last executing test programs: 18.837766408s ago: executing program 1 (id=543): sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bind$alg(0xffffffffffffffff, 0x0, 0x0) setpriority(0x12a8ab22d90c3a78, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000000)='/dev/audio#\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r2}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x2f08, 0x0, 0x8, 0x0, &(0x7f0000000700)=""/8, 0x447, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) getrandom(0x0, 0x0, 0x5176620f307ad1db) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x1) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e6dd3c3d"}, 0x0, 0x1, {0x0}}) close(r3) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$unix(0xffffffffffffffff, 0x0, 0x0) 15.628889269s ago: executing program 2 (id=638): r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r3, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) syz_emit_vhci(0x0, 0x22) syz_emit_vhci(&(0x7f00000002c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x2d}, @l2cap_cid_signaling={{0x29}, [@l2cap_move_chan_req={{0xe, 0x9, 0x3}, {0x9, 0x7f}}, @l2cap_cmd_rej_unk={{0x1, 0xa7, 0x2}, {0x7}}, @l2cap_disconn_rsp={{0x7, 0x40, 0x4}, {0xc0, 0x5}}, @l2cap_create_chan_rsp={{0xd, 0x40, 0x8}, {0x4, 0x1, 0x100, 0x10}}, @l2cap_disconn_rsp={{0x7, 0xc, 0x4}, {0x40, 0x1}}]}}, 0x32) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x0, 0xa, 0x2}) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB], 0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400f39c0c7930be34170000000000000000000a140000001100010000000000000000000000000a"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r6 = socket(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c90012000e00050015030a00050006000800080001009f086847b930176074b048ec288526f53efe1c6e01618a78818080d0f8f143bd55c048c51462664a127a286bc48bff9093b4e79bfe362e270ae8f8a3d2941d47f5b041c8b90a0b8aa30e1e73ddebb40f03efcbbb170cb1b955371b42a08f633dd2ff"], 0x17) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xffff}, &(0x7f00000000c0)=0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r8, 0x8983, &(0x7f0000000700)={0x6, 'veth1_to_batadv\x00', {0x2}}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f00000008c0)={0x0, 'veth0_vlan\x00', {0xffe}}) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000100)={r7, 0x6}, 0x8) write$uinput_user_dev(r1, &(0x7f0000000500)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000006480)) 13.846114634s ago: executing program 4 (id=627): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x77}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x2}, [@NDA_DST_MAC={0x4, 0x1, @dev}]}, 0x28}}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r1], 0x3, 0x238, &(0x7f0000000500)="$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") r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r2, &(0x7f0000001040)=[{&(0x7f0000000040)='\n', 0x1}], 0x1) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r3 = add_key(&(0x7f0000000180)='logon\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000280)='dns_resolver\x00', &(0x7f00000002c0)=@secondary) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000740)=[{&(0x7f0000000440)=""/113, 0x71}], 0x1, 0x401, 0x0) r5 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x804000, &(0x7f0000000200), 0x3, 0x4a2, &(0x7f0000001300)="$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") r6 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x0, 0x0, 0x2000000000903}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x380006, @private0}, 0x1c) r7 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x540, &(0x7f0000000fc0)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYRES16=r5, @ANYRESOCT=r7], 0x5c, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000100), 0x45, 0x7b1, &(0x7f00000004c0)="$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") r8 = socket$packet(0x11, 0x2, 0x300) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB="bf16000000000000b7070000ff030000487000000000000050000000000000009500000000000000e83d24a394a293b3bd23212fb56fa54f0b71d0e6adfefc41d86b60717142fa9ea4318123741c0a0f168c1886bf0fccf8d56ccb659427cf8593dbe3a2a3ad358061011fbc5ba1f07318988e6e01a41cc0990d0dc840a23f72eca0b2d89fc474c2a10000000077beee1cebf45fab73962fa8f6296b32a8343881dcc7b1b85f3c3da4cd36414e90a61965c3de4b3449abe802f5ab3e89cf6c662ed4048d3b3e22278d0054ce21fa41181a9580cfca031e5388ee5c9a7ddd04201f5200001fcadf95e5a4725837074e468ee23fd2f73902ebcfcf49822775985bf31b715f588cb211624f40401691721715f46e0500000000000000a663739a190a4e825c908c0abc85d457ec5a57cb706eef32a3ed12d63c9c4c508530e173650a8a8f2a9c81bcffe437bccbe158024d8d4939e6fd9adc43f0f4b049218db92bf466e934330ed79bc9f626d68b0000600057d14854eef851bc8c30f5d0df6b94ea0b852d495085ff4eabaac9606f0497958c2c357a7124a69f6770ea6702bc53896a15fad5e55c64efd217450a975221b20d78e445e3da74a3c1e59bae44546bde4ac6de55a480f3ad5dc0f2d1818b696492285f60d914283f8d687b0bdb46261277671bba2c550bfef679bddf38ab35eaaf0268c4efa45b56a188a9195044a222ec06bb49784d5608d87c4832e4305bf8889e5db2a70f6a83d4b3cdc12546d2e9f6720dec489b6276856de6d895704ba3e8ee12c8121ffc4f5d2ae03f0227dcc4f38699d3db16f69ed45e918b07ce58bf576e253364fe0000000084f897400d4f5503a6e9ea4a480e3221f3c247ee8c55e487eaa25a7689689c9c305da4b0181f0f653fec399fcc0cc800e82bde039cc29c19b538c76e65642875bddbef61e5985751d9ebd37d2f32375357b5d2b4dc24baa6a7010038380f7029a292f1ad05000000e4e801a819aef69d081e2cacaa8ad1b4ca6df5dc37962ebc5337379e00645b6d2bec249c0612510000000000a7060d8d9b9ad109b62d1dab0eec6beabc76d765b9caf70900000399772ddfe89be4338e70d0ecfed537780a31fcaf4acaf9bd3711a4359d68ec71b0693ede07e7d18e797697901fbae4a9d9966b68eadae75ef1b8931b0818a57e5136fb8c61d73b17d8fd55c2b8d321a6cba8743114fcff01e5c10200c512000800009a021d377e477ea807cc00919ee8bfbd090034f67609cfde8877b5bb072572b421d6b1fdae83e5e250190628d02d01f978323fe36685e652ceb218a9cc9e125a4880faccaf5ac2345f20b1ee403885790500d0bc75c7e95d23904dc446e0201aafea0d3f4cc0cf285ccd000000000100005aee4199a34686905441c1fa62ed20328a10690432f59a4d3e05bd00997ea2b6f5213cb883d05b620f31869f6cce80f1ae09009ed7e3c5f3aa61bfd240cb9726bc512ba0eb1f68579c76144feb0100809f12bcf79c4d57f66703c2aee08e52de3eff160623e1af555dc7481128ed0bab22dcb6e5b6ac5e4010eaf2510fa440aabfdc80c77108c769ed2d666c555c6c38b30899a688d96a6c6dc0dd4309f6548765d3f53261b4890aa004e7f667a230b22bc6e248bf56b219d9a547b6e1c5077c9ba463329323b53910e7358b4d0c6882c590cf25e4d044a6afb10a070f285e3c94ed405aa8dc41718dd3f4bf474868538aad9a23f85a707e325c10a9f22e37c4213d0ca2910726de8e62d2e3ae7f64e40c7af3dc00bab70cf607869c5a11a03bce8aa43fa010348bc2fb420ba5e344fcdcb302548e571157d323f5fd535800284d32ffff000088ccd685f07309101a3196b705479897f4c9d97c4c7b77db7b15bfb4305d5e954a34385418e665af882a7d505323070929b228bc94b70300000066dab8c4e63debff174621a0ac7dd85b14cb7616ca23f044bd0ccd1c79292c3aa8f6e4a1c27315ef8d55781edbe368f72aeb2f48256131aaab707451c14747dfa3bb5f8725a98f6d3c797573f18810bf378e38107ece5cb7cf3b98975e9254248af60de2f04e2429d9b6eba525fd1b1b665f77710fa494e2b619c975acd535fc78696fc980573c35e9916f0000000000002c8ee5ec55faffffffffffffffcd59cc0600000053d0a1f4ea4477022c9f376b3191efeb46be3c174fb24009379bbc949fd2923715540556450f12d1645177ce3eca0d65d17deff51a024f0180000000006100499e829bda469048c70e5968375feb39e6918e591a384851ba3079ad9c376bdaf0650e212eb4185cbbb6c0dc0e699afc34ca3b9a307cd2519cd9b192d678492ea2228ff0817d68f97b18402d271036067c141b911c4e0207e2c9d37ac203f440e1a065a2d227c6ec860c0104000000000000fe7144ec680c0dac7b5906a6197c8173080c9ab3ecb72820f04a42e4a43ee3f325f93edb3a204b9c9dc8953375e37c83876f248d91f166676b54781c6855c5e067ab2c2c6d22b20a703d68d77312333deff80883cb5a25c738f4e7cbb075e10f5c36396156abb221adebb9303342bfa2b745a5e045d5db847e4810270ed1c5bbb1548ec3184ff9b8ed1687333d0e0412d452ba6b390199bd684ff458d6c8114833efde87215e5f9569d92d24579f3ef473bce24e61eb21336ad441eea93cbcb69d2156b9b6e3000000000000000000fc411d2eadcadc7c0a2c12410e4b9d634807f2a6f1c3a13508e274ecef5cfccb707a1640973973fd2d1d60138d9b7a778827fd07fbd093a0ba779dcd32556613e1fac161825da91acde7fa964c689b1f0ea96047a98260270c3a3ccb2142b074db79aa88614663ff33f9966502a2361e49aabe58eb086c5827dd9d92fa4ff0c0e8b949d585f2cbc111de478905cb37f3cbfb019c6daace508b926718506a577234468f9279a52360d1a80b88b4eb1cda949ca77b6ec43bdf5f5a400989705746b86b400947891b33d591ec5ea9ae45983273f62027998d72f83625021a72e27e0449fa154ade55071546d4000000000000000000000000000000002f907c5db9c967a1f86c57bb5062fed7c37ec16a7e62b6e370c3c5a32adee9032367814394a7a7fd12c44b81fb5ac2ad92220a72aa3355e894cbefe344a6b5eb4c25128d5427a640faae401eccf3aca4294410461e946010c50f9ee556b38eae0b252ef288397672bbbd17e5306589f93dc130b6be5b19dfb2462348355ef24762509cf29becacf8515abe299b8a7dfd585f5dbf7578bfdbfa37deeb872c3291b59349238add315cd18e6f4196b404e48955657d680511c7ba7f5e0f9d97d649583190c78015aaf4db05aa2a6cc9d00084ce958406e09fe508a0ee5feb2d34f48d87000000000000001108780004ec696f618c20771a7ae436d733f603f20c9189567b63d47fae002e616969d888a418d139a25b11c0da7aecb8c14f1a879f7b985ab634b0f5cdb2090ad2c336e9a28289247ef4f3cfcafa393927d27711ed0543a5e8ec6c1c62082549791f75fccd54582f990234496954e6e54bcbb90f2756912ab7e511a55a9e0512e5c1c10bcd76ee4799af611179a39bd0c0323cae1aaaaaa8dafb55bca104ada3252c5d9de5b9cdb6217c35ca3d28b1d8b9d2fa79376c13167a9ef1b1f4b7509debbeacc153ca8bea4a0a65ee1d1d20a9106499f0bf7f416b051e835d790ac978b90143d9125224f74b6167f7a967c7e33eb5f43570b9f3c91371968a30e528968b233d0396db424e5fd73d380318e9676d074dd5ce552a222e250f9f6d0bdd9e46e7f22d9abfd4573b57e3b52d407b464b0146ea15560a2ce034b1623fecc84842928223d17ce4ab31ef4c2a9f9caebf65341fa3da1bbae7972097e24603b9db8edc25a152bd39af179eab23ed555040c2bbb89ea22c08b97264b3616a41abfad0ab12a79574c60cf1841ea45f10e9438e55e1e0eb645200993b08833bb14517b0d0e5ba72bdacd92d57b6029129c95ab0a93857c7205e8450b27aee5e684ece77f53112873f40247a998cc896ab4d55573c7a7ef2936a29425cab46cd4fdd1452ea8429c63c74d5673f5e4d47d1b001d0d3a9e1d5c840ab37a69cb30d17ff7591f01549e552dc43b672e0feff94408171d682565dc2d84476297c6901040000cb9f7f2eb690d7a032c09f0a3d48663fe5ece30f592d71755dd6cbfac96016a2ecd4e499ce9adce6e59db0494fa25117a2bc13275c9a94a3532c1b8417e9ed5e6cd5f51f8ccc878ba73305ad19b0cf05625439cdf688d33c8fd6cf52c5c5685444b65eb918884727d3a780bdac17d447745e4accd85d3aca4d63127bb3a58095cffa08a6cecae329dd5f47552c40b560b05e962363e99300d61931ddd97444c2bae02edb26383cb96ee7d2742d24dc7e9b6dac831674ae09b7d180ebb30b9221480ad78706dadf7ca3540eb6c6c43dc7e31b2c8d188f28d6ab10d3c0c97b9f6b5feb9abeb6a801975c0bbab0b1fed7485f2fca1730906a6dc1914386118646dab2618582c4ce0a8ce7a1a3ca7d56f6ca8c7d43cad0116c70751a0db051d9adc4ab34dafbca31fecd9191d38fa011a4c1fc19df0b9aac3a0de17dc01b413c4d4eccf9eb1cd90569508fc6479111544807f11dad193a170ac290f28d3e7f702c5bced7ed90c3251897446fdbb1195136d9092168e2deedb3e0afdf0f543363fbf8759df07270981c0bd7260998963e45a2c84e8b82ddfa98dab68a23cfb2ffa4fcc4ebcd38f273e9bdb240f77eb51e259bb88dc383b19107af39ffcc708a1278b3e53c2130a9c7150593794f8f22ae9b2ff0d46c8d175bf9ff227870f1dcecd5b564d20230ac32a10982cf1bbe5ca15ed6d85b2c447f3fb0872ea6170352fd4c76c75941d1c3684a466c81a5892e9f56c0b512be586381c2390aaf93347d318aa5de4322b11088435730c69bc1cfd96d869803a3113b2a33dbf7973434ba9e4ec15c0423bb384975498ff56bf8b51237dadf6264532fdca7c44e485e4c9b695cd0000000000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x90) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000040)=r9, 0x4) r10 = socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$packet(r10, &(0x7f0000000180)="0b041000e0ff030002004788aa96a13bb1000000000088f7ffff", 0x10000, 0x0, &(0x7f0000000140), 0x14) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) 13.3941619s ago: executing program 1 (id=630): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r4}, 0x10) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r2, 0x1}], 0x1, 0x0, 0x0, 0x3) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x80000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x6}]}) read(0xffffffffffffffff, &(0x7f0000000000)=""/9, 0x67) chdir(0x0) read$msr(0xffffffffffffffff, &(0x7f0000000300)=""/4096, 0x1000) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000140)=0x7) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000001c0)=0x92) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0xfb) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) r8 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r8, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x3, 0x0, 0x3}}) close_range(r5, 0xffffffffffffffff, 0x0) 13.052843158s ago: executing program 2 (id=631): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="580000000000000000000000000000009500000000000000eeb88cac86a4867400000000569ae9bd4a204f5a04be0d219f3c0fa9c45589faa997c70cc5bda86991bea3d345677074050b3d5362614728ebec23ebf1f07e03171205e363d36d6976f29d99cd330c897c90dd9898db6c"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3d}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x21d, &(0x7f0000000b40)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000380)={0x0, 0x0}) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001700000008000a00", @ANYRES32=r7], 0x24}}, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r9 = fcntl$dupfd(r8, 0x0, r8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2}, 0x90) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r10, 0x0, 0x1000000) 11.573685608s ago: executing program 2 (id=636): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000600)={0x2, 0x0, 0x0, @dev}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f0000000040)=@data_frame={@a_msdu=@type11={{}, {}, @device_a, @device_a, @random="fec988780198", {}, @device_b}}, 0x1e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"/1924], 0x784}}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1000020000000000afb648a2245213d0e82c50e7effda50fa36ee08f40ce87ec275a"], 0x10}, {&(0x7f0000000440)=ANY=[@ANYBLOB="1000000029100000000000000000000084cf6527212a7f3718e9d7b409f3856b86fcf06aa8874b6e3dbd8ce073cc44f87b3c06f1"], 0x10}], 0x2}, 0x0) r9 = socket(0x1, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32, @ANYBLOB="3e9aa8e9a55ea27e16f328b441459f770d0fae217f7aa1873e6f8c838a3407fc183c180712d7fa59049493dda10a938ecb13d2a2769193307dcdd76d7bef7ee3cef5ca88641c4e6c9a9bff99558e8772603c56e0857a0b5b455dd435da0e12bccd36558edd33332ead137065c3e5434f62373e3b80ca7b6cf2ca736e4b4aba5d", @ANYBLOB="ba0f2bed16228fd41e2f7134373f4be75c3bb494542fe40ba39fc978276a0df4ebcd5d5d70b506fb3e196e2f9660dcc55ab6cffeca1a48775b45d0f8", @ANYRES64=0x0], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRES16=r9, @ANYRES32=0x0, @ANYBLOB="00000000000064676576650a000100be77f8fd6f5e30afdae13237cfe697cab375ddb7d47643f6df3eac0c6858a3cd8f2d"], 0x40}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="680f0000080211000000ffffffffffff0802110000008efffffffffffeffffffffffffff0802110000015d002838ed2955319e11a7deca1ddfb7c9f317064685e4323fb7df7096561e753a180d87aca5796adb991a1efe673aab0969e7fb29a33e2e420c72af472009b4ccc49c5dd2e16cea005a03bcc9f87d0b36ff392a7ca7bedeeda17ff7f6b3ac00"], 0x8a) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0202ff00000000000ec00058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000000010000000000", 0x58}], 0x1) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r10, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xa00}], 0x1000000000000076, 0x0, 0x0, 0x0) io_cancel(0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x6, r9, &(0x7f0000000280)="c7f445099371ebced758fab0428c82d7cfee856dd905591b1484c4f94791e7a926ef20ed3115755a286cb6e5b1fb9b6bd0c27f488ea0757292b0d1d2e6927fe0ed711b5fc67b4e098c9d428546de68fb90bb88177bf9f48b18", 0x59, 0x3, 0x0, 0x0, r10}, &(0x7f00000003c0)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x0, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}, @IFLA_BROADCAST={0xa}]}, 0x50}}, 0x0) 9.993519877s ago: executing program 1 (id=639): setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff}) r0 = open(&(0x7f0000000140)='./bus\x00', 0x1c1042, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='+', 0x1, 0x4010000bffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x3b}, {0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x33}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xff00) write$tun(r0, &(0x7f0000000380)={@val, @val, @ipv6=@tcp={0x0, 0x6, "555a8b", 0x34, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, {[@srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@private0]}], {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x20, 0x0, 0x0, 0x401, {[@exp_smc={0xfe, 0x6}, @sack={0x5, 0x2}]}}}}}}, 0x6a) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000180)="74e2", 0x2}], 0x1, 0x1ffffff, 0x0, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x40002, 0x0) pwrite64(r6, &(0x7f0000000340)='C', 0x1, 0x100000002) fallocate(r6, 0x3, 0x0, 0xffeffeff000) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x0, 0x4}}}}, 0x11) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x2000010, &(0x7f00000002c0)={[{@uid}, {@uid_ignore}, {@utf8}, {@anchor={'anchor', 0x3d, 0x1}}, {@undelete}, {@shortad}, {@gid}, {@umask}, {@gid_ignore}, {@noadinicb}, {@undelete}, {}, {}, {@unhide}, {@nostrict}]}, 0x1, 0xc64, &(0x7f0000001cc0)="$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") r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000240)={@private0, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) 9.993182477s ago: executing program 3 (id=640): syz_open_dev$video(0x0, 0x0, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6002, &(0x7f0000000040)=0x3, 0x4, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) socket(0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) unshare(0x6a040000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000340)={&(0x7f0000000240)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000000000000110000006700000020010000000000000009000000000000001ab6069c9e103e6603b255dd3aa9c6d988dc9070a7f4f227fdb4", @ANYBLOB], 0x28}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x64, 0x6, 0x560, 0x100, 0x1d8, 0x100, 0x100, 0x2a8, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@mcast2, @private1, [], [], 'pim6reg1\x00', 'vlan1\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@mcast1}}}, {{@ipv6={@private0, @remote, [], [], 'tunl0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x7ff, 0xef9, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x8}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c0002800500010000000000470002800500010001000000060006400000000006"], 0xe4}}, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r5, 0x2284, &(0x7f0000000040)) 9.992735837s ago: executing program 4 (id=641): syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f0000000040)='.\x02\x00', 0x21000e, &(0x7f0000001340)={[{@resuid}]}, 0x1, 0x538, &(0x7f0000001900)="$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") bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r4, 0x1080420) keyctl$join(0x1, &(0x7f0000000900)={'syz', 0x3}) keyctl$join(0x1, &(0x7f0000000240)={'syz', 0x3}) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, 0x0, 0x1, 0x0, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0xfffffede}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x0, 0x5, @mcast2}]}]}, 0xac}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xac}}, 0x0) syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000200)='.\x02\x00', 0x100c4, &(0x7f0000000140)=ANY=[], 0x11, 0xc02, &(0x7f0000001e40)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) unshare(0x20000400) ioctl$KVM_CAP_X86_DISABLE_EXITS(r6, 0x4068aea3, &(0x7f0000000000)={0x8f, 0x2}) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) 8.944098222s ago: executing program 2 (id=642): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b7c000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002", @ANYRES32=0x0, @ANYRES32], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32], 0xb8}}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000780)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@newchain={0x2c, 0x64, 0x2, 0x470bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffe0, 0x8}, {0xc, 0xfff1}, {0x8, 0xd}}, [@TCA_CHAIN={0x8}]}, 0x2c}}, 0x4040011) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x0, 0x510, 0x1, 0x0, '\x00', r6, 0xffffffffffffffff, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r7, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) r10 = dup(r4) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r12, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) sendto$inet(r12, 0x0, 0x0, 0x20000080, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) read$FUSE(r11, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r11, &(0x7f0000000040)={0x50, 0x0, r13, {0x7, 0x1f}}, 0x50) write$FUSE_BMAP(r10, &(0x7f0000000080)={0x18, 0xffffffffffffffda, r13}, 0x0) write$FUSE_NOTIFY_RETRIEVE(r10, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getpgrp(r14) 8.456152022s ago: executing program 1 (id=643): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0xc0105500, &(0x7f0000000400)=ANY=[@ANYBLOB="0204000001"]) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r2, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_spirange={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x50}}, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="02010009"], 0x50}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x0, &(0x7f00000000c0)=0x100000001, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() 8.366143709s ago: executing program 2 (id=644): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000300)=[@in={0x2, 0x4, @remote}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e22}, @in6={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e20, @multicast2}], 0x6c) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000140)=0x98, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) io_submit(0x0, 0x1, &(0x7f0000000740)=[0x0]) socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r3, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = semget$private(0x0, 0x207, 0x0) semtimedop(r5, &(0x7f00000002c0)=[{}, {0x0, 0xff78}], 0x2, 0x0) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000140)=""/155) recvmsg(r3, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/41, 0x29}, 0x0) 7.717315972s ago: executing program 1 (id=646): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x0, 0x0, {0x23}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240000d1}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r5, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='memory.events\x00', 0x275a, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x70, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @beacon={{{}, {}, @device_a, @device_a, @random="a5fcc8639e98"}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @val={0x25, 0x3}, @void, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @void, @void}}]}, 0x70}}, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000140)={0x40000001}) syz_emit_ethernet(0x503, &(0x7f00000001c0)={@dev, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x4cd, 0x3a, 0x0, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xd, "7db4265c9f6aa3b46521199ea778d105c24ab977edb940e63f49a7129f45462e5eecc39f468544e3c13aa9017ccd638e784912ef2c2589d0d45cf0ed4bbe909218459bcbeaf63697aef1702b895af582b2e3b5cd435f497d415f29c5d941df10c1ca58197441e0e9b3400d98"}, {0x0, 