T18016] loop0: detected capacity change from 0 to 164 [ 2245.611531][T17961] chnl_net:caif_netlink_parms(): no params data found [ 2245.634456][T18016] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 2245.980588][T10702] Bluetooth: hci5: command tx timeout [ 2246.307688][T12673] bridge_slave_1: left allmulticast mode [ 2246.359981][T12673] bridge_slave_1: left promiscuous mode [ 2246.366501][T12673] bridge0: port 2(bridge_slave_1) entered disabled state [ 2246.597509][T12673] bridge_slave_0: left allmulticast mode [ 2246.624884][T12673] bridge_slave_0: left promiscuous mode [ 2246.685675][T12673] bridge0: port 1(bridge_slave_0) entered disabled state [ 2249.689026][T12673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2249.737779][T12673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2249.764129][T12673] bond0 (unregistering): Released all slaves [ 2249.935666][T17799] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2250.065460][T17799] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2250.336549][T12673] hsr_slave_0: left promiscuous mode [ 2250.378876][T12673] hsr_slave_1: left promiscuous mode [ 2250.431767][T12673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2250.439320][T12673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2250.522211][T12673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2250.539702][T12673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2250.623668][T12673] veth1_macvtap: left promiscuous mode [ 2250.629380][T12673] veth0_macvtap: left promiscuous mode [ 2250.648398][T12673] veth1_vlan: left promiscuous mode [ 2250.660602][T12673] veth0_vlan: left promiscuous mode [ 2251.971771][T12673] team0 (unregistering): Port device team_slave_1 removed [ 2252.233163][T18057] loop0: detected capacity change from 0 to 512 [ 2252.243233][T18057] EXT4-fs: inline encryption not supported [ 2252.249424][T18057] EXT4-fs: Ignoring removed i_version option [ 2252.255783][T18057] EXT4-fs: Ignoring removed i_version option [ 2252.265721][T18057] ext4: Bad value for 'journal_dev' [ 2253.117017][T12673] team0 (unregistering): Port device team_slave_0 removed [ 2254.364161][T18062] loop9: detected capacity change from 0 to 164 [ 2254.504070][T18062] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 2255.257212][T17799] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2256.103579][T17799] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2257.879277][T18078] tipc: Started in network mode [ 2257.922338][T18078] tipc: Node identity ac141406, cluster identity 4711 [ 2257.961261][T18078] tipc: Enabled bearer , priority 10 [ 2257.968307][T17961] bridge0: port 1(bridge_slave_0) entered blocking state [ 2258.007142][T17961] bridge0: port 1(bridge_slave_0) entered disabled state [ 2258.029250][T17961] bridge_slave_0: entered allmulticast mode [ 2258.051021][T17961] bridge_slave_0: entered promiscuous mode [ 2258.125546][T17961] bridge0: port 2(bridge_slave_1) entered blocking state [ 2258.141413][T17961] bridge0: port 2(bridge_slave_1) entered disabled state [ 2258.161502][T18081] loop0: detected capacity change from 0 to 128 [ 2258.162521][T17961] bridge_slave_1: entered allmulticast mode [ 2258.188059][T17961] bridge_slave_1: entered promiscuous mode [ 2258.481671][T18081] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2258.618284][T18081] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 2259.892543][ T5837] tipc: Node number set to 2886996998 [ 2259.945746][T17961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2260.002709][T17661] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2260.011980][T17961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2260.279278][T17961] team0: Port device team_slave_0 added [ 2260.944029][T17961] team0: Port device team_slave_1 added [ 2261.609190][T17961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2261.659265][T17961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2261.812585][T17961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2261.945995][T17961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2261.968959][T18108] loop0: detected capacity change from 0 to 164 [ 2261.990050][T17961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2262.074338][T17961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2262.115381][T18108] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 2262.940753][T17961] hsr_slave_0: entered promiscuous mode [ 2262.986647][T17961] hsr_slave_1: entered promiscuous mode [ 2263.131458][T17799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2263.501726][T18115] loop0: detected capacity change from 0 to 512 [ 2263.573933][T18115] EXT4-fs: inline encryption not supported [ 2263.690981][T18115] EXT4-fs: Ignoring removed i_version option [ 2263.697199][T18115] EXT4-fs: Ignoring removed i_version option [ 2263.710105][T18115] ext4: Bad value for 'journal_dev' [ 2264.258766][T17799] 8021q: adding VLAN 0 to HW filter on device team0 [ 2264.369546][ T9535] bridge0: port 1(bridge_slave_0) entered blocking state [ 2264.377174][ T9535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2264.661323][T12672] bridge0: port 2(bridge_slave_1) entered blocking state [ 2264.668896][T12672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2265.723615][T18133] tipc: Enabling of bearer rejected, already enabled [ 2266.214796][T17961] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2266.274492][T18140] loop2: detected capacity change from 0 to 128 [ 2266.300380][T17961] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2266.383937][T17961] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2266.408944][T18140] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2266.441611][T18140] ext4 filesystem being mounted at /126/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 2267.180559][T17961] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2267.634066][T15709] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2267.726749][T17799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2268.605124][T17961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2268.826563][T17961] 8021q: adding VLAN 0 to HW filter on device team0 [ 2268.904501][T12673] bridge0: port 1(bridge_slave_0) entered blocking state [ 2268.912128][T12673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2269.077072][T12673] bridge0: port 2(bridge_slave_1) entered blocking state [ 2269.084644][T12673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2269.545786][T18164] loop2: detected capacity change from 0 to 164 [ 2269.682566][T18164] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 2271.598977][ T8006] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2271.641396][ T8006] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2271.653523][ T8006] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2271.726700][ T8006] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2271.768909][T17961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2271.776898][T14907] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2272.873250][T18195] tipc: Started in network mode [ 2272.878383][T18195] tipc: Node identity ac141406, cluster identity 4711 [ 2272.917650][T18195] tipc: Enabled bearer , priority 10 [ 2273.601442][T18203] loop0: detected capacity change from 0 to 128 [ 2273.731735][T18203] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2273.914601][T14907] Bluetooth: hci1: command tx timeout [ 2273.971531][T18203] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 2274.573158][T17661] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2274.629292][ T5442] tipc: Node number set to 2886996998 [ 2275.210674][T18183] chnl_net:caif_netlink_parms(): no params data found [ 2275.837028][T18228] loop9: detected capacity change from 0 to 164 [ 2275.917968][T18228] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 2275.983852][T14907] Bluetooth: hci1: command tx timeout [ 2276.170059][T17961] veth0_vlan: entered promiscuous mode [ 2276.210818][ T2958] bridge_slave_1: left allmulticast mode [ 2276.245527][ T2958] bridge_slave_1: left promiscuous mode [ 2276.280515][ T2958] bridge0: port 2(bridge_slave_1) entered disabled state [ 2276.400493][ T2958] bridge_slave_0: left allmulticast mode [ 2276.412008][ T2958] bridge_slave_0: left promiscuous mode [ 2276.418535][ T2958] bridge0: port 1(bridge_slave_0) entered disabled state [ 2277.534498][T18245] loop0: detected capacity change from 0 to 512 [ 2277.571491][T18245] EXT4-fs: inline encryption not supported [ 2277.585648][T18245] EXT4-fs: Ignoring removed i_version option [ 2277.599945][T18245] EXT4-fs: Ignoring removed i_version option [ 2277.606191][T18245] ext4: Bad value for 'journal_dev' [ 2277.750137][ T2958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2277.836747][ T2958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2277.893530][ T2958] bond0 (unregistering): Released all slaves [ 2277.975957][T18241] tipc: Started in network mode [ 2278.020948][T18241] tipc: Node identity ac141406, cluster identity 4711 [ 2278.029388][T18241] tipc: Enabled bearer , priority 10 [ 2278.080564][T14907] Bluetooth: hci1: command tx timeout [ 2278.257024][T17961] veth1_vlan: entered promiscuous mode [ 2278.422805][ T2958] hsr_slave_0: left promiscuous mode [ 2278.476277][ T2958] hsr_slave_1: left promiscuous mode [ 2278.498055][ T2958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2278.537401][ T2958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2279.456204][T18253] loop9: detected capacity change from 0 to 128 [ 2279.573866][ T2958] team0 (unregistering): Port device team_slave_1 removed [ 2279.635385][T18253] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2279.664084][ T2958] team0 (unregistering): Port device team_slave_0 removed [ 2279.732494][T18253] ext4 filesystem being mounted at /160/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 2280.013574][T15532] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2280.139762][T14907] Bluetooth: hci1: command tx timeout [ 2280.392856][T18135] tipc: Node number set to 2886996998 [ 2280.592300][T18183] bridge0: port 1(bridge_slave_0) entered blocking state [ 2280.616674][T18183] bridge0: port 1(bridge_slave_0) entered disabled state [ 2280.648142][T18183] bridge_slave_0: entered allmulticast mode [ 2280.671937][T18183] bridge_slave_0: entered promiscuous mode [ 2280.721325][T18183] bridge0: port 2(bridge_slave_1) entered blocking state [ 2280.759222][T18183] bridge0: port 2(bridge_slave_1) entered disabled state [ 2280.790339][T18183] bridge_slave_1: entered allmulticast mode [ 2280.807370][T18183] bridge_slave_1: entered promiscuous mode [ 2281.106094][T18183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2281.186012][T18183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2281.372142][T17961] veth0_macvtap: entered promiscuous mode [ 2281.549300][T17961] veth1_macvtap: entered promiscuous mode [ 2281.597216][T18183] team0: Port device team_slave_0 added [ 2281.683004][T18183] team0: Port device team_slave_1 added [ 2281.926500][T18183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2281.949837][T18183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2282.047853][T18183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2282.085277][T18183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2282.095565][T18183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2282.189642][T18183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2282.642687][T17961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2282.756593][T18183] hsr_slave_0: entered promiscuous mode [ 2282.808939][T18183] hsr_slave_1: entered promiscuous mode [ 2282.842744][T18183] debugfs: 'hsr0' already exists in 'hsr' [ 2282.848668][T18183] Cannot create hsr debugfs directory [ 2283.282996][T17961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2283.322472][T18278] dummy0: entered allmulticast mode [ 2283.559076][ T6033] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2283.605207][ T6033] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2283.717590][T18256] dummy0: left allmulticast mode [ 2283.747561][ T6033] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2283.783533][ T6033] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2284.222003][T18286] loop2: detected capacity change from 0 to 164 [ 2284.368300][T18286] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 2285.868869][T18303] tipc: Enabling of bearer rejected, already enabled [ 2286.172920][T18183] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2286.297168][T18183] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2286.407468][T18183] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2286.428646][T18311] loop0: detected capacity change from 0 to 128 [ 2286.476387][T18183] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2286.654552][T18311] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2286.785322][T18311] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 2287.046302][T17661] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2287.878390][T18183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2288.046364][T18183] 8021q: adding VLAN 0 to HW filter on device team0 [ 2288.133884][ T9535] bridge0: port 1(bridge_slave_0) entered blocking state [ 2288.141503][ T9535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2288.266071][ T6033] bridge0: port 2(bridge_slave_1) entered blocking state [ 2288.273824][ T6033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2289.304553][T18344] loop2: detected capacity change from 0 to 512 [ 2289.342878][T18344] EXT4-fs: inline encryption not supported [ 2289.349067][T18344] EXT4-fs: Ignoring removed i_version option [ 2289.489913][T18344] EXT4-fs: Ignoring removed i_version option [ 2289.496192][T18344] ext4: Bad value for 'journal_dev' [ 2291.050431][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2291.079603][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2291.104666][T18183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2291.373617][T12672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2291.400849][T12672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2292.144229][T18364] loop9: detected capacity change from 0 to 164 [ 2292.255600][T18364] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 2292.388318][T18368] bridge1: entered promiscuous mode [ 2292.885810][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 2292.944865][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 2293.374740][T18378] tipc: Enabling of bearer rejected, already enabled [ 2293.784356][T18382] loop7: detected capacity change from 0 to 128 [ 2293.970839][T18382] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2294.021426][T18382] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 2294.086365][T18183] veth0_vlan: entered promiscuous mode [ 2294.261660][T18183] veth1_vlan: entered promiscuous mode [ 2295.067823][T18183] veth0_macvtap: entered promiscuous mode [ 2295.168837][T18183] veth1_macvtap: entered promiscuous mode [ 2295.413888][T18183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2295.651129][T18183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2295.835515][ T9535] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2295.872025][ T9535] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2295.911056][ T9535] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2295.965408][ T9535] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2297.762810][T18417] loop2: detected capacity change from 0 to 164 [ 2297.866381][T18417] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 2298.732151][T18425] ===================================================== [ 2298.739879][T18425] BUG: KMSAN: uninit-value in batadv_get_vid+0x2ce/0x3b0 [ 2298.747127][T18425] batadv_get_vid+0x2ce/0x3b0 [ 2298.752113][T18425] batadv_interface_tx+0x2e8/0x1dd0 [ 2298.757506][T18425] dev_hard_start_xmit+0x24e/0xad0 [ 2298.763180][T18425] __dev_queue_xmit+0x3412/0x5980 [ 2298.768393][T18425] __bpf_redirect+0x162e/0x1760 [ 2298.773735][T18425] bpf_clone_redirect+0x4a6/0x6c0 [ 2298.779002][T18425] ___bpf_prog_run+0x12af/0xeb60 [ 2298.784346][T18425] __bpf_prog_run512+0xc5/0x100 [ 2298.789354][T18425] bpf_test_run+0x493/0xdf0 [ 2298.794158][T18425] bpf_prog_test_run_skb+0x22a5/0x3050 [ 2298.800043][T18425] bpf_prog_test_run+0x5bb/0x9f0 [ 2298.805177][T18425] __sys_bpf+0x925/0xee0 [ 2298.809699][T18425] __x64_sys_bpf+0xa4/0xf0 [ 2298.814243][T18425] x64_sys_call+0x13d0/0x3ea0 [ 2298.819121][T18425] do_syscall_64+0x134/0xf80 [ 2298.824047][T18425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2298.830312][T18425] [ 2298.832711][T18425] Uninit was created at: [ 2298.837294][T18425] kmem_cache_alloc_node_noprof+0x3cd/0x12d0 [ 2298.843560][T18425] pskb_expand_head+0x2ef/0x1fb0 [ 2298.848692][T18425] skb_ensure_writable+0x44e/0x510 [ 2298.854112][T18425] bpf_clone_redirect+0x301/0x6c0 [ 2298.859331][T18425] ___bpf_prog_run+0x12af/0xeb60 [ 2298.864510][T18425] __bpf_prog_run512+0xc5/0x100 [ 2298.869680][T18425] bpf_test_run+0x493/0xdf0 [ 2298.874310][T18425] bpf_prog_test_run_skb+0x22a5/0x3050 [ 2298.880080][T18425] bpf_prog_test_run+0x5bb/0x9f0 [ 2298.885174][T18425] __sys_bpf+0x925/0xee0 [ 2298.889678][T18425] __x64_sys_bpf+0xa4/0xf0 [ 2298.894223][T18425] x64_sys_call+0x13d0/0x3ea0 [ 2298.899073][T18425] do_syscall_64+0x134/0xf80 [ 2298.903928][T18425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2298.910073][T18425] [ 2298.912507][T18425] CPU: 0 UID: 0 PID: 18425 Comm: syz.2.2132 Not tainted syzkaller #0 PREEMPT(full) [ 2298.922169][T18425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 2298.932473][T18425] ===================================================== [ 2298.939602][T18425] Disabling lock debugging due to kernel taint [ 2298.945846][T18425] Kernel panic - not syncing: kmsan.panic set ... [ 2298.952387][T18425] CPU: 0 UID: 0 PID: 18425 Comm: syz.2.2132 Tainted: G B syzkaller #0 PREEMPT(full) [ 2298.963508][T18425] Tainted: [B]=BAD_PAGE [ 2298.967741][T18425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 2298.978006][T18425] Call Trace: [ 2298.981391][T18425] [ 2298.984405][T18425] __dump_stack+0x26/0x30 [ 2298.988933][T18425] dump_stack_lvl+0x50/0x1c0 [ 2298.993707][T18425] ? dump_stack+0x12/0x25 [ 2298.998202][T18425] dump_stack+0x1e/0x25 [ 2299.002511][T18425] vpanic+0x7b4/0x1430 [ 2299.006777][T18425] panic+0x15d/0x160 [ 2299.010983][T18425] kmsan_report+0x31a/0x320 [ 2299.015688][T18425] ? __msan_warning+0x1b/0x30 [ 2299.020538][T18425] ? batadv_get_vid+0x2ce/0x3b0 [ 2299.025578][T18425] ? batadv_interface_tx+0x2e8/0x1dd0 [ 2299.031154][T18425] ? dev_hard_start_xmit+0x24e/0xad0 [ 2299.036635][T18425] ? __dev_queue_xmit+0x3412/0x5980 [ 2299.042037][T18425] ? __bpf_redirect+0x162e/0x1760 [ 2299.047199][T18425] ? bpf_clone_redirect+0x4a6/0x6c0 [ 2299.052596][T18425] ? ___bpf_prog_run+0x12af/0xeb60 [ 2299.057865][T18425] ? __bpf_prog_run512+0xc5/0x100 [ 2299.063056][T18425] ? bpf_test_run+0x493/0xdf0 [ 2299.067868][T18425] ? bpf_prog_test_run_skb+0x22a5/0x3050 [ 2299.073707][T18425] ? bpf_prog_test_run+0x5bb/0x9f0 [ 2299.078985][T18425] ? __sys_bpf+0x925/0xee0 [ 2299.083553][T18425] ? __x64_sys_bpf+0xa4/0xf0 [ 2299.088275][T18425] ? x64_sys_call+0x13d0/0x3ea0 [ 2299.093323][T18425] ? do_syscall_64+0x134/0xf80 [ 2299.098230][T18425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2299.104454][T18425] ? kernel_text_address+0x10e/0x1a0 [ 2299.110045][T18425] ? kmsan_get_metadata+0xf1/0x160 [ 2299.115356][T18425] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2299.121373][T18425] ? kmsan_get_metadata+0xf1/0x160 [ 2299.126681][T18425] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2299.132697][T18425] ? batadv_interface_tx+0x21/0x1dd0 [ 2299.138173][T18425] ? filter_irq_stacks+0x49/0x190 [ 2299.143485][T18425] ? kmsan_get_metadata+0xf1/0x160 [ 2299.148820][T18425] __msan_warning+0x1b/0x30 [ 2299.153495][T18425] batadv_get_vid+0x2ce/0x3b0 [ 