last executing test programs: 20m14.707508938s ago: executing program 32 (id=1149): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000a80)='mm_page_free_batched\x00', r0}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000002"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r3}, &(0x7f0000000180), &(0x7f00000006c0)}, 0x20) 18m57.729159647s ago: executing program 33 (id=1308): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000009, 0x10012, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 17m12.517072854s ago: executing program 34 (id=1520): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x541b, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept$alg(r4, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000240), 0xff3b) r8 = accept4(r5, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x6, 0xe) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000040)={0x0, 0xffffffffffffffde, 0x0, 0x1, 0x0, 0x0, 0x200000c5}, 0xc09d) ioctl$sock_SIOCBRDELBR(r3, 0x8910, &(0x7f0000000000)='bridge0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x18) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x20281, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000380)={0x9, "990eec1c18587c9c9890a0080066b42c00050400220700000000002100"}) syz_usb_connect$uac1(0x5, 0xab, &(0x7f00000003c0)={{0x12, 0x1, 0x4a0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x3, 0x1, 0xfe, 0xb0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x40}, [@feature_unit={0x13, 0x24, 0x6, 0x6, 0x1, 0x6, [0x5, 0x1, 0x1, 0x3, 0x4, 0x3], 0x10}, @feature_unit={0x9, 0x24, 0x6, 0x9, 0x3, 0x1, [0x6], 0x80}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xe, 0x3, 0xd, 0xd, "deaa0f1ce17deb93"}, @as_header={0x7, 0x24, 0x1, 0x4, 0xa, 0x4}, @as_header={0x7, 0x24, 0x1, 0x3, 0x2, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0xfa, 0x77, {0x7, 0x25, 0x1, 0x2, 0x56, 0x4800}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xe, 0xb, 0xc, {0x7, 0x25, 0x1, 0x0, 0x7, 0x2}}}}}}}]}}, 0x0) 17m0.779780948s ago: executing program 35 (id=1541): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) io_setup(0x93, &(0x7f0000000380)=0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 16m55.321798549s ago: executing program 36 (id=1551): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 16m1.247018791s ago: executing program 37 (id=1605): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./bus\x00', 0x280000a, &(0x7f00000007c0)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2b2, &(0x7f00000003c0)="$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") pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xffff) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x11000) io_setup(0x93, &(0x7f0000000380)=0x0) io_submit(r5, 0x1, &(0x7f0000000280)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000780)=""/7, 0x7) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) 14m51.091776634s ago: executing program 38 (id=1715): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = userfaultfd(0x1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x10}) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004200)={0x2020}, 0x2020) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) 14m17.954452789s ago: executing program 9 (id=1769): r0 = add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$sysfs(0xffffffffffffff9c, 0x0, 0x181641, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000340)={0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x85, 0x0, 0x0) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0xffffffffffffffff) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 14m16.705261753s ago: executing program 9 (id=1770): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0x80045505, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x8008551d, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000a40)={@local, @multicast, @val={@void}, {@ipv6={0x86dd, @udp={0x2, 0x6, "a341d0", 0x8, 0x11, 0x1, @private2, @dev={0xfe, 0x80, '\x00', 0x2e}, {[], {0x4e20, 0x4e23, 0x8}}}}}}, 0x0) 14m15.474744808s ago: executing program 39 (id=1771): socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000180)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) socket(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 14m15.428535798s ago: executing program 9 (id=1774): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x541b, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240), 0xff3b) r6 = accept4(r5, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x6, 0xe) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xffffffffffffffde, 0x0, 0x1, 0x0, 0x0, 0x200000c5}, 0xc09d) ioctl$sock_SIOCBRDELBR(r3, 0x8910, &(0x7f0000000000)='bridge0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x18) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x20281, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000380)={0x9, "990eec1c18587c9c9890a0080066b42c00050400220700000000002100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000080)={"fe0d1acce4a37ef94acd000200000000000000000000000000f700"}) syz_usb_connect(0xfffffffffffffffd, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x201, 0xbd, 0xc3, 0x51, 0x20, 0xa5c, 0x2033, 0xc25d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0xf4, 0x80, 0x8, [{{0x9, 0x4, 0xca, 0x2, 0x0, 0x96, 0x2a, 0x11, 0x40}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0xfffffffffffffe38, 0x0}) syz_usb_connect$uac1(0x5, 0xab, &(0x7f00000003c0)={{0x12, 0x1, 0x4a0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x3, 0x1, 0xfe, 0xb0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x40}, [@feature_unit={0x13, 0x24, 0x6, 0x6, 0x1, 0x6, [0x5, 0x1, 0x1, 0x3, 0x4, 0x3], 0x10}, @feature_unit={0x9, 0x24, 0x6, 0x9, 0x3, 0x1, [0x6], 0x80}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xe, 0x3, 0xd, 0xd, "deaa0f1ce17deb93"}, @as_header={0x7, 0x24, 0x1, 0x4, 0xa, 0x4}, @as_header={0x7, 0x24, 0x1, 0x3, 0x2, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0xfa, 0x77, {0x7, 0x25, 0x1, 0x2, 0x56, 0x4800}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xe, 0xb, 0xc, {0x7, 0x25, 0x1, 0x0, 0x7, 0x2}}}}}}}]}}, 0x0) 14m14.466635171s ago: executing program 40 (id=1773): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x541b, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept$alg(r4, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000240), 0xff3b) r8 = accept4(r5, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x6, 0xe) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000040)={0x0, 0xffffffffffffffde, 0x0, 0x1, 0x0, 0x0, 0x200000c5}, 0xc09d) ioctl$sock_SIOCBRDELBR(r3, 0x8910, &(0x7f0000000000)='bridge0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x18) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x20281, 0x0) 14m13.500294485s ago: executing program 9 (id=1776): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1101088, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) 14m12.022500821s ago: executing program 9 (id=1777): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1101088, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 14m10.859843185s ago: executing program 9 (id=1778): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000140)=""/37, 0x25) read$char_usb(r1, &(0x7f0000000000)=""/204, 0xcc) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x6, 0xc0041) 14m10.622985356s ago: executing program 41 (id=1778): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000140)=""/37, 0x25) read$char_usb(r1, &(0x7f0000000000)=""/204, 0xcc) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x6, 0xc0041) 12m3.234475904s ago: executing program 6 (id=1967): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="eab2", 0x2) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) 11m59.599459217s ago: executing program 6 (id=1973): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000001f80)=ANY=[@ANYBLOB='iocharset=iso8859-1,nostrict,iocharset=default,anchor=00000000000000000145,gid=', @ANYRESDEC=0x0, @ANYRES16=0x0], 0x1, 0xc5a, &(0x7f0000001040)="$eJzs3U9sHNd9B/DfGy3FldxWTOwqThoHm7ZIZcVy9S+mYhXOqqbZBpBlIRRzC8CVuFIXpkiCpBrZSAumlx56CFAUPeTEojUKpGhgNEXQI9O6QHLxocipJ6KFjaDogSkCBCgQMJjZt+KSIm3ZJCVK/nxs8js7897sezPrGZrgmxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMTvv3Th5Km0xYYDD6AxAMB9cWnsKydPb3X/BwAeWVe2+/9/AAAAAAAAAAAAAABgv0hRxOORYvbSapqoXnfVL3YGbt0eHxndutqhVNU8UJUvv+qnTp85+4Xnhs/18mJn+j3q77ZPxStjVy40Xpy5OTvXnp9vTzbGpzvXZibb97yHndbf7Hh1ABo3X701ef36fOP0s2c2bL499O7gY0eHzg8/feKpXtnxkdHRsfUi9f7ytQ/dkK7tRngcjCJORIpnvvuT1IqIInZ+LOr399xvdqjqxPGqE+Mjo1VHpjqt6YVy4+XegSgiGn2Vmr1jtPW5iNrAfe3D9poRi2XzywYfL7s3Ntuaa12dajcut+YWOgudmenLqdvasj+NKOJciliKiJXBu3c3EEXUIsW3j6ymq/mpH9Vx+Hw1MHj7dhR72Md7ULazMRCxVDwE52wfG4wiXo4UP3vrWFzL15nqWvO5iJfL/H7EG2W+EJHKD8bZiHe2+BzxcKpFEX9Rnv/zq2myuh70risXv9r48vT1mb6yvevKB7w/3HWleED3h0Ob8v7Y59emehTRqq74q+nD/7ADAAAAAAAAAAAAAAAAwG47FEV8MlK89B9/XI0rjmpc+pHzw38w9Kv9Y8affJ/9lGWfjYjF4t7G5B7MAwMvp8spPeCxxB9l9SjiT/L4v2++T1mnCQAAAAAAAAAAAAAAAAAAYC8V8eNI8fzbx9JS9M8p3pm+0bjSujrVnRW2N/dvb870tbW1tUbqZjPnRM7FnEs5l3Ou5Iwi18/ZzDmRczHnUs7lnCs540Cun7OZcyLnYs6lnMs5V3JGLdfP2cw5kXMx51LO5ZwrOWOfzN0LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAoKaKIX0SKb319NUWKiGbERHRzefBBtw4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2mIr4XKRp/2LyzrhYRqfq361j57Ww0D5b58WgOl/lCNC/kbFVZa37zAbSfnRlIRfwoUgzW37xzwvP5H+i+uvMxiDe+sf7qU7VuHuhtHHp38LGjR84Pj37mye2W01YNOH6xM33rdmN8ZHR0rG91Lb/7x/vWDeX3LXan60TE/Guvv9qamvqbn0ZUC+25vObeF8qPwAev9TAupNpHpacWqoWo7YtmPJi+b1B/UBco9lR5/38nUvzu2//Zu+F37//1+JXuqzt3+Pj5n67f/5/fvKN7vP/XNtfL9//ynr7V/f/xvnXP559GBmoR9YWbswNHI+rzr71+onOzdaN9oz199uTJLw4Pf/HMyYGDEfXrnal239KuHC4AAAAAAAAAAAAAAACA+ycV8aVI0frRampExO1qvNbQ+eGnTzx1IA5U4602jNt+ZezKhcaLMzdn59rz8+3Jxvh059rMZPte365eDfcaHxndk868r0N73P5D9RdnZl+b69z4o4Uttx+uX7g6vzDXurb15jgURUSzf83xqsHjI6NVo6c6remq6uUtB9N/cAOpiP+KFNfONtJn87o8/n/zCP8N4/8XN+9oF8f/f+bw+vi/j/UVLd8zpSJ+Hil+5y+fjM9W7Twcdx2zXO7vIsXxc5/O5eJgWa7Xhu5zBbojA8uyP40U//SLjWV74yEfXy976gMd3IdAef6PRIrv/fl34jfzuo3Pf9j6/B/evKM9ev7DE33rDq8/r6A9N7/jrpPP/4lI8cLjb8ZvVWv+/z2f/9F79saxbuH153Ps0fn/9b51Q/l9f3u3Og8AAAAAAAAAAPAQG0hF/H2k+MFoLT2X193L3/9Nbt7RHv391yf61k1u+Pu/vVvY8UEFAAAAgH1iIBXx40hxY+HNO2OoN47/7hv/+Xvr4z9H0qat1e/5fq16bsBu/v6v31B+34mddxsAAAAAAAAAAAAAAAAAAAD2lZSKeC7Ppz5Rjeef3HY+9eVI8dL/PJPLpaNlud488EPV9/qlmekTF6amZuqx0Lo61W6Mzbautcu6T0SK1b/9dK77pWp+9d5889053tfnYp+LFKP/0CvbnYu9Nzf5E+tlT5VlPxYp/vsfN5bNU1PnuaOrsqfLsn8dKb72L72ya2vl1l7Zo+tlz5RlvxMpfvi1Rm+/h8v99p6P+on1ss9emyl2/6QAAAAAAAAAAAAAAAAAAADwkTOQivizSPG/N5fujOXP8/8P9L2svPGNvvn+N7ldzfM/VM3/v93yh5n/v3quwOJ27woAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI+mFEW8HilmL62m5cHydVf9Ymf61u3xkdGtqx1KVc0DVfnyq37q9JmzX3hu+Fwv37v+bvtkvDJ25ULjxZmbs3Pt+fn2ZGN8unNtZrJ9z3vYaf3NjlcHoHHz1VuT16/PN04/e2bD5ttD7w4+dnTo/PDTJ55ajIiy7PjI6OhYX5nawId+97ukbdYfjCL+KlI8892fpB8MRhSx82PxPp+dvXao6sTxqhPjI6NVR6Y6remFcuPl3oEoIhp9lZq9Y5TP216eix1pRpSfl6Js8PGye2OzrbnW1al243JrbqGz0JmZvpy6rS3704gizqWIpYhYGbx7dwNRxKuR4ttHVtO/DkYc6B2Hz18a+8rJ09u3o9jDPt6Dsp2NgYil4iE4Z/vYYBTxz5HiZ28di38bjKhF9ys+F/Fymd+PeCO65zuVH4yzEe9s8Tni4VSLIv6vPP/nV9Nbg+X1oHddufjVxpenr8/0le1dVx76+8P9tM+vTfUo4ofVFX81/bv/rgEAAAAAAAAAAAAAAAD2kSJ+I1I8//axVI0PvjOmuDN9o3GldXWqO6yvN/avN2Z6bW1trZG62cw5kXMx51LO5ZwrOaPI9XM2y6yvrU3k14s5l3Iu51zJGQdy/ZzNnBM5F3Mu5VzOuZIzarl+zmbOiZyLOZdyLudcyRn7ZOweAAAAAAAAAAAAAAAAAADwaCmqf1J86+uraW2wO7/0RHRz2Xygj7xfBgAA//8XrPrB") r0 = socket$inet6(0xa, 0x3, 0x7) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000100)=""/8, 0x8}], 0x1, 0x0, 0xffff) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2800862, &(0x7f0000000140)={[{@discard}, {@noload}], [{@fsuuid={'fsuuid', 0x3d, {[0x62, 0x31, 0x2, 0xd, 0x64, 0x33, 0x33, 0x61], 0x2d, [0x38, 0x63, 0x34, 0x35], 0x2d, [0x65, 0x65, 0x32, 0xbce3baa91711febd], 0x2d, [0x30, 0x61, 0x35, 0x37], 0x2d, [0x66, 0x0, 0x66, 0x8, 0x64, 0x62, 0x33, 0x30]}}}]}, 0x64, 0x526, &(0x7f0000000a40)="$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") r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x3376039, 0x0) quotactl_fd$Q_SYNC(r2, 0xffffffff80000101, 0x0, 0x0) fchdir(0xffffffffffffffff) madvise(&(0x7f00000fe000/0x1000)=nil, 0x1000, 0x14) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x774c, 0x1000, &(0x7f0000000300)=""/4096, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)=[{0x5, 0x3, 0xe, 0x2}], 0x10, 0xb, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_GET_KEEPCAPS(0x7) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x20) ioperm(0x0, 0x2, 0x7e) keyctl$get_security(0x11, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x380000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb}, 0x1c) write$evdev(r2, &(0x7f00000000c0)=[{{0x0, 0xea60}, 0x0, 0x3, 0x5}], 0x18) 11m53.57108152s ago: executing program 6 (id=1982): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=ANY=[], 0x0, 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@printk]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4b0, 0x298, 0x380, 0x188, 0x298, 0x188, 0x418, 0x418, 0x418, 0x418, 0x418, 0x6, &(0x7f0000000680), {[{{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0x0, 'ip6tnl0\x00', 'nr0\x00', {}, {0xff}, 0x88, 0x1, 0x5}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x6, @broadcast, 0x4e21}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xffffff00, 'netpci0\x00', 'veth0_to_bridge\x00', {}, {}, 0xff, 0x3, 0x21}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0xb, 0x0, 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x80}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0xc, 0x0, 0x2}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) 11m50.656459381s ago: executing program 6 (id=1988): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000640)=""/102400, 0x19000) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r2, 0x0, 0x4000000000002, 0x1000f4) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000480)=""/174) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000003c0), 0x0, 0x8) r5 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r5, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) splice(r3, 0x0, r5, 0x0, 0x8000, 0x0) r7 = semget$private(0x0, 0x6, 0x0) semtimedop(r7, 0x0, 0x0, 0x0) semctl$GETZCNT(r7, 0x5, 0xf, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 11m47.415731933s ago: executing program 6 (id=1994): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1101088, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 11m43.130860999s ago: executing program 6 (id=2006): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x541b, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept$alg(r4, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000240), 0xff3b) r8 = accept4(r5, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x6, 0xe) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000040)={0x0, 0xffffffffffffffde, 0x0, 0x1, 0x0, 0x0, 0x200000c5}, 0xc09d) ioctl$sock_SIOCBRDELBR(r3, 0x8910, &(0x7f0000000000)='bridge0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x18) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') preadv(r9, &(0x7f0000000080)=[{&(0x7f0000000200)=""/247, 0xf7}], 0x1, 0xa2, 0x18000) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x20281, 0x0) 11m26.78447929s ago: executing program 42 (id=2006): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x541b, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept$alg(r4, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000240), 0xff3b) r8 = accept4(r5, 0x0, 0x0, 0x0) splice(r6, 0x0, r8, 0x0, 0x6, 0xe) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000040)={0x0, 0xffffffffffffffde, 0x0, 0x1, 0x0, 0x0, 0x200000c5}, 0xc09d) ioctl$sock_SIOCBRDELBR(r3, 0x8910, &(0x7f0000000000)='bridge0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x18) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') preadv(r9, &(0x7f0000000080)=[{&(0x7f0000000200)=""/247, 0xf7}], 0x1, 0xa2, 0x18000) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x20281, 0x0) 7m56.711724769s ago: executing program 2 (id=2435): r0 = socket$can_raw(0x1d, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000240)=@nullb, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='v7\x00', 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000003680)=@migrate={0xac, 0x21, 0x101, 0x0, 0x0, {{@in=@private=0x4, @in=@dev}}, [@migrate={0x50, 0x11, [{@in, @in=@empty, @in, @in=@remote}]}, @policy_type={0xa, 0x10, {0x2}}]}, 0xac}}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0xc, 0xb, 0x200, &(0x7f0000000880)="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"}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) syz_open_dev$sndpcmc(0x0, 0x1, 0x2000) getpid() setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, 0x0}, 0x2c8) 7m54.478667747s ago: executing program 2 (id=2441): openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x3, 0x0, 0x4, 0x0, 0x0, 0xeffffffffffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x0, 0x1000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m52.211422385s ago: executing program 2 (id=2448): r0 = socket$can_raw(0x1d, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000240)=@nullb, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='v7\x00', 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000003680)=@migrate={0xac, 0x21, 0x101, 0x0, 0x0, {{@in=@private=0x4, @in=@dev}}, [@migrate={0x50, 0x11, [{@in, @in=@empty, @in, @in=@remote}]}, @policy_type={0xa, 0x10, {0x2}}]}, 0xac}}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0xc, 0xb, 0x200, &(0x7f0000000880)="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"}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) syz_open_dev$sndpcmc(0x0, 0x1, 0x2000) getpid() r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, 0x0}, 0x2c8) 7m48.855208008s ago: executing program 2 (id=2449): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) r1 = syz_open_dev$vcsn(&(0x7f0000000540), 0x80000000000fff, 0x480201) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./bus\x00', 0x8000, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x14fe, &(0x7f0000001580)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1800000010140100001c0000000000000800050000000000fd966367f25fbac0a3aa99d75eb69ebf86e491977ce5a520643b192aa37824c5aeac0c91656863f6fa05b1e4d08b3c48e5b089e469e850137ad7d2dc"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x88c0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 7m46.224260218s ago: executing program 4 (id=2455): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000001900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x480}}], 0x1, 0x0) 7m46.021768299s ago: executing program 4 (id=2458): syz_usb_connect(0x0, 0x59, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109024700010000000009046900000e01000008240201020205050724010709030009"], 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1532, 0x11b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x80, 0x2, [{{0x9, 0x4, 0x0, 0xb0, 0x2, 0x3, 0x1, 0x7, 0x69, {0x9, 0x21, 0x2a, 0x8, 0x1, {0x22, 0x160}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x3, 0x9}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x8, 0x6, 0x3, 0x10, 0x8}, 0x36, &(0x7f00000001c0)={0x5, 0xf, 0x36, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x6, 0x9, 0x8, 0xd3}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x5, 0x1, 0x7ff}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "1b516d810b78b30174e4c87b309b6e3d"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0xc0, 0xf, 0x3, 0xf8}]}}) r0 = semget$private(0x0, 0x1, 0x0) semtimedop(r0, &(0x7f0000000040)=[{}], 0x1, 0x0) semtimedop(r0, 0x0, 0x0, 0x0) semtimedop(r0, 0x0, 0x0, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x2000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bind$inet6(r2, &(0x7f00000006c0)={0xa, 0x4e23, 0x3, @remote, 0x2}, 0x1c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r5 = socket$inet6(0xa, 0x80803, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0xff80, 0x3c}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5}}, 0xe8) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r6, 0x107, 0xe, &(0x7f00000002c0)=0xfff, 0x4) connect$inet6(r5, &(0x7f00000000c0), 0x1c) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) getdents(r7, &(0x7f0000000fc0)=""/4096, 