0x9, "1598a4a8a719ffe0621615f6d04dcae3360546cf06f2665bae2296931fd1d71c1f7e8f222b9ddc4e0bfb5e5c9a484353b785e79b4d8181cf146261723484c54803466e8bedb8ecd2"}, {0x0, 0x1, "d429145c793e823829b4376332"}, {0x0, 0x7e, "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"}]}}}}}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r12, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r13, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) 7.010951169s ago: executing program 0 (id=647): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="580000000000000000000000000000009500000000000000eeb88cac86a4867400000000569ae9bd4a204f5a04be0d219f3c0fa9c45589faa997c70cc5bda86991bea3d345677074050b3d5362614728ebec23ebf1f07e03171205e363d36d6976f29d99cd330c897c90dd9898db6c"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3d}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x21d, &(0x7f0000000b40)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000240)=@add_del={0x2, &(0x7f00000000c0)='wg2\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000380)={0x0, 0x0}) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001700000008000a00", @ANYRES32=r7], 0x24}}, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r9 = fcntl$dupfd(r8, 0x0, r8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2}, 0x90) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r10, 0x0, 0x1000000) 6.901259698s ago: executing program 4 (id=648): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="580000000000000000000000000000009500000000000000eeb88cac86a4867400000000569ae9bd4a204f5a04be0d219f3c0fa9c45589faa997c70cc5bda86991bea3d345677074050b3d5362614728ebec23ebf1f07e03171205e363d36d6976f29d99cd330c897c90dd9898db6c"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3d}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x21d, &(0x7f0000000b40)="$eJzsmL9rFEEUx78zu7e5FRFtUthYGDCi2cvuoaQ5NIJgJULir0oPs4Z4m5xcVjAHgsHGRjsLwcbCf8AiRSoLO/8BQQsVBAuvsLCxGZmd2b1JJnGPNVa+TzF8Z9978+a9233FgSCI/5Yvn39+enJuZv4kgP2YwJh+/s0BGFOaG/4fn9878ax1/sXrD6/erhx4sLn9PBkixNYH9T/kdwG8mXWQFpmK6F9STOjNPHihL4PjuNZXwRBofRMcV7SOwXBd6zuG7kr/ILi9lMTBrW6yIMW0XEK5RHJpbr/fYJ1hQe+FEIIZ9tW1fqedJHHPEK627WCqJIpknXGrfzV4GMxytIz7yS5ee/xoXe7z3kwb/QvBEeoimmCY089nMJb3RrXEqP+wOzzfserfsVrpKg1lRdaVaP3Yk2aZ4tBUtfBJWc5Z23QQVa6BrVE1DE2yk3tbsvXqZMItfxfP6B+0Qq6Lo1bx1Afwjyo1RaUqcjE+2Hxnm76WhQtWnoKN/v7UR71z/iFW75iPfof/Tcd2u9j7DTU/xEuGY8Z8co350UiX7zZW1/pTS8vtxXgxXomi5mkGPDwVNbJBpFZr7g3ns5/Np33G+bVdfD3u4X47TXuhWj3mwUea9qJsHxmfzdxG9/sNHZbiAoCjaiPHplec6Fg5mKd8eOYr1aTtRBAEQRAEQRAEQRAEQRAEUYkjYNm/oCVElzLv3wEAAP//0Ixjlw==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000380)={0x0, 0x0}) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001700000008000a00", @ANYRES32=r7], 0x24}}, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r9 = fcntl$dupfd(r8, 0x0, r8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2}, 0x90) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r10, 0x0, 0x1000000) 5.872131232s ago: executing program 0 (id=650): r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) execveat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', &(0x7f0000000740)=[&(0x7f0000000180)=')@:(\x00', &(0x7f0000000700)='\x00'], &(0x7f0000000880), 0x100) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) r2 = fcntl$getown(0xffffffffffffffff, 0x9) mount$fuse(0x0, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500), 0x164000, &(0x7f00000008c0)=ANY=[@ANYRES64=r1, @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64990030303030303030303030303030303030303032303030302c757365725f69643d1e596b65c56d734e7638ad93af423b229c38a86ab93de7f61ba136dd95d02dca346869417b0200523eafa03ca1d6bfc67135247f09fc9533495e2773b3a8a68a9d40db5b430ef8d6b3b98b5d143cb13a1a8af784aa7be3bfc29e1b62809051ed19a66b1556a888a4ca1ff0da954b16395af6da1bce27f3ec15cc90a8f88b4356026561bf2ac1ebd431488a6f6ff9de1fc6f02d4cd94342179e2eed07bc14714583a40c048638da3d3807f40500e0a2b6000046fcf1119879016aaba139942c39cb34b713e7a3e3ced2282b66ed71c4d18025e16b23469ea1e5a36ced6e91", @ANYRESDEC=0xee00, @ANYBLOB="2c67726fc35e7d3f643d", @ANYRES64, @ANYBLOB="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", @ANYRESDEC, @ANYBLOB="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", @ANYRESHEX=r2, @ANYBLOB="2c50626a5f2feed1d13d2e2f632e328d75f02e6e65742f73030000000000000142c12448c05aae08d01ef89f940d1132906cba5d96486d9c08", @ANYRESDEC, @ANYBLOB="af991443a59703df479c1c30d5463525b1edc2ba17647304"]) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001d80), 0xc942, 0x0) r5 = socket(0x40000000002, 0x3, 0x1) setsockopt(r5, 0xff, 0x1, 0x0, 0x32) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="53107172ae91c9522941ff2fa46527703a1ae870f8a105154a6c437df3c8c9204b9e43a2f4cee0721f36280f132518a3d36c5d13540e336d936071bb7cc92bd68ed660c27b211285d12506865fe4842b985968a06ab9de06aeab9605cac88883efb743fd6ceb46f21e7ccdcc17442ee98c55f95bf5b2e8b8f239b6ada8df960f0d2db0b39b75a368e893cca213bc186bae3fdb9028c977782b41459a67b2ee70377f79c031941b39db32a1e23bdf067f41b604a79b7ef54da9643eca17cc4a559cd9e915efcfbd0ff9e6db", 0xcb}, {&(0x7f0000000140)}, {&(0x7f0000000180)="fd12fef5da9ddd56ee2e2fab5c30fa4f3bb666bf391ac2b2f49499cb9680f6fd865ca415219f30752ed8acafb4a266fd9f56fc2a575ead26d2248125e5008dddbc693ceae96581f4b67cc4b803952e564d333d273049344b98f44ca1c017e41c0c95262f5266a31f3d678c2ba6ac564c1a2b70a8c360bafe1b79284f5754864ce9ef08fdba3116e9e2db1cf313e789fef3c60329f99bb250a4c63a991b7fff8207ee02564de2dd58801d7d4cdcdfcb3a9ec4c3bda69dcf77021b37cad2f98c0951e8315e7ca55d696b6360b096ae496c13d932309ba53c2f335c9979804aed1d1f0d80687cba49b1824d5513a2ebf6755832dd54", 0xf4}, {&(0x7f0000000280)="2c2a6313505cc944aca90ac1ea25fc399e187d1020db8ee1819dfc1ef7d212eee4b6a4a208ab88e59999611150ba5e252f70ccf1a8a2d39cb258a2775cd7896e539a1372b41f3c63643294c46aa7503768eeda3d7fcbef9806c3c94b5f70a3a208b9b76cbdf33eedc6d6711991fba83688", 0x71}, {&(0x7f0000000300)="e93d01d69d8e441f9a858eec7d472887abcb64521ac214b6e3278e316366c2ba67a322a896be5b9d99c60c5a57e8117f811a8321a3e664bfa42f0fe61e9322ba03623ccb9dc5a9e2d136c00113809030a26580b23797b118d2f1133030e8bd9701f6a888636a1463537102768370f1c34435c247a2d5b344ec0ea253e8c539276101033a", 0x84}, {&(0x7f00000003c0)="7a6bae6fd8c57e4f6599418c774b6eb4288f3d2897abe3d70bf2e76c", 0x1c}, {&(0x7f0000000400)="5ca5378d8ee5cc6bbb90cd39473c215c2d24e86e4b3d2f29500c55f61cc064135993a56bf33957d15207d1af211452b6ff3ef6512433d392642a3fff75d83d4e48839428b64a1d4460fd07cd54e49519c1be25fc4df99137e863c8eded", 0x5d}, {&(0x7f0000000480)="3c3052acbd5b2a1d716c1a6934ff5df933594139b6031b55f4d83c4d3161f170bf3e0d42d5b40487e7e89f6731006400fb4687ff480111d3adc9831748da6ed7248befee635a7e12e0c47a1a4758d833ebd93538d9df3e7a0dbbd74fbccccd63085adc32ab124ca9110def567df5715273121e8587eb595e8ce4d62cbe", 0x7d}], 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000001c000000030001000100000002000477", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00'], 0xb0, 0x1}}, {{&(0x7f0000000740)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000008c0)=[{&(0x7f00000007c0)="05d7399eb84f6188720fcad0fa36a31886aeb54b5203b8b6e0934f4c8bcef587a2f3015a8a2e46a37e", 0x29}, {&(0x7f0000000800)="45d6e2479542d1e88b01858be8eaecf1a3602b06f28258bb8a33d9a9e9316130fc68e930ca41e577cfe3eab2d5ab84f17a8ae07b5cb8d7af46217f3f3af6861648b50bab123d26efa71c0b8f063add956f2a5044f3038f702ba92d44b3f7b2ffe7ca2f5cc99f6061825d3d8703b9f471aaf5951c5c879dad94d82940595c63b70b0fad", 0x83}], 0x2, &(0x7f0000000a40)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0, 0x40011}}, {{&(0x7f0000000b40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000bc0)="23205f8f5ecd954f0e6bed6d54da83dbff3299793a44218c7f03fe9681fbb6523f0bd5889f3184da3c437543f952b01dab9f27df2c869009d25872877b669827f06bdd3340e06ec458d84fcfd8945342073fe0b8695a2a18be2d8f61cd9844ead2469bb88562a92119fc10a25c381ccc1046f5e559272a337e79328d0a233dec", 0x80}, {&(0x7f0000000c40)="d38ba7e01561b1d03d40a0c012917359463a75f1f124eecf0f6cf5d2b8860d01101ef586df74153197d404650c95e0bde1c0c8423159734e787a6fa87d97da4d50cc5f31ad37d8ea51374f148d86af7a37112d3ec05b7c98c3d0bb8228e086cfd1945dbbd201707d4ad56c345e0e7584b668f360b4fe18bf64b5bd273993fdb6f952b81b27b982d2ce3d09852602f2860b8d62735b508f2fc1edbb5cea1b91a3900bc285f2d8038a4a43009e9a2f7c324b70358e19d5370cc25e334d02e1c42a0ddfcfea8bf0258d5fda20a6", 0xcc}, {&(0x7f0000000d40)="53d416", 0x3}, {&(0x7f0000000d80)="ca148f7101bdddf944b0f4c348dc22b8b05c371090e2204d3c7eeb09246da2450b1e4f1ebebaac9f9f00327a7ff84ceddbc5d52b98337f0c54e86e12a82779d143abbf0bdcf84e3f09f65195b2fa7cd94c3aa1496a71c09d0959117879b01f236539d96b440657a21bd338a8b3e56b6d28aace", 0x73}, {&(0x7f0000000e00)="6e41dc21d08268a6f56e6f1a9c555e0b7eab0e781bdd4608384a19f902405c01f14378ae885278704432fe53d8a229e9ebccbc744279e919800754eb8699b8e09f16157f0f6d476572e459e5", 0x4c}, {&(0x7f0000000e80)="d8e320f4206fd562c73e64a0cae48c7172d35bb1f6b88aec98f92c0cb5af6d2b0bfe2280899607a8c5b95234b60c5d99cc1b835df97150ed7488531b7b3cf3ae19a0c991d392b2a2ac6383dfb882e34c8498dd2cdd292f076a69a1bcaff2b90b47345f5912078a3aa948df88816149716fd7573ec6df5e000f021f454e4d5092315a6f77321baef217ecd2aa927a989f303b557feaaebbf0dd123a06db9c6ee2ae5c93e3a41296db23d1381f75dc36a360d268e810b991cfdd19eae75a38d8c74739df0ea9f55b2a49bc561f4058ddf51f1d0f1e67be555237fa5c38e9096f362fba785179bea648fe50b947", 0xec}, {&(0x7f0000000f80)="a68ff581ac795503412c4ada7ba2630108615e37f062d0dbcd7813aabc4437984d016569d06e588102a08899e0388eb448f39ab4e180c74ce8a76afa9d8aff84da5f6a0d980440fefb087ab86af41bc21ac005af8114f3c408089b42d5ed4a79fc3440a3bc18df20151507b3120e796f9ea96fb36ecf6e35f18d5d41a546fa35baa9e164dc8b5d78c0c9c31e169543c07dbe71b91c69d4be2eeb9bf245d2ad287138a2cf73cb0732c2678bb7e6", 0xad}], 0x7, &(0x7f0000001f00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="00000000100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESDEC=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000003000000000000000010000000100881f", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xf0, 0x40000}}, {{&(0x7f00000013c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001540)=[{&(0x7f0000001440)="0b19940439e3bcf56bf93c6e556947f7e2eb1f69fcc4a80d073a62ad7bd2c47440d20b7e84c377d7e10d3eefaeebeabfec30c464217bfff79dc94027d715a1c0856a17d8849cb44671df8f97bc0fbb4c279a82c55c929b0dd974fcf3722005757b5aab9833935b9d71b6b8ffabb85192f455f4614646564554ed63a1c85727143bea3b7d9f03ca73fe8260e7c5858a279282b4f8057fa83259834ec4c5640bf667ad39001f2459a2a97935500eefde10ce8eed3e92f0556d351c46c5a3e5323b1d047bdec80e1230426219c79cddfb20141771ba", 0xd4}], 0x1, &(0x7f0000001dc0)=ANY=[@ANYBLOB="30000001000000010000000091d390f43caad5ce66854a3558d8d1b63aee861ce6977c933b9a64f44c70fd4eb8fbda4ee743dc6f29c2bd5f2ecbecda16087f5272d6441ba33d3655d2c6b4bbecbf8b9d9b89fc891a6878159d2f6e1308fd3a4fb351b4bda15327bfeb0771ed4844c9d68e5c0800000013498d82b75d4c40c146dcf658ff1951bc28a07988c9680f33d6bd3e5d5855c68e368f9403f42ea5c43d907d86b2f912526456881d19354cbe922c05874be619773896597eaf168fa5e9027a3ec0b51b22302e83147b83fcbb946d7d2fb8b8ae1ac9e6fdc742913f848ad34808e74962eaeee2d2d374805c16a8874413bbaf98fa13d27077ec7a123d29763f8565", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x30, 0x4}}, {{&(0x7f00000017c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001940)=[{&(0x7f0000001840)="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", 0xfc}], 0x1, &(0x7f0000001b00)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r1}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8, 0x44}}], 0x5, 0x800) r6 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r6, 0x0) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000040), 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000001340)={0x2, 0x401, 0x7fffffff, 0x0, 0xffffffffffffffff}) r8 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r8, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r8, 0x0) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r8, &(0x7f0000000100)="bc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000140)="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", 0xff}, {&(0x7f0000000240)="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", 0x1000}], 0x2, &(0x7f0000001240)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x38, 0x4004000}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001280)="9ff3ca704f578553cd48e247b89354ed502a835aab3123b66874978cfa09599661019464493a44264c08425c6180e6317765cdf8e9ff47ef7508207f09c25a81edc0b845601cafcdc495bf732a100f46bfc31954167d1c461931a5", 0x5b}], 0x1, &(0x7f0000001380)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r6, r7, r8]}}], 0x48, 0x881}}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001400)="04e753bbfa8f5b9633e07f6ea865d1bf46ef36b42b0c37c4ed", 0x19}], 0x1, 0x0, 0x0, 0x40000001}}, {{&(0x7f0000001480)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f00000019c0)=[{&(0x7f0000001500)="c5969ef8e773f467d37f25a9871a720469d2ae63574f543feedde6c538499485f7af5e6ef0907945df906e1a6dd11e3b1f1c39a1a6742a38f4b3be69b7616becf0b8d390f38861d7090871a926976e8acac3acfe77d1f6db186d0f1f7ac4e05ee5c1227ce7f54935521ad0c5af331cff68312a72e03079e0d4f01f", 0x7b}, {&(0x7f0000001580)="b1bbb21edaea2767700d92ffcd0f1381baa2db54e97946df2230cf0480223c1c163e30a9fe5290d1b34ec66f6cbba5c1695ffa758b412374bf627cb73a94245396b2e993d7febb4bd9f9d59a068445fc06e2baee00a0750490ef6f6f1ffa69b7e114434c11fcca8e7783229527e421e4833d15936dfec4e4be923623544e4ab9a3fb3c04702928188959c5e1a12c29ecf02a69517026182bc21ef44b1643d99c29834dfeca8efbd70e276cd00c1bd5c09323539c87d5e12f7a733869404e4c6c090abf13aaf6", 0xc6}, {&(0x7f0000001680)="7d99dee3abf7b5caed69f69310cc692d982df77c06883c83c93eb7d1e99ba00f72d7fc8dfd9677f598d74da4df025fc8b507391179bb901e44f7355dbd8c33587eeeab8a2302eee01aa3", 0x4a}, {&(0x7f0000001700)="29c2c8ffb0d08b4f8f4e1970bc560789ee89999f09ac600d9ff1a400f917", 0x1e}, {&(0x7f0000001740)="7164a48373e1668672b76258810a48957da975bdd0df9b01f8d7bfd5261e6676c95c27d348027fb0a7f287f30c30fb35424165058b151aef42212d3c95fef392988380ec3d3e5a13ccb2a1327c584df5a7546a104dac4a8736d24d5f8cf56c28aa9ca6db40f4edf2d9ef954c475a78b5d251288f2b963047c0f0e47edc5a61c2dc567cd0d2a2cc62c5f6", 0x8a}, {&(0x7f0000001800)="d44bc31747f3369fd113f4d8190cb5a5db600514d5abb3c706ffe981308f8308ee7a84c0d0001852a10420fa41ed9ced1b2839f0e0fe4fbdc2c6462bfded4735bc956f7ca5a84676547e4bdacb3d6130d60332b76b4d32ad1541856ddbd1d277", 0x60}, {&(0x7f0000001880)="8b99d108217ab1e7fdd8e43368557f5be564b10d19cbdad17f508ac11c9421d7d3a7b7bf53389099a3721f9483f4ea790e5e7e65dc997861b3b38addb01046cde6d6ee26a05715006a49cedcdc8676db5772116a85ad5237058152d73be88ec545e649f059f9e41c7d2cad17bdbd7cc1b509d0224ae2d19e1ee9bce0378bb0b802a47241e1c53ae9f8bca9834de7d07d45c1c198af2600e728d433308fd824ef395f7911f8b7c3", 0xa7}, {&(0x7f0000001940)="0cdbbc", 0x3}, {&(0x7f0000001980)="81a97e178aed1ccd98d4551025cf03798f6e9a8c54f430ecd9ac9ae0f32e07a647dec44c2e957aa1497e8eeb677b1700", 0x30}], 0x9, 0x0, 0x0, 0x8881}}], 0x4, 0x40080) r9 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r9, &(0x7f0000235000/0x4000)=nil, 0x4000) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) r10 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r10, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 5.202158267s ago: executing program 4 (id=651): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f0000001880)=ANY=[@ANYBLOB="9ff02530ac27c04230366a27068535eb010018000000000000000c0000000c0000000600000008000000"], &(0x7f00000018c0)=""/43, 0x2a, 0x2b, 0x0, 0x7fff}, 0x20) r1 = syz_open_dev$MSR(&(0x7f0000001940), 0xc37, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000001980)={{r1}, 0x0, 0x6, @unused=[0xfffffffffffffffe, 0x7, 0x1, 0x10000], @name="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"}) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x400000, 0x30) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x80) ioctl$EVIOCGBITSW(r4, 0x80404525, &(0x7f0000000100)=""/204) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000280)=@security={'security\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x100, 0x0, 0x218, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000240), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', [0x0, 0x17f800001, 0xff000000], [0xff, 0xffffffff, 0xffffff00, 0xffffffff], 'dummy0\x00', 'dvmrp1\x00', {0xff}, {0xff}, 0x5e, 0x97, 0x0, 0x16}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x1, 0x7], 0x5b1, 0x1, 0x3}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0xd}, [0xff0000ff, 0xff000000, 0xff000000, 0xff], [0xff, 0xff, 0xff000000, 0xff], 'caif0\x00', 'veth0\x00', {}, {0xff}, 0x0, 0x5, 0x5, 0x8}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x3, 0x6, 0x0, [0x10, 0x2, 0x1, 0xc, 0x0, 0x16, 0x8000, 0x1, 0x2, 0x8, 0x4cb0, 0x0, 0x8, 0x2, 0x0, 0x1], 0x8}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x3}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, [0xffffff00, 0xff000000, 0x0, 0xff000000], [0xff, 0xffffff00, 0xffffffff, 0xff000000], 'pim6reg\x00', 'tunl0\x00', {0xff}, {0xff}, 0x3c, 0xe, 0x1, 0x40}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@rand_addr=0x64010102, 'bond_slave_1\x00', {0x40}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000001800)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002980)=""/4096, 0x1000, 0x1, &(0x7f0000001740)=""/189, 0xbd}, &(0x7f0000001840)=0x40) ioctl$sock_inet6_tcp_SIOCATMARK(r5, 0x8905, &(0x7f0000000080)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000014d564b"]) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev}, 0x1c) r9 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r9, 0x11, 0xb, &(0x7f00000000c0)=0x4, 0x4) r10 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r10, 0x29, 0x2, &(0x7f00000003c0)=0xb0, 0x4) setsockopt$SO_TIMESTAMP(r10, 0x1, 0x1d, &(0x7f0000000040)=0xaf2, 0x4) sendto$inet6(r10, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r11, 0x0) recvmmsg(r10, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/136, 0x88}}], 0x1, 0x12000, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) 5.181621688s ago: executing program 3 (id=652): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000002540)={'filter\x00', 0x5, "42de391533"}, 0x0) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000380)=0x3f, 0x4) recvmmsg(r2, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@nl, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/186}, {0xffffffffffffffff}], 0x0, &(0x7f0000000280)=""/239, 0x13}}, {{&(0x7f0000000e80)=@vsock={0x28, 0x0, 0x0, @host}, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)=""/18}, {&(0x7f0000000440)=""/110}, {&(0x7f00000004c0)=""/165}, {&(0x7f0000001540)=""/4096}, {&(0x7f0000000580)=""/245}], 0x0, &(0x7f0000000700)=""/27}}, {{&(0x7f0000000740)=@nfc, 0x0, &(0x7f0000000c00), 0x0, &(0x7f0000000cc0)=""/180}}], 0x4000000000001f1, 0x10162, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) read$msr(r0, &(0x7f0000000240)=""/45, 0x2d) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1b0b00000000000000001fffffff200001801c0002006261746164765f736c6176655f31"], 0x34}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=ANY=[], 0x1c}}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4096}) chdir(&(0x7f00000002c0)='\x00') setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e0000002ac1414aa00000000"], 0x14) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mknod$loop(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000380)='./file0\x00', 0x0) 5.074681637s ago: executing program 0 (id=653): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) fcntl$setlease(r2, 0x400, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x0, 0x5, 0x2, 0x4, 0x5}, 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r9, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r9, &(0x7f0000000380)='./file0\x00', r9, &(0x7f0000000200)='./bus/file0\x00', 0x0) mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x14, 0x12, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7a6d, 0x0, 0x0, 0x0, 0x3}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @map_val={0x18, 0xb, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xc8}, @exit, @exit, @cb_func={0x18, 0xa, 0x4, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f00000004c0)='GPL\x00', 0x8, 0x7a, &(0x7f00000007c0)=""/122, 0x40f00, 0x16, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x5, 0x3, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r7, 0x2, &(0x7f0000000940)=[r3, r3, r4, r3, r3], &(0x7f0000000980)=[{0x3, 0x1, 0xe, 0x9}, {0x2, 0x2, 0xd, 0xd}], 0x10, 0xa3b5}, 0x90) 5.074009847s ago: executing program 3 (id=654): r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x0, 0x7fff, 0x1, 0xf3, 0x1, 0x6, 0x8001, {0x0, @in={{0x2, 0x4e21, @empty}}, 0x0, 0x1, 0x6, 0x9, 0x9}}, &(0x7f0000000180)=0xb0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001380)=@broute={'broute\x00', 0x20, 0x3, 0x3c2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001540], 0x0, &(0x7f0000001340), &(0x7f00000027c0)=ANY=[@ANYBLOB="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"]}, 0x5cf) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000380)={'broute\x00', 0x0, 0x0, 0x0, [0x4, 0x7fff, 0xa, 0xffffffffffffffff, 0x8e, 0x6]}, &(0x7f0000000400)=0x50) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='cdg\x00', 0x9) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$sock_buf(r2, 0x1, 0x3b, &(0x7f0000000240)=""/143, &(0x7f0000000100)=0x8f) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r2, &(0x7f00000001c0)="8e77ca3389787867582dd0b9999e5e7ce579fc6b2977bf71ab517f68a8ddb58b93c91675a4b5dde502242a66491162f75f9b28f59cd9746ff7140fde3923b99bcc4c2cc72443169b2ab2f90a0f03dd842adba400500327de779dc66f3ebd32a81ebea8b89c9cc7e0f46e28fc1ff127a0", 0x70, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r2, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0xa, 0x0, 0x46, 0x407006}, 0x104) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000640)={0xa, 0x1, {0x203, @struct={0x0, 0xff}, 0x0, 0x0, 0x3, 0x6, 0xb96b, 0xff6b, 0x40, @struct={0x0, 0xffffffe0}, 0x278, 0x95, [0x1, 0x2fe187e8, 0x0, 0x6, 0x3ff, 0x2]}, {0x1b, @usage=0x401, 0x0, 0x69bcd47e, 0x5, 0xb5ae, 0x0, 0x0, 0x484, @usage=0x5, 0xfffffff9, 0x5, [0x0, 0xa2b, 0x8001, 0xba89, 0x4]}, {0xc9, @usage=0x3, 0x0, 0xffffffffffffffff, 0x4, 0xc5, 0xffff, 0x4, 0x400, @usage=0x3, 0x7f, 0x7913, [0x6, 0xfffffffffffffe00, 0xfff, 0x401, 0x8001]}, {0x4, 0xab, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000014c0)={'syztnl2\x00', &(0x7f0000002340)}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000a40)={r3, 0xffffffffffffffff, 0x0, [0x6, 0x0, 0x38ad8585, 0x92ad, 0x3], [0x3, 0x423, 0x9, 0x8, 0x5, 0x9, 0x1a2, 0x24ed50f1, 0x2, 0xfffffffffffff800, 0x1, 0x3, 0x8, 0x80000000, 0x2, 0x0, 0xffffffffffffffc9, 0xb2, 0x0, 0x6, 0x2a3, 0x3, 0x400, 0x214, 0x8001, 0x80000000, 0xa8, 0x401, 0x3, 0x8001, 0x5, 0x1, 0x1800000000000000, 0x1, 0x2, 0x5, 0xfff, 0x5059, 0x200, 0x5, 0x4, 0xffffffffffffffff, 0x0, 0x9, 0x8, 0x8, 0xfffffffffffff641, 0xfffffffffffff000, 0x8000000000000001, 0x2, 0x1, 0x8, 0x1, 0x7fffffff, 0xffffffffffffffff, 0x9, 0x23db, 0x5f50, 0x120, 0x0, 0xffffffff7fffffff, 0x8, 0xc8b, 0xee, 0x1, 0x0, 0x9, 0x100, 0xfff, 0x8, 0x8000, 0x6, 0x7fff, 0x5, 0x40, 0x800, 0x1ff, 0x0, 0x6, 0x0, 