last executing test programs: 17m12.788184196s ago: executing program 32 (id=25): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x1403, 0x800, 0x70bd2a, 0x25dfdbfb}, 0x10}}, 0x4000001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000380)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/sys/net/ipv4/tcp_ecn\x00', 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000580)=0x3fa, 0x4) close(0x3) write(r1, &(0x7f00000005c0)='3', 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000940)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x68, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}, [@TCA_NETEM_DELAY_DIST={0x4a, 0x2, "7661be5dd364ee3ac73a65fe48192671da55098afeaec7e62daa7b7d9630c38e7f50b92cba855e4390179b3c32c0696438cef083fa03f88c57a668132de51acabd2572a16535"}]}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000007c0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000800)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendto$inet(r2, &(0x7f0000000840), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000880)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 16m59.577538142s ago: executing program 33 (id=45): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x1, 0xb2, 0x5, 0x2}, 0x9c) gettimeofday(0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x1, 0x0, 0x0, 0x8a, 0x3}, 0x9c) bind$inet6(r4, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) sendmmsg(r0, 0x0, 0x0, 0x300) setsockopt$inet_int(r0, 0x0, 0xc, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) 16m43.50093165s ago: executing program 34 (id=66): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x56, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000340)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x2, 0x1, 0x0, 0x200}, 0x20) sendmsg$inet6(r0, &(0x7f0000000380)={&(0x7f0000000480)={0xa, 0x4e24, 0x7e, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x60}, 0x20000014) io_uring_setup(0x7fc0, 0x0) io_uring_setup(0x25f3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x2, 0x4, 0xde}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000840)='\xecO\xf8YSRK\xf1~\xcc6\xd3\xdd\xbd\xfc\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x7fs\xc0\xbb\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5\x9f\x00\x00\x00\x00\x00\x00\x00>\xe9\xf2\x7f\xa4\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1bkm\xd7\xbd\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4+\x86\xe8\x00\x00\x00\x00\"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd0\x06\a\xe4V\x9d\x18\xd4\xd8\x9ed\x0fN[\xb4\xd5\xbb\xe5\x05\x80\xf2U=\xf0\x8d\xe2Nj\x99a\xb6M\xe2\xe2KL\xf0\x93\xf8\x87:\x13i\xc6\xa2\xb2[\xd4q\x93\xb6\xf4\xd5V:N\x0f\x01]\xa3\xaf;,t\xdb\x1c\rQ/C@\x93\x87\x81l\xea\xf6S\xfe\xf3\xd1\xf0\xdbRxw\xf9\xd7M\x0e\xf9\xc0\xb1s\xb2\xea\x01\"R\xc4[s\x82\xca\xd5&\x13\xd8&\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfa\xa92\xfe\x0e\xb7\'M\xe3j\x92\r\xef\xa7;\xa5\x0e\xd1\x8f\xdf\x19;\x0ea\x06\xb6\x00\x00q\x92\xb1\x9d\xef8\xdf\x8a\xda_\xcdX_\x0f.\x15N\xa3k9\xdc][~\xe0#\xa0\x05%\x02!%\xe4\xbd\xa3\x8c\xf3k\xc2\xd0!&\x95\x17W\xe9\xf5=I\x7f!\xbd\xa9\xf0=\x96\xa5V\xb1\xde\"\x9c\b\xab\xf8M\x9e\x8fg\xec\xb9>7\xd8\xa3G\b\x9c;\fd\xf6mN\xaeF\x0e\xf4\x98\xcceq.0\x8cB\xdd7\xfcY\xb8\x8d*\xbb%\xd9\xc6\x9f&\x95\xcdI\xb3\xc3-/M\xae\xd8\xa3G\x7fr>MG\x00&O\x157\x04^\xd6\xed\xe7\xf9\x9d\x9a&\xe6\xad\t\x06\x0f\x96\xc6\xfe', 0x3) ftruncate(r1, 0x8800000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000680)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) r4 = dup3(r3, r2, 0x0) sendfile(r4, r1, 0x0, 0x1000009) 14m39.908168918s ago: executing program 35 (id=413): syz_usb_connect(0x0, 0x24, &(0x7f0000001080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000001100), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000001140)={&(0x7f0000001180)=[{0x1e, 0x1000, 0x0, 0x0}, {0xce, 0x6001, 0x0, 0x0}], 0x2}) 14m30.319681729s ago: executing program 36 (id=463): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) madvise(&(0x7f000001b000/0x3000)=nil, 0x3000, 0x9) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) 12m9.826451915s ago: executing program 37 (id=1130): r0 = fsopen(&(0x7f0000000180)='cgroup\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xe, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000ec0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r2, 0x18000000000002a0, 0x1b, 0x0, &(0x7f0000000f80)="b9354b27b553aeee40000b0000a4df2a9080f3c9aa55548f47b480", 0x0, 0x603, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) syz_emit_vhci(&(0x7f0000000fc0)=ANY=[], 0x7) msgget$private(0x0, 0x2) fchdir(r1) getdents(0xffffffffffffffff, &(0x7f0000000100)=""/39, 0x27) getdents(0xffffffffffffffff, 0xfffffffffffffffd, 0x58) 11m10.098110667s ago: executing program 0 (id=1335): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) setns(0xc9, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000300)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 11m9.85666033s ago: executing program 0 (id=1338): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r3) getsockname$packet(r3, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000700)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000740)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r4}) sendmsg$nl_route(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 11m9.589867553s ago: executing program 0 (id=1352): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r3) getsockname$packet(r3, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000700)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000740)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r4}) sendmsg$nl_route(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 11m8.841227491s ago: executing program 0 (id=1356): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r3) getsockname$packet(r3, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000700)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000740)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r4}) sendmsg$nl_route(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 11m8.421820071s ago: executing program 0 (id=1347): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='io\x00') read$FUSE(r4, &(0x7f0000000240)={0x2020}, 0x120a) 11m4.325077283s ago: executing program 0 (id=1350): sched_setscheduler(0x0, 0x2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000540)=""/4106, 0x100a}], 0x1) splice(r1, 0x0, r3, 0x0, 0x7151, 0x0) 10m48.640289045s ago: executing program 38 (id=1350): sched_setscheduler(0x0, 0x2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000540)=""/4106, 0x100a}], 0x1) splice(r1, 0x0, r3, 0x0, 0x7151, 0x0) 10m14.175359832s ago: executing program 7 (id=1421): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8c40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xc, 0x143182) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000500)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000540)={'syzkaller1\x00', @multicast}) write$tun(r3, &(0x7f0000000740)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) recvmmsg(r2, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0xee}], 0x591, 0x10062, 0x0) 10m5.866969565s ago: executing program 7 (id=1432): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) io_uring_enter(0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x0) 10m2.038948996s ago: executing program 7 (id=1437): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r3) getsockname$packet(r3, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000700)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000740)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r4}) sendmsg$nl_route(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 10m0.505602762s ago: executing program 7 (id=1439): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000040)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000100)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000140)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) statfs(&(0x7f0000000180)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 9m59.881220486s ago: executing program 7 (id=1442): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f000001af00)=""/102392, 0x18ff8) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000033f00)=@req={0x3fc, 0xfeff, 0x0, 0xffffffff}, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000033f40)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f0000033f80), 0x4000000000000e4, 0x0) 9m57.337476766s ago: executing program 7 (id=1445): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000005c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000006c0), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000700), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) fadvise64(0xffffffffffffffff, 0x73, 0x9, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06000000040000002010000089"], 0x50) 9m56.205404923s ago: executing program 4 (id=1446): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000a00)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019a00)=0x7) set_mempolicy(0x6, &(0x7f0000019a40)=0x8000000000000001, 0xe0) mkdirat(0xffffffffffffff9c, &(0x7f0000019a80)='./mnt\x00', 0x1ff) mount(&(0x7f0000019ac0)=@filename='127.0.0.1:file0\x00', &(0x7f0000019b00)='./mnt\x00', &(0x7f0000019b40)='nfs4\x00', 0x0, &(0x7f0000019b80)='addr=127.0.0.1,port=2049,clientaddr=127.0.0.1,minorversion=1\x00') r4 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, 0x0) 9m49.858363357s ago: executing program 4 (id=1450): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xffffffffb5404c40, 0x0, 0x0, 0x800, 0x2, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$vbi(0x0, 0x0, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) dup2(r2, r0) r3 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000000040)={0x0, 0x30b5, 0x800, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000000c0)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x252}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffd7c, 0x80, 0x10000000, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x2000, 0x20000, 0x0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000, 0x2, 0x4, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 9m40.242251852s ago: executing program 39 (id=1445): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000005c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000006c0), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000700), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) fadvise64(0xffffffffffffffff, 0x73, 0x9, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06000000040000002010000089"], 0x50) 9m35.199967298s ago: executing program 4 (id=1466): socket$inet_smc(0x2b, 0x1, 0x0) mkdir(&(0x7f0000000000)='./dev\x00', 0x1fe) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/console\x00', 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1000, 0x8000002, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2001, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x5f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x4000, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 9m32.212330831s ago: executing program 4 (id=1470): sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0) socket(0xa, 0x5, 0x0) 9m29.307827872s ago: executing program 4 (id=1474): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) keyctl$read(0xb, r0, &(0x7f0000001600)=""/121, 0x79) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f00000005c0)=0x4000007) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000001740)=ANY=[@ANYRESHEX], 0x0, 0x80}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mkdir(0x0, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 9m27.028864407s ago: executing program 4 (id=1477): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = socket$inet(0xa, 0x801, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x7b, 0x983a}, 0x90) 9m11.854556514s ago: executing program 40 (id=1477): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = socket$inet(0xa, 0x801, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x7b, 0x983a}, 0x90) 6m19.416083276s ago: executing program 9 (id=1980): syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000380)='./file1\x00', 0x804800, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES16, @ANYRES64], 0x10, 0x121a, &(0x7f0000000480)="$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") openat(0xffffffffffffff9c, &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x88040, 0x0) 6m18.473977787s ago: executing program 9 (id=1983): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x1, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000340)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x20004004) 6m17.939215791s ago: executing program 9 (id=1989): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 6m16.741440729s ago: executing program 9 (id=2001): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000440)='.\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) umount2(&(0x7f00000005c0)='./file0\x00', 0xc) 6m15.736083006s ago: executing program 9 (id=2014): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000440), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000480)=0x40000) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f00000004c0), 0x2800, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000800)=0xd) write$dsp(r0, 0x0, 0xfffffe59) 6m14.91608781s ago: executing program 9 (id=2022): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) fsopen(&(0x7f0000000340)='ntfs3\x00', 0x0) 6m14.538703058s ago: executing program 41 (id=2022): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) fsopen(&(0x7f0000000340)='ntfs3\x00', 0x0) 4m37.61122359s ago: executing program 6 (id=2399): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "750600", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "ffffffffffffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 4m36.72379883s ago: executing program 6 (id=2403): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$swradio(&(0x7f0000000c00), 0x0, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0xc20280, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x123e00, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPKT(r2, 0x80045438, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 4m32.204337323s ago: executing program 6 (id=2408): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r3, &(0x7f0000000900)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019900)=0x7) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) 4m30.279137249s ago: executing program 6 (id=2410): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000900)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000019900)=0x7) syz_open_dev$dvb_demux(&(0x7f0000000040), 0x0, 0x2000) 4m18.600386624s ago: executing program 6 (id=2428): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r3, &(0x7f00000003c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f00000193c0)=0x7) clock_gettime(0x8, 0x0) 4m13.964291082s ago: executing program 6 (id=2434): sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r3, &(0x7f0000001c40)=""/102392, 0x18ff8) r4 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r4, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 4m2.306115157s ago: executing program 1 (id=2450): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x82}, 0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) syz_io_uring_submit(0x0, r1, r2, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 4m2.304476704s ago: executing program 2 (id=2461): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x1100, 0xe, 0x0, &(0x7f0000000600)="11c24d15786a70950485606356a6", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'dummy0\x00'}) symlinkat(&(0x7f0000000040)='./config/usb_gadget/g1/configs/c.1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1\x00', 0x1ff) mount$cgroup2(0x0, &(0x7f0000000640)='./config\x00', 0x0, 0x100040, &(0x7f00000006c0)) 3m58.932193506s ago: executing program 1 (id=2454): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 3m58.781343281s ago: executing program 42 (id=2434): sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r3, &(0x7f0000001c40)=""/102392, 0x18ff8) r4 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r4, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 3m58.593976285s ago: executing program 2 (id=2457): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f00000000c0)=0x40, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = socket(0x1e, 0x2, 0x0) sendmsg$tipc(r3, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="009b9cf30cc0", 0x6}], 0x1, 0x0, 0x0, 0x1}, 0x4800) 3m56.939027713s ago: executing program 2 (id=2459): mmap(0x0, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000015c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001600)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000001640)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001680)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000016c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001700)=""/102392, 0x18ff8) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) 3m54.3018919s ago: executing program 2 (id=2462): syz_open_dev$I2C(&(0x7f0000000000), 0xda3, 0x2000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000240)={0x7, 0x5, @name="752a4b1dc17809b7afc4973022e1a2d305757e44ea8b3e89a76365556d16fcda"}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) request_key(0x0, 0x0, &(0x7f0000000380)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000680)="94", 0xf000}, {0x0}], 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000080)=@generic={0x1, 0xff, 0x3c40}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'netdevsim0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000740)='bridge0\x00') socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000ac0)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4) 3m51.775310627s ago: executing program 1 (id=2467): r0 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x1}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000000c0)={0x8000, "8712c0a3833598f85991b897c0065fdb2f9d38dba565e353ee57fceeca13e8e1", 0xffffffffffffffff}) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffffa) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, &(0x7f0000000080)={0x0, 0x1, 0x20000000, 0xffffffffffffffff, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x200000) 3m49.98338812s ago: executing program 1 (id=2469): socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, &(0x7f0000000080)=0xffd2) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_FORWARD(r4, 0x40084149, 0x0) 3m48.293531953s ago: executing program 1 (id=2470): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000001240)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f000001a240)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f000001a280)={0x1, &(0x7f000001a2c0)=[{0x6}]}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 3m41.408210926s ago: executing program 1 (id=2473): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) rseq(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x6) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x6, @multicast1, 0x15, 0x0, 'rr\x00', 0x0, 0x0, 0x50}, 0x2c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x21000}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) socket(0x2b, 0x80801, 0x1) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000280)='port', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 3m41.344312062s ago: executing program 2 (id=2474): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f0000000500)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0xc4, 0x8}, @initr0, @exit, @exit]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 3m38.551830171s ago: executing program 2 (id=2476): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000001d80)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r4, &(0x7f0000000300)="340000003e000500010000000000000001020000000000000c0001006f76732d647030000800020000000000080009000f000f00", 0x34, 0x0, 0x0, 0x0) 3m24.579010979s ago: executing program 43 (id=2473): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) rseq(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x6) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x6, @multicast1, 0x15, 0x0, 'rr\x00', 0x0, 0x0, 0x50}, 