0x1000) getdents64(r7, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x6) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000007c0)='cgroup.threads\x00', 0x2, 0x0) 7m42.232916873s ago: executing program 4 (id=2465): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000000000000001}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x2, 0x4, 0x4168d, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x2f, 0xff, 0xfa, 0x5, 0x4, @dev={0xfe, 0x80, '\x00', 0x17}, @empty, 0x7800, 0x7800, 0x0, 0xa}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) write$P9_RWSTAT(r0, &(0x7f00000002c0)={0x7, 0x7f, 0x2}, 0x7) unshare(0x64000600) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000ebff7a8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000200b70400000000000085000000330000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r9}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) 7m41.830175484s ago: executing program 2 (id=2467): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) close_range(r0, 0xffffffffffffffff, 0x0) 7m38.247394098s ago: executing program 4 (id=2468): r0 = socket$can_raw(0x1d, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000240)=@nullb, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='v7\x00', 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000003680)=@migrate={0xac, 0x21, 0x101, 0x0, 0x0, {{@in=@private=0x4, @in=@dev}}, [@migrate={0x50, 0x11, [{@in, @in=@empty, @in, @in=@remote}]}, @policy_type={0xa, 0x10, {0x2}}]}, 0xac}}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0xc, 0xb, 0x200, &(0x7f0000000880)="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"}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) syz_open_dev$sndpcmc(0x0, 0x1, 0x2000) getpid() r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, 0x0}, 0x2c8) 7m36.769287383s ago: executing program 2 (id=2471): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000000000000001}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x2, 0x4, 0x4168d, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x2f, 0xff, 0xfa, 0x5, 0x4, @dev={0xfe, 0x80, '\x00', 0x17}, @empty, 0x7800, 0x7800, 0x0, 0xa}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) write$P9_RWSTAT(r0, &(0x7f00000002c0)={0x7, 0x7f, 0x2}, 0x7) unshare(0x64000600) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000ebff7a8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000200b70400000000000085000000330000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r9}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) 7m35.245985539s ago: executing program 4 (id=2473): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000640)=""/102400, 0x19000) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r2, 0x0, 0x4000000000002, 0x1000f4) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000480)=""/174) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000003c0)=[{&(0x7f00000000c0)="17e4f3ca3c05", 0x6}, {&(0x7f0000000200)="abc46908b3df918fe61946b2a7d85cf473884b91c53b94d51db7a5918ed07847c392ee17a23d6fea6e8d3c0f5e15638daf629312107876c7f31ade70432bc5b43f642876bf7e04c45086b9b3695182eeff8243f87f8966baec1a670803eb8ca6b37342f9ea242f21e5726b6c501808457f85459c91ff1116eae79e54b5ec3544ebbb18ee617231e4bdb87424814565dfb6ebe0", 0x93}, {&(0x7f0000000580)="db56b84884ffc02c06bd0f01587a681de55a4df7714790716dddfa75831670014c811bd064f615db698adab368dafbf134b3d26a38503c3fe8a7c5ece07759b81233530ed432985e4feebb5d4ca49dcb8c490c015acacef99f7da736180800000000000000ba12b327f6b79ea0d90605040d84453eff84443a09ab5eeba1586f85c1e383f8095573726b1bf117d96c91d1349f4951ead7fd07838ce689e171c4bda933d8fc5c35ce2fcbc1c5bae12537482f023984c435e056b2e8a6613a841360d40172a17e494ae06d5af1305ffa1eb9cbcedd90b7de636015883d0d3473c4bdfd1f", 0xe3}, {0x0}, {&(0x7f00000004c0)="67df3baec1ce766316819b76b14295d4f969f2095747039d8a9e01159fc171d6ab964bc50f5d66ab6bcdefa298582348a01ac90b6ecd3001c769cf58704f758dae3ecd02919b7e1eebc643c57afec3b45811ab935a8f893220c7329def2702370b371c3966c553ce13a625dfddbe8bc98f220a9ff6ac6a09165c1273ac580916e65995994307bb637dba5994702e22a333a3d48507689db92142d492c5ca788f11ff4a5c51adfcec8f7e15467d446025f37f9c", 0xb3}, {&(0x7f00000002c0)="2b4f2c23cd72e5f8c27c5125a38cc74027abf1994ab65ba7ca4e64b9ab8b357454e5abb6d754f1318dd05531dce7560e6e7d95526c4358848e67345b32b86de0ff15be80ddf3dab5b55443991f2b4d7276d4d6334a4385a70581c45a6926fc7874e38018387a2d6195df3281ba32a96811d4e9e40b1cf5b927", 0x79}], 0x6, 0x8) r5 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r5, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) splice(r3, 0x0, r5, 0x0, 0x8000, 0x0) r7 = semget$private(0x0, 0x6, 0x0) semtimedop(r7, 0x0, 0x0, 0x0) semctl$GETZCNT(r7, 0x5, 0xf, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 7m29.936494779s ago: executing program 4 (id=2475): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x541b, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept$alg(r4, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x6, 0xe) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xffffffffffffffde, 0x0, 0x1, 0x0, 0x0, 0x200000c5}, 0xc09d) ioctl$sock_SIOCBRDELBR(r3, 0x8910, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x18) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x20281, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000380)={0x9, "990eec1c18587c9c9890a0080066b42c00050400220700000000002100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000080)={"fe0d1acce4a37ef94acd000200000000000000000000000000f700"}) syz_usb_connect(0xfffffffffffffffd, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x201, 0xbd, 0xc3, 0x51, 0x20, 0xa5c, 0x2033, 0xc25d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0xf4, 0x80, 0x8, [{{0x9, 0x4, 0xca, 0x2, 0x0, 0x96, 0x2a, 0x11, 0x40}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0xfffffffffffffe38, 0x0}) syz_usb_connect$uac1(0x5, 0xab, &(0x7f00000003c0)={{0x12, 0x1, 0x4a0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x3, 0x1, 0xfe, 0xb0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x40}, [@feature_unit={0x13, 0x24, 0x6, 0x6, 0x1, 0x6, [0x5, 0x1, 0x1, 0x3, 0x4, 0x3], 0x10}, @feature_unit={0x9, 0x24, 0x6, 0x9, 0x3, 0x1, [0x6], 0x80}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xe, 0x3, 0xd, 0xd, "deaa0f1ce17deb93"}, @as_header={0x7, 0x24, 0x1, 0x4, 0xa, 0x4}, @as_header={0x7, 0x24, 0x1, 0x3, 0x2, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0xfa, 0x77, {0x7, 0x25, 0x1, 0x2, 0x56, 0x4800}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xe, 0xb, 0xc, {0x7, 0x25, 0x1, 0x0, 0x7, 0x2}}}}}}}]}}, 0x0) 7m20.949722423s ago: executing program 43 (id=2471): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000000000000001}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x2, 0x4, 0x4168d, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x2f, 0xff, 0xfa, 0x5, 0x4, @dev={0xfe, 0x80, '\x00', 0x17}, @empty, 0x7800, 0x7800, 0x0, 0xa}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) write$P9_RWSTAT(r0, &(0x7f00000002c0)={0x7, 0x7f, 0x2}, 0x7) unshare(0x64000600) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000ebff7a8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000200b70400000000000085000000330000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r9}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) 7m14.318383557s ago: executing program 44 (id=2475): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x541b, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept$alg(r4, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x6, 0xe) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xffffffffffffffde, 0x0, 0x1, 0x0, 0x0, 0x200000c5}, 0xc09d) ioctl$sock_SIOCBRDELBR(r3, 0x8910, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x18) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x20281, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000380)={0x9, "990eec1c18587c9c9890a0080066b42c00050400220700000000002100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000080)={"fe0d1acce4a37ef94acd000200000000000000000000000000f700"}) syz_usb_connect(0xfffffffffffffffd, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x201, 0xbd, 0xc3, 0x51, 0x20, 0xa5c, 0x2033, 0xc25d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0xf4, 0x80, 0x8, [{{0x9, 0x4, 0xca, 0x2, 0x0, 0x96, 0x2a, 0x11, 0x40}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0xfffffffffffffe38, 0x0}) syz_usb_connect$uac1(0x5, 0xab, &(0x7f00000003c0)={{0x12, 0x1, 0x4a0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x3, 0x1, 0xfe, 0xb0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x40}, [@feature_unit={0x13, 0x24, 0x6, 0x6, 0x1, 0x6, [0x5, 0x1, 0x1, 0x3, 0x4, 0x3], 0x10}, @feature_unit={0x9, 0x24, 0x6, 0x9, 0x3, 0x1, [0x6], 0x80}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xe, 0x3, 0xd, 0xd, "deaa0f1ce17deb93"}, @as_header={0x7, 0x24, 0x1, 0x4, 0xa, 0x4}, @as_header={0x7, 0x24, 0x1, 0x3, 0x2, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0xfa, 0x77, {0x7, 0x25, 0x1, 0x2, 0x56, 0x4800}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xe, 0xb, 0xc, {0x7, 0x25, 0x1, 0x0, 0x7, 0x2}}}}}}}]}}, 0x0) 1m45.107700786s ago: executing program 5 (id=3368): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) 1m44.594817257s ago: executing program 5 (id=3369): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) 1m43.668512711s ago: executing program 5 (id=3372): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x80801, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 1m43.064888763s ago: executing program 5 (id=3374): epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x787, &(0x7f0000001000)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140), 0xfcb8) open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b900000000fffffffff2060000000000000200009700", [0x8]}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) 1m41.471095879s ago: executing program 5 (id=3380): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', 0x0}) syz_open_dev$sg(&(0x7f00000060c0), 0x8, 0x8002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) write$binfmt_misc(r1, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r2 