0xffffffffffffff81, 0xfffffffffffffffc, 0x1, 0x6a, 0x0, 0x1, 0xe03, 0x0, 0x9, 0x58, 0x80000000, 0x9, 0x2, 0x7fffffffffffffff, 0xc0a, 0xf544, 0x5, 0x5, 0x2, 0x4, 0x9, 0x1, 0x9, 0x6, 0x19, 0x4, 0x7fffffff, 0x322, 0x4, 0x2, 0x5, 0x9, 0x8, 0xff, 0x2, 0x9, 0x3, 0x5, 0x7, 0x8000000000000000, 0x7fff]}) shutdown(r2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'netpci0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001140)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000012c0)={'sit0\x00', &(0x7f0000001180)}) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000001480)={@loopback, @multicast1, 0x0}, &(0x7f0000001580)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001900)={'batadv0\x00', 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000001940)={@empty, @broadcast, 0x0}, &(0x7f0000001980)=0xc) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000002000), &(0x7f0000002040)=0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000002080)=0x0, &(0x7f00000020c0)=0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002180)=[{{&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000013c0)=[{&(0x7f0000000080)="93cf54b56cad59168b49bf5fa5986698769c853141059ccfe718d3e73b003382cf7f5dd076e15bec9d5b386101d7bf5da7edd98c20e8063cb966a07e1d0b7c7b71706253a30ef4e3cd6bad98417459eea40e591f6608725dd78ea68f349da3c645e66258d7d1e3f1a0ec2cb8acadf35ccce76e268943e402667cc6abb4d2cea3e83bc8b55438bdb4c707197932904d65e02794ff153d9927829ca482523766d23a1287074abe", 0xa6}, {&(0x7f0000000140)="f83885b9fdc67c5b66b12a578f4d310875fb2444fb32674d10d8af1ebf8d2e2f98751f861210f2b078f8b60d36a8e1cb98f3c8e0feebb48908c6d2a1926941cff0762ec38570ac0938bcd601de81a70df17d1b9e183ba00224727a1b2b46d95d2d19c528163098228eede684ba91ce", 0x6f}, {&(0x7f00000001c0)="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", 0xfb}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="589e2ea372c300a25f81a48d9d5c0ef049e1c8712dcd285800c82b201702a85e4915c7d0fa0fb84a2eb347d1fc018421c7e33331ff501ffd6e84e59348e1836e21c516d76d4270f83b1ec1c1c060fa2821ec79c8398200932b4eb4f6ba94dceed9bf7f527912a8b5d33016b024d11688913f5fbb919d6c8d327f29562a5270d1ee9f1de4d3b901eba9ed63f14191612fe9ec7c63f70ae37b20e0b129a87b0789c4c6ce18fa3cdda3da5318ba0250b8313ca1853363326221c0f8e344026d4d66e1d609be6d1535bde6ddb5ba53245033a31c02240d2ec8867edd42a5860edfbbbe390e9f2f930221", 0xe8}], 0x5, &(0x7f0000002240)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x6}}, @ip_retopts={{0x64, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0x21, 0x3, 0x6, [{@rand_addr=0x64010102, 0x3}, {@multicast2, 0x7fffffff}]}, @timestamp_addr={0x44, 0x44, 0xa4, 0x1, 0x2, [{@remote, 0xffff}, {@broadcast, 0xffff}, {@local, 0x80}, {@loopback, 0x7f57}, {@local, 0x1}, {@private=0xa010102, 0x4}, {@multicast2, 0x980a}, {@private=0xa010102, 0x2494}]}]}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x7fff}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x800}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x32}, @dev={0xac, 0x14, 0x14, 0x3}}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x3f}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x7fff}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x1}}, @ip_ttl={{0x10, 0x0, 0x2, 0x6017}}], 0xec}}, {{&(0x7f00000015c0)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f00000018c0)=[{&(0x7f0000001600)="ef7bb438118931af42ad9e0f360b2af3b50733e27470beee34fbb9a6b052d6d4d1d909de9b49cfffe88e87975423011d5ac222fce83f8d11aa00ed36c2e4624b81c1946c02bdc1c2fdb8ba6550c95aeed58eb4f3e09c3ddf508881a9c6ba94d81ae7d996c421e8dc91e653a6ce773cdf737f1b2ecdfbec0c68b2b7adf150abe72bc71d1ed6d95cc280e03bbf882b0d3aeab09f088138885daf2a", 0x9a}, {&(0x7f00000016c0)="4cd59be2d60630e723b2f2a5d1aecd02b3f8bcda6470b80232ccf597cbb5a7a51894283b4d6db9923d23d8d302318d84967423dd4ed5c8f22de95f76ac04197b9f7870b6de572640fe8bc1f780fe9b825be12e10a16674dce3d08c6af86d15275de06c550934aa8111678555c792af311138299bd62b4254839b30c8063e552bd78ab1d6a584a5e43cb33a1970e32a9de15e1803d37460ce1a99e1d6433f3bdec329c26d87272f47ed6e7f7b9994dfec2fdae5d62cfa914394021759978aef73fa7e147b40bd744aa64213c1df60faa7a68e8ea20398030e9648cf7ad261206ea45b39a83311aa", 0xe7}, {&(0x7f00000017c0)="4831611e1ef5c6b46b", 0x9}, {&(0x7f0000001800)="0ede3eb45102a7b4c0581b6d34dcbc5dcc719e60e63679d84bc63163e4c9ae5aebbf0a5457f0d675fa0b0767d59954247e1bd713c66f324fc4ac2a2bde3da9d4e87d8d8d499d9999752964b1a075b5a380830f8fd7d89073d1bc8a6b1559e8b7493d066a0892462f23a848cc4adf71390c7b7f1ca15582b328da1d87e14383dbb73fd24bb95591f98f3a313fb64befc2dadd4f20c6fc65cc62958797949b", 0x9e}], 0x4, &(0x7f00000019c0)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r5, @broadcast, @empty}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r6, @local, @local}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x64}}], 0x40}}, {{&(0x7f0000001a40)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000001b80)=[{&(0x7f0000001a80)="331baf2232e50994760e7b86104d7d7a6067ace1334ddd95305d0269b64470c2b5fbcb2ff9eac3d6b3491f98e0035811352c6101a1cba000b20abd0c058ab30942c391af3d69af7db16eb7239e065a0a7dcca2441f0da7e7e63d447d447147e6db55b582f27a07e37c7927e04115581256a65bc8abc2d94f0e2ad85922a1369e9b5114be25b90b6d3f021f155a1e91264eec5f199f6deff910da411331d6a004a7af4f2a3b3f4875b46c0a2959416f46c32fb03c6ef463ab1fbc871e7e25ae551c0520b8b507c7af9773017f47010ef84e72f23474d9ac0a1dd754121cdf21730b5fb3e4cb9aee152adebcc7fada", 0xee}], 0x1}}, {{&(0x7f0000001bc0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000001f80)=[{&(0x7f0000001c00)="ff66a08cceb88fb6a50c4b024cd298854fc4d9a055066e9943ade7f2a624f2ac957d34dc0caf4ee6bf6b739d3d487a6db1685314c0d6afe243524dddfe8510dd3de86127f24535cdb75a4a94ad800008c885828005fae3abc23f90ceb2ca4594e8ac8064a553b5557761b89f65ebe8cd818f0e665fb8b7834f15de9746d607c9c4dfeb4557a6e9772b51b5df99b13d0e6b7b58aee12fc319f2a4b9da6bdb8c8176effc474bd8aac247eae6503b1f383e769efbd4ce4512520fe5e7bccfd6836c4e846c0399b9fb82ad48b855fc47e2d74fcad1", 0xd3}, {&(0x7f0000001d40)="ac08b07da2721864e2592f19ebd30d7b765094ef99258176e669ed69e3ed23932a390ecc0e1c4619094c037a47001fb3a0d0e344befd6521995bdaa69e73c6330db979137c51f055a81eee3ce434a5b2eb037821d0ba17dfff48bff550596198f2314a85d46422", 0x67}, {&(0x7f00000026c0)="ab827c5a3e5f497c8e3799347777492e18fef040ece63547ea2a360fc1e5236547512f0c07ec4ade40ca615bdc79713696fe43914166598091a8842f6495ac671f1acb547ec6484df6cf880dc7fde42f95c3f4df35ae5b934a91d7cc57837a3fab28fc65096791fdb30c03364024969dcb1dace3b59c1f7e2381fcf4ac089cdd29fdfd1909d23b0b9ed23d9b326df5844f64718779f9bd56a905132e8e9e75c6fe90a79e5bceb5b93bde2240b319b62adc045754c2c76d5aeba609a34cd75056c78f0d347a110667920fddb4e6ab1868fb2b8f2555057fc2db72eb68d68c05b44f6a568ed21e3757dafa4ea630bd27d797b77b", 0xf3}, {&(0x7f0000001e40)="9e7e8173a0df8fce5a4832d7a1a73c41f1cdf8bb10b150c9a961755390de77374e5c68531ba2a8d4ffa8c06afd76d6ea26115e25bc659e60f61de20c82bb012ac243d0b08f6b0e186e73b747f0a3f15f66f0527e8bdd078254235ab1c7ee389d5607ddf9c997d2ee2d184e39aacbe340f4b5bde291", 0x75}, {&(0x7f0000001ec0)="34f7cb58af766d5a41472a427ec3c35f865f7e9ec2ed2d6eb315848aac2184462608c3613bd1acde3d292d6511e6d9f0b6f972a26ad0188ddbc0a055b546a1bfe1857633fc87276b00601832311b03ff4474cabc42e52b2eccd3af1201d0f5a0805a2f0ea7be061e437ea837951baef7f36124954f7d79e8af2932b3377ecc9d0bad1f539d04adf375af3949db97d2be9c46b7bac3b6aceafdcb4fc0bf91733ad6907c1218cd7244e7b857fd28736b", 0xaf}], 0x5, &(0x7f0000002100)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r7, @broadcast, @empty}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x81f7}}], 0x38}}], 0x4, 0x40040) listen(r0, 0x0) 4.805355589s ago: executing program 1 (id=655): syz_open_dev$radio(&(0x7f0000000280), 0x2, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@d, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) socket$kcm(0x2, 0xa, 0x2) r1 = userfaultfd(0x80001) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$UFFDIO_ZEROPAGE(r3, 0xc018aa06, &(0x7f0000000100)={{&(0x7f00003ea000/0x400000)=nil, 0x400000}, 0x1}) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x17) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="03a3d74264beee3a4b5819ed386dc61a7e0fd90af404bed6e723504aaae4078ff6a7f4673c3b4171b4d1dd38873132505a64d3efbf9549176ec500e908cc5cd9e8e492c25357f4ef1df4148b92f50e6781bbf3017932d96882adc64bb89555353e99e02408747553ea7bd60b6600cba03a1e7025e20ea03f8382834177c7d7c01d138d685d73d18d7fa2e189df9ec406955e4c708ae049ca2b63861d09b69ed6ecf7a3fbb5d2cfb4d6e3529bc24f72"], 0x13) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000006100)=""/102389, 0x18ff5}], 0x1, 0xfffffffd, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0xd3, 0x4180) r5 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r5, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="ba", 0x1}], 0x1}, 0x4008804) sendmsg$inet(r5, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="89d8b3f2", 0x4}, {&(0x7f0000000280)="ef831dc56dc3a0a4cc9fdc66", 0xc}], 0x2}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) madvise(&(0x7f0000569000/0x2000)=nil, 0x2000, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/3\x00') 4.804979609s ago: executing program 2 (id=656): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1008002, &(0x7f00000002c0)={[{@grpquota}, {@delalloc}, {@resuid}, {@data_err_abort}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") quotactl$Q_SETQUOTA(0x0, &(0x7f0000000280)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = open(0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r5) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="ec000000", @ANYRES16, @ANYBLOB="00042cbd7000000000004a00000200303030303a30303a31302e30000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300020000000f00a8007365636f6e646e616d650000080001007063690011000200303030303a30303a31302e30000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0xec}}, 0x48180) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000000800000000000000000000030000000001000000020000000000000000000000da00"], &(0x7f0000000340)=""/142, 0x52, 0x8e, 0x1}, 0x20) chdir(&(0x7f00000001c0)='./file0\x00') r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r8 = open(&(0x7f0000000200)='./bus\x00', 0x161b42, 0x0) sendfile(r8, r7, 0x0, 0x100800001) 4.252083363s ago: executing program 3 (id=657): io_setup(0x9, &(0x7f0000000080)) r0 = epoll_create1(0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x3000cd0, &(0x7f0000000440)=ANY=[], 0x1, 0x1509, &(0x7f0000002d40)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000a80)={{&(0x7f0000a7a000/0x2000)=nil, 0x2000}, 0x6}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000053c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r5, 0x402c5342, &(0x7f0000005480)={0x0, 0x8, 0x3cdb, {0x0, 0x10000}}) truncate(0x0, 0xd7fe) r6 = eventfd2(0x0, 0x0) clock_gettime(0xfffffff2, &(0x7f0000000000)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) recvmmsg(r7, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000005c0)=""/177, 0xb1}, {&(0x7f0000000500)=""/183, 0xb7}, {&(0x7f00000043c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/91, 0x5b}, {&(0x7f00000007c0)=""/211, 0xd3}], 0x5}}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r6, &(0x7f0000000b80)) 3.960448477s ago: executing program 0 (id=658): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x0, 0x5, 0x2, 0x4, 0x5}, 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r9, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r9, &(0x7f0000000380)='./file0\x00', r9, &(0x7f0000000200)='./bus/file0\x00', 0x0) mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x14, 0x12, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7a6d, 0x0, 0x0, 0x0, 0x3}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @map_val={0x18, 0xb, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xc8}, @exit, @exit, @cb_func={0x18, 0xa, 0x4, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f00000004c0)='GPL\x00', 0x8, 0x7a, &(0x7f00000007c0)=""/122, 0x40f00, 0x16, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x5, 0x3, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r7, 0x2, &(0x7f0000000940)=[r3, r3, r4, r3, r3], &(0x7f0000000980)=[{0x3, 0x1, 0xe, 0x9}, {0x2, 0x2, 0xd, 0xd}], 0x10, 0xa3b5}, 0x90) 3.732057546s ago: executing program 4 (id=659): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) fanotify_init(0x4c, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r0, 0x3, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{0x0}], 0x1, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000002780)=""/4096, 0xc26bfe8e8f6baca8}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r4, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000400)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0xe, 0x0, &(0x7f0000000000)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r9 = dup(r8) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@remote, @in=@empty}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, &(0x7f00000001c0)=0xe8) r10 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000001000)=ANY=[@ANYBLOB="85000000a00000003500000000000000850000002a0000009500000000000000e135dee43f5dcae3af5bb32c301264de232ce03ca47ce33647282102c7b4dba77c8ea9b6ee1398ae73749be1537086ae214b64880106f00574709ddccbce9ffab95dbc042fc0c3cd37b7baa14007c92d4cf2d339db6dc7229cdac23d9c280569e2db7ac431813205b5b8cbd97b7563dc4535c5eb2672b4fa56387ee22e9cf11ad8101ffb0f5530ca8f33b4d3ce79e89a48ced973c500000054299ffd9762b770e5ca8cda5cf566f06b6683eae1b41e5183e3f40e30f79e8c4afb7203e71a4dcefc7a45eab7e2b8296e3ab3009286337eed9787ec75fb6bfcf00d85df7b59419690f9c00796e2dd75a527a6b93fbee41c998f6096b369350f7140712335de4f5492bbe16949cc1a066d6805548760d200000000000000000000000000000000000000000000c04b1d32fa1c1da2d02b7df4bda7c0882cf97e1aa666e66e62fac83a52acf29d8ebdba51b0ea43f0e227ffcb167ca855d243980a61d9c6e2afa7d8b3231d7f2224296af9f1725df12807016b26eb8613b6d6d8bfbf1928e9172fd5691699"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x44, 0x10, 0x0, 0x41}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r10, 0x0, 0xe, 0x2000012, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x84a, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x28) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r11, 0x1, 0x8, &(0x7f0000000080), 0xfd32) bind$bt_hci(r11, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r12 = socket$inet_tcp(0x2, 0x1, 0x0) accept$inet(r12, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10) 2.363024427s ago: executing program 0 (id=660): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="580000000000000000000000000000009500000000000000eeb88cac86a4867400000000569ae9bd4a204f5a04be0d219f3c0fa9c45589faa997c70cc5bda86991bea3d345677074050b3d5362614728ebec23ebf1f07e03171205e363d36d6976f29d99cd330c897c90dd9898db6c"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3d}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x21d, &(0x7f0000000b40)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000240)=@add_del={0x2, &(0x7f00000000c0)='wg2\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000380)={0x0, 0x0}) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001700000008000a00", @ANYRES32=r7], 0x24}}, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r9 = fcntl$dupfd(r8, 0x0, r8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2}, 0x90) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r10, 0x0, 0x1000000) 2.350584208s ago: executing program 4 (id=661): socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket(0x840000000002, 0x3, 0xff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x10, &(0x7f0000000680), 0x1, 0x254, &(0x7f00000006c0)="$eJzs3T1oJGUcBvBnZnc9c7fIqY0gfoCIaCCcnWBzNgoHchwiggonojbKRYgJdomVjYXWKqlsgtgZLSVNsFEEq6gpYiNosDBYaLGyOxvJx+qqm+zIze8HszPvzsd/Zneed7bY2Q3QWOeTXEzSSjKbpJOkOLjA3dVwfthcndm8mvR6T/xcDJar2pX99c4lWUnyUJKNssjL7WRp/ZmdX7ceu++txc69H6w/PTPVgxza3dl+fO/9y29+fOnBpS+//vFykYvpHjquk1eMeK5dJLecRrH/iaJd9x7wT1x5/aNv+rm/Nck9g/x3UqZ6895euGGjkwfe+6t13/npq9unua/Ayev1Ov1r4EoPaJwySTdFOZekmi7LubnqM/y3rbPlK/MLr82+NL947YW6eyrgpHST7Uc/PfPJuSP5/6FV5X+oVetOAqein/8nr6x915/ek3JohjuqUT//s88t3x/5h8aRf2iQFw+1SvmH5hqf/1q+ogNMges/NJf8Q3PJP1zHOn8/W/6hueQfmkv+obkO5h8AaJbembrvQAbqUnf/AwAAAAAAAAAAAAAAAAAAHLc6s3l1f5hWzc/fTXYfSdIeVb81+D/i5MbB49lfiv5ifyqq1Sby7F0TbmBCH9Z89/VN30/8Ek7kizvrrJ4sX0tW3khyod0+fv4Vw/Pvv7t5zPzO8xMW+JeKI+2Hn5pu/aN+X6u3/qWt5LN+/3NhVP9T5rbBeHT/0x3/E8tjvfrbhBsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgav4IAAD//7ANbcM=") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x10, &(0x7f0000000680)={[{@jqfmt_vfsold}, {@delalloc}]}, 0x1, 0x47c, &(0x7f00000001c0)="$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") r4 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x10000}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_open_procfs(0x0, 0x0) r5 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001280)=""/217, 0xd9) getdents(r5, &(0x7f0000000280)=""/4096, 0x9005) r6 = openat$cgroup_int(r3, &(0x7f0000000180)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f00000001c0), 0x12) 2.135246226s ago: executing program 3 (id=662): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="580000000000000000000000000000009500000000000000eeb88cac86a4867400000000569ae9bd4a204f5a04be0d219f3c0fa9c45589faa997c70cc5bda86991bea3d345677074050b3d5362614728ebec23ebf1f07e03171205e363d36d6976f29d99cd330c897c90dd9898db6c"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3d}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x21d, &(0x7f0000000b40)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000380)={0x0, 0x0}) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001700000008000a00", @ANYRES32=r7], 0x24}}, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r9 = fcntl$dupfd(r8, 0x0, r8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2}, 0x90) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r10, 0x0, 0x1000000) 824.850622ms ago: executing program 0 (id=663): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f1000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x8, &(0x7f0000000080)=0xffff7b6a, 0x4) setsockopt$inet6_int(r4, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000016c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r7) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r7) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000010000000080001"], 0x30}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus/file0\x00', 0x0) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) 0s ago: executing program 3 (id=664): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000001500000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe71) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRES64=r0], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @multicast1}}}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="f3480000000005"], 0x14}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x80000000, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x1c, r11, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 156.755028][ T4806] netlink: 'syz.0.195': attribute type 2 has an invalid length. [ 156.776122][ T4805] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 157.001293][ T4809] netlink: 'syz.4.197': attribute type 10 has an invalid length. [ 157.033290][ T4805] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 157.143611][ T4814] fuse: Bad value for 'fd' [ 157.496750][ T4809] team0: Port device netdevsim0 added [ 157.828554][ T27] audit: type=1326 audit(1724095475.363:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4804 comm="syz.1.194" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb710779e79 code=0x0 [ 157.832012][ T4813] netlink: 'syz.4.197': attribute type 10 has an invalid length. [ 157.928082][ T4813] team0: Port device netdevsim0 removed [ 157.947547][ T4813] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 157.972110][ T4790] netlink: 16 bytes leftover after parsing attributes in process `syz.2.192'. [ 158.278081][ T4827] loop2: detected capacity change from 0 to 128 [ 159.447559][ T4827] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 159.476546][ T4827] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038 (0x7fffffff) [ 159.775056][ T4842] Driver unsupported XDP return value 0 on prog (id 90) dev N/A, expect packet loss! [ 160.376094][ T4846] fuse: Bad value for 'group_id' [ 160.396076][ T4848] loop4: detected capacity change from 0 to 1024 [ 160.403278][ T4848] hfsplus: unable to parse mount options [ 160.521655][ T4290] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 161.212471][ T4856] tty tty29: ldisc open failed (-12), clearing slot 28 [ 161.219934][ T4857] tty tty1: ldisc open failed (-12), clearing slot 0 [ 161.464595][ C1] eth0: bad gso: type: 1, size: 1408 [ 161.470743][ C1] eth0: bad gso: type: 1, size: 1408 [ 162.173877][ T4870] loop4: detected capacity change from 0 to 256 [ 162.319711][ T4870] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 162.360716][ T3648] EXT4-fs (loop2): unmounting filesystem. [ 162.381533][ T4870] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 162.421220][ T4870] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 162.469108][ T4879] loop0: detected capacity change from 0 to 512 [ 163.206269][ T4879] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a003c019, mo2=0000] [ 163.239793][ T4879] System zones: 0-2, 18-18, 34-34 [ 163.267047][ T4879] EXT4-fs error (device loop0): mb_free_blocks:1815: group 0, inode 16: block 41:freeing already freed block (bit 41); block bitmap corrupt. [ 163.277850][ T4882] loop2: detected capacity change from 0 to 512 [ 163.290269][ T27] audit: type=1326 audit(1724095480.823:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4864 comm="syz.4.210" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9112f79e79 code=0x0 [ 163.323315][ T4879] EXT4-fs (loop0): 1 orphan inode deleted [ 163.329922][ T4882] ext4: Unknown parameter 'dont_hash' [ 163.372843][ T4879] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 163.396210][ T4879] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038 (0x7fffffff) [ 165.883223][ T3732] EXT4-fs (loop0): unmounting filesystem. [ 166.126283][ T4903] loop0: detected capacity change from 0 to 16 [ 166.239661][ T4903] erofs: (device loop0): mounted with root inode @ nid 36. [ 166.248999][ T4901] loop4: detected capacity change from 0 to 512 [ 166.958499][ T4901] EXT4-fs (loop4): orphan cleanup on readonly fs [ 166.995985][ T4901] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.220: bg 0: block 248: padding at end of block bitmap is not set [ 167.048069][ T27] audit: type=1326 audit(1724095484.553:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4906 comm="syz.2.221" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f004c379e79 code=0x0 [ 167.099567][ T4901] Quota error (device loop4): write_blk: dquota write failed [ 167.128584][ T4901] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 167.245634][ T4917] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 167.643153][ T4901] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz.4.220: Failed to acquire dquot type 1 [ 167.823393][ T4901] EXT4-fs (loop4): 1 truncate cleaned up [ 167.841767][ T4901] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 