0x2c) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x21000}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) socket(0x2b, 0x80801, 0x1) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000280)='port', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 3m22.48111798s ago: executing program 44 (id=2476): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000001d80)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r4, &(0x7f0000000300)="340000003e000500010000000000000001020000000000000c0001006f76732d647030000800020000000000080009000f000f00", 0x34, 0x0, 0x0, 0x0) 11.457005944s ago: executing program 3 (id=2723): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) socket$netlink(0x10, 0x3, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080060000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1) 10.925001393s ago: executing program 8 (id=2726): mkdirat(0xffffffffffffff9c, 0x0, 0x1e) r0 = socket(0x11, 0x3, 0x0) sendmsg(r0, 0x0, 0x44000) mount(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x4004, &(0x7f00000003c0), 0x1, 0x50f, &(0x7f0000000580)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000ac0)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000b00)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000b40)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000bc0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000c40), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000c80), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r4, &(0x7f0000000d40)=""/60, 0x3c, 0x40, 0x0, 0x0) 9.007443461s ago: executing program 8 (id=2727): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x8, 0x4, 0x4, 0xe}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r2, &(0x7f0000000400)="9ff33727", 0x0}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x14, 0x28, 0x301, 0x2270bd24, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4808}, 0x2000) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newlink={0xcc, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x80, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}, @IFLA_BRPORT_UNICAST_FLOOD={0x5, 0x9, 0x1}, @IFLA_BRPORT_GUARD={0x5}, @IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8}, @IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0xd5}, @IFLA_BRPORT_FAST_LEAVE={0x5}, @IFLA_BRPORT_PROXYARP={0x5}, @IFLA_BRPORT_LEARNING={0x5}, @IFLA_BRPORT_FLUSH={0x4}, @IFLA_BRPORT_PROTECT={0x5, 0x6, 0x1}, @IFLA_BRPORT_PRIORITY={0x6, 0x2, 0x1}, @IFLA_BRPORT_BCAST_FLOOD={0x5}, @IFLA_BRPORT_UNICAST_FLOOD={0x5, 0x9, 0x1}, @IFLA_BRPORT_GUARD={0x5, 0x5, 0x1}, @IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0x6}, @IFLA_BRPORT_STATE={0x5, 0x1, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="d80000001c0081044e81f782db44b9040a1d08020a000000401296a1180002000f00000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d3227e7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x4040004) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000006c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 8.93838979s ago: executing program 3 (id=2728): symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000240)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7/file0\x00', 0x0) symlinkat(&(0x7f0000000600)='.\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file7/file0\x00', 0x0) 8.665677363s ago: executing program 3 (id=2730): syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000000)='./file2\x00', 0x20404a, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1e3, &(0x7f0000000140)="$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") prctl$PR_SET_SECUREBITS(0x1c, 0x1d) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x141102) writev(r0, &(0x7f0000000380)=[{&(0x7f00000003c0)="94", 0xf000}, {0x0}], 0x2) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000600)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c400000340003801400018008000100ffffffff08"], 0xc8}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x0) 6.241912726s ago: executing program 3 (id=2735): clock_gettime(0x4, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004002, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@noinit_itable}, {@dax_always}, {@grpjquota, 0x2e}], [{@subj_type={'subj_type', 0x3d, '\xe1[]*:['}}]}, 0x81, 0x496, &(0x7f00000001c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys\x00', 0x2) mount$9p_tcp(&(0x7f0000000f00), 0x0, 0x0, 0x2020, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000740)=""/204, 0xcc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0x25, 0x9, @val=@perf_event={0xf346}}, 0x18) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000008c0)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000900)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000940)={0x0, 0x0, 0x0, &(0x7f0000000980)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000a00)={0x1, 0x1, &(0x7f0000000a40)=""/231, &(0x7f0000000b40)=""/87, &(0x7f0000000bc0)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c40)={0x1, 0x0, [{0x0, 0x32, &(0x7f0000000c80)=""/50}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000cc0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000d00)=0xfffffffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) 5.144484499s ago: executing program 5 (id=2737): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2004800, &(0x7f0000000180)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0xfe, 0x3bc, &(0x7f00000002c0)="$eJzs3cGLG2UUAPC32e3uttrNgiKoiB8FD17Cdv0HukgL4oJSG6kehKmb1ZA0KUlYSREtXrz6H3gvHr0J4j/Qg969eevFYw+lI8kku8k2bV3rbqj+frDMy3zfm3wzQ4a3h+Hdvfrd9cZut7Kb9aJ0IUUpIkr3ItaHUWFhtC0N4+WYdCveLF/9/bUPPvr43a3t7YuXU7q0deWtzZTS2us/f/HlD+d+6T334Y9rP63EnfVP7v65+cedl+68fPfBlc/r3VTvpqV2L2XpWrvdy641a2mn3m1UUnq/Wcu6tVRvdWudqfHdZvvGjX7KWjtnz9zo1LrdlLX6qVHrp1479db6Kfssq7dSpVJJZ88ET1K9fflytlXEq4+Zd+GkFsQx6HS2ssFveOWhkertuSwIAJirp63/l5+u/m9N1/+notuovPBGcegj1/8d9f8RTdb//FcN6v/l0e83IvKD/wPU/wAAAAAAAAAAAAAA8Cy4l+flPM/L4+3+ywGjz3NeHsfsoft/6G/e6+N4Tby4txrR/HavulcttsX41m7Uoxm12Ihy3B88FsaK+NI72xc30tB6nL3+9TD/3K8R1cXp/PNRjvXZ+eeL/LSfH4PtqTgzmb8Z5Xhxdv7mfn6+cJC/HBvfT+RXohy/fRrtaMbO8PF2kP/V+ZTefm/70PevDOcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8P9QSWOvRtH3fq8acTr2Rv37KwcT1qf74xf5o/76pdiIctyf3Z9/Y2Z//6V4ZWm+5w4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAY93+zUbWbNY6JxWMe/4P9yyPg0dnLRTTbx0aOh3Tk1eedJy/H+R5nj/I83xqqHSk45weneSMocGRv1kthos9O61/6/KuLpzorXya4FREPGZOPrqAk0OL8U++6/n96zxzzkpEHOuZrg2C0tHTyzHn23TijyIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYu/2m34MPC/NeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPPS7d9sZM3mYmcU1KaDpTi8J2suxiMmPyqY9zkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8S/4KAAD//31oB3w=") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000140)={[{@init_itable}]}, 0x1, 0x79f, &(0x7f0000000680)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000004, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x2, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000001380)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000013c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001400)=0x7) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000ffe000/0x2000)=nil, 0xf7ff, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) connect$unix(r1, &(0x7f0000001480)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001500), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001540), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f00000015c0)='dirsync\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001600)=0x6) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000001640)='./file0\x00', 0x200) prlimit64(0x0, 0xe, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000016c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001a80)='./proc\x00', 0x1ff) symlink(&(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4.005401323s ago: executing program 5 (id=2738): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080060000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1) 3.900968347s ago: executing program 8 (id=2739): clock_gettime(0x4, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004002, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@noinit_itable}, {@dax_always}, {@grpjquota, 0x2e}], [{@subj_type={'subj_type', 0x3d, '\xe1[]*:['}}]}, 0x81, 0x496, &(0x7f00000001c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys\x00', 0x2) mount$9p_tcp(&(0x7f0000000f00), 0x0, 0x0, 0x2020, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000740)=""/204, 0xcc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0x25, 0x9, @val=@perf_event={0xf346}}, 0x18) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000008c0)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000900)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000a00)={0x1, 0x1, &(0x7f0000000a40)=""/231, &(0x7f0000000b40)=""/87, &(0x7f0000000bc0)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c40)={0x1, 0x0, [{0x0, 0x32, &(0x7f0000000c80)=""/50}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000cc0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000d00)=0xfffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffdf6, 0x0, 0x100, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400005}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) 3.092949679s ago: executing program 3 (id=2740): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x90}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) syz_io_uring_setup(0xfff, 0x0, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000500)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0) read$msr(r1, &(0x7f000000e0c0)=""/102392, 0x18ff8) rmdir(0x0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000240)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7/file0\x00', 0x0) symlinkat(&(0x7f0000000600)='.\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') 3.066804668s ago: executing program 5 (id=2741): symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000240)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7/file0\x00', 0x0) symlinkat(&(0x7f0000000600)='.\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file7/file0\x00', 0x0) 2.110737553s ago: executing program 5 (id=2742): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) socket$netlink(0x10, 0x3, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080060000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1) 2.01135397s ago: executing program 3 (id=2743): r0 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000400)={'/sys/block/md', @num=0x0, '/md/', @array='array_state\x00'}, 0x1, 0x0) write$md_sysfs(r0, &(0x7f0000000440)=@str='active', 0x6) write$md_sysfs(r0, &(0x7f0000000500)=@str='clear', 0x5) 1.679982107s ago: executing program 8 (id=2744): symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000240)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7/file0\x00', 0x0) symlinkat(&(0x7f0000000600)='.\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file7/file0\x00', 0x0) 1.391001065s ago: executing program 8 (id=2745): r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$md_new_array(r0, &(0x7f0000000080)={'md', @num=0x0}, 0x3) r1 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000000c0)={'/sys/block/md', @num=0x0, '/md/', @array='level\x00'}, 0x1, 0x0) write$md_sysfs(r1, &(0x7f0000000100)=@str='raid1', 0x5) r2 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000140)={'/sys/block/md', @num=0x0, '/md/', @array='raid_disks\x00'}, 0x1, 0x0) write$md_sysfs(r2, &(0x7f0000000180)=@str='2', 0x1) r3 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000001c0)={'/sys/block/md', @num=0x0, '/md/', @array='component_size\x00'}, 0x1, 0x0) write$md_sysfs(r3, &(0x7f0000000200)=@str='512', 0x3) r4 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000240)={'/sys/block/md', @num=0x0, '/md/', @array='new_dev\x00'}, 0x1, 0x0) write$md_sysfs(r4, &(0x7f0000000280)=@dev={'1:', 0x0}, 0x16) write$md_sysfs(r4, &(0x7f00000002c0)=@dev={'1:', 0x1}, 0x16) r5 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000300)={'/sys/block/md', @num=0x0, '/md/', @rdev={@ram={'dev-ram', 0x0}, 'slot\x00'}}, 0x1, 0x0) write$md_sysfs(r5, &(0x7f0000000340)=@str='0', 0x1) r6 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000380)={'/sys/block/md', @num=0x0, '/md/', @rdev={@ram={'dev-ram', 0x1}, 'slot\x00'}}, 0x1, 0x0) write$md_sysfs(r6, &(0x7f00000003c0)=@str='1', 0x1) r7 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000400)={'/sys/block/md', @num=0x0, '/md/', @array='array_state\x00'}, 0x1, 0x0) write$md_sysfs(r7, &(0x7f0000000440)=@str='active', 0x6) r8 = openat$md(0xffffffffffffff9c, &(0x7f0000000480)={'/dev/md', @num=0x0}, 0x2, 0x0) pwrite64(r8, &(0x7f00000004c0)="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0x20, 0x1000) close(r8) 707.104528ms ago: executing program 5 (id=2746): mkdirat(0xffffffffffffff9c, 0x0, 0x1e) r0 = socket(0x11, 0x3, 0x0) sendmsg(r0, 0x0, 0x44000) mount(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x4004, &(0x7f00000003c0), 0x1, 0x50f, &(0x7f0000000580)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000ac0)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000b00)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000b40)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) connect$unix(0xffffffffffffffff, &(0x7f0000000bc0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000c40), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000c80), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r2, &(0x7f0000000d00), 0x4000000000001c0, 0x0) recvfrom(r3, &(0x7f0000000d40)=""/60, 0x3c, 0x40, 0x0, 0x0) 54.768312ms ago: executing program 5 (id=2747): mkdirat(0xffffffffffffff9c, 0x0, 0x1e) r0 = socket(0x11, 0x3, 0x0) sendmsg(r0, 0x0, 0x44000) mount(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x4004, &(0x7f00000003c0), 0x1, 0x50f, &(0x7f0000000580)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000ac0)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000b00)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000b40)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) connect$unix(0xffffffffffffffff, &(0x7f0000000bc0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000c40), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000c80), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r2, &(0x7f0000000d00), 0x4000000000001c0, 0x0) recvfrom(r3, &(0x7f0000000d40)=""/60, 0x3c, 0x40, 0x0, 0x0) 0s ago: executing program 8 (id=2748): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2004800, &(0x7f0000000180)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0xfe, 0x3bc, &(0x7f00000002c0)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000140)={[{@init_itable}]}, 0x1, 0x79f, &(0x7f0000000680)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000004, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x2, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000001380)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000013c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001400)=0x7) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000ffe000/0x2000)=nil, 0xf7ff, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) connect$unix(r1, &(0x7f0000001480)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001500), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001540), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f00000015c0)='dirsync\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001600)=0x6) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000001640)='./file0\x00', 0x200) prlimit64(0x0, 0xe, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000016c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001a80)='./proc\x00', 0x1ff) symlink(&(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') kernel console output (not intermixed with test programs): l_64+0x661/0x790 [ 831.642249][T12583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.642289][T12583] RIP: 0033:0x7f0649ba0797 [ 831.642319][T12583] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 831.642356][T12583] RSP: 002b:00007fff7905b768 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 831.642393][T12583] RAX: 0000000000000000 RBX: 00007f0649c35f63 RCX: 00007f0649ba0797 [ 831.642418][T12583] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff7905b820 [ 831.642443][T12583] RBP: 00007fff7905b820 R08: 00007fff7905c820 R09: 00000000ffffffff [ 831.642468][T12583] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff7905c8b0 [ 831.642493][T12583] R13: 00007f0649c35f63 R14: 00000000000cafa9 R15: 00007fff7905c8f0 [ 831.642545][T12583] [ 831.687203][T12583] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 831.871893][T14845] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2220'. [ 831.945411][T14845] syzkaller1: entered promiscuous mode [ 831.945444][T14845] syzkaller1: entered allmulticast mode [ 832.196283][T14351] Bluetooth: hci1: command 0x0c1a tx timeout [ 833.453638][T14863] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 833.453688][T14863] block device autoloading is deprecated and will be removed. [ 833.505380][T14868] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 833.505414][T14868] block device autoloading is deprecated and will be removed. [ 833.710490][T14873] loop2: detected capacity change from 0 to 512 [ 833.732508][T14873] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 834.207669][T14892] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 834.209784][T14892] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 838.375839][T14922] fuse: fd is not a fuse device [ 839.368361][T14956] loop8: detected capacity change from 0 to 512 [ 839.372811][T14956] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 839.773652][T14965] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 839.775831][T14965] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 841.279396][T14973] loop2: detected capacity change from 0 to 512 [ 841.293316][T14973] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 841.443718][T14976] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 842.083734][T14990] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 842.444306][T14996] netlink: 'syz.3.2260': attribute type 1 has an invalid length. [ 842.452063][T14996] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2260'. [ 842.741826][T15004] loop8: detected capacity change from 0 to 512 [ 842.755240][T15004] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 843.200709][T15017] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 844.156884][T15033] loop2: detected capacity change from 0 to 256 [ 844.164010][T15033] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 845.437932][ T29] audit: type=1800 audit(1793056671.219:320): pid=15037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2271" name="file1" dev="loop2" ino=256 res=0 errno=-4 [ 845.555807][T15044] loop6: detected capacity change from 0 to 512 [ 845.561775][T15044] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 845.684559][T15048] FAULT_INJECTION: forcing a failure. [ 845.684559][T15048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 845.684618][T15048] CPU: 1 UID: 0 PID: 15048 Comm: syz.8.2274 Tainted: G L syzkaller #0 PREEMPT(full) [ 845.684675][T15048] Tainted: [L]=SOFTLOCKUP [ 845.684689][T15048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 845.684714][T15048] Call Trace: [ 845.684728][T15048] [ 845.684744][T15048] dump_stack_lvl+0x100/0x190 [ 845.684807][T15048] should_fail_ex.cold+0x5/0xa [ 845.684862][T15048] _copy_from_iter+0x1f4/0x1690 [ 845.684928][T15048] ? srso_alias_return_thunk+0x5/0xfbef5 [ 845.684984][T15048] ? __asan_memset+0x23/0x50 [ 845.685045][T15048] ? __pfx__copy_from_iter+0x10/0x10 [ 845.685105][T15048] ? __pfx___alloc_skb+0x10/0x10 [ 845.685151][T15048] ? srso_alias_return_thunk+0x5/0xfbef5 [ 845.685220][T15048] netlink_sendmsg+0x8f5/0x10c0 [ 845.685284][T15048] ? __pfx_netlink_sendmsg+0x10/0x10 [ 845.685349][T15048] ? srso_alias_return_thunk+0x5/0xfbef5 [ 845.685397][T15048] ? apparmor_socket_sendmsg+0x165/0x280 [ 845.685457][T15048] ? ____sys_sendmsg+0xa99/0xc30 [ 845.685516][T15048] ____sys_sendmsg+0xa99/0xc30 [ 845.685574][T15048] ? __pfx_netlink_sendmsg+0x10/0x10 [ 845.685633][T15048] ? __pfx_____sys_sendmsg+0x10/0x10 [ 845.685717][T15048] ___sys_sendmsg+0x190/0x1e0 [ 845.685783][T15048] ? __pfx____sys_sendmsg+0x10/0x10 [ 845.685847][T15048] ? srso_alias_return_thunk+0x5/0xfbef5 [ 845.685896][T15048] ? futex_wait+0x11e/0x370 [ 845.685965][T15048] ? srso_alias_return_thunk+0x5/0xfbef5 [ 845.686010][T15048] ? find_held_lock+0x2b/0x80 [ 845.686090][T15048] __sys_sendmsg+0x160/0x210 [ 845.686134][T15048] ? __pfx___sys_sendmsg+0x10/0x10 [ 845.686191][T15048] ? srso_alias_return_thunk+0x5/0xfbef5 [ 845.686241][T15048] do_syscall_64+0x123/0x790 [ 845.686282][T15048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.686318][T15048] RIP: 0033:0x7f93ecb9f559 [ 845.686345][T15048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 845.686377][T15048] RSP: 002b:00007f93ed9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 845.686408][T15048] RAX: ffffffffffffffda RBX: 00007f93ece25fa0 RCX: 00007f93ecb9f559 [ 845.686430][T15048] RDX: 0000000020040084 RSI: 0000200000000180 RDI: 0000000000000004 [ 845.686452][T15048] RBP: 00007f93ecc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 845.686473][T15048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 845.686493][T15048] R13: 00007f93ece26038 R14: 00007f93ece25fa0 R15: 00007fff1c4353f8 [ 845.686537][T15048] [ 845.789859][T15053] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 845.791989][T15053] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 846.552708][T15056] loop3: detected capacity change from 0 to 512 [ 846.611994][T15056] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 846.937945][T15062] loop6: detected capacity change from 0 to 2640 [ 846.969064][T14978] buffer_io_error: 320 callbacks suppressed [ 846.969092][T14978] Buffer I/O error on dev loop6, logical block 0, async page read [ 846.969842][T14978] Buffer I/O error on dev loop6, logical block 0, async page read [ 847.033191][T14978] Buffer I/O error on dev loop6, logical block 0, async page read [ 847.059583][T15064] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 847.274220][T14978] Buffer I/O error on dev loop6, logical block 0, async page read [ 847.275083][T14978] Buffer I/O error on dev loop6, logical block 0, async page read [ 847.523229][T14978] Buffer I/O error on dev loop6, logical block 0, async page read [ 847.536050][T14978] Buffer I/O error on dev loop6, logical block 0, async page read [ 847.538898][T14978] Buffer I/O error on dev loop6, logical block 0, async page read [ 847.540587][T14978] Buffer I/O error on dev loop6, logical block 0, async page read [ 847.578857][T14978] Buffer I/O error on dev loop6, logical block 0, async page read [ 848.793344][T15083] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 848.897473][T15088] loop3: detected capacity change from 0 to 128 [ 850.481294][T15106] loop6: detected capacity change from 0 to 512 [ 850.493635][T15106] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 850.537038][T15106] EXT4-fs (loop6): 1 truncate cleaned up [ 850.567405][T15106] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 850.645718][ T29] audit: type=1804 audit(1793056676.419:321): pid=15106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.2293" name="/newroot/368/file0/file1" dev="loop6" ino=15 res=1 errno=0 [ 850.877519][ T6110] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 851.169049][T15116] ip_tables: iptables: counters copy to user failed while replacing table [ 851.404962][T15120] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2298'. [ 851.471716][T15120] syzkaller1: entered promiscuous mode [ 851.471751][T15120] syzkaller1: entered allmulticast mode [ 851.575362][T15126] loop2: detected capacity change from 0 to 512 [ 851.578017][T15126] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 852.013286][T15140] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 852.015042][T15140] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 856.226916][T15157] loop2: detected capacity change from 0 to 32768 [ 857.041632][T15166] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 857.396726][T15171] loop8: detected capacity change from 0 to 512 [ 857.416341][T15171] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 857.767027][T15173] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 857.769237][T15173] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 858.744544][T15177] overlayfs: failed to clone upperpath [ 858.962297][ T29] audit: type=1800 audit(1793056684.739:322): pid=15181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2321" name=08 dev="sda1" ino=2076 res=0 errno=-22 [ 859.497081][T15192] loop3: detected capacity change from 0 to 512 [ 859.550983][T15192] EXT4-fs error (device loop3): ext4_validate_block_bitmap:435: comm syz.3.2323: bg 0: block 5: invalid block bitmap [ 859.551041][T15192] loop3: lost filesystem error report for type 5 error -117 [ 859.555011][ C0] EXT4-fs (loop3): initial error at time 1793056685: ext4_validate_block_bitmap:435 [ 859.555062][ C0] EXT4-fs (loop3): last error at time 1793056685: ext4_validate_block_bitmap:435 [ 859.644896][T15198] random: crng reseeded on system resumption [ 860.662884][T15192] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 860.662924][T15192] loop3: lost filesystem error report for type 5 error -117 [ 860.696620][T15192] EXT4-fs error (device loop3): ext4_free_branches:1037: inode #11: comm syz.3.2323: invalid indirect mapped block 3 (level 2) [ 860.696691][T15192] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 860.703244][T15192] EXT4-fs (loop3): 1 orphan inode deleted [ 860.703277][T15192] EXT4-fs (loop3): 1 truncate cleaned up [ 860.722913][T15192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 861.002694][T14228] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 862.169056][T15229] loop6: detected capacity change from 0 to 512 [ 862.177696][T15229] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 862.295253][T15231] overlayfs: failed to clone upperpath [ 862.342050][T15234] loop2: detected capacity change from 0 to 512 [ 862.387044][T15234] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 863.013913][T15239] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 863.057229][T15239] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 863.903844][T15249] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 865.462608][T15257] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2339'. [ 865.617990][ T5811] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 865.773603][ T5811] usb 4-1: Using ep0 maxpacket: 8 [ 865.775630][ T5811] usb 4-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 865.778607][ T5811] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 865.778660][ T5811] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 865.778722][ T5811] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 865.778773][ T5811] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 865.778820][ T5811] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 865.778869][ T5811] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 865.778918][ T5811] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 865.778969][ T5811] usb 4-1: config 168 interface 0 has no altsetting 0 [ 865.780110][ T5811] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 865.780147][ T5811] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 865.780190][ T5811] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 865.780227][ T5811] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 865.780267][ T5811] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 865.780315][ T5811] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 865.780356][ T5811] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 865.780394][ T5811] usb 4-1: config 168 interface 0 has no altsetting 0 [ 865.885013][ T5811] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 865.885075][ T5811] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 865.885137][ T5811] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 865.885187][ T5811] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 865.885234][ T5811] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 865.885284][ T5811] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 865.885334][ T5811] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 865.885384][ T5811] usb 4-1: config 168 interface 0 has no altsetting 0 [ 866.037481][ T5811] usb 4-1: string descriptor 0 read error: -22 [ 866.037639][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.120684][ T5811] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 866.512123][ T5811] usb 4-1: USB disconnect, device number 17 [ 866.590826][T15266] loop2: detected capacity change from 0 to 4096 [ 866.612005][T15266] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 866.689971][T15266] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 866.947784][T15271] syz.6.2345: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 866.948231][T15271] CPU: 1 UID: 0 PID: 15271 Comm: syz.6.2345 Tainted: G L syzkaller #0 PREEMPT(full) [ 866.948292][T15271] Tainted: [L]=SOFTLOCKUP [ 866.948308][T15271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 866.948334][T15271] Call Trace: [ 866.948348][T15271] [ 866.948365][T15271] dump_stack_lvl+0x100/0x190 [ 866.948429][T15271] warn_alloc.cold+0x9e/0xb2 [ 866.948478][T15271] ? __pfx_warn_alloc+0x10/0x10 [ 866.948534][T15271] ? kasan_save_track+0x14/0x30 [ 866.948575][T15271] ? __kasan_kmalloc+0xaa/0xb0 [ 866.948612][T15271] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 866.948670][T15271] ? xsk_setsockopt+0x743/0xab0 [ 866.948734][T15271] ? __x64_sys_setsockopt+0xbd/0x160 [ 866.948782][T15271] ? do_syscall_64+0x123/0x790 [ 866.948854][T15271] __vmalloc_node_range_noprof+0x11f2/0x1440 [ 866.948924][T15271] ? xsk_setsockopt+0x743/0xab0 [ 866.949009][T15271] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 866.949058][T15271] ? kasan_save_track+0x14/0x30 [ 866.949098][T15271] ? srso_alias_return_thunk+0x5/0xfbef5 [ 866.949149][T15271] ? __kasan_kmalloc+0xaa/0xb0 [ 866.949190][T15271] ? srso_alias_return_thunk+0x5/0xfbef5 [ 866.949240][T15271] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 866.949300][T15271] ? xskq_create+0x52/0x290 [ 866.949366][T15271] ? xsk_setsockopt+0x743/0xab0 [ 866.949429][T15271] xskq_create+0x18f/0x290 [ 866.949494][T15271] ? xsk_setsockopt+0x743/0xab0 [ 866.949561][T15271] xsk_setsockopt+0x743/0xab0 [ 866.949620][T15271] ? __pfx_aa_sk_perm+0x10/0x10 [ 866.949685][T15271] ? __pfx_xsk_setsockopt+0x10/0x10 [ 866.949747][T15271] ? srso_alias_return_thunk+0x5/0xfbef5 [ 866.949797][T15271] ? find_held_lock+0x2b/0x80 [ 866.949867][T15271] ? srso_alias_return_thunk+0x5/0xfbef5 [ 866.949916][T15271] ? aa_sock_opt_perm+0x114/0x1e0 [ 866.949976][T15271] ? __pfx_xsk_setsockopt+0x10/0x10 [ 866.950043][T15271] do_sock_setsockopt+0xf3/0x1d0 [ 866.950109][T15271] __sys_setsockopt+0x195/0x220 [ 866.950168][T15271] __x64_sys_setsockopt+0xbd/0x160 [ 866.950214][T15271] ? do_syscall_64+0xae/0x790 [ 866.950256][T15271] ? srso_alias_return_thunk+0x5/0xfbef5 [ 866.950306][T15271] ? lockdep_hardirqs_on+0x7d/0x110 [ 866.950350][T15271] do_syscall_64+0x123/0x790 [ 866.950400][T15271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.950443][T15271] RIP: 0033:0x7fb23039f559 [ 866.950475][T15271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 866.950515][T15271] RSP: 002b:00007fb23128f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 866.950555][T15271] RAX: ffffffffffffffda RBX: 00007fb230626090 RCX: 00007fb23039f559 [ 866.950583][T15271] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 866.950609][T15271] RBP: 00007fb230436b20 R08: 0000000000000004 R09: 0000000000000000 [ 866.950635][T15271] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 866.950661][T15271] R13: 00007fb230626128 R14: 00007fb230626090 R15: 00007ffef7631dc8 [ 866.950716][T15271] [ 866.950778][T15271] Mem-Info: [ 866.950864][T15271] active_anon:17585 inactive_anon:1 isolated_anon:0 [ 866.950864][T15271] active_file:14 inactive_file:64836 isolated_file:0 [ 866.950864][T15271] unevictable:0 dirty:479 writeback:0 [ 866.950864][T15271] slab_reclaimable:11037 slab_unreclaimable:124382 [ 866.950864][T15271] mapped:35845 shmem:10797 pagetables:1514 [ 866.950864][T15271] sec_pagetables:0 bounce:0 [ 866.950864][T15271] kernel_misc_reclaimable:0 [ 866.950864][T15271] free:1222709 free_pcp:25264 free_cma:0 [ 866.951008][T15271] Node 0 active_anon:70340kB inactive_anon:4kB active_file:56kB inactive_file:259148kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:143380kB dirty:1908kB writeback:0kB shmem:43188kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16356kB pagetables:5860kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 866.951135][T15271] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 866.951304][T15271] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 866.951463][T15271] lowmem_reserve[]: 0 2448 2449 2449 2449 [ 867.009238][T15271] Node 0 DMA32 free:926564kB boost:0kB min:34044kB low:42552kB high:51060kB reserved_highatomic:0kB free_highatomic:0kB active_anon:70340kB inactive_anon:4kB active_file:56kB inactive_file:259148kB unevictable:0kB writepending:1908kB zspages:20kB present:3129332kB managed:2506852kB mlocked:0kB bounce:0kB free_pcp:101008kB local_pcp:68900kB free_cma:0kB [ 867.009400][T15271] lowmem_reserve[]: 0 0 1 1 1 [ 867.009662][T15271] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1776kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB [ 867.009881][T15271] lowmem_reserve[]: 0 0 0 0 0 [ 867.010171][T15271] Node 1 Normal free:3948912kB boost:0kB min:55832kB low:69788kB high:83744kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:8kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 867.010335][T15271] lowmem_reserve[]: 0 0 0 0 0 [ 867.010646][T15271] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 867.011745][T15271] Node 0 DMA32: 489*4kB (ME) 70*8kB (ME) 459*16kB (UME) 74*32kB (UME) 125*64kB (UME) 356*128kB (UME) 172*256kB (UM) 83*512kB (UME) 44*1024kB (UM) 14*2048kB (UME) 171*4096kB (UM) = 926468kB [ 867.021014][T15271] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 867.035726][T15271] Node 1 Normal: 2*4kB (UM) 9*8kB (UM) 12*16kB (UM) 11*32kB (UM) 8*64kB (UM) 6*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 962*4096kB (UM) = 3948912kB [ 867.046842][T15271] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 867.046892][T15271] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 867.046970][T15271] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 867.047015][T15271] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 867.047064][T15271] 75514 total pagecache pages [ 867.047126][T15271] 1 pages in swap cache [ 867.047182][T15271] Free swap = 124996kB [ 867.047240][T15271] Total swap = 124996kB [ 867.047257][T15271] 2097051 pages RAM [ 867.047315][T15271] 0 pages HighMem/MovableOnly [ 867.047372][T15271] 438278 pages reserved [ 867.047430][T15271] 0 pages cma reserved [ 868.318206][T15273] loop6: detected capacity change from 0 to 4096 [ 868.348290][T15273] NILFS (loop6): invalid segment: Checksum error in segment payload [ 868.348334][T15273] NILFS (loop6): trying rollback from an earlier position [ 868.438441][T15273] NILFS (loop6): recovery complete [ 868.471148][T15274] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 869.562688][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.562806][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.090783][T15288] loop8: detected capacity change from 0 to 512 [ 870.097311][T15288] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 870.188880][T15290] loop2: detected capacity change from 0 to 512 [ 870.222460][T15290] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 871.024658][T15299] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 871.025484][T15299] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 871.133910][T15301] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 871.217972][T15301] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 871.319315][ T1932] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 871.398851][ T1932] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 871.829234][T15310] fuse: fd is not a fuse device [ 872.174223][T15319] Dead loop on virtual device lo (net 199), fix it urgently! [ 872.174473][T15319] Dead loop on virtual device lo (net 199), fix it urgently! [ 872.174675][T15319] Dead loop on virtual device lo (net 199), fix it urgently! [ 872.208755][T15319] Dead loop on virtual device lo (net 199), fix it urgently! [ 872.208988][T15319] Dead loop on virtual device lo (net 199), fix it urgently! [ 872.209169][T15319] Dead loop on virtual device lo (net 199), fix it urgently! [ 872.213144][T15319] Dead loop on virtual device lo (net 199), fix it urgently! [ 872.213321][T15319] Dead loop on virtual device lo (net 199), fix it urgently! [ 872.213590][T15319] Dead loop on virtual device lo (net 199), fix it urgently! [ 872.214072][T15319] Dead loop on virtual device lo (net 199), fix it urgently! [ 875.947554][T15343] loop6: detected capacity change from 0 to 512 [ 875.971837][T15343] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 876.187481][T15347] loop8: detected capacity change from 0 to 128 [ 876.469186][T15351] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 876.471586][T15351] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 876.777959][ T29] audit: type=1326 audit(1793056702.559:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15348 comm="syz.2.2371" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0649b9f559 code=0x0 [ 878.389742][T15373] random: crng reseeded on system resumption [ 878.470040][T15371] net_ratelimit: 39 callbacks suppressed [ 878.470065][T15371] Dead loop on virtual device lo (net 231), fix it urgently! [ 878.470208][T15371] Dead loop on virtual device lo (net 231), fix it urgently! [ 878.470360][T15371] Dead loop on virtual device lo (net 231), fix it urgently! [ 878.470736][T15371] Dead loop on virtual device lo (net 231), fix it urgently! [ 878.470861][T15371] Dead loop on virtual device lo (net 231), fix it urgently! [ 878.470990][T15371] Dead loop on virtual device lo (net 231), fix it urgently! [ 881.870684][T15405] loop3: detected capacity change from 0 to 512 [ 881.897667][T15405] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 882.330333][T15408] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 882.331016][T15408] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 884.659512][T15430] syz.1.2392: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 884.659608][T15430] CPU: 1 UID: 0 PID: 15430 Comm: syz.1.2392 Tainted: G L syzkaller #0 PREEMPT(full) [ 884.659650][T15430] Tainted: [L]=SOFTLOCKUP [ 884.659662][T15430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 884.659679][T15430] Call Trace: [ 884.659690][T15430] [ 884.659702][T15430] dump_stack_lvl+0x100/0x190 [ 884.659749][T15430] warn_alloc.cold+0x9e/0xb2 [ 884.659783][T15430] ? __pfx_warn_alloc+0x10/0x10 [ 884.659824][T15430] ? kasan_save_track+0x14/0x30 [ 884.659852][T15430] ? __kasan_kmalloc+0xaa/0xb0 [ 884.659878][T15430] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 884.659919][T15430] ? xsk_setsockopt+0x743/0xab0 [ 884.659965][T15430] ? __x64_sys_setsockopt+0xbd/0x160 [ 884.660005][T15430] ? do_syscall_64+0x123/0x790 [ 884.660057][T15430] __vmalloc_node_range_noprof+0x11f2/0x1440 [ 884.660107][T15430] ? xsk_setsockopt+0x743/0xab0 [ 884.660161][T15430] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 884.660196][T15430] ? kasan_save_track+0x14/0x30 [ 884.660224][T15430] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.660260][T15430] ? __kasan_kmalloc+0xaa/0xb0 [ 884.660289][T15430] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.660328][T15430] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 884.660371][T15430] ? xskq_create+0x52/0x290 [ 884.660418][T15430] ? xsk_setsockopt+0x743/0xab0 [ 884.660463][T15430] xskq_create+0x18f/0x290 [ 884.660511][T15430] ? xsk_setsockopt+0x743/0xab0 [ 884.660559][T15430] xsk_setsockopt+0x743/0xab0 [ 884.660602][T15430] ? __pfx_aa_sk_perm+0x10/0x10 [ 884.660649][T15430] ? __pfx_xsk_setsockopt+0x10/0x10 [ 884.660693][T15430] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.660729][T15430] ? find_held_lock+0x2b/0x80 [ 884.660780][T15430] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.660826][T15430] ? aa_sock_opt_perm+0x114/0x1e0 [ 884.660866][T15430] ? __pfx_xsk_setsockopt+0x10/0x10 [ 884.660925][T15430] do_sock_setsockopt+0xf3/0x1d0 [ 884.660973][T15430] __sys_setsockopt+0x195/0x220 [ 884.661020][T15430] __x64_sys_setsockopt+0xbd/0x160 [ 