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f00000000c0)={0x1, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000340)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="180100"/13, @ANYRESOCT=r0, @ANYRESDEC=r3, @ANYRES64=r3, @ANYRES64=r3, @ANYRESHEX=r3, @ANYRES8=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5, 0x0, 0x1}, 0x18) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f14752455960608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04224705"], 0x4a) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) 1m40.356932353s ago: executing program 5 (id=3387): socket$igmp(0x2, 0x3, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000240)=@nullb, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='v7\x00', 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000003680)=@migrate={0xa0, 0x21, 0x101, 0x0, 0x0, {{@in=@private=0x4, @in=@dev}}, [@migrate={0x50, 0x11, [{@in, @in=@empty, @in, @in=@remote}]}]}, 0xa0}}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0xc, 0xb, 0x200, &(0x7f0000000880)="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"}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) getpid() 1m36.263800839s ago: executing program 45 (id=3387): socket$igmp(0x2, 0x3, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000240)=@nullb, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='v7\x00', 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000003680)=@migrate={0xa0, 0x21, 0x101, 0x0, 0x0, {{@in=@private=0x4, @in=@dev}}, [@migrate={0x50, 0x11, [{@in, @in=@empty, @in, @in=@remote}]}]}, 0xa0}}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0xc, 0xb, 0x200, &(0x7f0000000880)="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"}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) getpid() 29.49559213s ago: executing program 7 (id=3660): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000640)=""/102400, 0x19000) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r2, 0x0, 0x4000000000002, 0x1000f4) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000003c0)=[{&(0x7f00000000c0)="17e4f3ca3c05", 0x6}, {&(0x7f0000000200)="abc46908b3df918fe61946b2a7d85cf473884b91c53b94d51db7a5918ed07847c392ee17a23d6fea6e8d3c0f5e15638daf629312107876c7f31ade70432bc5b43f642876bf7e04c45086b9b3695182eeff8243f87f8966baec1a670803eb8ca6b37342f9ea242f21e5726b6c501808457f85459c91ff1116eae79e54b5ec3544ebbb18ee617231e4bdb87424814565dfb6ebe0", 0x93}, {0x0}, {0x0}, {&(0x7f00000002c0)="2b4f2c23cd72e5f8c27c5125a38cc74027abf1994ab65ba7ca4e64b9ab8b357454e5abb6d754f1318dd05531dce7560e6e7d95526c4358848e67345b32", 0x3d}], 0x5, 0x8) r5 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r5, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) splice(r3, 0x0, r5, 0x0, 0x8000, 0x0) r6 = semget$private(0x0, 0x6, 0x0) semtimedop(r6, 0x0, 0x0, 0x0) semctl$GETZCNT(r6, 0x5, 0xf, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 26.497715251s ago: executing program 7 (id=3669): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c000000000000000000000018010000202075"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 26.203815692s ago: executing program 1 (id=3672): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0xdc, 0x23, 0x1, 0x0, 0x0, "", [@nested={0xc9, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@dev}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3dd"]}]}, 0xdc}], 0x1}, 0x0) 25.394857875s ago: executing program 1 (id=3673): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@multicast, @empty, @val={@void, {0x8100, 0x4, 0x1, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 25.178678225s ago: executing program 7 (id=3677): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10) utime(&(0x7f0000000200)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000100)) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 25.091123526s ago: executing program 1 (id=3678): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000c) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) 23.729534181s ago: executing program 7 (id=3680): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)="13146000000370", 0x7}], 0x7) 23.354279092s ago: executing program 1 (id=3682): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x40]) 23.190621153s ago: executing program 1 (id=3684): setxattr$trusted_overlay_upper(0x0, &(0x7f0000000240), 0x0, 0xff27, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000003400)=[{&(0x7f0000001080)=""/107, 0x7ffff000}, {&(0x7f0000004c00)=""/4096, 0x1000}], 0x2) 22.778890344s ago: executing program 0 (id=3687): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) r1 = io_uring_setup(0x6a3f, &(0x7f0000000340)={0x0, 0x94d2, 0x0, 0xfffffffd, 0x222}) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c) listen(r2, 0x80080400) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r3, 0x10d, 0x89, &(0x7f0000000000), &(0x7f0000000080)=0x4) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') epoll_create1(0x0) close_range(r1, 0xffffffffffffffff, 0x0) 22.495317245s ago: executing program 8 (id=3689): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', 0x0}) syz_open_dev$sg(&(0x7f00000060c0), 0x8, 0x8002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) write$binfmt_misc(r1, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r2 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000340)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f14752455960608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04224705"], 0x4a) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) 22.426815096s ago: executing program 0 (id=3690): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 22.380289046s ago: executing program 7 (id=3692): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x1000004, &(0x7f0000000d40)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x4, 0x7c1, &(0x7f0000001a00)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) readlink(&(0x7f00000003c0)='./file1\x00', &(0x7f0000002200)=""/4104, 0x1008) 21.38765139s ago: executing program 8 (id=3693): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000c) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) 21.38655149s ago: executing program 0 (id=3694): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10) utime(&(0x7f0000000200)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000100)) 21.30840192s ago: executing program 7 (id=3695): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="410601"], 0x5) 21.28326045s ago: executing program 1 (id=3696): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)="13146000000370", 0x7}], 0x7) 20.931715461s ago: executing program 8 (id=3698): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000080)=@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0xc3}, 0x10000}, 0x1c, 0x0}, 0x4004811) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x92e0}, {0xffffffffffffffff, 0x5021}], 0x2, 0x40000) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x1068) 19.963638015s ago: executing program 8 (id=3703): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', 0x0}) syz_open_dev$sg(&(0x7f00000060c0), 0x8, 0x8002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) write$binfmt_misc(r1, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r2 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000340)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f14752455960608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x5) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04224705"], 0x4a) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) 19.086662359s ago: executing program 0 (id=3705): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x1000004, &(0x7f0000000d40)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x4, 0x7c1, &(0x7f0000001a00)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) readlink(&(0x7f00000003c0)='./file1\x00', &(0x7f0000002200)=""/4104, 0x1008) 18.965597219s ago: executing program 8 (id=3706): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) r1 = io_uring_setup(0x6a3f, &(0x7f0000000340)={0x0, 0x94d2, 0x0, 0xfffffffd, 0x222}) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c) listen(r2, 0x80080400) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r3, 0x10d, 0x89, &(0x7f0000000000), &(0x7f0000000080)=0x4) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000000, &(0x7f0000000a80)={[{@noinit_itable}, {@grpquota}, {@resgid}, {@oldalloc}, {@lazytime}, {@jqfmt_vfsv1}]}, 0x1, 0x500, &(0x7f0000000500)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000240)=r6) write$binfmt_script(r4, &(0x7f00000000c0), 0xfea7) ioctl$FS_IOC_RESVSP(r5, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0xefff, 0xfa64}) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80000003}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) 18.964915739s ago: executing program 0 (id=3707): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000008000002000000400004802c0001800a0001006c696d69740000001c0002800c00014000000000000000070c0002400000000000000001100001800a0001006c696d69740000000900010073797a30000000000900020073797a3200"], 0x94}}, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0xfffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f00000005c0)={0x15, 0x110, 0xfa00, {r4, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x4e22, @empty}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x1, 0xfffffffffffffffd}}}, 0x118) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r8, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c"], 0x7c}}, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r7, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000001) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x800, @mcast1, 0xfffffffd}, {0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x6af0dc3c}, r4, 0x3}}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000ac000000ac000000070000000b00000000000009030000000f00000004000093080000000c00000040000000080000000c00000000000100010000000d0000003b000000010100000e0000000400000000000100080000000000000a020000000900000002000005000500000800000005000000a95a0000050000000300000007000000000a00000000080000000000000e05000000020000000500000001000005070000000500000001000000010100000030005ffc2e00000000000000"], &(0x7f00000003c0)=""/112, 