167.860478][ T27] audit: type=1326 audit(1724095485.393:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4919 comm="syz.3.223" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04d6979e79 code=0x0 [ 168.062193][ T3732] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 46 [ 168.094800][ T3732] erofs: (device loop0): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 168.106294][ T3643] EXT4-fs (loop4): unmounting filesystem. [ 168.114226][ T3732] erofs: (device loop0): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 168.379509][ T4932] loop1: detected capacity change from 0 to 256 [ 168.403034][ T4932] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 168.433937][ T4932] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 169.207747][ T4932] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 169.344451][ T27] audit: type=1326 audit(1724095486.883:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4929 comm="syz.1.228" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb710779e79 code=0x0 [ 169.420714][ T4930] loop0: detected capacity change from 0 to 4096 [ 169.461149][ T47] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 169.478313][ T4290] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 169.503316][ T47] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 169.743239][ T4930] fuse: Unknown parameter 'È fãT&NÅù¯UKTQWòK 'Íe˵)Þe' [ 169.996181][ T4951] bond0: (slave erspan0): Error -99 calling set_mac_address [ 170.408048][ T47] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 170.549170][ T4954] netlink: 1320 bytes leftover after parsing attributes in process `syz.1.232'. [ 171.043293][ T4930] syz.0.225[4930] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.043387][ T4930] syz.0.225[4930] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.087156][ T4941] loop4: detected capacity change from 0 to 256 [ 171.133793][ T4941] exfat: Deprecated parameter 'namecase' [ 171.167572][ T4941] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 171.265200][ T4956] xt_recent: hitcount (262144) is larger than allowed maximum (255) [ 171.829939][ T4974] loop2: detected capacity change from 0 to 512 [ 171.888132][ T4974] EXT4-fs (loop2): orphan cleanup on readonly fs [ 172.010813][ T4974] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.238: bg 0: block 248: padding at end of block bitmap is not set [ 172.087026][ T4974] Quota error (device loop2): write_blk: dquota write failed [ 172.111554][ T4974] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 172.223430][ T4988] input: syz0 as /devices/virtual/input/input10 [ 172.311065][ T4974] EXT4-fs error (device loop2): ext4_acquire_dquot:6777: comm syz.2.238: Failed to acquire dquot type 1 [ 172.500025][ T4974] EXT4-fs (loop2): 1 truncate cleaned up [ 172.699938][ T4974] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 173.074976][ T4996] loop1: detected capacity change from 0 to 256 [ 173.125243][ T4996] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 173.160490][ T4996] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 173.218794][ T4996] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 173.299794][ T4994] device ipvlan2 entered promiscuous mode [ 174.237718][ T3648] EXT4-fs (loop2): unmounting filesystem. [ 174.318137][ T5005] loop1: detected capacity change from 0 to 1024 [ 174.355197][ T5008] loop2: detected capacity change from 0 to 16 [ 174.658024][ T5010] fuse: Bad value for 'fd' [ 174.664831][ T5010] netlink: 108 bytes leftover after parsing attributes in process `syz.3.245'. [ 175.785399][ T5008] erofs: (device loop2): mounted with root inode @ nid 36. [ 175.863228][ T3654] Bluetooth: hci2: command 0x0406 tx timeout [ 176.125401][ C1] eth0: bad gso: type: 1, size: 1408 [ 176.277898][ T5018] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 46 [ 176.612599][ T3648] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 46 [ 176.633006][ T5021] vivid-004: ================= START STATUS ================= [ 176.642443][ T5021] vivid-004: Radio HW Seek Mode: Bounded [ 176.646094][ T3648] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 176.659904][ T5021] vivid-004: Radio Programmable HW Seek: false [ 176.669163][ T5021] vivid-004: RDS Rx I/O Mode: Block I/O [ 176.674545][ T5022] loop1: detected capacity change from 0 to 1024 [ 176.681155][ T5021] vivid-004: Generate RBDS Instead of RDS: false [ 176.685835][ T3648] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 176.745362][ T5028] loop2: detected capacity change from 0 to 16 [ 176.940841][ T5028] erofs: (device loop2): mounted with root inode @ nid 36. [ 177.634837][ T5021] vivid-004: RDS Reception: true [ 177.769676][ T5021] vivid-004: RDS Program Type: 0 inactive [ 177.782842][ T5021] vivid-004: RDS PS Name: [ 177.783044][ T5022] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.250: Invalid block bitmap block 0 in block_group 0 [ 177.805127][ T5021] inactive [ 177.819794][ T5021] vivid-004: RDS Radio Text: inactive [ 177.828855][ T5021] vivid-004: RDS Traffic Announcement: false inactive [ 177.852091][ T27] audit: type=1326 audit(1724095495.393:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5036 comm="syz.0.253" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff252d79e79 code=0x0 [ 177.877267][ T5021] vivid-004: RDS Traffic Program: false inactive [ 177.886576][ T5022] Quota error (device loop1): write_blk: dquota write failed [ 177.899351][ T5022] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 177.918949][ T5021] vivid-004: RDS Music: false [ 177.921671][ T5022] EXT4-fs error (device loop1): ext4_acquire_dquot:6777: comm syz.1.250: Failed to acquire dquot type 0 [ 177.996251][ T5021] inactive [ 178.000599][ T5021] vivid-004: ================== END STATUS ================== [ 178.003547][ T5038] xt_recent: hitcount (262144) is larger than allowed maximum (255) [ 178.026449][ T5022] EXT4-fs error (device loop1): ext4_free_blocks:6212: comm syz.1.250: Freeing blocks not in datazone - block = 0, count = 4096 [ 178.042402][ T3648] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 46 [ 178.065910][ T3648] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 178.084410][ T3648] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 178.109345][ T5022] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.250: Invalid inode bitmap blk 0 in block_group 0 [ 178.124381][ T11] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8 [ 178.171503][ T11] EXT4-fs error (device loop1): ext4_release_dquot:6800: comm kworker/u4:1: Failed to release dquot type 0 [ 178.186958][ T5022] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 178.187658][ T5040] loop0: detected capacity change from 0 to 256 [ 178.208904][ T5042] loop2: detected capacity change from 0 to 256 [ 178.221164][ T5022] EXT4-fs (loop1): 1 orphan inode deleted [ 178.233648][ T5042] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 178.251205][ T5022] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 178.260563][ T5042] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 178.305929][ T5042] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 178.318863][ T5040] FAT-fs (loop0): Unrecognized mount option "" or missing value [ 179.627313][ T5048] loop0: detected capacity change from 0 to 512 [ 179.693824][ T3644] EXT4-fs (loop1): unmounting filesystem. [ 179.712208][ T38] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8 [ 179.716421][ T5048] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 179.721193][ T38] EXT4-fs error (device loop1): ext4_release_dquot:6800: comm kworker/u4:2: Failed to release dquot type 0 [ 179.773176][ T5048] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038 (0x7fffffff) [ 179.895431][ T3732] EXT4-fs (loop0): unmounting filesystem. [ 180.421827][ T5060] loop2: detected capacity change from 0 to 32768 [ 180.437828][ T5060] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.257 (5060) [ 181.324261][ T5060] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 181.334795][ T5060] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 181.343612][ T5060] BTRFS info (device loop2): setting nodatacow, compression disabled [ 181.351735][ T5060] BTRFS info (device loop2): turning on flush-on-commit [ 181.358712][ T5060] BTRFS info (device loop2): max_inline at 0 [ 181.364767][ T5060] BTRFS info (device loop2): enabling auto defrag [ 181.371225][ T5060] BTRFS info (device loop2): max_inline at 0 [ 181.377297][ T5060] BTRFS info (device loop2): using free space tree [ 181.627907][ T5057] netlink: 36 bytes leftover after parsing attributes in process `syz.1.258'. [ 181.742115][ T5073] loop4: detected capacity change from 0 to 2048 [ 181.923370][ T5057] netlink: 'syz.1.258': attribute type 2 has an invalid length. [ 183.053281][ T27] audit: type=1326 audit(1724095500.423:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5069 comm="syz.3.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d6979e79 code=0x7fc00000 [ 183.288978][ T5060] BTRFS error (device loop2): open_ctree failed [ 183.477073][ T5073] loop4: p1 < > p4 [ 183.484375][ T5073] loop4: p4 size 8388608 extends beyond EOD, truncated [ 183.554048][ T27] audit: type=1326 audit(1724095500.433:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5069 comm="syz.3.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f04d6979e79 code=0x7fc00000 [ 183.603466][ T3626] udevd[3626]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 183.604048][ T3628] udevd[3628]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 183.649749][ T27] audit: type=1326 audit(1724095500.833:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5069 comm="syz.3.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d6979e79 code=0x7fc00000 [ 183.868645][ T27] audit: type=1326 audit(1724095500.833:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5069 comm="syz.3.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f04d6979e79 code=0x7fc00000 [ 183.968603][ T27] audit: type=1326 audit(1724095500.833:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5069 comm="syz.3.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d6979e79 code=0x7fc00000 [ 185.073660][ T27] audit: type=1326 audit(1724095502.613:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5108 comm="syz.4.266" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9112f79e79 code=0x0 [ 186.107770][ T5121] loop2: detected capacity change from 0 to 256 [ 186.159054][ T5121] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 186.171889][ T5121] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 186.195105][ T5123] loop0: detected capacity change from 0 to 512 [ 186.310946][ T5120] device syzkaller0 entered promiscuous mode [ 186.318739][ T5121] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 186.354523][ T5123] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 186.372472][ T5123] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 186.408054][ T5123] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.270: Corrupt directory, running e2fsck is recommended [ 186.504528][ T5123] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 186.522271][ T5123] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.270: corrupted in-inode xattr [ 186.572401][ T5123] EXT4-fs (loop0): Remounting filesystem read-only [ 186.587258][ T5133] loop2: detected capacity change from 0 to 512 [ 186.593541][ T5123] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.270: couldn't read orphan inode 15 (err -117) [ 186.616824][ T5123] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 186.656568][ T5123] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 186.660473][ T3736] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 186.686722][ T5136] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 186.690264][ T5123] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 186.729291][ T5123] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.270: Corrupt directory, running e2fsck is recommended [ 186.860015][ T3736] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 186.882760][ T5133] EXT4-fs (loop2): Test dummy encryption mode enabled [ 186.894419][ T5133] EXT4-fs error (device loop2): __ext4_iget:5055: inode #11: block 1: comm syz.2.272: invalid block [ 186.950720][ T5141] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 186.962762][ T5141] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 186.972916][ T5141] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.270: Corrupt directory, running e2fsck is recommended [ 186.987160][ T5141] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 186.998712][ T5141] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 187.008872][ T5141] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.270: Corrupt directory, running e2fsck is recommended [ 187.022527][ T5141] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 187.036531][ T5141] EXT4-fs error (device loop0): ext4_find_dest_de:2113: inode #2: block 3: comm syz.0.270: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 187.095515][ T5141] EXT4-fs (loop0): Remounting filesystem read-only [ 187.160630][ T5133] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.272: couldn't read orphan inode 11 (err -117) [ 187.182078][ T5133] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 187.267004][ T27] audit: type=1326 audit(1724095504.803:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5134 comm="syz.1.273" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb710779e79 code=0x0 [ 187.292647][ T3732] EXT4-fs (loop0): unmounting filesystem. [ 188.610773][ T3648] EXT4-fs (loop2): unmounting filesystem. [ 188.824795][ T5160] loop0: detected capacity change from 0 to 1024 [ 189.789222][ T5162] loop2: detected capacity change from 0 to 1024 [ 189.796584][ T5162] hfsplus: unable to parse mount options [ 190.206658][ T5169] 9pnet_fd: p9_fd_create_tcp (5169): problem connecting socket to 127.0.0.1 [ 191.850964][ T27] audit: type=1326 audit(1724095509.383:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5172 comm="syz.2.280" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f004c379e79 code=0x0 [ 192.709139][ T5178] loop2: detected capacity change from 0 to 1024 [ 192.770586][ T5184] loop0: detected capacity change from 0 to 256 [ 192.786436][ T5184] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 192.805169][ T5184] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 192.835726][ T5184] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 192.983953][ T5186] loop0: detected capacity change from 0 to 16 [ 193.017532][ T5186] erofs: (device loop0): mounted with root inode @ nid 36. [ 193.313068][ T5189] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 46 [ 193.899252][ T3732] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 46 [ 193.931969][ T3732] erofs: (device loop0): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 193.970725][ T3732] erofs: (device loop0): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 194.183652][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.189992][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.244241][ T5199] loop0: detected capacity change from 0 to 1024 [ 194.256758][ T5201] loop2: detected capacity change from 0 to 512 [ 194.272007][ T5199] EXT4-fs: Ignoring removed nomblk_io_submit option [ 194.302124][ T5199] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 194.316229][ T5201] ext3: Unknown parameter 'measure' [ 194.357333][ T5199] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 194.654070][ T5205] input: syz1 as /devices/virtual/input/input11 [ 194.812730][ T5205] xt_hashlimit: max too large, truncated to 1048576 [ 195.403771][ T27] audit: type=1326 audit(1724095512.943:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.2.287" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f004c379e79 code=0x0 [ 196.341841][ T5216] loop1: detected capacity change from 0 to 2048 [ 196.370978][ T3654] Bluetooth: hci4: unexpected cc 0x1407 length: 100 > 9 [ 196.455465][ T5216] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 196.481683][ T3732] EXT4-fs (loop0): unmounting filesystem. [ 196.620953][ T3649] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 196.632208][ T3649] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 196.642066][ T3649] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 196.650788][ T3649] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 196.723384][ T3649] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 196.733525][ T3649] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 196.864927][ T5230] loop2: detected capacity change from 0 to 256 [ 196.897661][ T5230] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 196.907152][ T5228] loop0: detected capacity change from 0 to 1024 [ 196.925517][ T5230] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 196.928605][ T5228] hfsplus: unable to parse mount options [ 196.960102][ T56] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.987636][ T4290] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 196.997682][ T5230] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 197.255748][ T5233] 9pnet_fd: p9_fd_create_tcp (5233): problem connecting socket to 127.0.0.1 [ 197.357206][ T56] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.592391][ T5238] loop2: detected capacity change from 0 to 1024 [ 198.599674][ T5238] hfsplus: unable to parse mount options [ 198.781545][ T3654] Bluetooth: hci1: command tx timeout [ 200.480494][ T3654] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 200.492236][ T3654] Bluetooth: hci4: Injecting HCI hardware error event [ 200.501973][ T3649] Bluetooth: hci4: hardware error 0x00 [ 200.963826][ T3654] Bluetooth: hci1: command tx timeout [ 200.998833][ T56] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.832054][ T5251] netlink: 224 bytes leftover after parsing attributes in process `syz.0.297'. [ 201.841107][ T5251] netlink: 16 bytes leftover after parsing attributes in process `syz.0.297'. [ 201.916391][ T5249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.297'. [ 201.954705][ T56] bond0: (slave netdevsim0): Releasing backup interface [ 202.007882][ T56] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.929749][ T5221] chnl_net:caif_netlink_parms(): no params data found [ 203.021617][ T3649] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 203.021863][ T3654] Bluetooth: hci1: command tx timeout [ 203.110422][ T5272] loop1: detected capacity change from 0 to 256 [ 203.115843][ T5274] loop0: detected capacity change from 0 to 128 [ 203.169820][ T5272] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 203.185961][ T5274] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 203.204877][ T5274] ext4 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 203.238898][ T5274] EXT4-fs (loop0): shut down requested (2) [ 203.270153][ T5274] syz.0.305 (pid 5274) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 205.783673][ T3654] Bluetooth: hci1: command tx timeout [ 206.158377][ T5221] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.198276][ T5221] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.208081][ T5221] device bridge_slave_0 entered promiscuous mode [ 206.221970][ T5279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.306'. [ 206.356952][ T3654] Bluetooth: hci2: unexpected event for opcode 0x041c [ 206.411606][ T5221] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.419260][ T5221] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.469599][ T5221] device bridge_slave_1 entered promiscuous mode [ 206.498229][ T5308] fuse: Bad value for 'fd' [ 206.521576][ T3685] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 206.637990][ T5221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.706662][ T5221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.763344][ T3654] Bluetooth: hci2: unexpected event 0x3e length: 360 > 260 [ 206.763379][ T3654] Bluetooth: hci2: unexpected subevent 0x0d length: 359 > 260 [ 206.778614][ T3654] Bluetooth: hci2: Unknown advertising packet type: 0x1f [ 206.778645][ T3654] Bluetooth: hci2: adv larger than maximum supported [ 206.781569][ T3685] usb 3-1: Using ep0 maxpacket: 8 [ 206.838810][ T5221] team0: Port device team_slave_0 added [ 206.900450][ T5221] team0: Port device team_slave_1 added [ 207.011217][ T5221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.051645][ T5221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.111797][ T3685] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 207.122275][ T3685] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.146372][ T5221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.160874][ T3685] usb 3-1: Product: syz [ 207.169944][ T3685] usb 3-1: Manufacturer: syz [ 207.196143][ T3685] usb 3-1: SerialNumber: syz [ 207.244839][ T3685] usb 3-1: config 0 descriptor?? [ 207.311517][ T3685] usb 3-1: can't set config #0, error -71 [ 207.370480][ T3685] usb 3-1: USB disconnect, device number 4 [ 207.384636][ T5221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.411591][ T5221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.449366][ T5325] loop1: detected capacity change from 0 to 512 [ 207.450131][ T3732] EXT4-fs (loop0): unmounting filesystem. [ 207.513943][ T5221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.584295][ T5325] EXT4-fs error (device loop1): ext4_init_orphan_info:586: comm syz.1.311: inode #0: comm syz.1.311: iget: illegal inode # [ 207.607144][ T5325] EXT4-fs (loop1): Remounting filesystem read-only [ 207.619367][ T5325] EXT4-fs (loop1): get orphan inode failed [ 207.636145][ T5325] EXT4-fs (loop1): mount failed [ 207.720253][ T5340] mmap: syz.0.314 (5340): VmData 176009216 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 207.768717][ T5326] dccp_close: ABORT with 3732 bytes unread [ 207.815499][ T5338] Bluetooth: MGMT ver 1.22 [ 207.833498][ T5221] device hsr_slave_0 entered promiscuous mode [ 207.856457][ T5338] Bluetooth: hci3: unsupported parameter 45054 [ 207.868109][ T5221] device hsr_slave_1 entered promiscuous mode [ 207.885568][ T5338] Bluetooth: hci3: invalid length 0, exp 2 for type 7 [ 208.051270][ T5344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.155019][ T5347] loop0: detected capacity change from 0 to 256 [ 208.246904][ T5349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.325'. [ 208.264679][ T5347] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 208.291820][ T5344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.433667][ T56] device hsr_slave_0 left promiscuous mode [ 209.052736][ T56] device hsr_slave_1 left promiscuous mode [ 209.096976][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.199577][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.238395][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.253432][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.273200][ T56] device bridge_slave_1 left promiscuous mode [ 209.281594][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.292444][ T56] device bridge_slave_0 left promiscuous mode [ 209.299828][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.330567][ T56] device veth1_macvtap left promiscuous mode [ 209.365510][ T56] device veth0_macvtap left promiscuous mode [ 209.379884][ T56] device veth1_vlan left promiscuous mode [ 209.436560][ T56] device veth0_vlan left promiscuous mode [ 210.421519][ T3649] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 210.430305][ T3649] Bluetooth: hci2: Injecting HCI hardware error event [ 210.439512][ T3654] Bluetooth: hci2: hardware error 0x00 [ 210.453148][ T4162] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 210.803236][ T27] audit: type=1326 audit(1724095528.183:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5372 comm="syz.3.320" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04d6979e79 code=0x0 [ 210.882721][ T4162] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.967635][ T4162] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 211.130319][ T4162] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.213131][ T4162] usb 1-1: config 0 descriptor?? [ 211.282835][ T27] audit: type=1326 audit(1724095528.823:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5381 comm="syz.3.321" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04d6979e79 code=0x0 [ 211.606463][ T5390] Cannot find del_set index 0 as target [ 211.707573][ T4162] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 211.763779][ T4162] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0002/input/input12 [ 212.082548][ T4162] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 212.130359][ T5399] loop1: detected capacity change from 0 to 256 [ 212.548184][ T3654] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 212.893505][ T5405] loop1: detected capacity change from 0 to 512 [ 213.010481][ T5405] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 213.077549][ T56] team0 (unregistering): Port device team_slave_1 removed [ 213.175526][ T5405] EXT4-fs (loop1): 1 truncate cleaned up [ 213.216930][ T5405] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 213.444099][ T5405] EXT4-fs (loop1): shut down requested (2) [ 213.555175][ T56] team0 (unregistering): Port device team_slave_0 removed [ 213.749638][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.870637][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.239389][ T56] bond0 (unregistering): Released all slaves [ 214.314738][ T5344] netlink: 16 bytes leftover after parsing attributes in process `syz.2.325'. [ 214.329067][ T5360] device pim6reg1 entered promiscuous mode [ 214.341699][ C1] eth0: bad gso: type: 1, size: 1408 [ 214.438545][ T5416] loop2: detected capacity change from 0 to 256 [ 214.470494][ T3685] usb 1-1: USB disconnect, device number 3 [ 214.500083][ T5416] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 214.523287][ T3644] EXT4-fs (loop1): unmounting filesystem. [ 214.897546][ T5422] loop1: detected capacity change from 0 to 256 [ 215.906979][ T5422] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 216.712454][ T27] audit: type=1326 audit(1724095534.253:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5443 comm="syz.2.334" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f004c379e79 code=0x0 [ 217.265095][ T5456] usb usb8: check_ctrlrecip: process 5456 (syz.0.336) requesting ep 01 but needs 81 [ 217.282283][ T5456] usb usb8: usbfs: process 5456 (syz.0.336) did not claim interface 0 before use [ 217.944670][ T5468] loop0: detected capacity change from 0 to 2048 [ 218.004645][ T5468] UDF-fs: warning (device loop0): udf_fill_super: No partition found (2) [ 218.611503][ T5474] loop2: detected capacity change from 0 to 16 [ 218.663686][ T5476] loop1: detected capacity change from 0 to 256 [ 219.033626][ T5476] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 219.118656][ T5476] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 219.181681][ T5474] erofs: (device loop2): mounted with root inode @ nid 36. [ 219.422930][ C1] eth0: bad gso: type: 1, size: 1408 [ 219.455376][ T5476] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 219.524824][ T5221] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 219.729863][ T3648] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 46 [ 219.741406][ T5221] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 219.772243][ T5483] netlink: 108 bytes leftover after parsing attributes in process `syz.0.341'. [ 219.787048][ T27] audit: type=1326 audit(1724095537.323:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5475 comm="syz.1.340" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb710779e79 code=0x0 [ 219.800138][ T5488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.815307][ T3648] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 219.831114][ T5221] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 219.855585][ T3648] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 219.870224][ T5221] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 220.057942][ T5221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.088807][ T27] audit: type=1326 audit(1724095537.623:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5494 comm="syz.2.344" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f004c379e79 code=0x0 [ 220.209225][ T5221] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.224282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.252572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.293328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.313822][ T5500] loop2: detected capacity change from 0 to 256 [ 220.335791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.358308][ T5503] loop0: detected capacity change from 0 to 256 [ 220.368246][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.372970][ T5500] FAT-fs (loop2): Unrecognized mount option "²*uni_xla;ø¶ÿ›“p_xlate=1" or missing value [ 220.375467][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.415366][ T5503] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 220.465361][ T5505] loop1: detected capacity change from 0 to 16 [ 220.472766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.482310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.490887][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.498018][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.498229][ T27] audit: type=1326 audit(1724095538.033:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5499 comm="syz.2.346" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f004c379e79 code=0x0 [ 220.531253][ T5505] erofs: (device loop1): mounted with root inode @ nid 36. [ 220.569668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.676031][ T5507] loop2: detected capacity change from 0 to 256 [ 220.683134][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 221.237703][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 221.248354][ T3644] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 46 [ 221.265861][ T5507] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 221.288357][ T3644] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 221.294882][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 222.163503][ T3644] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 222.201758][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 222.232213][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 222.283165][ T5522] fuse: Unknown parameter '0x0000000000000005' [ 222.320842][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 222.365824][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 222.393520][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 222.413466][ T5529] loop1: detected capacity change from 0 to 512 [ 222.428393][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 222.475116][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 222.492392][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 222.502523][ T5221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 222.534469][ T5529] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.350: attempt to clear invalid blocks 2 len 1 [ 222.577970][ T5530] netlink: 24 bytes leftover after parsing attributes in process `syz.0.351'. [ 222.629906][ T5529] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 222.803332][ T5529] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.350: invalid indirect mapped block 1819239214 (level 0) [ 222.835256][ T5529] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.350: invalid indirect mapped block 1819239214 (level 1) [ 222.971468][ T5529] EXT4-fs (loop1): 1 truncate cleaned up [ 223.006207][ T5529] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 223.651836][ T5529] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.350: Unrecognised inode hash code 20 [ 223.685447][ C1] eth0: bad gso: type: 1, size: 1408 [ 223.694967][ C1] eth0: bad gso: type: 1, size: 1408 [ 223.711888][ T5529] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.350: Corrupt directory, running e2fsck is recommended [ 223.759660][ T5547] loop0: detected capacity change from 0 to 16 [ 223.767480][ T5529] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.350: corrupted in-inode xattr [ 223.787902][ T27] audit: type=1326 audit(1724095541.323:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5550 comm="syz.3.355" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04d6979e79 code=0x0 [ 223.823229][ T5547] erofs: (device loop0): mounted with root inode @ nid 36. [ 223.894042][ T5554] loop2: detected capacity change from 0 to 1024 [ 223.901132][ T5554] hfsplus: unable to parse mount options [ 224.050261][ T4290] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 224.916195][ T5563] loop2: detected capacity change from 0 to 16 [ 224.933887][ T3644] EXT4-fs (loop1): unmounting filesystem. [ 224.940025][ T5563] erofs: (device loop2): mounted with root inode @ nid 36. [ 224.980345][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 225.017181][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 225.017449][ T3732] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 46 [ 225.155150][ T5563] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 46 [ 225.213996][ T5221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.221493][ T3648] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 46 [ 225.244156][ T3648] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 225.260921][ T3648] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 225.285209][ T3732] erofs: (device loop0): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 225.315153][ T3732] erofs: (device loop0): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 225.329817][ T5566] tc_dump_action: action bad kind [ 225.521735][ T5573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.859504][ T5582] loop2: detected capacity change from 0 to 1024 [ 226.921328][ T5586] loop1: detected capacity change from 0 to 512 [ 226.941176][ T5586] ext4: Unknown parameter 'noacl' [ 227.466008][ T5600] loop1: detected capacity change from 0 to 16 [ 227.501606][ T3654] Bluetooth: hci1: command tx timeout [ 227.721746][ T5600] erofs: (device loop1): mounted with root inode @ nid 36. [ 227.751394][ T5600] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 228.117248][ T5595] loop2: detected capacity change from 0 to 2048 [ 228.158594][ T5605] loop1: detected capacity change from 0 to 512 [ 228.164163][ T5595] EXT4-fs: Ignoring removed orlov option [ 228.203298][ T5603] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 228.246737][ T5595] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 228.284734][ T5605] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a003c019, mo2=0000] [ 228.312239][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 228.320381][ T5605] System zones: 0-2, 18-18, 34-34 [ 228.321104][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 228.339570][ T5595] EXT4-fs (loop2): shut down requested (0) [ 228.352065][ T5221] device veth0_vlan entered promiscuous mode [ 228.362643][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 228.379454][ T5603] 9pnet_fd: Insufficient options for proto=fd [ 228.383568][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 228.391993][ T56] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 228.400725][ T5221] device veth1_vlan entered promiscuous mode [ 228.416330][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 228.425263][ T5605] EXT4-fs error (device loop1): mb_free_blocks:1815: group 0, inode 16: block 41:freeing already freed block (bit 41); block bitmap corrupt. [ 228.425400][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 228.449004][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 228.486379][ T5605] EXT4-fs (loop1): 1 orphan inode deleted [ 228.487114][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 228.500091][ T5605] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 228.500428][ T56] EXT4-fs (loop2): Remounting filesystem read-only [ 228.521278][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 228.527418][ T5605] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038 (0x7fffffff) [ 228.530821][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 228.569781][ T5221] device veth0_macvtap entered promiscuous mode [ 228.597066][ T5221] device veth1_macvtap entered promiscuous mode [ 228.647541][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.670006][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.696681][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.739263][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.767236][ T3648] EXT4-fs (loop2): unmounting filesystem. [ 228.773258][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.773279][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.817933][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.310275][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 229.319543][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 229.328023][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 229.354777][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 229.422317][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.442267][ T5630] loop0: detected capacity change from 0 to 16 [ 229.448570][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.464179][ T5630] erofs: (device loop0): mounted with root inode @ nid 36. [ 229.485265][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.516931][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.547452][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.574714][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.620588][ T3644] EXT4-fs (loop1): unmounting filesystem. [ 229.645687][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.676401][ T5630] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 46 [ 229.767941][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 229.790720][ T3732] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 46 [ 229.795145][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 229.810380][ T3732] erofs: (device loop0): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 229.846729][ T5221] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.856662][ T3732] erofs: (device loop0): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 229.882844][ T5221] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.901516][ T5221] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.910257][ T5221] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.910441][ T5641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.016586][ T5641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.371'. [ 230.127583][ T5650] netlink: 16 bytes leftover after parsing attributes in process `syz.1.371'. [ 230.245758][ T3724] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.367919][ T5641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.434129][ T3724] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.468602][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 231.495268][ T5640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.713780][ T3691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.740153][ T3691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.778371][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 232.961548][ T5676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.994353][ T5679] netlink: 24 bytes leftover after parsing attributes in process `syz.3.377'. [ 233.011505][ T5679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.377'. [ 233.935432][ T5695] loop0: detected capacity change from 0 to 1024 [ 233.972212][ T3654] Bluetooth: hci1: SCO packet for unknown connection handle 1039 [ 234.034268][ T3654] Bluetooth: hci1: unexpected event 0x09 length: 10 > 3 [ 234.066373][ T4290] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 234.813054][ T3654] Bluetooth: hci1: unexpected event 0x42 length: 6 > 3 [ 234.894177][ T5704] loop0: detected capacity change from 0 to 1024 [ 235.884989][ T27] audit: type=1326 audit(1724095553.313:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5720 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d6979e79 code=0x7ffc0000 [ 236.483017][ T27] audit: type=1326 audit(1724095553.313:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5720 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d6979e79 code=0x7ffc0000 [ 236.505857][ T27] audit: type=1326 audit(1724095553.313:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5720 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f04d6979e79 code=0x7ffc0000 [ 236.558461][ T27] audit: type=1326 audit(1724095553.313:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5720 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d6979e79 code=0x7ffc0000 [ 238.450298][ T27] audit: type=1326 audit(1724095553.313:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5720 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d6979e79 code=0x7ffc0000 [ 238.500463][ T5727] ip6gretap0 speed is unknown, defaulting to 1000 [ 238.509148][ T27] audit: type=1326 audit(1724095553.313:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5720 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04d6979e79 code=0x7ffc0000 [ 238.515314][ T5743] loop4: detected capacity change from 0 to 512 [ 238.547261][ T5727] ip6gretap0 speed is unknown, defaulting to 1000 [ 238.579226][ T5727] ip6gretap0 speed is unknown, defaulting to 1000 [ 238.629923][ T5727] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 238.651599][ T27] audit: type=1326 audit(1724095553.323:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5720 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d6979e79 code=0x7ffc0000 [ 238.676985][ T5727] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 238.696302][ T5743] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2816: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 238.734891][ T5743] EXT4-fs (loop4): 1 truncate cleaned up [ 238.745140][ T27] audit: type=1326 audit(1724095553.323:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5720 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d6979e79 code=0x7ffc0000 [ 238.750431][ T5727] ip6gretap0 speed is unknown, defaulting to 1000 [ 238.768684][ T5743] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 238.789830][ T5748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.852040][ T27] audit: type=1326 audit(1724095553.323:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5720 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f04d6979e79 code=0x7ffc0000 [ 238.861494][ T3654] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 238.879081][ T5727] ip6gretap0 speed is unknown, defaulting to 1000 [ 238.883886][ T3654] Bluetooth: hci1: Injecting HCI hardware error event [ 238.898569][ T3649] Bluetooth: hci1: hardware error 0x00 [ 238.911621][ T27] audit: type=1326 audit(1724095553.323:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5720 comm="syz.3.