884.661053][T15430] ? do_syscall_64+0xae/0x790 [ 884.661083][T15430] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.661119][T15430] ? lockdep_hardirqs_on+0x7d/0x110 [ 884.661150][T15430] do_syscall_64+0x123/0x790 [ 884.661186][T15430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.661216][T15430] RIP: 0033:0x7f713e99f559 [ 884.661241][T15430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.661270][T15430] RSP: 002b:00007f713f92a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 884.661298][T15430] RAX: ffffffffffffffda RBX: 00007f713ec25fa0 RCX: 00007f713e99f559 [ 884.661318][T15430] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 884.661337][T15430] RBP: 00007f713ea36b20 R08: 0000000000000004 R09: 0000000000000000 [ 884.661356][T15430] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 884.661374][T15430] R13: 00007f713ec26038 R14: 00007f713ec25fa0 R15: 00007ffebc945c28 [ 884.661415][T15430] [ 884.661444][T15430] Mem-Info: [ 884.661456][T15430] active_anon:21508 inactive_anon:1 isolated_anon:0 [ 884.661456][T15430] active_file:14 inactive_file:64844 isolated_file:0 [ 884.661456][T15430] unevictable:0 dirty:415 writeback:0 [ 884.661456][T15430] slab_reclaimable:11010 slab_unreclaimable:124176 [ 884.661456][T15430] mapped:35875 shmem:14813 pagetables:1512 [ 884.661456][T15430] sec_pagetables:0 bounce:0 [ 884.661456][T15430] kernel_misc_reclaimable:0 [ 884.661456][T15430] free:1225915 free_pcp:18235 free_cma:0 [ 884.661533][T15430] Node 0 active_anon:86032kB inactive_anon:4kB active_file:56kB inactive_file:259180kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:143500kB dirty:1652kB writeback:0kB shmem:59252kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16328kB pagetables:5852kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 884.661611][T15430] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 884.661686][T15430] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 884.661769][T15430] lowmem_reserve[]: 0 2448 2449 2449 2449 [ 884.661822][T15430] Node 0 DMA32 free:939388kB boost:0kB min:34044kB low:42552kB high:51060kB reserved_highatomic:0kB free_highatomic:0kB active_anon:86032kB inactive_anon:4kB active_file:56kB inactive_file:259180kB unevictable:0kB writepending:1652kB zspages:0kB present:3129332kB managed:2506852kB mlocked:0kB bounce:0kB free_pcp:72924kB local_pcp:21160kB free_cma:0kB [ 884.661908][T15430] lowmem_reserve[]: 0 0 1 1 1 [ 884.661958][T15430] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1776kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB [ 884.662044][T15430] lowmem_reserve[]: 0 0 0 0 0 [ 884.662094][T15430] Node 1 Normal free:3948912kB boost:0kB min:55832kB low:69788kB high:83744kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:8kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 884.662177][T15430] lowmem_reserve[]: 0 0 0 0 0 [ 884.662228][T15430] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 884.662397][T15430] Node 0 DMA32: 2*4kB (ME) 443*8kB (UM) 83*16kB (UME) 408*32kB (UME) 236*64kB (UME) 357*128kB (UME) 178*256kB (UM) 86*512kB (UME) 45*1024kB (UM) 12*2048kB (UME) 171*4096kB (UM) = 939408kB [ 884.662633][T15430] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 884.662778][T15430] Node 1 Normal: 2*4kB (UM) 9*8kB (UM) 12*16kB (UM) 11*32kB (UM) 8*64kB (UM) 6*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 962*4096kB (UM) = 3948912kB [ 884.663014][T15430] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 884.663037][T15430] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 884.663063][T15430] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 884.663094][T15430] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 884.663126][T15430] 79485 total pagecache pages [ 884.663138][T15430] 0 pages in swap cache [ 884.663148][T15430] Free swap = 124996kB [ 884.663159][T15430] Total swap = 124996kB [ 884.663172][T15430] 2097051 pages RAM [ 884.663182][T15430] 0 pages HighMem/MovableOnly [ 884.663193][T15430] 438278 pages reserved [ 884.663203][T15430] 0 pages cma reserved [ 888.117391][ T29] audit: type=1326 audit(1793056713.899:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15445 comm="syz.3.2397" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2871b9f559 code=0x0 [ 889.693985][T15462] loop3: detected capacity change from 0 to 512 [ 889.728472][T15462] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 890.962026][T15472] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 890.962715][T15472] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 892.902385][T15478] syzkaller0: entered promiscuous mode [ 892.902423][T15478] syzkaller0: entered allmulticast mode [ 894.955705][T15484] loop8: detected capacity change from 0 to 512 [ 894.974437][T15484] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 895.684619][T15491] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 895.687058][T15491] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 896.223968][T15488] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 896.380418][T15495] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 896.526141][T15497] input: syz0 as /devices/virtual/input/input38 [ 896.660679][T15502] mac80211_hwsim hwsim32 syzkaller0: entered promiscuous mode [ 896.660726][T15502] mac80211_hwsim hwsim32 syzkaller0: entered allmulticast mode [ 900.085142][T15519] loop2: detected capacity change from 0 to 512 [ 900.202388][T15519] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 902.482822][T15527] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 906.779349][T15542] loop2: detected capacity change from 0 to 512 [ 906.789700][T15542] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 907.203011][T15544] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 907.203845][T15544] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 908.920377][T15553] fuse: fd is not a fuse device [ 909.001785][T15555] syzkaller0: entered promiscuous mode [ 909.001819][T15555] syzkaller0: entered allmulticast mode [ 911.283105][T15559] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 913.964878][ T29] audit: type=1326 audit(1793056739.749:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15573 comm="syz.1.2436" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713e99f559 code=0x7ffc0000 [ 913.964961][ T29] audit: type=1326 audit(1793056739.749:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15573 comm="syz.1.2436" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713e99f559 code=0x7ffc0000 [ 914.021569][ T29] audit: type=1326 audit(1793056739.749:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15573 comm="syz.1.2436" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713e99f559 code=0x7ffc0000 [ 914.021725][ T29] audit: type=1326 audit(1793056739.749:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15573 comm="syz.1.2436" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713e99f559 code=0x7ffc0000 [ 914.021803][ T29] audit: type=1326 audit(1793056739.749:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15573 comm="syz.1.2436" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f713e99f559 code=0x7ffc0000 [ 914.021886][ T29] audit: type=1326 audit(1793056739.749:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15573 comm="syz.1.2436" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713e99f559 code=0x7ffc0000 [ 914.021966][ T29] audit: type=1326 audit(1793056739.749:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15573 comm="syz.1.2436" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713e99f559 code=0x7ffc0000 [ 914.022047][ T29] audit: type=1326 audit(1793056739.749:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15573 comm="syz.1.2436" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713e99f559 code=0x7ffc0000 [ 914.022124][ T29] audit: type=1326 audit(1793056739.749:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15573 comm="syz.1.2436" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713e99f559 code=0x7ffc0000 [ 914.022202][ T29] audit: type=1326 audit(1793056739.749:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15573 comm="syz.1.2436" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f713e99f559 code=0x7ffc0000 [ 915.560318][T15593] ovs-dp0: entered promiscuous mode [ 917.419959][T15591] mac80211_hwsim hwsim32 syzkaller0: left promiscuous mode [ 917.420008][T15591] mac80211_hwsim hwsim32 syzkaller0: left allmulticast mode [ 919.973559][ T5787] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 921.039576][ T5787] usb 9-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 921.042391][ T5787] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 921.074832][ T5787] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 921.104933][ T5787] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.104978][ T5787] usb 9-1: Product: syz [ 921.105006][ T5787] usb 9-1: Manufacturer: syz [ 921.105034][ T5787] usb 9-1: SerialNumber: syz [ 921.145415][ T5787] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected [ 921.172780][ T5787] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 921.190716][ T5787] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 925.103819][T15605] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command (2), -110 [ 925.738527][ T5811] usb 9-1: USB disconnect, device number 13 [ 925.824728][ T5811] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 925.865831][ T5811] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 925.898361][ T5811] ti_usb_3410_5052 9-1:2.0: device disconnected [ 926.152751][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 926.152779][ T29] audit: type=1326 audit(1793056751.929:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15645 comm="syz.8.2453" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ecb9f559 code=0x7ffc0000 [ 926.152856][ T29] audit: type=1326 audit(1793056751.929:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15645 comm="syz.8.2453" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ecb9f559 code=0x7ffc0000 [ 926.310883][ T29] audit: type=1326 audit(1793056752.089:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15645 comm="syz.8.2453" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ecb9f559 code=0x7ffc0000 [ 926.311089][ T29] audit: type=1326 audit(1793056752.089:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15645 comm="syz.8.2453" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ecb9f559 code=0x7ffc0000 [ 926.369229][ T29] audit: type=1326 audit(1793056752.099:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15645 comm="syz.8.2453" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f93ecb9f559 code=0x7ffc0000 [ 926.369317][ T29] audit: type=1326 audit(1793056752.099:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15645 comm="syz.8.2453" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ecb9f559 code=0x7ffc0000 [ 926.369397][ T29] audit: type=1326 audit(1793056752.099:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15645 comm="syz.8.2453" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ecb9f559 code=0x7ffc0000 [ 926.369470][ T29] audit: type=1326 audit(1793056752.099:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15645 comm="syz.8.2453" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ecb9f559 code=0x7ffc0000 [ 926.369551][ T29] audit: type=1326 audit(1793056752.099:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15645 comm="syz.8.2453" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ecb9f559 code=0x7ffc0000 [ 926.371236][ T29] audit: type=1326 audit(1793056752.119:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15645 comm="syz.8.2453" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f93ecb9f559 code=0x7ffc0000 [ 928.383782][ T5632] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 928.402621][ T5632] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 928.414377][ T5632] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 928.439737][ T5632] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 928.442412][ T5632] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 930.795746][ T5632] Bluetooth: hci4: command tx timeout [ 931.005695][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.005777][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.029989][ T5632] Bluetooth: hci4: command tx timeout [ 933.471012][ T1129] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.085107][ T5632] Bluetooth: hci4: command tx timeout [ 935.366499][ T1129] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.142492][ T1129] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.155623][ T5632] Bluetooth: hci4: command tx timeout [ 937.438199][ T1129] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.994319][T15663] rxe_eth0 speed is unknown, defaulting to 1000 [ 940.401995][ T1129] bridge_slave_1: left allmulticast mode [ 940.402034][ T1129] bridge_slave_1: left promiscuous mode [ 940.402285][ T1129] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.442206][ T1129] bridge_slave_0: left allmulticast mode [ 940.442245][ T1129] bridge_slave_0: left promiscuous mode [ 940.459247][ T1129] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.212099][T15717] netlink: 'syz.8.2466': attribute type 1 has an invalid length. [ 941.492661][T15722] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2466'. [ 941.648056][ T1129] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 941.648099][ T1129] bridge1 (unregistering): left promiscuous mode [ 941.700255][ T1129] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 941.700298][ T1129] bridge2 (unregistering): left promiscuous mode [ 941.749104][ T1129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 941.768272][ T1129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 941.785089][ T1129] bond0 (unregistering): Released all slaves [ 941.812304][ T1129] bond1 (unregistering): Released all slaves [ 941.891508][ T1129] bond2 (unregistering): Released all slaves [ 942.015915][ T1129] bond3 (unregistering): Released all slaves [ 942.044548][ T1129] bond4 (unregistering): Released all slaves [ 942.107071][T15717] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 949.782232][ T5292] 8021q: adding VLAN 0 to HW filter on device eth9 [ 953.165415][ T1129] hsr_slave_0: left promiscuous mode [ 953.181028][ T1129] hsr_slave_1: left promiscuous mode [ 953.182190][ T1129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 953.182222][ T1129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 953.212315][ T1129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 953.212348][ T1129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 953.426287][ T1129] veth1_macvtap: left promiscuous mode [ 953.427951][ T1129] veth0_macvtap: left promiscuous mode [ 953.428084][ T1129] veth1_vlan: left promiscuous mode [ 953.428182][ T1129] veth0_vlan: left promiscuous mode [ 956.847689][T15788] input: syz0 as /devices/virtual/input/input39 [ 958.842630][T15795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2485'. [ 960.562844][T15799] netlink: 'syz.5.2486': attribute type 1 has an invalid length. [ 963.160718][ T1129] team0 (unregistering): Port device team_slave_1 removed [ 963.235801][ T1129] team0 (unregistering): Port device team_slave_0 removed [ 963.265683][T14351] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 963.270126][T14351] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 963.285962][T14351] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 963.303250][T14351] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 963.305066][T14351] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 963.691845][T14351] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 963.706331][T14351] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 963.707405][T14351] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 963.711992][T14351] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 963.712781][T14351] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 964.100805][T15799] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 964.118843][T15805] ovs-dp0: entered promiscuous mode [ 964.448398][ T5292] 8021q: adding VLAN 0 to HW filter on device eth10 [ 965.397221][ T5632] Bluetooth: hci6: command tx timeout [ 965.493206][T15663] bridge0: port 1(bridge_slave_0) entered blocking state [ 965.499984][T15663] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.500149][T15663] bridge_slave_0: entered allmulticast mode [ 965.508438][T15663] bridge_slave_0: entered promiscuous mode [ 965.526447][T15663] bridge0: port 2(bridge_slave_1) entered blocking state [ 965.526710][T15663] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.532277][T15663] bridge_slave_1: entered allmulticast mode [ 965.546731][T15663] bridge_slave_1: entered promiscuous mode [ 965.764195][T15663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 965.799139][ T5632] Bluetooth: hci7: command tx timeout [ 965.819713][T15663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 966.018216][T15663] team0: Port device team_slave_0 added [ 966.031715][T15663] team0: Port device team_slave_1 added [ 966.287237][T15663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 966.287266][T15663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 966.287315][T15663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 966.356618][T15663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 966.356644][T15663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 966.356687][T15663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 967.493560][ T5632] Bluetooth: hci6: command tx timeout [ 967.526786][T15663] hsr_slave_0: entered promiscuous mode [ 967.528013][T15663] hsr_slave_1: entered promiscuous mode [ 967.873809][ T5632] Bluetooth: hci7: command tx timeout [ 969.509699][T15866] loop8: detected capacity change from 0 to 256 [ 970.579462][ T5632] Bluetooth: hci6: command tx timeout [ 970.579521][ T5632] Bluetooth: hci7: command tx timeout [ 970.635072][T15866] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 970.637327][T15866] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 970.637375][T15866] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 970.637394][T15866] UDF-fs: Scanning with blocksize 512 failed [ 970.672532][T15866] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 970.691510][T15866] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 972.776780][T14351] Bluetooth: hci7: command tx timeout [ 972.776831][T14351] Bluetooth: hci6: command tx timeout [ 973.087125][ T1129] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.371576][T15812] rxe_eth0 speed is unknown, defaulting to 1000 [ 973.641423][ T1129] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.708105][T15888] loop3: detected capacity change from 0 to 16 [ 973.785549][T15888] erofs (device loop3): dirblkbits 6 isn't supported [ 973.829524][T15819] udevd[15819]: incorrect erofs checksum on /dev/loop3 [ 974.115913][T15891] loop3: detected capacity change from 0 to 32768 [ 974.116855][T15891] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 974.142456][T15891] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2502 (15891) [ 974.162671][T15891] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 974.162721][T15891] BTRFS info (device loop3): using crc32c checksum algorithm [ 974.344547][T15891] BTRFS info (device loop3): rebuilding free space tree [ 974.377899][T15891] BTRFS info (device loop3): disabling free space tree [ 974.377981][T15891] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 974.378021][T15891] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 974.417661][T15891] BTRFS info (device loop3): enabling ssd optimizations [ 974.417704][T15891] BTRFS info (device loop3): turning on async discard [ 974.417735][T15891] BTRFS info (device loop3): force clearing of disk cache [ 974.417765][T15891] BTRFS info (device loop3): use zstd compression, level 3 [ 974.603291][T15663] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.753879][ T5292] 8021q: adding VLAN 0 to HW filter on device eth11 [ 975.816457][T14228] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 975.817882][T15815] rxe_eth0 speed is unknown, defaulting to 1000 [ 976.078551][ T1129] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.607412][T15663] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.883627][ T1129] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.119792][T15921] loop3: detected capacity