0xcb, 0x70, 0x1, 0x3, 0x10000, @value=r2}, 0x28) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x20, 0x31, 0xffffffffffffffff, 0x0) 18.292172191s ago: executing program 8 (id=3709): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)="13146000000370", 0x7}], 0x7) 18.256677651s ago: executing program 0 (id=3710): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000008000002000000400004802c0001800a0001006c696d69740000001c0002800c00014000000000000000070c0002400000000000000001100001800a0001006c696d69740000000900010073797a30000000000900020073797a3200"], 0x94}}, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0xfffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f00000005c0)={0x15, 0x110, 0xfa00, {r4, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x4e22, @empty}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x1, 0xfffffffffffffffd}}}, 0x118) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r8, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c"], 0x7c}}, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r7, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000001) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x800, @mcast1, 0xfffffffd}, {0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x6af0dc3c}, r4, 0x3}}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000ac000000ac000000070000000b00000000000009030000000f00000004000093080000000c00000040000000080000000c00000000000100010000000d0000003b000000010100000e0000000400000000000100080000000000000a020000000900000002000005000500000800000005000000a95a0000050000000300000007000000000a00000000080000000000000e05000000020000000500000001000005070000000500000001000000010100000030005ffc2e00000000000000"], &(0x7f00000003c0)=""/112, 0xcb, 0x70, 0x1, 0x3, 0x10000, @value=r2}, 0x28) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x20, 0x31, 0xffffffffffffffff, 0x0) 17.958214013s ago: executing program 3 (id=3713): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000080)=@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0xc3}, 0x10000}, 0x1c, 0x0}, 0x4004811) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x92e0}, {0xffffffffffffffff, 0x5021}], 0x2, 0x40000) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x1068) 17.023237366s ago: executing program 3 (id=3714): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0xfffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00'}, 0x10) syz_io_uring_submit(r1, 0x0, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x0, 0xffffff80, 0x178, 0x3b8, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52"}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) 16.995768236s ago: executing program 3 (id=3715): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x1d8, 0x12, 0x60d, 0x0, 0x202, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @remote, [], [], 'veth0_to_team\x00', 'macsec0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 16.861624427s ago: executing program 3 (id=3716): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10) utime(&(0x7f0000000200)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000100)) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0xff07, 0x0, 0x0, 0x1ff, 0x0, "5f330000a90100f9"}) syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 15.731352291s ago: executing program 3 (id=3717): r0 = socket$tipc(0x1e, 0x5, 0x0) sendmmsg$inet(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="918326cd94a8f56a679d3d077fbff050441fe0a41afd4d80c1b48640269fd3e0bb21be0b962ed3b13ef67e8febe268a9dc63327daa26726b352295363de1144374803aa20dfde78789", 0x49}], 0x1}}], 0x1, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$SMC_PNETID_DEL(r2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FITHAW(r0, 0xc0045878) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x11}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0xe, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) clock_settime(0x1, &(0x7f0000000100)={0x0, 0x3938700}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x6) symlinkat(0x0, 0xffffffffffffffff, 0x0) ioperm(0xd6, 0x4, 0x6) 15.470156832s ago: executing program 3 (id=3718): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xf, 0x4, 0x0, 0x0, 0x3c, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x4, 0xc0}, @timestamp_prespec={0x44, 0x1c, 0x1, 0x3, 0x8, [{@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}]}, @noop, @noop, @lsrr={0x83, 0x3, 0xdc}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.021128217s ago: executing program 46 (id=3696): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)="13146000000370", 0x7}], 0x7) 5.991727188s ago: executing program 47 (id=3695): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="410601"], 0x5) 3.012583958s ago: executing program 48 (id=3709): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)="13146000000370", 0x7}], 0x7) 2.973707019s ago: executing program 49 (id=3710): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000008000002000000400004802c0001800a0001006c696d69740000001c0002800c00014000000000000000070c0002400000000000000001100001800a0001006c696d69740000000900010073797a30000000000900020073797a3200"], 0x94}}, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0xfffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f00000005c0)={0x15, 0x110, 0xfa00, {r4, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x4e22, @empty}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x1, 0xfffffffffffffffd}}}, 0x118) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r8, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c"], 0x7c}}, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r7, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000001) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x800, @mcast1, 0xfffffffd}, {0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x6af0dc3c}, r4, 0x3}}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000ac000000ac000000070000000b00000000000009030000000f00000004000093080000000c00000040000000080000000c00000000000100010000000d0000003b000000010100000e0000000400000000000100080000000000000a020000000900000002000005000500000800000005000000a95a0000050000000300000007000000000a00000000080000000000000e05000000020000000500000001000005070000000500000001000000010100000030005ffc2e00000000000000"], &(0x7f00000003c0)=""/112, 0xcb, 0x70, 0x1, 0x3, 0x10000, @value=r2}, 0x28) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x20, 0x31, 0xffffffffffffffff, 0x0) 0s ago: executing program 50 (id=3718): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xf, 0x4, 0x0, 0x0, 0x3c, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x4, 0xc0}, @timestamp_prespec={0x44, 0x1c, 0x1, 0x3, 0x8, [{@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}]}, @noop, @noop, @lsrr={0x83, 0x3, 0xdc}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): 1][T14407] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1278.654957][T14407] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 1278.668814][T14407] BTRFS info (device loop7): using free space tree [ 1278.738819][ T952] usb 6-1: Using ep0 maxpacket: 16 [ 1278.745968][ T952] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 1278.768687][ T952] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.788750][ T952] usb 6-1: config 0 has no interface number 0 [ 1278.801431][ T952] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1278.819968][ T952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.828191][ T952] usb 6-1: Product: syz [ 1278.848676][ T952] usb 6-1: Manufacturer: syz [ 1278.853334][ T952] usb 6-1: SerialNumber: syz [ 1278.871010][ T952] usb 6-1: config 0 descriptor?? [ 1278.991564][T14407] BTRFS info (device loop7): enabling ssd optimizations [ 1279.303892][T14410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1279.313117][T14410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1279.975809][ T952] usb 6-1: Found UVC 9.07 device syz (046d:08d3) [ 1279.994605][ T952] usb 6-1: No valid video chain found. [ 1280.047680][ T952] usb 6-1: USB disconnect, device number 20 [ 1280.121603][T14449] VFS: could not find a valid V7 on nullb0. [ 1281.803993][T14463] VFS: could not find a valid V7 on nullb0. [ 1284.616696][ T4301] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1285.552616][T13705] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1285.785599][ T4301] usb 2-1: device not accepting address 39, error -71 [ 1286.613447][T14489] loop1: detected capacity change from 0 to 256 [ 1286.826525][T14489] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1286.841843][T14494] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1286.874591][T14495] netlink: 'syz.8.2674': attribute type 10 has an invalid length. [ 1287.091556][ T4426] bond0: (slave bridge0): link status definitely down, disabling slave [ 1289.457137][T14517] overlayfs: unrecognized mount option "smackfsfloor=Y}+" or missing value [ 1289.515549][T14518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2670'. [ 1289.518661][T14518] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1289.518696][T14518] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1289.518717][T14518] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1290.538929][T14527] loop8: detected capacity change from 0 to 256 [ 1290.682961][T14527] exFAT-fs (loop8): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1294.987172][T14544] VFS: could not find a valid V7 on nullb0. [ 1295.453615][T14552] VFS: could not find a valid V7 on nullb0. [ 1296.905413][T14568] Driver unsupported XDP return value 0 on prog (id 688) dev N/A, expect packet loss! [ 1296.934716][T14570] loop8: detected capacity change from 0 to 512 [ 1296.953942][T14570] ext4: Unknown parameter 'noacl' [ 1297.018790][T14093] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1298.141460][T14579] set match dimension is over the limit! [ 1300.072913][T14596] mkiss: ax0: crc mode is auto. [ 1300.375918][T14605] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2701'. [ 