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d6979e79 code=0x7ffc0000 [ 238.929050][ T5727] ip6gretap0 speed is unknown, defaulting to 1000 [ 238.936974][ T5743] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.388: bg 0: block 7: invalid block bitmap [ 238.946130][ T5727] ip6gretap0 speed is unknown, defaulting to 1000 [ 238.970016][ T5727] ip6gretap0 speed is unknown, defaulting to 1000 [ 238.992382][ T5743] EXT4-fs error (device loop4): ext4_find_dest_de:2113: inode #2: block 13: comm syz.4.388: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=16, rec_len=127, size=1024 fake=0 [ 239.111513][ T5743] syz.4.388 (5743) used greatest stack depth: 18016 bytes left [ 239.232289][ T5221] EXT4-fs (loop4): unmounting filesystem. [ 239.246722][ T5759] loop0: detected capacity change from 0 to 256 [ 239.332644][ T5759] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 241.017535][ T5776] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 241.335854][ T3649] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 241.435723][ T38] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 241.484006][ T5787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.393'. [ 242.803344][ T3654] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 242.814843][ T3654] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 242.827958][ T3654] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 242.836091][ T3654] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 242.843904][ T3654] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 242.851639][ T3654] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 242.952028][ T5798] loop1: detected capacity change from 0 to 256 [ 243.003264][ T5798] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 243.038496][ T5802] fuse: Bad value for 'fd' [ 243.088082][ T5784] ip6gretap0 speed is unknown, defaulting to 1000 [ 243.215256][ T5805] loop0: detected capacity change from 0 to 256 [ 243.374011][ T5807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.397'. [ 243.723475][ T5805] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 244.034236][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 246.783199][ T3649] Bluetooth: hci5: command tx timeout [ 247.893042][ T5834] loop0: detected capacity change from 0 to 16 [ 247.940007][ T5834] erofs: (device loop0): mounted with root inode @ nid 36. [ 248.108352][ T5834] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 46 [ 248.309518][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.324875][ T3732] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 46 [ 248.343722][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.363353][ T3732] erofs: (device loop0): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 248.384046][ T5784] device bridge_slave_0 entered promiscuous mode [ 248.410987][ T3732] erofs: (device loop0): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 248.523419][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.563551][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.603481][ T5784] device bridge_slave_1 entered promiscuous mode [ 248.647143][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.660912][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.685737][ T5848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.873354][ T3649] Bluetooth: hci5: command tx timeout [ 250.826360][ T5857] loop1: detected capacity change from 0 to 256 [ 250.858452][ T5857] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 250.958634][ T5857] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 251.519244][ T5857] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 251.551072][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 251.551088][ T27] audit: type=1326 audit(1724095569.083:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5856 comm="syz.1.409" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb710779e79 code=0x0 [ 252.079705][ T5864] netlink: 'syz.4.411': attribute type 11 has an invalid length. [ 252.845804][ T3649] Bluetooth: hci5: command tx timeout [ 252.979387][ T5784] team0: Port device team_slave_0 added [ 253.093780][ T5784] team0: Port device team_slave_1 added [ 253.149171][ T5873] loop0: detected capacity change from 0 to 256 [ 253.185674][ T5873] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 254.891237][ T3649] Bluetooth: hci5: command tx timeout [ 255.533407][ T5881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.412'. [ 255.621894][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.650142][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.946736][ T5885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.415'. [ 257.496412][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.497033][ T5898] i2c i2c-0: Invalid block write size 34 [ 257.511879][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.743611][ T5907] loop4: detected capacity change from 0 to 128 [ 257.936553][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.856106][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.341435][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.524717][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.643818][ T5784] device hsr_slave_0 entered promiscuous mode [ 259.659018][ T5784] device hsr_slave_1 entered promiscuous mode [ 259.678870][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.695104][ T5784] Cannot create hsr debugfs directory [ 259.921484][ T5102] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 259.967762][ T5924] loop1: detected capacity change from 0 to 512 [ 259.975097][ T5926] loop0: detected capacity change from 0 to 256 [ 259.986215][ T5926] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 260.000509][ T5926] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 260.028409][ T5926] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 260.042696][ T5924] EXT4-fs: Ignoring removed mblk_io_submit option [ 260.052861][ T5924] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 260.064090][ T27] audit: type=1326 audit(1724095577.593:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5925 comm="syz.0.424" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff252d79e79 code=0x0 [ 260.098833][ T5784] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.106513][ T5924] EXT4-fs (loop1): 1 truncate cleaned up [ 260.115831][ T5924] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 260.181579][ T5102] usb 5-1: Using ep0 maxpacket: 32 [ 260.204157][ T5784] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.301707][ T5102] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 260.317089][ T5102] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 260.327271][ T5102] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 260.432059][ T5784] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.446517][ T3644] EXT4-fs (loop1): unmounting filesystem. [ 260.499962][ T5934] loop1: detected capacity change from 0 to 256 [ 260.514113][ T5102] usb 5-1: New USB device found, idVendor=04e7, idProduct=6651, bcdDevice=ba.8a [ 261.240473][ T5102] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.251219][ T5102] usb 5-1: Product: syz [ 261.253409][ T5934] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 261.261420][ T5102] usb 5-1: Manufacturer: syz [ 261.272567][ T5102] usb 5-1: SerialNumber: syz [ 261.416107][ T5102] usb 5-1: config 0 descriptor?? [ 261.593976][ T5943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.427'. [ 261.637245][ T5784] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.772523][ T5102] rndis_wlan 5-1:0.0: skipping garbage [ 261.778160][ T5102] usb 5-1: bad CDC descriptors [ 261.808440][ T5102] rndis_host 5-1:0.0: skipping garbage [ 261.844395][ T5102] usb 5-1: bad CDC descriptors [ 261.867104][ T5102] cdc_acm 5-1:0.0: skipping garbage [ 261.884421][ T5920] loop4: detected capacity change from 0 to 2048 [ 261.997423][ T5920] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 262.327083][ T5947] loop0: detected capacity change from 0 to 8192 [ 262.375224][ T5784] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 262.403683][ T5784] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 262.703985][ T5950] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 263.098093][ T4290] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 263.146517][ T5784] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 263.216545][ T5784] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 263.316007][ T5963] loop1: detected capacity change from 0 to 1024 [ 263.323275][ T5963] hfsplus: unable to parse mount options [ 263.366133][ T4290] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 264.121386][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.249069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 264.260361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 264.282792][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.303724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 264.316515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 264.383470][ T3625] usb 5-1: USB disconnect, device number 3 [ 264.455934][ C1] eth0: bad gso: type: 1, size: 1408 [ 264.465936][ C1] eth0: bad gso: type: 1, size: 1408 [ 264.471678][ C1] eth0: bad gso: type: 1, size: 1408 [ 264.492560][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.499666][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.512791][ T49] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28 [ 264.563854][ T49] EXT4-fs (loop4): This should not happen!! Data will be lost [ 264.563854][ T49] [ 264.587944][ T49] EXT4-fs (loop4): Total free blocks count 0 [ 264.640809][ T49] EXT4-fs (loop4): Free/Dirty block details [ 264.697117][ T49] EXT4-fs (loop4): free_blocks=2415919104 [ 264.712286][ T49] EXT4-fs (loop4): dirty_blocks=16 [ 264.717533][ T49] EXT4-fs (loop4): Block reservation details [ 264.717628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 264.731057][ T49] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 264.741903][ T5221] EXT4-fs (loop4): unmounting filesystem. [ 264.749146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 264.790363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 264.843408][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.850535][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.864117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 264.875653][ T5976] loop0: detected capacity change from 0 to 128 [ 264.876358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 264.900306][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 264.967993][ T27] audit: type=1800 audit(1724095582.503:100): pid=5976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.436" name="bus" dev="loop0" ino=1048694 res=0 errno=0 [ 265.012507][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 265.028266][ T5980] loop1: detected capacity change from 0 to 256 [ 265.055362][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 265.063538][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 265.081306][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 265.091111][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 265.100428][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 265.109360][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 265.131285][ T5980] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 265.133483][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 265.168294][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 265.211561][ T5980] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 265.232368][ T5980] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 265.275543][ T27] audit: type=1326 audit(1724095582.813:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5979 comm="syz.1.437" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb710779e79 code=0x0 [ 265.834212][ T5990] loop0: detected capacity change from 0 to 256 [ 265.891228][ T5990] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 265.961557][ T5990] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 266.012115][ T5994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.440'. [ 266.017539][ T5995] loop4: detected capacity change from 0 to 256 [ 266.021124][ T5990] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 266.089491][ T5995] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 266.108402][ T27] audit: type=1326 audit(1724095583.643:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.0.438" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff252d79e79 code=0x0 [ 266.220727][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 266.236476][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 266.276579][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.327786][ T5994] netlink: 20 bytes leftover after parsing attributes in process `syz.1.440'. [ 266.368319][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 266.380764][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 266.959176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 267.003227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 267.036874][ T5784] device veth0_vlan entered promiscuous mode [ 267.048921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 267.060177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 267.884342][ T5784] device veth1_vlan entered promiscuous mode [ 268.010983][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 268.032352][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 268.043083][ T5784] device veth0_macvtap entered promiscuous mode [ 268.114409][ T5784] device veth1_macvtap entered promiscuous mode [ 268.147942][ T6018] loop0: detected capacity change from 0 to 1024 [ 268.155430][ T6018] hfsplus: unable to parse mount options [ 268.756089][ T27] audit: type=1326 audit(1724095586.283:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6013 comm="syz.4.446" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe72d179e79 code=0x0 [ 268.801271][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 268.897226][ T4290] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 268.986605][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 270.610267][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.862035][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.900448][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.959892][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.166900][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.201457][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.220330][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.223180][ T6038] loop1: detected capacity change from 0 to 256 [ 271.231513][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.267673][ T6038] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 271.286715][ T6038] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 271.301903][ T6040] xt_hashlimit: size too large, truncated to 1048576 [ 271.659996][ T6038] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 271.729970][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.061582][ T27] audit: type=1326 audit(1724095589.543:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.1.449" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb710779e79 code=0x0 [ 273.524162][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 273.567860][ T6058] loop4: detected capacity change from 0 to 16 [ 273.569176][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 273.608078][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.633833][ T6058] erofs: (device loop4): mounted with root inode @ nid 36. [ 273.668356][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.724739][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.053160][ T27] audit: type=1326 audit(1724095591.593:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6052 comm="syz.0.452" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff252d79e79 code=0x0 [ 274.279324][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.488561][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.499454][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.511043][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.563614][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.599109][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.634164][ T6068] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 46 [ 274.650020][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 274.679112][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 274.715846][ T5784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.744801][ T5784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.754343][ T5784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.763559][ T5784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.006459][ T3795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.203254][ T3795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.613192][ T3691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.624098][ T3691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.715691][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 275.756109][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 276.834805][ T27] audit: type=1326 audit(1724095594.373:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.0.459" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff252d79e79 code=0x0 [ 277.079217][ T6092] loop0: detected capacity change from 0 to 256 [ 277.109063][ T6092] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 278.376257][ T6110] loop1: detected capacity change from 0 to 512 [ 278.412099][ T6110] ext4: Bad value for 'auto_da_alloc' [ 278.498220][ T4290] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 278.536244][ T5221] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 46 [ 278.619349][ T6114] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns [ 278.622249][ T5221] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 278.747065][ T6114] xt_hashlimit: Unknown mode mask 312C7057, kernel too old? [ 278.777869][ T5221] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 279.138914][ T6116] kvm: pic: non byte write [ 279.353733][ T6122] loop1: detected capacity change from 0 to 8192 [ 281.445895][ T3649] Bluetooth: to_multiplier 7 < 10 [ 281.454741][ T6135] loop4: detected capacity change from 0 to 256 [ 281.519387][ T6135] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 281.573942][ T4290] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 281.664891][ T6141] loop4: detected capacity change from 0 to 512 [ 281.734232][ T6141] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 281.748580][ T6141] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038 (0x7fffffff) [ 282.150204][ T5221] EXT4-fs (loop4): unmounting filesystem. [ 283.511709][ T3649] Bluetooth: hci5: command tx timeout [ 285.570226][ T6176] netlink: 4 bytes leftover after parsing attributes in process `syz.4.479'. [ 285.617758][ T6176] netlink: 4 bytes leftover after parsing attributes in process `syz.4.479'. [ 285.772863][ T6176] netlink: 4 bytes leftover after parsing attributes in process `syz.4.479'. [ 285.913508][ T6182] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 286.172299][ T6181] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 286.749415][ T6189] device batadv_slave_0 entered promiscuous mode [ 287.016652][ T6196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.346755][ T6196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.518836][ T6196] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 287.577469][ C1] eth0: bad gso: type: 1, size: 1408 [ 287.648467][ T6186] device batadv_slave_0 left promiscuous mode [ 287.952296][ T3649] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 289.480280][ T3649] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 289.833637][ T3654] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 289.842667][ T3654] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 289.850417][ T3654] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 290.553938][ T3654] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 290.620672][ T6216] device wireguard0 entered promiscuous mode [ 290.655296][ C1] eth0: bad gso: type: 1, size: 1408 [ 290.674034][ T6225] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 290.702796][ T6224] netlink: 44246 bytes leftover after parsing attributes in process `syz.1.490'. [ 290.778458][ T6225] device bond0 entered promiscuous mode [ 290.788731][ T6225] device bond_slave_0 entered promiscuous mode [ 290.797235][ T6225] device bond_slave_1 entered promiscuous mode [ 290.840413][ T6204] ip6gretap0 speed is unknown, defaulting to 1000 [ 290.900064][ T6225] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 290.967430][ T6233] loop4: detected capacity change from 0 to 16 [ 291.003968][ T6233] erofs: (device loop4): mounted with root inode @ nid 36. [ 291.700188][ T6212] device bond0 left promiscuous mode [ 291.706118][ T6212] device bond_slave_0 left promiscuous mode [ 291.723431][ T6212] device bond_slave_1 left promiscuous mode [ 291.998809][ T6238] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 46 [ 292.300094][ T6204] chnl_net:caif_netlink_parms(): no params data found [ 292.346493][ T5221] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 46 [ 292.389351][ T6244] can: request_module (can-proto-0) failed. [ 292.397117][ T5221] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 292.432329][ T5221] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 292.472500][ T6204] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.486319][ T6204] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.565969][ T6204] device bridge_slave_0 entered promiscuous mode [ 292.584530][ T6204] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.601936][ T6204] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.618236][ T6204] device bridge_slave_1 entered promiscuous mode [ 292.625453][ T3649] Bluetooth: hci6: command tx timeout [ 292.701116][ T6204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.729462][ T6204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.660595][ T6204] team0: Port device team_slave_0 added [ 294.670347][ T6204] team0: Port device team_slave_1 added [ 294.701637][ T3649] Bluetooth: hci6: command tx timeout [ 294.744296][ T6204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.776318][ T6204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.901402][ T6204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.923064][ C1] eth0: bad gso: type: 1, size: 1408 [ 294.945551][ T6268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.498'. [ 294.957991][ T6204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.972939][ T6204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.033903][ T6204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.059519][ T3649] Bluetooth: hci6: command tx timeout [ 297.152508][ C1] eth0: bad gso: type: 1, size: 1408 [ 297.204555][ C1] eth0: bad gso: type: 1, size: 1408 [ 297.267052][ T6204] device hsr_slave_0 entered promiscuous mode [ 297.288005][ T6289] loop4: detected capacity change from 0 to 512 [ 297.368214][ T6204] device hsr_slave_1 entered promiscuous mode [ 297.394172][ T6204] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.418765][ T6204] Cannot create hsr debugfs directory [ 297.435356][ T6292] loop1: detected capacity change from 0 to 1024 [ 297.450422][ T6289] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 297.488411][ T6292] EXT4-fs: Ignoring removed orlov option [ 297.529779][ T6289] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038 (0x7fffffff) [ 297.859351][ T6292] EXT4-fs (loop1): Test dummy encryption mode enabled [ 298.046402][ T6292] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 298.258461][ T6289] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.501: Directory hole found for htree leaf block 0 [ 299.171642][ T3649] Bluetooth: hci6: command tx timeout [ 299.282384][ T6302] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 299.454711][ T6316] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.501: Directory hole found for htree leaf block 0 [ 299.648487][ T3644] EXT4-fs (loop1): unmounting filesystem. [ 299.735113][ T6317] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.501: Directory hole found for htree leaf block 0 [ 302.523347][ T6326] loop1: detected capacity change from 0 to 512 [ 302.557930][ T6326] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 302.599034][ T6326] EXT4-fs (loop1): 1 truncate cleaned up [ 302.613839][ T6326] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 302.829175][ T6336] fuse: Bad value for 'fd' [ 304.734237][ T6326] EXT4-fs (loop1): shut down requested (2) [ 304.746686][ C1] eth0: bad gso: type: 1, size: 1408 [ 304.785750][ T6204] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.803241][ T5221] EXT4-fs (loop4): unmounting filesystem. [ 307.757803][ T27] audit: type=1326 audit(1724095623.303:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6338 comm="syz.2.513" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f79d1379e79 code=0x0 [ 307.828330][ T6204] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.886058][ C1] eth0: bad gso: type: 1, size: 1408 [ 307.902497][ T3644] EXT4-fs (loop1): unmounting filesystem. [ 307.908253][ T6350] usb usb8: check_ctrlrecip: process 6350 (syz.2.515) requesting ep 01 but needs 81 [ 307.908297][ T6350] usb usb8: usbfs: process 6350 (syz.2.515) did not claim interface 0 before use [ 308.079765][ T6354] loop1: detected capacity change from 0 to 256 [ 308.098530][ T6204] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.102730][ T6354] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 308.120068][ T6354] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 308.143366][ T6354] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 308.337796][ T6204] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.516184][ T6362] rdma_rxe: rxe_register_device failed with error -23 [ 308.531848][ T6362] rdma_rxe: failed to add team_slave_1 [ 308.541131][ T6362] netlink: 24 bytes leftover after parsing attributes in process `syz.1.517'. [ 309.426412][ T6365] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 309.446191][ T27] audit: type=1326 audit(1724095626.983:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6361 comm="syz.1.517" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb710779e79 code=0x0 [ 309.587006][ T6204] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 309.599091][ T6204] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 309.614152][ T6204] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 309.626470][ T6204] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 309.766914][ T27] audit: type=1326 audit(1724095627.303:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6359 comm="syz.3.520" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04d6979e79 code=0x0 [ 309.811560][ T22] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 312.770950][ T6379] loop1: detected capacity change from 0 to 512 [ 312.791285][ T6379] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 312.824870][ T6204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.866245][ T6379] EXT4-fs (loop1): 1 truncate cleaned up [ 312.874085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 312.893708][ T6379] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 312.908159][ T6379] EXT4-fs (loop1): shut down requested (2) [ 312.916751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 312.983358][ T6204] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.023441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 313.046228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 313.081681][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.088818][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.113633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 313.137781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 313.156938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 313.174007][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.181172][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.225158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 313.278312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 313.396045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 313.438826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 313.518925][ T6204] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 313.555739][ T6204] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 313.663130][ T3644] EXT4-fs (loop1): unmounting filesystem. [ 313.677630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 313.686931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 313.697009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 313.706885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 313.716771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 313.732875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 313.743554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 313.763731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 315.274521][ T6411] x_tables: duplicate underflow at hook 2 [ 315.386798][ T6416] xt_hashlimit: Unknown mode mask 312C7057, kernel too old? [ 316.889679][ T6425] fuse: Bad value for 'fd' [ 317.565449][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.573052][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.618136][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 317.642805][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 317.782748][ T6430] loop1: detected capacity change from 0 to 512 [ 318.615034][ T6204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.656998][ T6430] EXT4-fs (loop1): 1 orphan inode deleted [ 318.684278][ T6430] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 318.708827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 318.724958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 318.744351][ T6430] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038 (0x7fffffff) [ 318.794504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 318.834503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 318.947057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 318.995936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 319.068147][ T6204] device veth0_vlan entered promiscuous mode [ 319.451749][ T27] audit: type=1804 audit(1724095636.733:110): pid=6440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.544" name="/newroot/116/file1/bus" dev="loop1" ino=16 res=1 errno=0 [ 319.923776][ T3644] EXT4-fs warning (device loop1): __ext4_unlink:3333: inode #16: comm syz-executor: Deleting file 'file3' with no links [ 319.950291][ T6446] fuse: Bad value for 'fd' [ 319.972189][ T3644] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #17: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 320.001163][ T27] audit: type=1804 audit(1724095637.343:111): pid=6441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.544" name="/newroot/116/file1/bus" dev="loop1" ino=16 res=1 errno=0 [ 320.012068][ T6204] device veth1_vlan entered promiscuous mode [ 320.022069][ C0] vkms_vblank_simulate: vblank timer overrun [ 320.029201][ T6446] fuse: Bad value for 'fd' [ 320.056857][ T3644] EXT4-fs (loop1): Remounting filesystem read-only [ 320.081615][ T3644] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #17: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 320.097028][ T6449] loop4: detected capacity change from 0 to 256 [ 320.101669][ T27] audit: type=1804 audit(1724095637.343:112): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.544" name="/newroot/116/file1/bus" dev="loop1" ino=16 res=1 errno=0 [ 320.150958][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 320.151059][ T27] audit: type=1804 audit(1724095637.343:113): pid=6444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.544" name="/newroot/116/file1/bus" dev="loop1" ino=16 res=1 errno=0 [ 320.226159][ T6449] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 320.248620][ T3918] EXT4-fs (loop1): unmounting filesystem. [ 320.252316][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 320.270017][ T6449] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 320.294972][ T6204] device veth0_macvtap entered promiscuous mode [ 320.322824][ T6449] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 320.484181][ T6204] device veth1_macvtap entered promiscuous mode [ 320.490551][ T27] audit: type=1326 audit(1724095638.023:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6450 comm="syz.3.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d6979e79 code=0x7ffc0000 [ 320.554062][ T27] audit: type=1326 audit(1724095638.053:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6450 comm="syz.3.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d6979e79 code=0x7ffc0000 [ 320.575692][ T6204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.639963][ T6204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.643542][ T27] audit: type=1326 audit(1724095638.053:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6450 comm="syz.3.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04d6979e79 code=0x7ffc0000 [ 320.715861][ T6204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.743499][ T6204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.756203][ T6204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.766854][ T27] audit: type=1326 audit(1724095638.053:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6450 comm="syz.3.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f04d6979eb3 code=0x7ffc0000 [ 320.767249][ T6204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.819365][ T6204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.830020][ T27] audit: type=1326 audit(1724095638.053:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6450 comm="syz.3.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f04d697895f code=0x7ffc0000 [ 320.833259][ T6204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.884710][ T6204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.891658][ T6458] loop4: detected capacity change from 0 to 8 [ 320.914935][ T6204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.954402][ T27] audit: type=1326 audit(1724095638.053:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6450 comm="syz.3.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f04d6979f07 code=0x7ffc0000 [ 320.963092][ T6204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.062873][ T6204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.084510][ T6204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.095170][ T6204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.108112][ T6204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.118765][ T6204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.129791][ T6204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.140400][ T6204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.152104][ T6458] SQUASHFS error: Failed to read block 0x6e6: -5 [ 321.152890][ T6204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.169236][ T6458] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 321.176234][ T6204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.184438][ T6458] SQUASHFS error: Unable to read directory block [6e4:0] [ 321.236140][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 321.252021][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 321.271056][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 321.300344][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 321.364490][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 321.373211][ T3649] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 321.384134][ T3649] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 321.393130][ T3649] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 321.402487][ T47] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 321.410203][ T47] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 321.426048][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 321.434760][ T47] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 321.597946][ T6204] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.620562][ T6204] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.633028][ T6204] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.555273][ T6204] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.897036][ T3691] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.919800][ T6461] ip6gretap0 speed is unknown, defaulting to 1000 [ 322.935531][ T6478] loop4: detected capacity change from 0 to 256 [ 322.994491][ T6478] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 323.118908][ T3691] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.746681][ T3649] Bluetooth: hci2: command tx timeout [ 324.128129][ T5104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.372454][ T5104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.736548][ T3691] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.752051][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 325.841398][ T47] Bluetooth: hci2: command tx timeout [ 326.009738][ T3691] bond0: (slave netdevsim0): Releasing backup interface [ 326.035606][ T3691] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.058998][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 326.059011][ T27] audit: type=1326 audit(1724095643.593:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6499 comm="syz.2.553" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f79d1379e79 code=0x0 [ 326.128379][ T3795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.133166][ T27] audit: type=1326 audit(1724095643.673:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.3.552" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04d6979e79 code=0x0 [ 326.169519][ T3795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.181121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 326.233367][ T6505] fuse: Bad value for 'user_id' [ 326.299004][ T6502] ipt_CLUSTERIP: Please specify destination IP [ 326.353625][ T6461] chnl_net:caif_netlink_parms(): no params data found [ 328.536023][ T27] audit: type=1326 audit(1724095645.613:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6511 comm="syz.4.556" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe72d179e79 code=0x0 [ 328.562014][ T3649] Bluetooth: hci2: command tx timeout [ 328.926585][ T6461] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.418228][ T6461] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.427804][ T6461] device bridge_slave_0 entered promiscuous mode [ 329.445638][ T6536] loop4: detected capacity change from 0 to 16 [ 329.490489][ T6536] erofs: (device loop4): mounted with root inode @ nid 36. [ 330.099247][ T6461] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.109421][ T6461] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.327219][ T6461] device bridge_slave_1 entered promiscuous mode [ 331.282302][ T3649] Bluetooth: hci2: command tx timeout [ 331.979241][ T6558] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 46 [ 332.212501][ T27] audit: type=1326 audit(1724095649.743:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.3.563" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04d6979e79 code=0x0 [ 332.841142][ T6461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.909119][ T6461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.100934][ T6461] team0: Port device team_slave_0 added [ 333.166710][ T27] audit: type=1326 audit(1724095650.703:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.0.568" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ee0779e79 code=0x0 [ 333.218226][ T6461] team0: Port device team_slave_1 added [ 333.313390][ T6461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.320365][ T6461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.360204][ T6461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.853156][ T6461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.924189][ T6461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.192636][ T6461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.361209][ T6461] device hsr_slave_0 entered promiscuous mode [ 335.409026][ T6461] device hsr_slave_1 entered promiscuous mode [ 335.415710][ T3649] Bluetooth: hci6: unexpected cc 0x1407 length: 100 > 9 [ 335.452688][ T5221] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 46 [ 335.460833][ T6461] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.498248][ T6461] Cannot create hsr debugfs directory [ 335.565095][ T5221] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 335.704500][ T5221] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 336.415998][ T6622] loop4: detected capacity change from 0 to 16 [ 336.441936][ T6622] erofs: (device loop4): mounted with root inode @ nid 36. [ 336.880308][ T3691] device hsr_slave_0 left promiscuous mode [ 336.920066][ T3691] device hsr_slave_1 left promiscuous mode [ 336.959122][ T3691] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.996400][ T3691] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.043145][ T3691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.078313][ T3691] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.126137][ T3691] device team0 left promiscuous mode [ 337.149339][ T3691] device team_slave_0 left promiscuous mode [ 337.287460][ T3691] device team_slave_1 left promiscuous mode [ 337.297849][ T3691] bridge0: port 2(team0) entered disabled state [ 337.376446][ T5221] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 46 [ 337.381737][ T3691] device bridge_slave_0 left promiscuous mode [ 337.390761][ T3691] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.412659][ T5221] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 337.439487][ T5221] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 337.545942][ T3691] device veth1_macvtap left promiscuous mode [ 337.561497][ T3691] device veth0_macvtap left promiscuous mode [ 337.567650][ T3691] device veth1_vlan left promiscuous mode [ 337.601624][ T3691] device veth0_vlan left promiscuous mode [ 338.898612][ T27] audit: type=1326 audit(1724095656.433:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.0.583" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ee0779e79 code=0x0 [ 338.935447][ T6659] netlink: 'syz.2.591': attribute type 11 has an invalid length. [ 339.326485][ T3691] team0 (unregistering): Port device team_slave_1 removed [ 339.342104][ T4162] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 339.369233][ T3691] team0 (unregistering): Port device team_slave_0 removed [ 339.406117][ T3691] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.446245][ T3691] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.501606][ T3649] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 339.521448][ T3649] Bluetooth: hci6: Injecting HCI hardware error event [ 339.530192][ T3649] Bluetooth: hci6: hardware error 0x00 [ 339.581498][ T4162] usb 5-1: Using ep0 maxpacket: 8 [ 339.848780][ T3691] bond0 (unregistering): Released all slaves [ 339.861643][ T4162] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 339.871141][ T4162] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.885435][ T4162] usb 5-1: Product: syz [ 339.889591][ T4162] usb 5-1: Manufacturer: syz [ 339.894985][ T4162] usb 5-1: SerialNumber: syz [ 339.900914][ T4162] usb 5-1: config 0 descriptor?? [ 339.955702][ T6657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.582'. [ 340.101237][ T6673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.146432][ T6673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.203077][ T4162] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 340.211072][ T4162] dvb_usb_af9015: probe of 5-1:0.0 failed with error -22 [ 340.331530][ T4162] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 340.337961][ T4162] dvb_usb_af9035: probe of 5-1:0.0 failed with error -22 [ 340.454607][ T4162] usb 5-1: USB disconnect, device number 4 [ 341.316060][ T6689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.359926][ T6689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.587'. [ 341.404185][ T6689] device bridge_slave_1 left promiscuous mode [ 341.424203][ T6689] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.458315][ T6696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.581691][ T3649] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 342.444512][ T6689] netlink: 16 bytes leftover after parsing attributes in process `syz.3.587'. [ 342.482556][ T6701] tc_dump_action: action bad kind [ 342.738509][ T6713] loop4: detected capacity change from 0 to 256 [ 342.807242][ T6713] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 342.822176][ T6461] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 342.952234][ T6461] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 343.027812][ T6461] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 343.087222][ T6461] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 344.891443][ T6461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.924266][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 344.964498][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 345.340431][ T6734] loop4: detected capacity change from 0 to 2048 [ 345.376062][ T6734] UDF-fs: warning (device loop4): udf_fill_super: No partition found (2) [ 345.523905][ T6461] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.780309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 345.878826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 345.935213][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.942371][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.993904][ T6737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.075400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 346.094533][ T6737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.112333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 346.135650][ T4290] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 346.179716][ T27] audit: type=1326 audit(1724095663.713:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6721 comm="syz.3.595" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04d6979e79 code=0x0 [ 346.205969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 346.239068][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.246242][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.418214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 346.447504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 346.850451][ T6747] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 347.977880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 348.195766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 348.442453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 348.543816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 348.552732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 348.591709][ T6461] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 348.694084][ T6461] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 349.944030][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 350.030457][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 350.039643][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 350.048380][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 350.057045][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 350.398961][ T6775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.414991][ T6775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.614'. [ 350.483690][ T6775] device bridge_slave_1 left promiscuous mode [ 350.504823][ T6779] loop4: detected capacity change from 0 to 128 [ 350.516329][ T6775] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.561580][ T6780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.624371][ T6779] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 350.643147][ T6779] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 350.744815][ T6779] EXT4-fs (loop4): shut down requested (2) [ 350.774074][ T6775] netlink: 16 bytes leftover after parsing attributes in process `syz.0.614'. [ 352.077561][ T5221] EXT4-fs (loop4): unmounting filesystem. [ 352.185450][ T3649] Bluetooth: hci5: unexpected event 0x09 length: 10 > 3 [ 352.187003][ T3649] Bluetooth: hci5: SCO packet for unknown connection handle 1039 [ 352.208284][ T6802] Bluetooth: hci3: unsupported parameter 45054 [ 352.412217][ T6802] Bluetooth: hci3: invalid length 0, exp 2 for type 7 [ 352.763009][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 352.773163][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 352.804142][ T6461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.877861][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 352.893180][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 352.951906][ T3649] Bluetooth: hci2: command tx timeout [ 353.136641][ T6461] device veth0_vlan entered promiscuous mode [ 353.150199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 353.159270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 353.195830][ T6461] device veth1_vlan entered promiscuous mode [ 353.246002][ T47] Bluetooth: hci5: unexpected event 0x42 length: 6 > 3 [ 353.262880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 353.322576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 353.331252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 353.380229][ T6812] cgroup: name respecified [ 