change from 0 to 512 [ 980.153334][T15921] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 980.200873][T15663] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.386839][T15925] null_blk: nullb1: using native zone append [ 981.455275][T15925] null_blk: disk nullb1 created [ 981.799994][T15936] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 981.802180][T15936] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 982.368366][T15663] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.403667][T15943] loop3: detected capacity change from 0 to 256 [ 984.473566][T15943] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 984.479657][T15943] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 984.479691][T15943] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 984.479710][T15943] UDF-fs: Scanning with blocksize 512 failed [ 984.482110][T15943] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 984.489472][T15943] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 985.910093][ T1129] bridge_slave_1: left allmulticast mode [ 985.910133][ T1129] bridge_slave_1: left promiscuous mode [ 985.910394][ T1129] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.975993][ T1129] bridge_slave_0: left allmulticast mode [ 985.976034][ T1129] bridge_slave_0: left promiscuous mode [ 985.976300][ T1129] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.216651][T15965] netlink: 'syz.8.2510': attribute type 1 has an invalid length. [ 986.310828][T15966] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2510'. [ 988.801084][ T1129] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 988.803387][ T1129] bridge1 (unregistering): left promiscuous mode [ 988.805220][ T1129] bridge1 (unregistering): left allmulticast mode [ 990.348648][ T1129] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 990.348692][ T1129] bridge2 (unregistering): left promiscuous mode [ 990.480714][ T1129] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 990.480755][ T1129] bridge3 (unregistering): left promiscuous mode [ 990.506991][T14351] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 990.521958][T14351] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 990.525438][T14351] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 990.540009][T14351] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 990.540997][T14351] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 990.633813][ T1129] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 990.633846][ T1129] bridge4 (unregistering): left promiscuous mode [ 990.718794][ T1129] bond6 (unregistering): (slave bridge5): Releasing backup interface [ 990.718838][ T1129] bridge5 (unregistering): left promiscuous mode [ 990.809018][ T1129] bond7 (unregistering): (slave bridge6): Releasing backup interface [ 990.809062][ T1129] bridge6 (unregistering): left promiscuous mode [ 990.868679][ T1129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 990.890088][ T1129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 990.892322][ T1129] bond0 (unregistering): Released all slaves [ 990.921457][ T1129] bond1 (unregistering): Released all slaves [ 990.952881][ T1129] bond2 (unregistering): Released all slaves [ 991.025252][ T1129] bond3 (unregistering): Released all slaves [ 991.084781][ T1129] bond4 (unregistering): Released all slaves [ 991.119067][ T1129] bond5 (unregistering): Released all slaves [ 991.159611][ T1129] bond6 (unregistering): Released all slaves [ 991.198206][ T1129] bond7 (unregistering): Released all slaves [ 991.232302][ T1129] bond8 (unregistering): Released all slaves [ 991.405146][T15965] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 991.642930][ T5292] 8021q: adding VLAN 0 to HW filter on device eth12 [ 992.437121][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.437201][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.673620][ T5632] Bluetooth: hci0: command tx timeout [ 992.774627][T16000] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 992.774781][T16000] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 992.774862][T16000] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 992.931245][T16000] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 992.931404][T16000] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 993.195943][T16000] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 993.235887][T16000] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 993.241537][T16000] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 993.276468][T16000] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 993.306595][T16000] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 993.306771][T16000] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 993.343221][T15812] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.343345][T15812] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.343591][T15812] bridge_slave_0: entered allmulticast mode [ 993.396460][T15812] bridge_slave_0: entered promiscuous mode [ 993.545184][T16000] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 993.601796][T15812] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.601938][T15812] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.602147][T15812] bridge_slave_1: entered allmulticast mode [ 993.678092][T15812] bridge_slave_1: entered promiscuous mode [ 993.685942][T16000] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 993.686049][T16000] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 993.759658][T16000] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 993.965789][T15815] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.965914][T15815] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.966075][T15815] bridge_slave_0: entered allmulticast mode [ 993.987575][T15815] bridge_slave_0: entered promiscuous mode [ 994.150950][T15815] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.152600][T15815] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.152770][T15815] bridge_slave_1: entered allmulticast mode [ 994.199248][T15815] bridge_slave_1: entered promiscuous mode [ 994.438218][T15812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 994.724367][T16022] loop8: detected capacity change from 0 to 512 [ 994.751930][T16022] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 994.775185][T15815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 994.794395][T15812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 994.833867][T14351] Bluetooth: hci5: command 0x0406 tx timeout [ 994.844662][T15980] rxe_eth0 speed is unknown, defaulting to 1000 [ 994.945323][ T1129] hsr_slave_0: left promiscuous mode [ 994.964906][ T1129] hsr_slave_1: left promiscuous mode [ 994.965956][ T1129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 994.965987][ T1129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 994.993291][ T1129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 994.993326][ T1129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 995.004236][T14351] Bluetooth: hci1: command 0x0c1a tx timeout [ 995.020823][T16025] loop3: detected capacity change from 0 to 512 [ 995.035419][T16025] EXT4-fs (loop3): invalid inodes per group: 0 [ 995.234002][ T5632] Bluetooth: hci6: command 0x0c1a tx timeout [ 995.311622][ T1129] veth1_macvtap: left promiscuous mode [ 995.311678][ T1129] veth0_macvtap: left promiscuous mode [ 995.311806][ T1129] veth1_vlan: left promiscuous mode [ 995.311900][ T1129] veth0_vlan: left promiscuous mode [ 995.315424][ T5632] Bluetooth: hci7: command 0x0c1a tx timeout [ 995.713985][ T5632] Bluetooth: hci0: command 0x040f tx timeout [ 996.360924][T16032] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 996.362839][T16032] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 997.119842][ T5632] Bluetooth: hci1: command 0x0c1a tx timeout [ 997.314034][ T5632] Bluetooth: hci6: command 0x0c1a tx timeout [ 997.393932][ T5632] Bluetooth: hci7: command 0x0c1a tx timeout [ 998.725184][ T5632] Bluetooth: hci0: command 0x040f tx timeout [ 999.394357][ T5632] Bluetooth: hci6: command 0x0c1a tx timeout [ 999.476141][ T5632] Bluetooth: hci7: command 0x0c1a tx timeout [ 999.544853][T16049] netlink: 'syz.8.2524': attribute type 1 has an invalid length. [ 999.648367][T16053] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2524'. [ 999.750119][ T1129] team0 (unregistering): Port device team_slave_1 removed [ 999.857098][ T1129] team0 (unregistering): Port device team_slave_0 removed [ 1000.448283][T15815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1000.539763][T16049] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1000.638567][ T5292] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1000.709259][T15812] team0: Port device team_slave_0 added [ 1000.723243][T15812] team0: Port device team_slave_1 added [ 1000.753666][ T5632] Bluetooth: hci0: command 0x040f tx timeout [ 1000.881460][T15815] team0: Port device team_slave_0 added [ 1000.898258][T15815] team0: Port device team_slave_1 added [ 1001.444824][T16066] input: syz0 as /devices/virtual/input/input40 [ 1002.834657][ T5632] Bluetooth: hci0: command 0x040f tx timeout [ 1003.002383][T15812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1003.002405][T15812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1003.002440][T15812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1004.337621][T15812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1004.337783][T15812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1004.338320][T15812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1004.773059][T15815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1004.773087][T15815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1004.773137][T15815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1004.835844][T15815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1004.835870][T15815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1004.835909][T15815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1004.914010][ T5632] Bluetooth: hci0: command 0x040f tx timeout [ 1005.181508][T15812] hsr_slave_0: entered promiscuous mode [ 1005.187947][T15812] hsr_slave_1: entered promiscuous mode [ 1005.196691][T15812] debugfs: 'hsr0' already exists in 'hsr' [ 1005.196724][T15812] Cannot create hsr debugfs directory [ 1005.201034][ T1129] IPVS: stop unused estimator thread 0... [ 1006.004011][T15815] hsr_slave_0: entered promiscuous mode [ 1006.015183][T15815] hsr_slave_1: entered promiscuous mode [ 1006.015873][T15815] debugfs: 'hsr0' already exists in 'hsr' [ 1006.015904][T15815] Cannot create hsr debugfs directory [ 1011.009065][ T5292] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1011.793369][T16112] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1014.771274][T16117] loop8: detected capacity change from 0 to 512 [ 1014.773041][T16117] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1014.801077][T15980] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.801839][T15980] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.802107][T15980] bridge_slave_0: entered allmulticast mode [ 1014.825879][T15980] bridge_slave_0: entered promiscuous mode [ 1014.837913][T15980] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.838031][T15980] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.838189][T15980] bridge_slave_1: entered allmulticast mode [ 1014.839975][T15980] bridge_slave_1: entered promiscuous mode [ 1015.105923][T16121] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1015.111504][T16121] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1015.467956][T16122] netlink: 'syz.5.2535': attribute type 1 has an invalid length. [ 1015.615483][T16123] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2535'. [ 1015.998938][T16125] loop3: detected capacity change from 0 to 40427 [ 1016.015806][T16125] F2FS-fs (loop3): invalid crc value [ 1016.090431][T16125] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1016.118590][T16125] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1016.393102][T16132] syz.3.2533: attempt to access beyond end of device [ 1016.393102][T16132] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1016.413258][T16132] syz.3.2533: attempt to access beyond end of device [ 1016.413258][T16132] loop3: rw=2049, sector=45104, nr_sectors = 40 limit=40427 [ 1016.413549][T16132] syz.3.2533: attempt to access beyond end of device [ 1016.413549][T16132] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1016.452555][T15980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1016.474005][T15980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1016.689116][T16136] Bluetooth: MGMT ver 1.23 [ 1016.714519][T14228] syz-executor: attempt to access beyond end of device [ 1016.714519][T14228] loop3: rw=2049, sector=45144, nr_sectors = 8 limit=40427 [ 1016.756370][T14228] CPU: 1 UID: 0 PID: 14228 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1016.756432][T14228] Tainted: [L]=SOFTLOCKUP [ 1016.756447][T14228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1016.756470][T14228] Call Trace: [ 1016.756483][T14228] [ 1016.756499][T14228] dump_stack_lvl+0x100/0x190 [ 1016.756560][T14228] f2fs_stop_checkpoint+0x5e6/0xb30 [ 1016.756601][T14228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1016.756650][T14228] ? errseq_set+0xe3/0x150 [ 1016.756708][T14228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1016.756769][T14228] f2fs_write_end_bio+0xde3/0x1150 [ 1016.756819][T14228] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 1016.756862][T14228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1016.756915][T14228] ? find_held_lock+0x2b/0x80 [ 1016.756974][T14228] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 1016.757039][T14228] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 1016.757099][T14228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1016.757154][T14228] f2fs_write_end_io+0xc8/0x240 [ 1016.757199][T14228] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1016.757241][T14228] bio_endio+0x7ba/0x9c0 [ 1016.757308][T14228] submit_bio_noacct+0x225/0x2100 [ 1016.757373][T14228] f2fs_submit_write_bio+0x133/0x330 [ 1016.757441][T14228] __submit_merged_bio+0x330/0x7b0 [ 1016.757484][T14228] ? rcu_is_watching+0x13/0xc0 [ 1016.757552][T14228] __submit_merged_write_cond+0x3fe/0x510 [ 1016.757609][T14228] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1016.757666][T14228] ? __pfx___might_resched+0x10/0x10 [ 1016.757703][T14228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1016.757756][T14228] ? folio_clear_dirty_for_io+0x178/0x970 [ 1016.757815][T14228] f2fs_write_cache_pages+0x20d5/0x2620 [ 1016.757890][T14228] ? lock_acquire+0x1d1/0x380 [ 1016.757935][T14228] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1016.757985][T14228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1016.758036][T14228] ? clockevents_program_event+0x23e/0x820 [ 1016.758075][T14228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1016.758131][T14228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1016.758176][T14228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1016.758222][T14228] ? ktime_get+0x1a4/0x320 [ 1016.758276][T14228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1016.758362][T14228] ? __lock_acquire+0x5c0/0x1f40 [ 1016.758406][T14228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1016.758453][T14228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1016.758500][T14228] ? __bfs+0x150/0x2a0 [ 1016.758568][T14228] ? check_noncircular+0x97/0x160 [ 1016.758616][T14228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1016.758662][T14228] ? rcu_is_watching+0x13/0xc0 [ 1016.758727][T14228] f2fs_write_data_pages+0x799/0x16d0 [ 1016.758783][T14228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1016.758830][T14228] ? is_bpf_text_address+0x8a/0x1a0 [ 1016.758898][T14228] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1016.758964][T14228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1016.759009][T14228] ? lock_acquire+0x1d1/0x380 [ 1016.759052][T14228] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1016.759109][T14228] do_writepages+0x278/0x600 [ 1016.759166][T14228] ? __pfx_do_writepages+0x10/0x10 [ 1016.759216][T14228] ? do_raw_spin_unlock+0x145/0x1e0 [ 1016.759271][T14228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1016.759318][T14228] ? _raw_spin_unlock+0x28/0x50 [ 1016.759385][T14228] filemap_writeback+0x22d/0x2e0 [ 1016.759443][T14228] ? __pfx_filemap_writeback+0x10/0x10 [ 1016.759552][T14228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1016.759599][T14228] ? find_held_lock+0x2b/0x80 [ 1016.759656][T14228] ? f2fs_sync_dirty_inodes+0x38f/0x950 [ 1016.759710][T14228] ? f2fs_sync_dirty_inodes+0x38f/0x950 [ 1016.759769][T14228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1016.759829][T14228] f2fs_sync_dirty_inodes+0x452/0x950 [ 1016.759900][T14228] block_operations+0x2a6/0xfb0 [ 1016.759950][T14228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1016.759996][T14228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1016.760054][T14228] ? __pfx_block_operations+0x10/0x10 [ 1016.760108][T14228] ? __pfx_clockevents_program_event+0x10/0x10 [ 1016.760206][T14228] ? ktime_get+0x24d/0x320 [ 1016.760258][T14228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1016.760306][T14228] ? rcu_is_watching+0x13/0xc0 [ 1016.760373][T14228] f2fs_write_checkpoint+0x58b/0x53e0 [ 1016.760431][T14228] ? _raw_spin_unlock_irq+0x23/0x50 [ 1016.760494][T14228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1016.760539][T14228] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1016.760597][T14228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1016.760644][T14228] ? __wait_for_common+0x1f2/0x500 [ 1016.760683][T14228] ? __pfx_schedule_timeout+0x10/0x10 [ 1016.760747][T14228] ? __pfx___wait_for_common+0x10/0x10 [ 1016.760813][T14228] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1016.760868][T14228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1016.760914][T14228] ? mark_held_locks+0x40/0x70 [ 1016.760965][T14228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1016.761011][T14228] ? rcu_is_watching+0x13/0xc0 [ 1016.761069][T14228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1016.761115][T14228] ? kthread_stop+0x280/0x630 [ 1016.761175][T14228] kill_f2fs_super+0x3f1/0x4a0 [ 1016.761229][T14228] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1016.761278][T14228] ? lockdep_hardirqs_on+0x7d/0x110 [ 1016.761318][T14228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1016.761386][T14228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1016.761435][T14228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1016.761498][T14228] deactivate_locked_super+0xbd/0x130 [ 1016.761565][T14228] deactivate_super+0xea/0x110 [ 1016.761629][T14228] cleanup_mnt+0xb7/0x160 [ 1016.761691][T14228] task_work_run+0x150/0x240 [ 1016.761756][T14228] ? __pfx_task_work_run+0x10/0x10 [ 1016.761821][T14228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1016.761876][T14228] exit_to_user_mode_loop+0x1d8/0x700 [ 1016.761930][T14228] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1016.761976][T14228] ? rcu_is_watching+0x13/0xc0 [ 1016.762040][T14228] do_syscall_64+0x661/0x790 [ 1016.762087][T14228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.762127][T14228] RIP: 0033:0x7f2871ba0797 [ 1016.762159][T14228] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1016.762197][T14228] RSP: 002b:00007ffc60409d38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1016.762235][T14228] RAX: 0000000000000000 RBX: 00007f2871c35f63 RCX: 00007f2871ba0797 [ 1016.762261][T14228] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc60409df0 [ 1016.762286][T14228] RBP: 00007ffc60409df0 R08: 00007ffc6040adf0 R09: 00000000ffffffff [ 1016.762313][T14228] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc6040ae80 [ 1016.762337][T14228] R13: 00007f2871c35f63 R14: 00000000000f82e9 R15: 00007ffc6040aec0 [ 1016.762385][T14228] [ 1016.762443][T14228] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1016.783020][T16122] bond4: entered promiscuous mode [ 1016.789543][T16122] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1017.229103][T16134] bond4: (slave bridge4): making interface the new active one [ 1017.229139][T16134] bridge4: entered promiscuous mode [ 1017.240016][T16134] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 1017.251651][T15980] team0: Port device