2299.158374][T18425] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2299.164398][T18425] batadv_interface_tx+0x2e8/0x1dd0 [ 2299.169806][T18425] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 2299.176335][T18425] ? __pfx_batadv_interface_tx+0x10/0x10 [ 2299.182181][T18425] dev_hard_start_xmit+0x24e/0xad0 [ 2299.187516][T18425] __dev_queue_xmit+0x3412/0x5980 [ 2299.192723][T18425] ? skb_release_data+0x107c/0x11b0 [ 2299.198183][T18425] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 2299.204618][T18425] ? kmsan_get_metadata+0xf1/0x160 [ 2299.209936][T18425] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2299.215956][T18425] ? __dev_queue_xmit+0x27a/0x5980 [ 2299.221272][T18425] ? pskb_expand_head+0x1c0e/0x1fb0 [ 2299.226621][T18425] ? kmsan_get_metadata+0xf1/0x160 [ 2299.231959][T18425] __bpf_redirect+0x162e/0x1760 [ 2299.236965][T18425] ? kmsan_get_metadata+0xf1/0x160 [ 2299.242300][T18425] bpf_clone_redirect+0x4a6/0x6c0 [ 2299.247552][T18425] ___bpf_prog_run+0x12af/0xeb60 [ 2299.252691][T18425] __bpf_prog_run512+0xc5/0x100 [ 2299.257733][T18425] ? kmsan_internal_poison_memory+0x78/0x90 [ 2299.263818][T18425] ? kmsan_internal_poison_memory+0x4a/0x90 [ 2299.269898][T18425] ? kmsan_slab_alloc+0xdc/0x160 [ 2299.275040][T18425] ? kmem_cache_alloc_noprof+0x37b/0x1270 [ 2299.280922][T18425] ? slab_build_skb+0x5c/0x5b0 [ 2299.285870][T18425] ? bpf_prog_test_run_skb+0x74d/0x3050 [ 2299.291623][T18425] ? bpf_prog_test_run+0x5bb/0x9f0 [ 2299.296898][T18425] ? __sys_bpf+0x925/0xee0 [ 2299.301474][T18425] ? kmsan_get_metadata+0xf1/0x160 [ 2299.306782][T18425] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2299.312801][T18425] ? bpf_test_run+0xe1/0xdf0 [ 2299.317519][T18425] ? filter_irq_stacks+0x49/0x190 [ 2299.322735][T18425] ? kmsan_get_metadata+0xf1/0x160 [ 2299.328053][T18425] ? kmsan_get_metadata+0xf1/0x160 [ 2299.333355][T18425] ? kmsan_get_metadata+0xf1/0x160 [ 2299.338666][T18425] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 2299.345186][T18425] ? kmsan_get_metadata+0x146/0x160 [ 2299.350585][T18425] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2299.356587][T18425] ? __pfx___bpf_prog_run512+0x10/0x10 [ 2299.362220][T18425] ? __pfx___bpf_prog_run512+0x10/0x10 [ 2299.367844][T18425] bpf_test_run+0x493/0xdf0 [ 2299.372501][T18425] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2299.378508][T18425] ? kmsan_get_metadata+0xf1/0x160 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2299.383825][T18425] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2299.389858][T18425] ? bpf_test_run+0x2f4/0xdf0 [ 2299.394696][T18425] ? kmsan_get_metadata+0xf1/0x160 [ 2299.400008][T18425] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2299.406032][T18425] bpf_prog_test_run_skb+0x22a5/0x3050 [ 2299.411701][T18425] ? kmsan_get_metadata+0xf1/0x160 [ 2299.417065][T18425] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 2299.423054][T18425] bpf_prog_test_run+0x5bb/0x9f0 [ 2299.428156][T18425] __sys_bpf+0x925/0xee0 [ 2299.432574][T18425] __x64_sys_bpf+0xa4/0xf0 [ 2299.437121][T18425] x64_sys_call+0x13d0/0x3ea0 [ 2299.441963][T18425] do_syscall_64+0x134/0xf80 [ 2299.446683][T18425] ? clear_bhb_loop+0x50/0xa0 [ 2299.451497][T18425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2299.457550][T18425] RIP: 0033:0x7f8bfb39c799 [ 2299.462069][T18425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2299.481820][T18425] RSP: 002b:00007f8bfc235028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2299.490383][T18425] RAX: ffffffffffffffda RBX: 00007f8bfb615fa0 RCX: 00007f8bfb39c799 [ 2299.498464][T18425] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 2299.506537][T18425] RBP: 00007f8bfb432c99 R08: 0000000000000000 R09: 0000000000000000 [ 2299.514606][T18425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2299.522676][T18425] R13: 00007f8bfb616038 R14: 00007f8bfb615fa0 R15: 00007fff5e8fc428 [ 2299.530791][T18425] [ 2299.534165][T18425] Kernel Offset: disabled [ 2299.538597][T18425] Rebooting in 86400 seconds..