353.404793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 353.428905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 353.452963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 355.429659][ T6461] device veth0_macvtap entered promiscuous mode [ 355.467485][ T6461] device veth1_macvtap entered promiscuous mode [ 355.520175][ T6461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.592965][ T6461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.604090][ T6461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.614821][ T6461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.625675][ T6461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.637301][ T6461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.647400][ T6461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.658126][ T6461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.920288][ T6461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.360501][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 356.386800][ T6841] usb usb8: check_ctrlrecip: process 6841 (syz.4.616) requesting ep 01 but needs 81 [ 357.602323][ T47] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 357.611123][ T47] Bluetooth: hci5: Injecting HCI hardware error event [ 357.620321][ T3649] Bluetooth: hci5: hardware error 0x00 [ 357.651427][ T6841] usb usb8: usbfs: process 6841 (syz.4.616) did not claim interface 0 before use [ 357.692195][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 357.773666][ T6461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.821371][ T6461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.849294][ T6461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.874386][ T6461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.910798][ T6461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.941329][ T6461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.984010][ T6461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.011362][ T6461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.041372][ T6461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.064731][ T6461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.105170][ T6461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.137373][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 358.229500][ T6857] loop4: detected capacity change from 0 to 16 [ 358.236956][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 358.271860][ T6461] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.307443][ T6857] erofs: (device loop4): mounted with root inode @ nid 36. [ 358.314949][ T6461] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.374875][ T6461] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.510811][ T6461] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.201469][ T27] audit: type=1800 audit(1724095676.643:145): pid=6862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.619" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 359.225432][ T3654] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[9000] [ 359.237753][ T6865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.340076][ T6866] fuse: Bad value for 'user_id' [ 359.430370][ T6865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.620'. [ 359.519670][ T6865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.608535][ T6865] netlink: 16 bytes leftover after parsing attributes in process `syz.3.620'. [ 359.618230][ T3781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.636610][ T3781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.674417][ T27] audit: type=1326 audit(1724095677.213:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6846 comm="syz.2.617" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f79d1379e79 code=0x0 [ 359.731206][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 359.760540][ T3799] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.776662][ T3799] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.792372][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 360.170095][ T3649] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 361.504792][ T6890] netlink: 12 bytes leftover after parsing attributes in process `syz.4.633'. [ 362.241743][ T6895] x_tables: duplicate underflow at hook 4 [ 364.906038][ T6913] input: syz0 as /devices/virtual/input/input14 [ 365.057955][ T6921] loop4: detected capacity change from 0 to 256 [ 365.080370][ T6921] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 366.153291][ T6936] loop4: detected capacity change from 0 to 512 [ 366.962494][ T6936] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 366.984399][ T6936] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038 (0x7fffffff) [ 367.152854][ T27] audit: type=1326 audit(1724095684.693:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.1.630" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe617f79e79 code=0x0 [ 367.312901][ T6956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.408904][ T6958] sp0: Synchronizing with TNC [ 367.409351][ T6956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.636'. [ 367.472999][ T5221] EXT4-fs (loop4): unmounting filesystem. [ 367.511556][ T6957] device bridge_slave_1 left promiscuous mode [ 367.518744][ T6957] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.561800][ T6956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.503164][ T6956] netlink: 16 bytes leftover after parsing attributes in process `syz.2.636'. [ 368.778005][ T6978] loop4: detected capacity change from 0 to 512 [ 368.910817][ T6978] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 369.281382][ T6986] loop1: detected capacity change from 0 to 2048 [ 369.666199][ T6986] UDF-fs: warning (device loop1): udf_fill_super: No partition found (2) [ 369.699500][ T6974] ip6gretap0 speed is unknown, defaulting to 1000 [ 369.822693][ T6978] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 369.874262][ T3628] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 370.128531][ T6978] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 370.207576][ T6978] System zones: 0-2, 18-18, 34-34 [ 370.274985][ T6978] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz.4.641: bad orphan inode 15 [ 370.278794][ T6997] usb usb8: check_ctrlrecip: process 6997 (syz.1.643) requesting ep 01 but needs 81 [ 370.315694][ T6978] ext4_test_bit(bit=14, block=18) = 1 [ 370.321116][ T6978] is_bad_inode(inode)=0 [ 370.347107][ T6997] usb usb8: usbfs: process 6997 (syz.1.643) did not claim interface 0 before use [ 370.381160][ T6978] NEXT_ORPHAN(inode)=2264924160 [ 370.406226][ T6978] max_ino=32 [ 370.413830][ T6978] i_nlink=0 [ 370.417128][ T6978] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 370.583997][ T6978] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.641: bg 0: block 80: padding at end of block bitmap is not set [ 370.958127][ T6978] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 370.968752][ T6978] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 371.831332][ T5221] EXT4-fs (loop4): unmounting filesystem. [ 371.845479][ T7013] tipc: Started in network mode [ 371.890499][ T6974] netlink: 44 bytes leftover after parsing attributes in process `syz.3.640'. [ 371.917450][ T7013] tipc: Node identity b6b5fc9a4421, cluster identity 4711 [ 371.941550][ T6974] netlink: 43 bytes leftover after parsing attributes in process `syz.3.640'. [ 371.950831][ T6974] netlink: 'syz.3.640': attribute type 6 has an invalid length. [ 371.991919][ T7013] tipc: Enabled bearer , priority 0 [ 372.096608][ T6974] netlink: 43 bytes leftover after parsing attributes in process `syz.3.640'. [ 372.803585][ T7021] loop4: detected capacity change from 0 to 16 [ 372.892126][ T7021] erofs: (device loop4): mounted with root inode @ nid 36. [ 373.024219][ T14] tipc: Node number set to 4069850266 [ 373.135396][ T7030] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 46 [ 373.301244][ T27] audit: type=1800 audit(1724095690.833:148): pid=7027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.650" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 373.602434][ T5221] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 46 [ 373.703244][ T7012] tipc: Disabling bearer [ 373.709087][ T5221] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 373.748933][ T5221] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 373.936875][ T7051] x_tables: duplicate underflow at hook 2 [ 374.433868][ C1] eth0: bad gso: type: 1, size: 1408 [ 374.981426][ T3649] Bluetooth: hci2: SCO packet for unknown connection handle 1955 [ 376.550514][ C1] eth0: bad gso: type: 1, size: 1408 [ 377.037603][ T7093] loop4: detected capacity change from 0 to 128 [ 378.008054][ T27] audit: type=1326 audit(1724095695.543:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7057 comm="syz.1.655" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe617f79e79 code=0x0 [ 378.501752][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.508137][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.660736][ T7093] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 378.669595][ T7093] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038 (0x7fffffff) [ 379.045944][ T7106] netlink: 20 bytes leftover after parsing attributes in process `syz.0.663'. [ 379.781013][ T28] INFO: task syz-executor:3648 blocked for more than 146 seconds. [ 380.087941][ T7107] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 380.097548][ T7107] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 380.182814][ T28] Not tainted 6.1.106-syzkaller #0 [ 380.188483][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 380.269202][ T28] task:syz-executor state:D stack:20376 pid:3648 ppid:1 flags:0x00004004 [ 380.278862][ T5102] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 380.287347][ T28] Call Trace: [ 380.290824][ T28] [ 380.293984][ T28] __schedule+0x143f/0x4570 [ 380.301029][ T28] ? release_firmware_map_entry+0x186/0x186 [ 380.308726][ T28] schedule+0xbf/0x180 [ 380.313241][ T28] schedule_timeout+0xac/0x300 [ 380.318150][ T28] ? console_conditional_schedule+0x40/0x40 [ 380.326100][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 380.332544][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 380.337954][ T28] ? wait_for_completion+0x2f9/0x610 [ 380.343766][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 380.349152][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 380.355503][ T28] ? wait_for_completion+0x2f9/0x610 [ 380.362216][ T28] wait_for_completion+0x350/0x610 [ 380.367485][ T28] ? io_schedule+0x100/0x100 [ 380.372490][ T28] ? kasan_quarantine_put+0xd4/0x220 [ 380.378018][ T28] ? kthread_unpark+0x175/0x200 [ 380.387544][ T28] kthread_stop+0x1ab/0x690 [ 380.393359][ T28] ext4_stop_mmpd+0x43/0xb0 [ 380.398053][ T28] ext4_put_super+0xb49/0x10e0 [ 380.403458][ T28] ? ext4_put_super+0x3cc/0x10e0 [ 380.409789][ T28] ? ext4_drop_inode+0x2e0/0x2e0 [ 380.420650][ T28] generic_shutdown_super+0x130/0x340 [ 380.428201][ T28] kill_block_super+0x7a/0xe0 [ 380.437989][ T28] deactivate_locked_super+0xa0/0x110 [ 380.445525][ T28] cleanup_mnt+0x490/0x520 [ 380.450098][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 380.458538][ T28] task_work_run+0x246/0x300 [ 380.466024][ T28] ? task_work_cancel+0x2e0/0x2e0 [ 380.476624][ T28] ? exit_to_user_mode_loop+0x39/0x100 [ 380.483455][ T28] exit_to_user_mode_loop+0xde/0x100 [ 380.488893][ T28] exit_to_user_mode_prepare+0xb1/0x140 [ 380.500775][ T28] syscall_exit_to_user_mode+0x60/0x270 [ 380.507824][ T28] do_syscall_64+0x47/0xb0 [ 380.518009][ T28] ? clear_bhb_loop+0x45/0xa0 [ 380.523079][ T5102] usb 1-1: Using ep0 maxpacket: 32 [ 380.529534][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 380.541356][ T28] RIP: 0033:0x7f004c37b1a7 [ 380.545859][ T28] RSP: 002b:00007fffe5183678 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 380.561665][ T28] RAX: 0000000000000000 RBX: 00007f004c3e77b4 RCX: 00007f004c37b1a7 [ 380.569745][ T28] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffe5183730 [ 380.586985][ T28] RBP: 00007fffe5183730 R08: 0000000000000000 R09: 0000000000000000 [ 380.598015][ T28] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffe51847b0 [ 380.610937][ T28] R13: 00007f004c3e77b4 R14: 0000000000037749 R15: 00007fffe51847f0 [ 380.621776][ T28] [ 380.624967][ T28] INFO: task kmmpd-loop2:5609 blocked for more than 147 seconds. [ 380.640114][ T5221] EXT4-fs (loop4): unmounting filesystem. [ 380.641401][ T28] Not tainted 6.1.106-syzkaller #0 [ 380.660960][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 380.672133][ T28] task:kmmpd-loop2 state:D stack:28088 pid:5609 ppid:2 flags:0x00024000 [ 380.682596][ T5102] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.693918][ T28] Call Trace: [ 380.697690][ T28] [ 380.700644][ T28] __schedule+0x143f/0x4570 [ 380.706552][ T5102] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.716659][ T28] ? rcuwait_wake_up+0x18/0x220 [ 380.721928][ T5102] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 380.731135][ T28] ? release_firmware_map_entry+0x186/0x186 [ 380.737475][ T28] ? print_irqtrace_events+0x210/0x210 [ 380.743353][ T5102] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.751726][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 380.764952][ T28] schedule+0xbf/0x180 [ 380.769870][ T5102] usb 1-1: config 0 descriptor?? [ 380.775516][ T28] ? percpu_rwsem_wait+0x343/0x450 [ 380.782953][ T28] percpu_rwsem_wait+0x3b9/0x450 [ 380.811506][ T28] ? trace_contention_begin+0x1a0/0x1a0 [ 380.831217][ T28] ? percpu_up_write+0x90/0x90 [ 380.842925][ T28] ? rcu_is_watching+0x11/0xb0 [ 380.847817][ T28] __percpu_down_read+0xe6/0x130 [ 380.853474][ T28] ? kmmpd+0x263/0xa70 [ 380.857716][ T28] write_mmp_block+0x2ee/0x390 [ 380.863256][ T28] kmmpd+0x263/0xa70 [ 380.867342][ T28] ? write_mmp_block_thawed+0x5a0/0x5a0 [ 380.873395][ T28] ? __kthread_parkme+0x168/0x1c0 [ 380.878585][ T28] kthread+0x28d/0x320 [ 380.883255][ T28] ? write_mmp_block_thawed+0x5a0/0x5a0 [ 380.888951][ T28] ? kthread_blkcg+0xd0/0xd0 [ 380.895595][ T28] ret_from_fork+0x1f/0x30 [ 380.937425][ T28] [ 380.940682][ T28] [ 380.940682][ T28] Showing all locks held in the system: [ 380.950410][ T28] 1 lock held by rcu_tasks_kthre/12: [ 380.970831][ T28] #0: ffffffff8d32b190 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 380.985499][ T28] 1 lock held by rcu_tasks_trace/13: [ 380.990919][ T28] #0: ffffffff8d32b990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 381.009858][ T28] 3 locks held by kworker/0:1/14: [ 381.015701][ T28] 1 lock held by khungtaskd/28: [ 381.020674][ T28] #0: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 381.037599][ T5102] usbhid 1-1:0.0: can't add hid device: -71 [ 381.044071][ T5102] usbhid: probe of 1-1:0.0 failed with error -71 [ 381.058691][ T5102] usb 1-1: USB disconnect, device number 4 [ 381.071245][ T28] 2 locks held by getty/3390: [ 381.077223][ T28] #0: ffff88814c108098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 381.108916][ T28] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 381.124027][ T28] 2 locks held by kworker/0:3/3625: [ 381.129324][ T28] #0: ffff888012872138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 381.139966][ T28] #1: ffffc9000398fd20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 381.151785][ T28] 1 lock held by syz-executor/3648: [ 381.157084][ T28] #0: ffff8880645c80e0 (&type->s_umount_key#32){++++}-{3:3}, at: deactivate_super+0xa9/0xe0 [ 381.167421][ T28] 3 locks held by kworker/u4:8/3724: [ 381.172863][ T28] 2 locks held by kworker/u4:12/3799: [ 381.178310][ T28] #0: ffff8880b983a9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa8/0x140 [ 381.197573][ T28] #1: ffffc9000471fd20 ((work_completion)(&sdata->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 381.209484][ T28] 3 locks held by kworker/0:9/4162: [ 381.214821][ T28] #0: ffff888012870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 381.225556][ T28] #1: ffffc90005c6fd20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 381.239710][ T28] #2: ffffffff8d3305b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 381.250869][ T28] 3 locks held by kworker/1:13/5102: [ 381.256528][ T28] #0: ffff8880156fdd38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 381.267732][ T28] #1: ffffc9000a517d20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 381.279151][ T28] #2: ffff888022e3b190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5730 [ 381.288392][ T28] 1 lock held by kmmpd-loop2/5609: [ 381.293612][ T28] #0: ffff8880645c8460 (sb_writers#4){++++}-{0:0}, at: kmmpd+0x263/0xa70 [ 381.304382][ T28] 1 lock held by syz.0.459/6090: [ 381.309735][ T28] #0: ffff8880645c80e0 (&type->s_umount_key#32){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 381.326540][ T28] 1 lock held by syz.2.656/7048: [ 381.333118][ T28] #0: ffff8880645c80e0 (&type->s_umount_key#32){++++}-{3:3}, at: user_get_super+0x11a/0x250 [ 381.352320][ T28] [ 381.394697][ T28] ============================================= [ 381.394697][ T28] [ 381.419313][ T28] NMI backtrace for cpu 1 [ 381.423692][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.106-syzkaller #0 [ 381.431597][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 381.441667][ T28] Call Trace: [ 381.444956][ T28] [ 381.447890][ T28] dump_stack_lvl+0x1e3/0x2cb [ 381.452584][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 381.458057][ T28] ? panic+0x764/0x764 [ 381.462127][ T28] ? vprintk_emit+0x622/0x740 [ 381.466819][ T28] ? printk_sprint+0x490/0x490 [ 381.471589][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 381.476713][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 381.481661][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 381.487821][ T28] ? _printk+0xd1/0x111 [ 381.491978][ T28] ? panic+0x764/0x764 [ 381.496049][ T28] ? __wake_up_klogd+0xcc/0x100 [ 381.500903][ T28] ? panic+0x764/0x764 [ 381.504985][ T28] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 381.511064][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 381.517147][ T28] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 381.523148][ T28] watchdog+0xf88/0xfd0 [ 381.527316][ T28] ? watchdog+0x1f8/0xfd0 [ 381.531657][ T28] kthread+0x28d/0x320 [ 381.535727][ T28] ? hungtask_pm_notify+0x50/0x50 [ 381.540753][ T28] ? kthread_blkcg+0xd0/0xd0 [ 381.545344][ T28] ret_from_fork+0x1f/0x30 [ 381.549777][ T28] [ 381.553382][ T28] Sending NMI from CPU 1 to CPUs 0: [ 381.558610][ C0] NMI backtrace for cpu 0 [ 381.558620][ C0] CPU: 0 PID: 3724 Comm: kworker/u4:8 Not tainted 6.1.106-syzkaller #0 [ 381.558636][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 381.558645][ C0] Workqueue: netns cleanup_net [ 381.558668][ C0] RIP: 0010:__lock_acquire+0xe9c/0x1f80 [ 381.558691][ C0] Code: 80 c1 03 38 c1 7c de 4c 89 e7 e8 1f 97 77 00 eb d4 49 89 fe 48 c7 c7 00 97 1f 8d 48 89 de e8 eb bb f9 02 4c 89 f7 eb 8f 89 e8 <25> ff 1f 00 00 c1 ed 03 81 e5 00 60 00 00 09 c5 4c 89 f8 48 c1 e8 [ 381.558704][ C0] RSP: 0018:ffffc9000479f800 EFLAGS: 00000046 [ 381.558716][ C0] RAX: 000000000002002c RBX: 0000000000070047 RCX: ffff8880733aa8a0 [ 381.558726][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: dffffc0000000000 [ 381.558736][ C0] RBP: 000000000002002c R08: dffffc0000000000 R09: fffffbfff20e7645 [ 381.558746][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880733aa898 [ 381.558756][ C0] R13: 0000000000000000 R14: ffff8880733aa938 R15: 72f1912b082003b7 [ 381.558766][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 381.558779][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 381.558789][ C0] CR2: 0000000000000000 CR3: 000000000d08e000 CR4: 00000000003506f0 [ 381.558802][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 381.558810][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 381.558819][ C0] Call Trace: [ 381.558824][ C0] [ 381.558829][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 381.558851][ C0] ? read_lock_is_recursive+0x10/0x10 [ 381.558871][ C0] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 381.558900][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 381.558922][ C0] ? nmi_handle+0x12e/0x440 [ 381.558944][ C0] ? nmi_handle+0x25/0x440 [ 381.558963][ C0] ? __lock_acquire+0xe9c/0x1f80 [ 381.558982][ C0] ? default_do_nmi+0x62/0x150 [ 381.558996][ C0] ? exc_nmi+0xa8/0x100 [ 381.559008][ C0] ? end_repeat_nmi+0x16/0x31 [ 381.559031][ C0] ? __lock_acquire+0xe9c/0x1f80 [ 381.559051][ C0] ? __lock_acquire+0xe9c/0x1f80 [ 381.559071][ C0] ? __lock_acquire+0xe9c/0x1f80 [ 381.559090][ C0] [ 381.559094][ C0] [ 381.559105][ C0] lock_acquire+0x1f8/0x5a0 [ 381.559124][ C0] ? inet_twsk_purge+0x12f/0xa40 [ 381.559147][ C0] ? read_lock_is_recursive+0x10/0x10 [ 381.559171][ C0] ? inet_twsk_purge+0x12f/0xa40 [ 381.559190][ C0] ? __rcu_read_unlock+0x100/0x100 [ 381.559206][ C0] ? __might_sleep+0xb0/0xb0 [ 381.559226][ C0] inet_twsk_purge+0x150/0xa40 [ 381.559245][ C0] ? inet_twsk_purge+0x12f/0xa40 [ 381.559265][ C0] ? inet_twsk_purge+0x12f/0xa40 [ 381.559288][ C0] ? rcu_force_quiescent_state+0x230/0x230 [ 381.559302][ C0] ? __inet_twsk_schedule+0x1c0/0x1c0 [ 381.559323][ C0] ? evict+0x56e/0x620 [ 381.559343][ C0] ? dccp_v4_exit_net+0x80/0x80 [ 381.559362][ C0] cleanup_net+0x763/0xb60 [ 381.559382][ C0] ? ops_free_list+0x3b0/0x3b0 [ 381.559403][ C0] ? process_one_work+0x7a9/0x11d0 [ 381.559419][ C0] process_one_work+0x8a9/0x11d0 [ 381.559441][ C0] ? worker_detach_from_pool+0x260/0x260 [ 381.559459][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 381.559475][ C0] ? kthread_data+0x4e/0xc0 [ 381.559497][ C0] ? wq_worker_running+0x97/0x190 [ 381.559519][ C0] worker_thread+0xa47/0x1200 [ 381.559539][ C0] ? _raw_spin_unlock+0x40/0x40 [ 381.559559][ C0] kthread+0x28d/0x320 [ 381.559571][ C0] ? worker_clr_flags+0x190/0x190 [ 381.559586][ C0] ? kthread_blkcg+0xd0/0xd0 [ 381.559599][ C0] ret_from_fork+0x1f/0x30 [ 381.559623][ C0] [ 381.924631][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 381.931502][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.106-syzkaller #0 [ 381.939392][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 381.949533][ T28] Call Trace: [ 381.952810][ T28] [ 381.955735][ T28] dump_stack_lvl+0x1e3/0x2cb [ 381.960512][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 381.965982][ T28] ? panic+0x764/0x764 [ 381.970049][ T28] ? llist_add_batch+0x160/0x1d0 [ 381.974994][ T28] ? vscnprintf+0x59/0x80 [ 381.979321][ T28] panic+0x318/0x764 [ 381.983218][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 381.989374][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 381.994749][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 382.000903][ T28] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 382.007061][ T28] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 382.013222][ T28] watchdog+0xfc7/0xfd0 [ 382.017391][ T28] ? watchdog+0x1f8/0xfd0 [ 382.021731][ T28] kthread+0x28d/0x320 [ 382.025797][ T28] ? hungtask_pm_notify+0x50/0x50 [ 382.030822][ T28] ? kthread_blkcg+0xd0/0xd0 [ 382.035413][ T28] ret_from_fork+0x1f/0x30 [ 382.039862][ T28] [ 382.043181][ T28] Kernel Offset: disabled [ 382.048542][ T28] Rebooting in 86400 seconds..