team_slave_0 added [ 1017.314119][T15980] team0: Port device team_slave_1 added [ 1017.719912][T16141] netlink: 'syz.8.2547': attribute type 1 has an invalid length. [ 1017.833661][T16144] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2547'. [ 1018.088444][T15980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1018.088472][T15980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1018.088519][T15980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1018.092919][T15980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1018.092945][T15980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1018.092992][T15980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1018.305501][T16141] bond3: entered promiscuous mode [ 1018.307706][T16141] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1018.564981][T16153] bond3: (slave bridge3): making interface the new active one [ 1018.565014][T16153] bridge3: entered promiscuous mode [ 1018.580546][T16153] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 1018.910716][ T5292] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1018.942138][T16166] ffs_data_put(): freeing [ 1019.158569][T15980] hsr_slave_0: entered promiscuous mode [ 1019.165920][T15980] hsr_slave_1: entered promiscuous mode [ 1019.166810][T15980] debugfs: 'hsr0' already exists in 'hsr' [ 1019.166841][T15980] Cannot create hsr debugfs directory [ 1019.252499][ T1129] bridge_slave_1: left allmulticast mode [ 1019.252543][ T1129] bridge_slave_1: left promiscuous mode [ 1019.252817][ T1129] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.280057][ T1129] bridge_slave_0: left allmulticast mode [ 1019.280097][ T1129] bridge_slave_0: left promiscuous mode [ 1019.283949][ T1129] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.505161][ T1129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1019.530861][ T1129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1019.546389][ T1129] bond0 (unregistering): Released all slaves [ 1022.226024][T14351] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1022.233259][T14351] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1022.236010][T14351] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1022.237118][T14351] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1022.237841][T14351] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1022.648156][T16185] loop8: detected capacity change from 0 to 512 [ 1024.903953][T14351] Bluetooth: hci2: command tx timeout [ 1025.139568][ T1129] hsr_slave_0: left promiscuous mode [ 1025.171489][ T1129] hsr_slave_1: left promiscuous mode [ 1025.172581][ T1129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1025.194590][ T1129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1025.226628][ T5632] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1025.241898][ T5632] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1025.245751][ T5632] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1025.260452][ T5632] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1025.261233][ T5632] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1026.888232][ T1129] team0 (unregistering): Port device team_slave_1 removed [ 1026.913242][ T1129] team0 (unregistering): Port device team_slave_0 removed [ 1026.994406][T14351] Bluetooth: hci2: command tx timeout [ 1028.925390][T14351] Bluetooth: hci4: command tx timeout [ 1029.528186][T14351] Bluetooth: hci2: command tx timeout [ 1029.859708][T16231] netlink: 'syz.3.2551': attribute type 1 has an invalid length. [ 1029.918531][T16209] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2557'. [ 1029.919920][T16201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1029.961346][T16233] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2551'. [ 1030.020943][ T5292] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1031.267271][T14351] Bluetooth: hci4: command tx timeout [ 1031.597604][T14351] Bluetooth: hci2: command tx timeout [ 1031.659728][T16231] bond1: entered promiscuous mode [ 1031.660164][T16231] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1033.639781][T14351] Bluetooth: hci4: command tx timeout [ 1034.183615][T16180] rxe_eth0 speed is unknown, defaulting to 1000 [ 1036.149915][ T5632] Bluetooth: hci4: command tx timeout [ 1037.421554][T16206] rxe_eth0 speed is unknown, defaulting to 1000 [ 1037.867899][ T1381] bridge_slave_1: left allmulticast mode [ 1037.867940][ T1381] bridge_slave_1: left promiscuous mode [ 1037.868198][ T1381] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.933756][ T1381] bridge_slave_0: left allmulticast mode [ 1037.933821][ T1381] bridge_slave_0: left promiscuous mode [ 1037.934079][ T1381] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.482143][ T1381] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1038.532152][ T1381] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1038.570181][ T1381] bond0 (unregistering): Released all slaves [ 1041.597589][T16305] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2561'. [ 1041.621310][T16300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1044.255886][ T1381] hsr_slave_0: left promiscuous mode [ 1044.269811][ T1381] hsr_slave_1: left promiscuous mode [ 1044.272579][ T1381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1044.299700][ T1381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1045.061906][ T1381] team0 (unregistering): Port device team_slave_1 removed [ 1045.110381][ T1381] team0 (unregistering): Port device team_slave_0 removed [ 1045.283019][T16339] netlink: 'syz.8.2566': attribute type 1 has an invalid length. [ 1045.398414][T16340] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2566'. [ 1046.429172][T16339] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1049.295680][T16180] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.295809][T16180] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.296012][T16180] bridge_slave_0: entered allmulticast mode [ 1049.356278][T16180] bridge_slave_0: entered promiscuous mode [ 1049.851624][T16180] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.851740][T16180] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.851927][T16180] bridge_slave_1: entered allmulticast mode [ 1049.870160][T16180] bridge_slave_1: entered promiscuous mode [ 1051.318699][T14351] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1051.346906][T14351] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1051.358869][T14351] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1051.365287][T14351] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1051.369666][T14351] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1051.485120][T16180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1051.525001][T16180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1051.924467][T16395] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2575'. [ 1051.987818][T16393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1052.221524][T16180] team0: Port device team_slave_0 added [ 1052.267917][T16180] team0: Port device team_slave_1 added [ 1052.655539][T16180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1052.655564][T16180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1052.655608][T16180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1052.661887][T16180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1052.661906][T16180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1052.661941][T16180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1052.944998][T16206] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.948662][T16206] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.953194][T16206] bridge_slave_0: entered allmulticast mode [ 1053.022570][T16206] bridge_slave_0: entered promiscuous mode [ 1053.169364][T16206] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.183004][T16206] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.193172][T16206] bridge_slave_1: entered allmulticast mode [ 1053.404431][T16206] bridge_slave_1: entered promiscuous mode [ 1053.473735][T14351] Bluetooth: hci6: command tx timeout [ 1053.875865][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.875942][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.010651][T16206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1054.026006][T16206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1054.049487][T16180] hsr_slave_0: entered promiscuous mode [ 1054.060700][T16180] hsr_slave_1: entered promiscuous mode [ 1055.229552][T16206] team0: Port device team_slave_0 added [ 1055.308662][T16206] team0: Port device team_slave_1 added [ 1055.553659][T14351] Bluetooth: hci6: command tx timeout [ 1056.173976][T16432] loop8: detected capacity change from 0 to 1024 [ 1056.509722][T16432] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1056.509879][T16432] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1056.705638][T16206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1056.705666][T16206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1056.705715][T16206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1056.787271][T12348] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1056.856898][T16384] rxe_eth0 speed is unknown, defaulting to 1000 [ 1056.918000][T16206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1056.918022][T16206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1056.918058][T16206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1057.633688][T14351] Bluetooth: hci6: command tx timeout [ 1058.317735][T16206] hsr_slave_0: entered promiscuous mode [ 1058.322275][T16206] hsr_slave_1: entered promiscuous mode [ 1058.322917][T16206] debugfs: 'hsr0' already exists in 'hsr' [ 1058.322944][T16206] Cannot create hsr debugfs directory [ 1059.713576][T14351] Bluetooth: hci6: command tx timeout [ 1059.939325][ T1381] bridge_slave_1: left allmulticast mode [ 1059.939371][ T1381] bridge_slave_1: left promiscuous mode [ 1059.939624][ T1381] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.985832][ T1381] bridge_slave_0: left allmulticast mode [ 1059.986193][ T1381] bridge_slave_0: left promiscuous mode [ 1059.986444][ T1381] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.175246][ T1381] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1060.183006][ T1381] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1060.209065][ T1381] bond0 (unregistering): Released all slaves [ 1066.142312][T16506] netlink: 'syz.5.2602': attribute type 1 has an invalid length. [ 1066.649367][T16499] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2601'. [ 1066.649907][T16498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1067.297405][ T1381] hsr_slave_0: left promiscuous mode [ 1067.313146][ T1381] hsr_slave_1: left promiscuous mode [ 1067.314323][ T1381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1067.340666][ T1381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1067.407734][T16513] loop3: detected capacity change from 0 to 512 [ 1067.412716][T16513] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1067.654638][T16520] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1067.656981][T16520] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1068.344291][ T1381] team0 (unregistering): Port device team_slave_1 removed [ 1068.382526][ T1381] team0 (unregistering): Port device team_slave_0 removed [ 1068.620041][T16506] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1068.656783][T16517] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2605'. [ 1068.691952][T16515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1068.711402][T16524] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2606'. [ 1068.711783][T16522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1068.878765][T16529] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2608'. [ 1073.846251][T16551] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2613'. [ 1074.098298][T16548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1075.262132][T16560] loop8: detected capacity change from 0 to 16 [ 1075.288092][T16560] erofs (device loop8): mounted with root inode @ nid 36. [ 1075.340735][T16563] netlink: 'syz.3.2617': attribute type 1 has an invalid length. [ 1075.448347][T16565] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2616'. [ 1075.448396][T16565] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2616'. [ 1076.410345][T16563] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1076.415270][T16384] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.416273][T16384] bridge0: port 1(bridge_slave_0) entered disabled state [ 1076.416492][T16384] bridge_slave_0: entered allmulticast mode [ 1076.433008][T16570] loop8: detected capacity change from 0 to 512 [ 1076.436609][T16570] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1076.478820][T16384] bridge_slave_0: entered promiscuous mode [ 1076.495638][T16384] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.495765][T16384] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.495996][T16384] bridge_slave_1: entered allmulticast mode [ 1076.523991][T16384] bridge_slave_1: entered promiscuous mode [ 1076.655416][T16572] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1076.657373][T16572] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1077.389133][T16574] loop3: detected capacity change from 0 to 512 [ 1077.402011][T16574] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1077.784244][T16578] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1077.784848][T16578] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1078.261613][T16384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1078.277225][T16384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1078.301109][T16580] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2610'. [ 1078.301151][T16580] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2610'. [ 1078.547902][T16384] team0: Port device team_slave_0 added [ 1078.557264][T16384] team0: Port device team_slave_1 added [ 1078.579468][ T5779] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1078.671638][T16206] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1078.682514][T16206] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1078.687436][T16206] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1078.691315][T16589] loop3: detected capacity change from 0 to 1024 [ 1078.727681][T16206] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1078.730355][ T5779] usb 9-1: New USB device found: idVendor=06cd, idProduct=0107, bcdDevice=1b.3e [ 1078.753186][ T5779] usb 9-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1078.753254][ T5779] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1078.753289][ T5779] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 1078.753323][ T5779] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 1078.753360][ T5779] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1078.753396][ T5779] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 59391, setting to 1024 [ 1078.753572][ T5779] usb 9-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1078.787866][ T5779] usb 9-1: New USB device strings: Mfr=234, Product=28, SerialNumber=3 [ 1078.787901][ T5779] usb 9-1: Product: syz [ 1078.787922][ T5779] usb 9-1: Manufacturer: syz [ 1078.787943][ T5779] usb 9-1: SerialNumber: syz [ 1078.820296][T16583] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1078.820482][T16583] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1078.820660][T16583] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1078.820886][T16583] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1078.839150][ T5779] keyspan 9-1:1.0: Keyspan 1 port adapter converter detected [ 1078.847979][ T5779] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 84 [ 1078.855812][ T5779] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 82 [ 1078.855957][ T5779] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 2 [ 1078.872690][T16384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1078.872717][T16384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1078.872763][T16384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1078.889205][ T5779] usb 9-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1078.908640][T16384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1078.908668][T16384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1078.908716][T16384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1078.976857][T16589] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1078.979342][T16589] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1079.066950][T16206] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1079.099512][T16206] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1079.190094][T16206] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1079.283143][T16206] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1079.509996][T14228] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1079.687300][ T5811] usb 9-1: USB disconnect, device number 14 [ 1079.730299][ T5811] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1079.751252][ T5811] keyspan 9-1:1.0: device disconnected [ 1080.126661][T16613] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2624'. [ 1080.128157][T16611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1080.171429][T16384] hsr_slave_0: entered promiscuous mode [ 1080.176957][T16384] hsr_slave_1: entered promiscuous mode [ 1080.177816][T16384] debugfs: 'hsr0' already exists in 'hsr' [ 1080.177847][T16384] Cannot create hsr debugfs directory [ 1083.572745][ T5632] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1083.590988][ T5632] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1083.605275][ T5632] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1083.621975][ T5632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1083.633077][ T5632] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1084.214559][T16648] loop8: detected capacity change from 0 to 32768 [ 1084.261527][T16648] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1084.331092][ T5632] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1084.352682][ T5632] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1084.374202][ T5632] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1084.374898][T16648] XFS (loop8): Ending clean mount [ 1084.389041][T16648] XFS (loop8): Quotacheck needed: Please wait. [ 1084.401083][ T5632] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1084.408934][ T1381] bridge_slave_1: left allmulticast mode [ 1084.408984][ T1381] bridge_slave_1: left promiscuous mode [ 1084.409242][ T1381] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.431453][ T5632] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1084.542533][ T1381] bridge_slave_0: left allmulticast mode [ 1084.581866][ T1381] bridge_slave_0: left promiscuous mode [ 1084.582197][ T1381] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.625578][T16648] XFS (loop8): Quotacheck: Done. [ 1085.670768][T12348] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1085.713588][T14351] Bluetooth: hci0: command tx timeout [ 1086.107267][ T1381] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1086.135794][ T1381] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1086.167920][ T1381] bond0 (unregistering): Released all slaves [ 1086.447392][T14351] Bluetooth: hci7: command tx timeout [ 1087.824412][T14351] Bluetooth: hci0: command tx timeout [ 1088.516138][T14351] Bluetooth: hci7: command tx timeout [ 1089.883745][T14351] Bluetooth: hci0: command tx timeout [ 1090.437038][ T1381] hsr_slave_0: left promiscuous mode [ 1090.446389][ T1381] hsr_slave_1: left promiscuous mode [ 1090.447521][ T1381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1090.459590][ T1381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1090.594815][T14351] Bluetooth: hci7: command tx timeout [ 1091.954173][T14351] Bluetooth: hci0: command tx timeout [ 1092.181950][ T1381] team0 (unregistering): Port device team_slave_1 removed [ 1092.235988][ T1381] team0 (unregistering): Port device team_slave_0 removed [ 1092.638509][T16726] loop3: detected capacity change from 0 to 16 [ 1092.683955][T14351] Bluetooth: hci7: command tx timeout [ 1092.707635][T16726] erofs (device loop3): mounted with root inode @ nid 36. [ 1092.879080][T16732] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2636'. [ 1092.884350][T16732] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2636'. [ 1093.760937][T16660] rxe_eth0 speed is unknown, defaulting to 1000 [ 1093.778500][T16735] loop8: detected capacity change from 0 to 512 [ 1093.823611][T16735] EXT4-fs (loop8): Cannot use DAX on a filesystem that may contain inline data [ 1094.087481][T16742] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2638'. [ 1094.224350][T16745] loop3: detected capacity change from 0 to 512 [ 1094.241746][T16745] EXT4-fs (loop3): Cannot use DAX on a filesystem that may contain inline data [ 1094.361201][T16748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1094.362939][T16748] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2640'. [ 1094.652933][T16755] loop8: detected capacity change from 0 to 16 [ 1094.671275][T16755] erofs (device loop8): mounted with root inode @ nid 36. [ 1094.908424][T16758] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2641'. [ 1094.912633][T16758] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2641'. [ 1095.768787][T16763] loop3: detected capacity change from 0 to 512 [ 1095.772727][T16763] EXT4-fs (loop3): Cannot use DAX on a filesystem that may contain inline data [ 1096.068990][T16769] loop8: detected capacity change from 0 to 16 [ 1096.087191][T16769] erofs (device loop8): mounted with root inode @ nid 36. [ 1097.680246][T16757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1097.680366][T16641] rxe_eth0 speed is unknown, defaulting to 1000 [ 1098.914835][T16782] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2646'. [ 1098.914882][T16782] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2646'. [ 1099.499360][T16792] loop3: detected capacity change from 0 to 512 [ 1099.575047][T16384] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1099.600954][T16792] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1099.601102][T16792] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1099.679181][T16384] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1099.680938][T16384] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1100.891681][T16384] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1101.117318][T14228] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1101.192568][T16788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1101.194623][T16384] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1101.266348][T16384] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1101.267219][T16384] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1101.307710][T16384] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1102.554599][T16820] loop3: detected capacity change from 0 to 16 [ 1102.562437][T16820] erofs (device loop3): mounted with root inode @ nid 36. [ 1102.609667][T16819] loop8: detected capacity change from 0 to 512 [ 1102.706887][T16819] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1102.707037][T16819] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1104.659953][T12348] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1105.028535][T16834] loop3: detected capacity change from 0 to 16 [ 1105.049865][T16834] erofs (device loop3): mounted with root inode @ nid 36. [ 1105.375565][T16838] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2655'. [ 1105.375613][T16838] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2655'. [ 1108.289148][T16846] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2656'. [ 1108.519511][T16853] netlink: 'syz.8.2657': attribute type 1 has an invalid length. [ 1108.667642][T16853] bond4: entered promiscuous mode [ 1108.668116][T16853] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1109.006894][T16866] loop3: detected capacity change from 0 to 512 [ 1110.108638][T16866] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1110.108797][T16866] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1111.451737][T16876] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2661'. [ 1111.451781][T16876] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2661'. [ 1111.663009][T14228] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1111.732417][ T5632] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1111.743295][ T5632] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1111.760395][ T5632] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1111.773893][ T5632] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1111.777428][ T5632] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1112.154193][T16891] loop8: detected capacity change from 0 to 512 [ 1113.223263][T16660] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.223379][T16660] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.223806][T16660] bridge_slave_0: entered allmulticast mode [ 1113.228593][T16660] bridge_slave_0: entered promiscuous mode [ 1113.231871][T16660] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.232025][T16660] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.232190][T16660] bridge_slave_1: entered allmulticast mode [ 1113.234467][T16660] bridge_slave_1: entered promiscuous mode [ 1113.272147][T16660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1113.276652][T16660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1113.358383][T16891] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1113.358548][T16891] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1113.684135][T16660] team0: Port device team_slave_0 added [ 1113.692503][T16660] team0: Port device team_slave_1 added [ 1114.234731][T14351] Bluetooth: hci2: command tx timeout [ 1114.911571][T12348] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1115.001116][T16916] loop3: detected capacity change from 0 to 512 [ 1115.104069][T16660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1115.104096][T16660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1115.104140][T16660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1115.150962][T16916] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1115.151105][T16916] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1115.315973][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.316051][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.462062][T14351] Bluetooth: hci2: command tx timeout [ 1116.685714][T16936] loop8: detected capacity change from 0 to 512 [ 1116.737823][T16641] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.738033][T16641] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.738192][T16641] bridge_slave_0: entered allmulticast mode [ 1116.740131][T16641] bridge_slave_0: entered promiscuous mode [ 1116.769792][T16641] bridge0: port 2(bridge_slave_1) entered blocking state [ 1116.769914][T16641] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.770077][T16641] bridge_slave_1: entered allmulticast mode [ 1116.772036][T16641] bridge_slave_1: entered promiscuous mode [ 1116.827943][T16660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1116.827968][T16660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1116.828019][T16660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1117.902829][T14228] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1117.913348][T16936] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1117.917376][T16936] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1118.250252][T16641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1118.301753][T16641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1118.523642][T14351] Bluetooth: hci2: command tx timeout [ 1119.392726][T16641] team0: Port device team_slave_0 added [ 1119.431274][T16660] hsr_slave_0: entered promiscuous mode [ 1119.444731][T16660] hsr_slave_1: entered promiscuous mode [ 1119.458570][T16660] debugfs: 'hsr0' already exists in 'hsr' [ 1119.458603][T16660] Cannot create hsr debugfs directory [ 1119.477663][T16641] team0: Port device team_slave_1 added [ 1119.605578][T16961] loop3: detected capacity change from 0 to 512 [ 1119.720213][T16961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1119.721606][T16961] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1119.758605][T12348] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1119.762077][T16641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1119.762101][T16641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1119.762147][T16641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1120.061753][T16884] rxe_eth0 speed is unknown, defaulting to 1000 [ 1120.793357][T14351] Bluetooth: hci2: command tx timeout [ 1121.257387][T14228] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1121.396914][T16641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1121.396942][T16641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1121.396992][T16641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1121.465317][T16971] loop8: detected capacity change from 0 to 512 [ 1121.561869][T16971] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1121.562023][T16971] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1121.562963][ T13] bridge_slave_1: left allmulticast mode [ 1121.563013][ T13] bridge_slave_1: left promiscuous mode [ 1121.563270][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.644574][ T13] bridge_slave_0: left allmulticast mode [ 1121.644613][ T13] bridge_slave_0: left promiscuous mode [ 1121.644862][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.818054][ T13] bridge_slave_1: left allmulticast mode [ 1121.818093][ T13] bridge_slave_1: left promiscuous mode [ 1121.818321][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.849682][ T13] bridge_slave_0: left allmulticast mode [ 1121.849716][ T13] bridge_slave_0: left promiscuous mode [ 1121.849928][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.331455][T16980] loop3: detected capacity change from 0 to 512 [ 1123.358982][T16980] EXT4-fs (loop3): Cannot use DAX on a filesystem that may contain inline data [ 1123.406429][T12348] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1123.711615][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1123.763049][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1123.825008][ T13] bond0 (unregistering): Released all slaves [ 1124.126053][T16997] loop8: detected capacity change from 0 to 16 [ 1124.132162][T16997] erofs (device loop8): mounted with root inode @ nid 36. [ 1124.294300][T16997] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2681'. [ 1124.294346][T16997] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2681'. [ 1124.299624][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1124.375085][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1124.410211][ T13] bond0 (unregistering): Released all slaves [ 1125.681474][T16641] hsr_slave_0: entered promiscuous mode [ 1125.695642][T16641] hsr_slave_1: entered promiscuous mode [ 1125.703087][T16641] debugfs: 'hsr0' already exists in 'hsr' [ 1125.703117][T16641] Cannot create hsr debugfs directory [ 1126.129977][T17007] loop8: detected capacity change from 0 to 512 [ 1127.302576][T17007] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1127.302716][T17007] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1128.958627][T12348] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1130.580245][T17033] loop3: detected capacity change from 0 to 512 [ 1130.807487][T17033] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1130.807706][T17033] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1130.810526][T17036] loop8: detected capacity change from 0 to 512 [ 1130.822214][T17036] EXT4-fs (loop8): Cannot use DAX on a filesystem that may contain inline data [ 1132.644795][T14228] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1132.871029][ T13] hsr_slave_0: left promiscuous mode [ 1132.881412][ T13] hsr_slave_1: left promiscuous mode [ 1132.883267][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1132.906364][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1132.967984][ T13] hsr_slave_0: left promiscuous mode [ 1132.976787][ T13] hsr_slave_1: left promiscuous mode [ 1132.979218][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1132.996501][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1134.185582][T17070] loop3: detected capacity change from 0 to 512 [ 1134.283104][T17070] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1134.283255][T17070] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1134.588427][T17077] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1134.767099][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1134.818462][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1134.928843][T17085] loop8: detected capacity change from 0 to 512 [ 1134.971119][T17085] EXT4-fs (loop8): Cannot use DAX on a filesystem that may contain inline data [ 1135.064576][T14228] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1135.442932][T17090] loop3: detected capacity change from 0 to 512 [ 1135.577425][T17090] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1135.577600][T17090] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1136.358747][T14228] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1137.128076][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1137.649835][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1137.757733][T17115] loop8: detected capacity change from 0 to 512 [ 1137.772733][T17115] EXT4-fs (loop8): Cannot use DAX on a filesystem that may contain inline data [ 1137.964657][T17118] loop3: detected capacity change from 0 to 512 [ 1138.021055][T17118] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1138.021210][T17118] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1138.512980][T17111] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2698'. [ 1138.513158][T17108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1138.944502][T17129] loop8: detected capacity change from 0 to 16 [ 1138.993376][T17129] erofs (device loop8): mounted with root inode @ nid 36. [ 1139.024313][T14228] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1139.164310][T17133] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2702'. [ 1139.164373][T17133] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2702'. [ 1139.641902][T17141] loop3: detected capacity change from 0 to 512 [ 1139.836631][T17141] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1139.836781][T17141] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1140.048440][T17149] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1142.338900][T14228] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1142.766433][T16884] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.766556][T16884] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.766746][T16884] bridge_slave_0: entered allmulticast mode [ 1142.789990][T16884] bridge_slave_0: entered promiscuous mode [ 1142.834100][T16884] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.834229][T16884] bridge0: port 2(bridge_slave_1) entered disabled state [ 1143.129280][T16884] bridge_slave_1: entered allmulticast mode [ 1143.198301][T16884] bridge_slave_1: entered promiscuous mode [ 1143.997416][T16884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1144.040337][T16884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1144.212480][T16884] team0: Port device team_slave_0 added [ 1144.237531][T16884] team0: Port device team_slave_1 added [ 1144.495669][ T5632] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1144.502699][ T5632] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1144.518775][ T5632] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1144.519953][ T5632] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1144.521538][ T5632] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1146.139686][T17204] loop3: detected capacity change from 0 to 512 [ 1146.174022][T17204] EXT4-fs (loop3): Cannot use DAX on a filesystem that may contain inline data [ 1146.495018][T14351] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1146.513718][T14351] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1146.516147][T14351] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1146.517285][T14351] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1146.518001][T14351] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1146.674170][T14351] Bluetooth: hci4: command tx timeout [ 1146.946033][T16884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1146.946061][T16884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1146.946111][T16884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1146.984316][T16884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1146.984340][T16884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1146.984385][T16884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1147.698569][T17229] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2714'. [ 1147.698613][T17229] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2714'. [ 1147.754767][T16884] hsr_slave_0: entered promiscuous mode [ 1147.755925][T16884] hsr_slave_1: entered promiscuous mode [ 1148.593692][T14351] Bluetooth: hci6: command tx timeout [ 1148.754118][T14351] Bluetooth: hci4: command tx timeout [ 1150.676233][T14351] Bluetooth: hci6: command tx timeout [ 1150.854445][T14351] Bluetooth: hci4: command tx timeout [ 1151.539209][T17254] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2718'. [ 1151.664106][T17252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1152.130591][T17260] overlayfs: failed to clone upperpath [ 1152.717275][T17208] rxe_eth0 speed is unknown, defaulting to 1000 [ 1152.753746][T14351] Bluetooth: hci6: command tx timeout [ 1152.917065][T14351] Bluetooth: hci4: command tx timeout [ 1153.039194][T17271] loop3: detected capacity change from 0 to 16 [ 1153.063776][T17271] erofs (device loop3): mounted with root inode @ nid 36. [ 1153.374498][T17271] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2722'. [ 1153.374542][T17271] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2722'. [ 1153.937737][T17284] loop8: detected capacity change from 0 to 16 [ 1153.969403][T17284] erofs (device loop8): mounted with root inode @ nid 36. [ 1153.972977][T17286] overlayfs: failed to clone upperpath [ 1154.092231][T17284] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2712'. [ 1154.092275][T17284] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2712'. [ 1154.566543][T17298] loop8: detected capacity change from 0 to 512 [ 1154.619625][T17296] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2725'. [ 1154.640500][T17298] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1154.640631][T17298] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1154.807247][T17187] rxe_eth0 speed is unknown, defaulting to 1000 [ 1154.809939][T17294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1154.833667][T14351] Bluetooth: hci6: command tx timeout [ 1156.154088][ T13] bridge_slave_1: left allmulticast mode [ 1156.154128][ T13] bridge_slave_1: left promiscuous mode [ 1156.154381][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.194642][T12348] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1156.285581][ T13] bridge_slave_0: left allmulticast mode [ 1156.288092][ T13] bridge_slave_0: left promiscuous mode [ 1156.288641][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.566605][T17317] loop3: detected capacity change from 0 to 16 [ 1157.667127][T17317] erofs (device loop3): mounted with root inode @ nid 36. [ 1158.990052][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1159.021178][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1159.039693][ T13] bond0 (unregistering): Released all slaves [ 1160.170232][T17351] loop3: detected capacity change from 0 to 512 [ 1160.186749][T17351] EXT4-fs (loop3): Cannot use DAX on a filesystem that may contain inline data [ 1161.015873][T17319] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2727'. [ 1161.033637][T17313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1161.471759][T17362] loop8: detected capacity change from 0 to 512 [ 1161.479190][T17362] EXT4-fs (loop8): Cannot use DAX on a filesystem that may contain inline data [ 1162.887412][T17375] overlayfs: failed to clone upperpath [ 1163.056267][ T13] hsr_slave_0: left promiscuous mode [ 1163.058627][ T13] hsr_slave_1: left promiscuous mode [ 1163.061132][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1163.088329][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1163.896006][T17396] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1164.209128][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1164.257049][T17396] block device autoloading is deprecated and will be removed. [ 1164.291757][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1164.927921][T17402] md: pers->run() failed ... [ 1165.407979][T17422] loop8: detected capacity change from 0 to 512 [ 1165.428344][T17422] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1165.907677][T17428] md: md3 stopped. [ 1165.929403][ T1932] [ 1165.931765][ T1932] ====================================================== [ 1165.938786][ T1932] WARNING: possible circular locking dependency detected [ 1165.945818][ T1932] syzkaller #0 Tainted: G L [ 1165.951888][ T1932] ------------------------------------------------------ [ 1165.958906][ T1932] kworker/1:2/1932 is trying to acquire lock: [ 1165.964977][ T1932] ffff88805944a788 (kn->active#97){++++}-{0:0}, at: __kernfs_remove+0x34c/0xbc0 [ 1165.974095][ T1932] [ 1165.974095][ T1932] but task is already holding lock: [ 1165.981459][ T1932] ffffc9000614fd08 ((work_completion)(&mddev->del_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1165.992674][ T1932] [ 1165.992674][ T1932] which lock already depends on the new lock. [ 1165.992674][ T1932] [ 1166.003091][ T1932] [ 1166.003091][ T1932] the existing dependency chain (in reverse order) is: [ 1166.012108][ T1932] [ 1166.012108][ T1932] -> #4 ((work_completion)(&mddev->del_work)){+.+.}-{0:0}: [ 1166.021524][ T1932] lock_acquire+0x1d1/0x380 [ 1166.026570][ T1932] process_one_work+0xa32/0x1b10 [ 1166.032060][ T1932] worker_thread+0x5ef/0xe50 [ 1166.037199][ T1932] kthread+0x373/0x450 [ 1166.041815][ T1932] ret_from_fork+0x730/0xd60 [ 1166.046936][ T1932] ret_from_fork_asm+0x1a/0x30 [ 1166.052231][ T1932] [ 1166.052231][ T1932] -> #3 ((wq_completion)md_misc){+.+.}-{0:0}: [ 1166.060508][ T1932] lock_acquire+0x1d1/0x380 [ 1166.065554][ T1932] touch_wq_lockdep_map+0xad/0x1c0 [ 1166.071207][ T1932] __flush_workqueue+0x131/0x1200 [ 1166.076782][ T1932] md_alloc+0x30/0x10a0 [ 1166.081483][ T1932] md_probe+0x73/0xf0 [ 1166.086008][ T1932] blk_probe_dev+0x149/0x1e0 [ 1166.091144][ T1932] blk_request_module+0x16/0xc0 [ 1166.096529][ T1932] blkdev_get_no_open+0x9b/0xf0 [ 1166.101929][ T1932] blkdev_open+0x141/0x4f0 [ 1166.106883][ T1932] do_dentry_open+0x674/0x1470 [ 1166.112175][ T1932] vfs_open_consume+0xcc/0x460 [ 1166.117483][ T1932] path_openat+0x1547/0x23f0 [ 1166.122611][ T1932] do_file_open+0x20e/0x430 [ 1166.127648][ T1932] do_sys_openat2+0x163/0x1d0 [ 1166.132868][ T1932] __x64_sys_openat+0x12d/0x210 [ 1166.138261][ T1932] do_syscall_64+0x123/0x790 [ 1166.143384][ T1932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.149817][ T1932] [ 1166.149817][ T1932] -> #2 (major_names_lock){+.+.}-{4:4}: [ 1166.157572][ T1932] lock_acquire+0x1d1/0x380 [ 1166.162610][ T1932] __mutex_lock+0x19f/0x1c10 [ 1166.167734][ T1932] blk_probe_dev+0x28/0x1e0 [ 1166.172785][ T1932] blk_request_module+0x16/0xc0 [ 1166.178165][ T1932] blkdev_get_no_open+0x9b/0xf0 [ 1166.183559][ T1932] bdev_file_open_by_dev+0x70/0x210 [ 1166.189295][ T1932] md_import_device+0x120/0x360 [ 1166.194681][ T1932] new_dev_store+0x423/0x8d0 [ 1166.199807][ T1932] md_attr_store+0x1c5/0x330 [ 1166.204929][ T1932] sysfs_kf_write+0xf2/0x150 [ 1166.210061][ T1932] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1166.215881][ T1932] vfs_write+0x6af/0x1050 [ 1166.220737][ T1932] ksys_write+0x12a/0x250 [ 1166.225589][ T1932] do_syscall_64+0x123/0x790 [ 1166.230712][ T1932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.237133][ T1932] [ 1166.237133][ T1932] -> #1 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 1166.245408][ T1932] lock_acquire+0x1d1/0x380 [ 1166.250445][ T1932] __mutex_lock+0x19f/0x1c10 [ 1166.255564][ T1932] array_state_store+0x174/0xcf0 [ 1166.261033][ T1932] md_attr_store+0x1c5/0x330 [ 1166.266162][ T1932] sysfs_kf_write+0xf2/0x150 [ 1166.271296][ T1932] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1166.277124][ T1932] vfs_write+0x6af/0x1050 [ 1166.281981][ T1932] ksys_write+0x12a/0x250 [ 1166.286834][ T1932] do_syscall_64+0x123/0x790 [ 1166.291979][ T1932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.298402][ T1932] [ 1166.298402][ T1932] -> #0 (kn->active#97){++++}-{0:0}: [ 1166.305904][ T1932] check_prev_add+0xeb/0xe60 [ 1166.311025][ T1932] __lock_acquire+0x1528/0x1f40 [ 1166.316408][ T1932] lock_acquire+0x1d1/0x380 [ 1166.321443][ T1932] kernfs_drain+0x4eb/0x600 [ 1166.326493][ T1932] __kernfs_remove+0x34c/0xbc0 [ 1166.331781][ T1932] kernfs_remove_by_name_ns+0x7c/0x120 [ 1166.337772][ T1932] remove_files+0x96/0x1c0 [ 1166.342734][ T1932] sysfs_remove_group+0x8b/0x1b0 [ 1166.348239][ T1932] sysfs_remove_groups+0x60/0xb0 [ 1166.353707][ T1932] __kobject_del+0x89/0x220 [ 1166.358753][ T1932] kobject_put+0x348/0x640 [ 1166.363709][ T1932] process_one_work+0xac7/0x1b10 [ 1166.369194][ T1932] worker_thread+0x5ef/0xe50 [ 1166.374328][ T1932] kthread+0x373/0x450 [ 1166.378941][ T1932] ret_from_fork+0x730/0xd60 [ 1166.384062][ T1932] ret_from_fork_asm+0x1a/0x30 [ 1166.389353][ T1932] [ 1166.389353][ T1932] other info that might help us debug this: [ 1166.389353][ T1932] [ 1166.399573][ T1932] Chain exists of: [ 1166.399573][ T1932] kn->active#97 --> (wq_completion)md_misc --> (work_completion)(&mddev->del_work) [ 1166.399573][ T1932] [ 1166.414825][ T1932] Possible unsafe locking scenario: [ 1166.414825][ T1932] [ 1166.422263][ T1932] CPU0 CPU1 [ 1166.427616][ T1932] ---- ---- [ 1166.432970][ T1932] lock((work_completion)(&mddev->del_work)); [ 1166.439131][ T1932] lock((wq_completion)md_misc); [ 1166.446686][ T1932] lock((work_completion)(&mddev->del_work)); [ 1166.455373][ T1932] lock(kn->active#97); [ 1166.459634][ T1932] [ 1166.459634][ T1932] *** DEADLOCK *** [ 1166.459634][ T1932] [ 1166.467766][ T1932] locks held by kworker/1:2/1932: 2, last CPU#1: [ 1166.474093][ T1932] #0: ffff888023ad6948 ((wq_completion)md_misc){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 1166.484697][ T1932] #1: ffffc9000614fd08 ((work_completion)(&mddev->del_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1166.496334][ T1932] [ 1166.496334][ T1932] stack backtrace: [ 1166.502228][ T1932] CPU: 1 UID: 0 PID: 1932 Comm: kworker/1:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1166.513267][ T1932] Tainted: [L]=SOFTLOCKUP [ 1166.517586][ T1932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1166.527822][ T1932] Workqueue: md_misc mddev_delayed_delete [ 1166.533572][ T1932] Call Trace: [ 1166.536846][ T1932] [ 1166.539772][ T1932] dump_stack_lvl+0x100/0x190 [ 1166.544474][ T1932] print_circular_bug.cold+0x178/0x1be [ 1166.549968][ T1932] check_noncircular+0x146/0x160 [ 1166.554917][ T1932] ? __lock_acquire+0x5c0/0x1f40 [ 1166.559879][ T1932] check_prev_add+0xeb/0xe60 [ 1166.564488][ T1932] ? __lock_acquire+0x5c0/0x1f40 [ 1166.569445][ T1932] __lock_acquire+0x1528/0x1f40 [ 1166.574323][ T1932] lock_acquire+0x1d1/0x380 [ 1166.578846][ T1932] ? __kernfs_remove+0x34c/0xbc0 [ 1166.583796][ T1932] ? kernfs_drain+0x4c2/0x600 [ 1166.588511][ T1932] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1166.594170][ T1932] kernfs_drain+0x4eb/0x600 [ 1166.598710][ T1932] ? __kernfs_remove+0x34c/0xbc0 [ 1166.603654][ T1932] ? __pfx_kernfs_drain+0x10/0x10 [ 1166.608712][ T1932] ? find_held_lock+0x2b/0x80 [ 1166.613414][ T1932] ? __kernfs_remove+0x224/0xbc0 [ 1166.618363][ T1932] ? __kernfs_remove+0x224/0xbc0 [ 1166.623306][ T1932] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1166.628956][ T1932] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1166.634609][ T1932] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1166.640257][ T1932] ? up_write+0x2dc/0x5b0 [ 1166.644610][ T1932] __kernfs_remove+0x34c/0xbc0 [ 1166.649386][ T1932] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1166.655039][ T1932] kernfs_remove_by_name_ns+0x7c/0x120 [ 1166.660523][ T1932] remove_files+0x96/0x1c0 [ 1166.664970][ T1932] sysfs_remove_group+0x8b/0x1b0 [ 1166.669939][ T1932] sysfs_remove_groups+0x60/0xb0 [ 1166.674884][ T1932] __kobject_del+0x89/0x220 [ 1166.679415][ T1932] kobject_put+0x348/0x640 [ 1166.683859][ T1932] process_one_work+0xac7/0x1b10 [ 1166.688848][ T1932] ? __pfx_process_one_work+0x10/0x10 [ 1166.694253][ T1932] ? lock_acquire+0x1d1/0x380 [ 1166.698954][ T1932] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1166.704607][ T1932] worker_thread+0x5ef/0xe50 [ 1166.709239][ T1932] ? kthread+0x13a/0x450 [ 1166.713502][ T1932] ? __pfx_worker_thread+0x10/0x10 [ 1166.718641][ T1932] kthread+0x373/0x450 [ 1166.722735][ T1932] ? __pfx_kthread+0x10/0x10 [ 1166.727348][ T1932] ret_from_fork+0x730/0xd60 [ 1166.731951][ T1932] ? __pfx_ret_from_fork+0x10/0x10 [ 1166.737073][ T1932] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1166.742722][ T1932] ? __switch_to+0x800/0x10e0 [ 1166.747422][ T1932] ? __switch_to_asm+0x39/0x70 [ 1166.752204][ T1932] ? __pfx_kthread+0x10/0x10 [ 1166.756817][ T1932] ret_from_fork_asm+0x1a/0x30 [ 1166.761622][ T1932] [ 1166.899082][T17433] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1166.900652][T17433] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1166.966256][T16884] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1167.099511][T16884] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1167.108999][T16884] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1167.124628][T16884] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1167.173323][T16884] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1167.176972][T16884] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1167.243266][T16884] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1167.246604][T16884] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1167.321198][T17208] bridge0: port 1(bridge_slave_0) entered blocking state [ 1167.321338][T17208] bridge0: port 1(bridge_slave_0) entered disabled state [ 1167.321479][T17208] bridge_slave_0: entered allmulticast mode [ 1167.324054][T17208] bridge_slave_0: entered promiscuous mode [ 1167.358002][T17208] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.358134][T17208] bridge0: port 2(bridge_slave_1) entered disabled state [ 1167.358293][T17208] bridge_slave_1: entered allmulticast mode [ 1167.362680][T17208] bridge_slave_1: entered promiscuous mode [ 1167.500139][T17208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1167.500671][T17187] bridge0: port 1(bridge_slave_0) entered blocking state [ 1167.500796][T17187] bridge0: port 1(bridge_slave_0) entered disabled state [ 1167.500921][T17187] bridge_slave_0: entered allmulticast mode [ 1167.502682][T17187] bridge_slave_0: entered promiscuous mode [ 1167.508285][T17208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1167.517496][T17187] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.517601][T17187] bridge0: port 2(bridge_slave_1) entered disabled state [ 1167.517713][T17187] bridge_slave_1: entered allmulticast mode [ 1167.518988][T17187] bridge_slave_1: entered promiscuous mode [ 1167.575437][T17208] team0: Port device team_slave_0 added [ 1167.578564][T17208] team0: Port device team_slave_1 added [ 1167.581096][T17187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1167.587369][T17187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1167.640531][T17208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1167.640558][T17208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1167.640604][T17208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1167.644674][T17208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1167.644697][T17208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1167.644742][T17208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1167.646887][T17187] team0: Port device team_slave_0 added [ 1167.658677][T17187] team0: Port device team_slave_1 added [ 1167.749301][T17208] hsr_slave_0: entered promiscuous mode [ 1167.750128][T17208] hsr_slave_1: entered promiscuous mode [ 1167.750666][T17208] debugfs: 'hsr0' already exists in 'hsr' [ 1167.750691][T17208] Cannot create hsr debugfs directory [ 1167.759752][T17187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1167.759775][T17187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1167.759821][T17187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1167.767252][T17187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1167.767275][T17187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1167.767320][T17187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1167.877581][T17187] hsr_slave_0: entered promiscuous mode [ 1167.878481][T17187] hsr_slave_1: entered promiscuous mode [ 1167.879135][T17187] debugfs: 'hsr0' already exists in 'hsr' [ 1167.879160][T17187] Cannot create hsr debugfs directory [ 1168.014841][T16884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1168.141950][T16884] 8021q: adding VLAN 0 to HW filter on device team0 [ 1168.157975][ T13] bridge_slave_1: left allmulticast mode [ 1168.158010][ T13] bridge_slave_1: left promiscuous mode [ 1168.158180][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.160937][ T13] bridge_slave_0: left allmulticast mode [ 1168.160967][ T13] bridge_slave_0: left promiscuous mode [ 1168.161177][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.195438][ T13] bridge_slave_1: left allmulticast mode [ 1168.195670][ T13] bridge_slave_1: left promiscuous mode [ 1168.195832][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.211465][ T13] bridge_slave_0: left allmulticast mode [ 1168.211499][ T13] bridge_slave_0: left promiscuous mode [ 1168.211731][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.299145][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1168.300932][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1168.302222][ T13] bond0 (unregistering): Released all slaves [ 1168.356682][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1168.358573][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1168.359887][ T13] bond0 (unregistering): Released all slaves [ 1168.399145][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1168.399238][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1168.402828][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.402910][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1168.836194][T17208] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1168.857043][T17208] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1168.861557][T17208] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1168.875571][T17208] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1168.889025][T17208] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1168.906593][T17208] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1168.907577][T17208] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1168.922780][T17208] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1168.990088][ T13] hsr_slave_0: left promiscuous mode [ 1168.990571][ T13] hsr_slave_1: left promiscuous mode [ 1168.991237][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1168.991686][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1169.025089][ T13] hsr_slave_0: left promiscuous mode [ 1169.026030][ T13] hsr_slave_1: left promiscuous mode [ 1169.026565][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1169.027098][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1169.118845][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1169.123335][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1169.269556][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1169.285579][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1169.367886][T17187] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1169.371398][T17187] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1169.372141][T17187] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1169.377151][T17187] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1169.410058][T17187] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1169.416182][T17187] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1169.433101][T17187] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1169.449714][T17187] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1169.571580][T17208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1169.621635][T17208] 8021q: adding VLAN 0 to HW filter on device team0 [ 1169.645627][T17187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1169.649128][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 1169.649217][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1169.670373][ T1400] bridge0: port 2(bridge_slave_1) entered blocking state [ 1169.670454][ T1400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1169.726647][T17187] 8021q: adding VLAN 0 to HW filter on device team0 [ 1169.760338][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 1169.760412][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1169.801132][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 1169.801222][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1169.865994][T16884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1170.005142][T16884] veth0_vlan: entered promiscuous mode [ 1170.024225][T16884] veth1_vlan: entered promiscuous mode [ 1170.070874][T16884] veth0_macvtap: entered promiscuous mode [ 1170.078483][T16884] veth1_macvtap: entered promiscuous mode [ 1170.092926][T16884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1170.105356][T16884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1170.133897][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.136014][ T5936] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.136074][ T5936] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.147085][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.205873][T16884] ieee80211 phy38: Selected rate control algorithm 'minstrel_ht' [ 1170.267309][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1170.267341][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1170.268743][T16884] ieee80211 phy39: Selected rate control algorithm 'minstrel_ht' [ 1170.310245][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1170.310275][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1170.642663][T17187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1170.704129][T17208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1170.982026][T17187] veth0_vlan: entered promiscuous mode [ 1171.001575][T17187] veth1_vlan: entered promiscuous mode [ 1171.028143][T17208] veth0_vlan: entered promiscuous mode [ 1171.041740][T17208] veth1_vlan: entered promiscuous mode [ 1171.055371][T17187] veth0_macvtap: entered promiscuous mode [ 1171.060724][T17187] veth1_macvtap: entered promiscuous mode [ 1171.091264][T17187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1171.105798][T17187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1171.113029][T17208] veth0_macvtap: entered promiscuous mode [ 1171.122175][T17208] veth1_macvtap: entered promiscuous mode [ 1171.145009][T17208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1171.149692][T17208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1171.177649][T17187] ieee80211 phy40: Selected rate control algorithm 'minstrel_ht' [ 1171.212406][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1171.212437][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1171.224798][T17187] ieee80211 phy41: Selected rate control algorithm 'minstrel_ht' [ 1171.255474][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1171.255537][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1171.255591][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1171.264202][ T30] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1171.264529][ T30] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1171.264590][ T30] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1171.264646][ T30] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1171.347217][ T1381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1171.347305][ T1381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1171.355091][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1171.363961][T17208] ieee80211 phy42: Selected rate control algorithm 'minstrel_ht' [ 1171.416829][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1171.416862][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1171.422501][T17208] ieee80211 phy43: Selected rate control algorithm 'minstrel_ht' [ 1171.460695][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1171.460728][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50