1300.494925][T14600] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2701'. [ 1301.930261][T14615] loop7: detected capacity change from 0 to 512 [ 1301.951446][T14615] ext4: Unknown parameter 'noacl' [ 1302.030904][T14093] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1303.999526][T14636] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2711'. [ 1304.157701][T14636] device bridge_slave_1 left promiscuous mode [ 1304.178965][T14636] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.118414][T14636] device bridge_slave_0 left promiscuous mode [ 1305.143921][T14636] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.201619][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.228209][T14636] bond0: (slave bridge0): Releasing backup interface [ 1305.826701][T14648] mkiss: ax0: crc mode is auto. [ 1306.195071][T14655] VFS: could not find a valid V7 on nullb0. [ 1306.535342][T10884] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1307.225499][T14660] loop7: detected capacity change from 0 to 2048 [ 1307.288807][ T4262] Bluetooth: hci2: command 0x0406 tx timeout [ 1307.334993][T14660] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1307.378865][T10884] usb 4-1: Using ep0 maxpacket: 32 [ 1307.389037][T10884] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1307.431657][T10884] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1307.469386][T10884] usb 4-1: can't read configurations, error -71 [ 1308.911917][T13705] EXT4-fs (loop7): unmounting filesystem. [ 1309.062303][T14675] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1309.140403][T14675] netlink: 'syz.8.2721': attribute type 10 has an invalid length. [ 1310.388718][T10153] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1310.668898][T10153] usb 9-1: Using ep0 maxpacket: 32 [ 1310.806799][T10153] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1310.826604][T10153] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1310.868861][ T4299] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1310.892165][T10153] usb 9-1: can't read configurations, error -71 [ 1310.981821][T14694] mkiss: ax0: crc mode is auto. [ 1311.058830][ T4299] usb 4-1: Using ep0 maxpacket: 32 [ 1311.075394][ T4299] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1311.139172][ T4299] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1311.192197][ T4299] usb 4-1: can't read configurations, error -71 [ 1312.103891][T14698] Falling back ldisc for ttyS3. [ 1312.398719][ T4269] Bluetooth: hci3: command 0x0406 tx timeout [ 1314.082243][T14733] Cannot find set identified by id 0 to match [ 1314.095831][ T26] audit: type=1326 audit(1731256133.112:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14729 comm="syz.8.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1314.135982][T14734] loop3: detected capacity change from 0 to 512 [ 1314.155613][T14734] ext4: Unknown parameter 'noacl' [ 1314.165348][ T26] audit: type=1326 audit(1731256133.112:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14729 comm="syz.8.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1314.289688][ T26] audit: type=1326 audit(1731256133.152:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14729 comm="syz.8.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1314.326436][T14735] loop8: detected capacity change from 0 to 2048 [ 1314.409019][ T26] audit: type=1326 audit(1731256133.152:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14729 comm="syz.8.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1314.454518][ T26] audit: type=1326 audit(1731256133.172:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14729 comm="syz.8.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1314.889950][ T26] audit: type=1326 audit(1731256133.172:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14729 comm="syz.8.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1314.958420][ T26] audit: type=1326 audit(1731256133.172:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14729 comm="syz.8.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1315.122868][ T26] audit: type=1326 audit(1731256133.172:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14729 comm="syz.8.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1315.153758][ T26] audit: type=1326 audit(1731256133.172:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14729 comm="syz.8.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1315.201272][ T26] audit: type=1326 audit(1731256133.172:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14729 comm="syz.8.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1315.323992][T14758] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.2745'. [ 1315.349936][T14754] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.2745'. [ 1315.363644][T14756] loop3: detected capacity change from 0 to 1024 [ 1315.371404][T14756] EXT4-fs: Ignoring removed orlov option [ 1315.384591][T14756] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1315.507379][T14756] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1316.253496][T10877] EXT4-fs (loop3): unmounting filesystem. [ 1316.365477][T14768] loop5: detected capacity change from 0 to 32768 [ 1316.405835][T14768] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.2748 (14768) [ 1316.569816][T14768] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1316.604537][T14768] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1316.631886][T14768] BTRFS info (device loop5): using free space tree [ 1316.947925][T14799] loop3: detected capacity change from 0 to 512 [ 1316.979669][T14768] BTRFS info (device loop5): enabling ssd optimizations [ 1317.011671][T14799] ext4: Unknown parameter 'noacl' [ 1317.067734][T13503] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1318.980063][T14828] loop8: detected capacity change from 0 to 2048 [ 1319.098793][ T26] kauditd_printk_skb: 77 callbacks suppressed [ 1319.098810][ T26] audit: type=1326 audit(1731256650.121:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14824 comm="syz.8.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1319.238236][T10684] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1319.262270][ T26] audit: type=1326 audit(1731256650.151:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14824 comm="syz.8.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1319.344525][ T26] audit: type=1326 audit(1731256650.151:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14824 comm="syz.8.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1319.454126][ T26] audit: type=1326 audit(1731256650.161:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14824 comm="syz.8.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1319.566020][ T26] audit: type=1326 audit(1731256650.161:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14824 comm="syz.8.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1319.641338][ T26] audit: type=1326 audit(1731256650.161:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14824 comm="syz.8.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1320.674603][T14854] mkiss: ax0: crc mode is auto. [ 1321.684958][T14860] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2771'. [ 1321.745749][T14858] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2771'. [ 1321.749041][ T26] audit: type=1326 audit(1731256652.761:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14859 comm="syz.5.2765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e69b7e719 code=0x7ffc0000 [ 1321.887256][ T26] audit: type=1326 audit(1731256652.821:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14859 comm="syz.5.2765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6e69b7e719 code=0x7ffc0000 [ 1321.976436][ T26] audit: type=1326 audit(1731256652.821:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14859 comm="syz.5.2765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e69b7e719 code=0x7ffc0000 [ 1322.059401][T14862] loop5: detected capacity change from 0 to 2048 [ 1322.090748][ T26] audit: type=1326 audit(1731256652.821:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14859 comm="syz.5.2765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e69b7e719 code=0x7ffc0000 [ 1322.730821][T14869] loop1: detected capacity change from 0 to 2048 [ 1322.745730][T14856] loop3: detected capacity change from 0 to 32768 [ 1322.779391][T14856] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2770 (14856) [ 1322.823217][T14869] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1322.855801][T14870] loop5: detected capacity change from 0 to 2048 [ 1322.879994][T14856] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1322.943876][T14856] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1322.997968][T14856] BTRFS info (device loop3): using free space tree [ 1323.284538][T14856] BTRFS info (device loop3): enabling ssd optimizations [ 1323.352618][T11962] EXT4-fs (loop1): unmounting filesystem. [ 1323.754910][T14905] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2778'. [ 1324.175700][T14902] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2778'. [ 1324.424417][T10877] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1324.545040][T14917] loop8: detected capacity change from 0 to 1024 [ 1324.570099][T14917] EXT4-fs: Ignoring removed orlov option [ 1324.596409][T14917] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1324.708933][T14917] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1325.656684][T13744] EXT4-fs (loop8): unmounting filesystem. [ 1326.316375][T14933] loop3: detected capacity change from 0 to 256 [ 1326.416121][T14937] mkiss: ax0: crc mode is auto. [ 1327.260516][T14933] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1327.335334][T14918] loop1: detected capacity change from 0 to 32768 [ 1327.351491][T14918] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.2782 (14918) [ 1327.447055][T14918] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1327.497046][T14918] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1327.536681][T14918] BTRFS info (device loop1): using free space tree [ 1327.748113][T14967] mkiss: ax0: crc mode is auto. [ 1327.811255][T14965] Cannot find set identified by id 0 to match [ 1328.613267][T14918] BTRFS error (device loop1): open_ctree failed [ 1329.938678][T14979] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1330.027642][T14989] loop7: detected capacity change from 0 to 256 [ 1330.070120][T14989] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1330.141834][T14979] usb 9-1: Using ep0 maxpacket: 32 [ 1330.334701][T14979] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1330.346717][T14979] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1330.360972][T14979] usb 9-1: can't read configurations, error -71 [ 1330.464917][T14997] VFS: could not find a valid V7 on nullb0. [ 1331.565222][T15009] loop5: detected capacity change from 0 to 256 [ 1331.595668][T15009] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1331.658827][ T4772] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1332.738677][ T4772] usb 2-1: Using ep0 maxpacket: 16 [ 1332.750449][ T4772] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1332.769057][ T4772] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1332.779747][ T4772] usb 2-1: config 0 has no interface number 0 [ 1332.788396][ T4772] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1332.818722][ T4772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.862317][ T4772] usb 2-1: Product: syz [ 1332.866852][ T4772] usb 2-1: Manufacturer: syz [ 1332.889230][ T4772] usb 2-1: SerialNumber: syz [ 1332.905291][ T4772] usb 2-1: config 0 descriptor?? [ 1333.145791][T14999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1333.298989][T14999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1334.511143][ T4772] usb 2-1: Found UVC 9.07 device syz (046d:08d3) [ 1334.517673][ T4772] usb 2-1: No valid video chain found. [ 1334.534507][ T4772] usb 2-1: USB disconnect, device number 41 [ 1335.544676][ T4772] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1335.664897][T15048] overlayfs: unrecognized mount option "smackfsfloor=Y}+" or missing value [ 1335.727091][T15049] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1335.735501][T15049] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1335.744111][T15049] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1335.801203][ T4772] usb 9-1: Using ep0 maxpacket: 32 [ 1336.508741][ T4772] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1336.559361][ T4772] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1336.566999][ T4772] usb 9-1: can't read configurations, error -71 [ 1336.643176][T15054] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2816'. [ 1336.696553][T15054] device team_slave_0 entered promiscuous mode [ 1336.703275][T15054] device team_slave_1 entered promiscuous mode [ 1336.741798][T15059] loop1: detected capacity change from 0 to 1024 [ 1336.746159][T15054] device macvtap1 entered promiscuous mode [ 1336.774763][T15054] device team0 entered promiscuous mode [ 1336.786760][T15059] EXT4-fs: Ignoring removed orlov option [ 1336.789200][T15037] loop3: detected capacity change from 0 to 32768 [ 1336.799867][T15059] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1336.805740][T15054] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1336.829610][T15037] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2809 (15037) [ 1336.879757][T15059] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1336.905073][T15037] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1336.927174][T15037] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1337.117670][T15037] BTRFS info (device loop3): using free space tree [ 1337.327842][ T26] kauditd_printk_skb: 85 callbacks suppressed [ 1337.327860][ T26] audit: type=1326 audit(1731256668.341:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15077 comm="syz.7.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c79b7e719 code=0x7ffc0000 [ 1337.382912][ T26] audit: type=1326 audit(1731256668.341:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15077 comm="syz.7.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c79b7e719 code=0x7ffc0000 [ 1337.408002][ T26] audit: type=1326 audit(1731256668.401:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15077 comm="syz.7.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8c79b7e719 code=0x7ffc0000 [ 1337.430995][ T26] audit: type=1326 audit(1731256668.401:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15077 comm="syz.7.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c79b7e719 code=0x7ffc0000 [ 1337.435778][T15088] loop5: detected capacity change from 0 to 1024 [ 1337.454476][T15037] BTRFS info (device loop3): enabling ssd optimizations [ 1337.470829][ T26] audit: type=1326 audit(1731256668.401:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15077 comm="syz.7.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c79b7e719 code=0x7ffc0000 [ 1337.511602][ T26] audit: type=1326 audit(1731256668.401:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15077 comm="syz.7.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f8c79b7e719 code=0x7ffc0000 [ 1337.565769][T15092] ieee802154 phy0 wpan0: encryption failed: -22 [ 1337.572258][ T26] audit: type=1326 audit(1731256668.401:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15077 comm="syz.7.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c79b7e719 code=0x7ffc0000 [ 1337.599308][ T26] audit: type=1326 audit(1731256668.401:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15077 comm="syz.7.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c79b7e719 code=0x7ffc0000 [ 1337.652162][ T26] audit: type=1326 audit(1731256668.401:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15077 comm="syz.7.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c79b7e719 code=0x7ffc0000 [ 1337.655748][T11962] EXT4-fs (loop1): unmounting filesystem. [ 1337.685886][T15092] device bond0 entered promiscuous mode [ 1337.694883][T15092] device bond_slave_0 entered promiscuous mode [ 1337.699561][T15088] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1337.708692][ T26] audit: type=1326 audit(1731256668.401:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15077 comm="syz.7.2819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c79b7e719 code=0x7ffc0000 [ 1337.735916][T15092] device bond_slave_1 entered promiscuous mode [ 1337.956201][T15092] device bridge0 entered promiscuous mode [ 1338.479220][T10684] EXT4-fs (loop5): unmounting filesystem. [ 1338.836583][T15103] mkiss: ax0: crc mode is auto. [ 1342.693409][T15117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2828'. [ 1342.705032][T10877] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1342.729940][T15117] device bridge_slave_1 left promiscuous mode [ 1342.748199][T15117] bridge0: port 2(bridge_slave_1) entered disabled state [ 1342.793041][T15120] overlayfs: unrecognized mount option "smackfsfloor=Y}+" or missing value [ 1343.283929][T15117] device bridge_slave_0 left promiscuous mode [ 1343.325735][T15117] bridge0: port 1(bridge_slave_0) entered disabled state [ 1343.831586][T15113] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1343.872792][T15119] netlink: 'syz.5.2825': attribute type 10 has an invalid length. [ 1343.891565][T15119] bridge0: port 3(syz_tun) entered disabled state [ 1343.898297][T15119] bridge0: port 2(bridge_slave_1) entered disabled state [ 1343.905659][T15119] bridge0: port 1(bridge_slave_0) entered disabled state [ 1343.937633][T15119] bridge0: port 3(syz_tun) entered blocking state [ 1343.944255][T15119] bridge0: port 3(syz_tun) entered forwarding state [ 1343.951159][T15119] bridge0: port 2(bridge_slave_1) entered blocking state [ 1343.958314][T15119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1343.965777][T15119] bridge0: port 1(bridge_slave_0) entered blocking state [ 1343.973053][T15119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1343.999740][T15119] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1344.487355][T15128] VFS: could not find a valid V7 on nullb0. [ 1344.496367][T15129] VFS: could not find a valid V7 on nullb0. [ 1344.519393][T15120] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 1344.519434][T15120] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 1344.519456][T15120] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 1344.643723][T13109] bond0: (slave bridge0): link status definitely up, 0 Mbps full duplex [ 1344.746813][T15137] loop1: detected capacity change from 0 to 1024 [ 1344.762294][T15137] EXT4-fs: Ignoring removed orlov option [ 1344.768158][T15137] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1344.876731][T15137] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1344.956974][T15148] loop8: detected capacity change from 0 to 764 [ 1345.966631][T15148] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1346.225632][T11962] EXT4-fs (loop1): unmounting filesystem. [ 1346.938998][T15170] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2842'. [ 1347.030618][T15173] VFS: could not find a valid V7 on nullb0. [ 1347.817333][T15170] device bond_slave_0 entered promiscuous mode [ 1347.824119][T15170] device bond_slave_1 entered promiscuous mode [ 1347.830406][T15170] device bridge0 entered promiscuous mode [ 1347.834320][T15163] loop1: detected capacity change from 0 to 32768 [ 1347.846365][T15170] device macvtap1 entered promiscuous mode [ 1347.852486][T15163] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.2838 (15163) [ 1347.865082][T15170] device bond0 entered promiscuous mode [ 1347.878298][T15170] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1347.900399][T15163] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1347.964888][T15163] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1348.051666][T15163] BTRFS info (device loop1): using free space tree [ 1348.305719][T15197] overlayfs: unrecognized mount option "smackfsfloor=Y}+" or missing value [ 1348.367300][T15198] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1348.375816][T15198] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1348.384434][T15198] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1348.994225][T15201] loop8: detected capacity change from 0 to 1024 [ 1349.029444][T15163] BTRFS info (device loop1): enabling ssd optimizations [ 1349.076543][T15201] EXT4-fs: Ignoring removed orlov option [ 1349.082350][T15201] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1349.160710][T15215] loop5: detected capacity change from 0 to 256 [ 1349.314012][T15215] FAT-fs (loop5): bogus number of FAT sectors [ 1349.331785][T15201] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1349.357673][T15215] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1350.700533][T13744] EXT4-fs (loop8): unmounting filesystem. [ 1351.776090][T11962] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1351.875022][T15241] VFS: could not find a valid V7 on nullb0. [ 1352.422771][T15255] VFS: could not find a valid V7 on nullb0. [ 1352.667403][T15256] overlayfs: unrecognized mount option "smackfsfloor=Y}+" or missing value [ 1352.749600][T15258] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1352.758305][T15258] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1352.767289][T15258] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1353.735514][T15264] loop8: detected capacity change from 0 to 2048 [ 1353.829952][T15264] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1354.745926][T13744] EXT4-fs (loop8): unmounting filesystem. [ 1355.019746][T15262] loop7: detected capacity change from 0 to 32768 [ 1355.037713][T15262] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.2863 (15262) [ 1355.087719][T15282] set match dimension is over the limit! [ 1355.103446][T15262] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1355.130232][T15262] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 1355.171581][T15262] BTRFS info (device loop7): using free space tree [ 1355.343733][T15300] VFS: could not find a valid V7 on nullb0. [ 1355.870185][T15262] BTRFS info (device loop7): enabling ssd optimizations [ 1356.308748][T15318] VFS: could not find a valid V7 on nullb0. [ 1357.759449][T15331] device bond0 entered promiscuous mode [ 1357.765091][T15331] device bond_slave_0 entered promiscuous mode [ 1357.811691][T15331] device bond_slave_1 entered promiscuous mode [ 1357.956993][T15330] loop3: detected capacity change from 0 to 2048 [ 1358.071232][T13705] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1358.091505][T15330] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1359.032337][T10877] EXT4-fs (loop3): unmounting filesystem. [ 1359.132867][T15350] overlayfs: unrecognized mount option "smackfsfloor=Y}+" or missing value [ 1359.204318][T15351] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2884'. [ 1359.216479][T15351] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22 [ 1359.225083][T15351] netdevsim netdevsim8: Direct firmware load for . failed with error -22 [ 1359.233631][T15351] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 1360.113252][T15356] loop1: detected capacity change from 0 to 1024 [ 1360.149380][T15356] EXT4-fs: Ignoring removed orlov option [ 1360.155099][T15356] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1360.519280][T15356] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1361.277076][T11962] EXT4-fs (loop1): unmounting filesystem. [ 1362.423003][T15384] loop8: detected capacity change from 0 to 2048 [ 1362.453272][T15384] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1362.474616][T15387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2893'. [ 1362.505995][T15387] device erspan0 entered promiscuous mode [ 1362.518082][T15387] device macvtap1 entered promiscuous mode [ 1362.525779][T15390] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.2894'. [ 1362.540829][T15385] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.2894'. [ 1362.680913][T13744] EXT4-fs (loop8): unmounting filesystem. [ 1362.810274][T15401] overlayfs: unrecognized mount option "smackfsfloor=Y}+" or missing value [ 1362.850332][T15401] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2897'. [ 1362.864256][T15401] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 1362.872663][T15401] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 1362.881243][T15401] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 1364.538936][T15426] VFS: could not find a valid V7 on nullb0. [ 1365.649286][T15434] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2910'. [ 1365.680474][T15434] device erspan0 entered promiscuous mode [ 1365.834886][T15434] device macvtap1 entered promiscuous mode [ 1365.907993][T15437] loop3: detected capacity change from 0 to 512 [ 1365.968822][T15437] ext4: Unknown parameter 'noacl' [ 1366.037525][T15439] loop1: detected capacity change from 0 to 2048 [ 1366.127968][T15439] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1366.354465][T15454] overlayfs: unrecognized mount option "smackfsfloor=Y}+" or missing value [ 1366.420385][T15455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2913'. [ 1366.456139][T15455] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1366.464754][T15455] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1366.473559][T15455] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1368.387701][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1368.654251][T11962] EXT4-fs (loop1): unmounting filesystem. [ 1368.692063][T15464] loop5: detected capacity change from 0 to 256 [ 1369.053536][T15464] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1369.407023][T15471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2919'. [ 1370.489840][T15481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2922'. [ 1370.503803][T15479] loop5: detected capacity change from 0 to 256 [ 1370.557521][T15479] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1370.582621][T15483] loop8: detected capacity change from 0 to 512 [ 1370.590210][T15483] ext4: Unknown parameter 'noacl' [ 1370.607605][T15481] device macvtap1 entered promiscuous mode [ 1370.809006][T15481] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1371.842240][T15496] overlayfs: unrecognized mount option "smackfsfloor=Y}+" or missing value [ 1371.900461][T15497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2927'. [ 1371.915131][T15497] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1371.923539][T15497] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1371.932082][T15497] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1372.804890][T15505] loop8: detected capacity change from 0 to 2048 [ 1372.893659][T15505] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1373.174142][T13744] EXT4-fs (loop8): unmounting filesystem. [ 1373.386582][T15529] loop7: detected capacity change from 0 to 256 [ 1374.307942][T15529] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1375.248421][T15548] overlayfs: unrecognized mount option "smackfsfloor=Y}+" or missing value [ 1375.274339][T15549] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2941'. [ 1375.288340][T15549] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1375.296735][T15549] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1375.305323][T15549] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1375.718283][T15552] loop3: detected capacity change from 0 to 1024 [ 1375.786513][T15552] EXT4-fs: Ignoring removed orlov option [ 1375.846746][T15552] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1375.907085][T15552] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1375.956782][T15562] loop8: detected capacity change from 0 to 2048 [ 1376.005780][T15562] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1376.926542][T10877] EXT4-fs (loop3): unmounting filesystem. [ 1376.995616][T13744] EXT4-fs (loop8): unmounting filesystem. [ 1377.487163][T15590] loop7: detected capacity change from 0 to 2048 [ 1377.888323][T15590] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1378.316620][T15599] VFS: could not find a valid V7 on nullb0. [ 1379.457481][T15608] overlayfs: unrecognized mount option "smackfsfloor=Y}+" or missing value [ 1379.510918][T15609] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2955'. [ 1379.525597][T15609] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22 [ 1379.534047][T15609] netdevsim netdevsim8: Direct firmware load for . failed with error -22 [ 1379.542609][T15609] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 1380.280525][T13705] EXT4-fs (loop7): unmounting filesystem. [ 1380.449670][T15617] VFS: could not find a valid V7 on nullb0. [ 1380.747208][T15621] VFS: could not find a valid V7 on nullb0. [ 1381.591895][T15624] loop8: detected capacity change from 0 to 2048 [ 1381.706158][T15624] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1381.816013][T15634] VFS: could not find a valid V7 on nullb0. [ 1383.098204][T13744] EXT4-fs (loop8): unmounting filesystem. [ 1383.325738][T15652] loop3: detected capacity change from 0 to 2048 [ 1383.436252][T15661] VFS: could not find a valid V7 on nullb0. [ 1383.768215][T15652] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1384.219900][T15659] loop1: detected capacity change from 0 to 2048 [ 1384.287150][T15659] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1384.353538][T10877] EXT4-fs (loop3): unmounting filesystem. [ 1384.380089][T15673] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2973'. [ 1384.393756][T15673] device bond_slave_0 entered promiscuous mode [ 1384.400574][T15673] device bond_slave_1 entered promiscuous mode [ 1384.403164][T11962] EXT4-fs (loop1): unmounting filesystem. [ 1384.408948][T15673] device macvtap2 entered promiscuous mode [ 1384.418813][T15673] device bond0 entered promiscuous mode [ 1384.438995][T15673] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1384.470070][T15677] VFS: could not find a valid V7 on nullb0. [ 1384.966244][T15676] device bond0 left promiscuous mode [ 1385.091774][T15676] device bond_slave_0 left promiscuous mode [ 1385.097856][T15676] device bond_slave_1 left promiscuous mode [ 1385.386606][T15688] loop7: detected capacity change from 0 to 2048 [ 1385.469754][T15688] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1385.656735][T13705] EXT4-fs (loop7): unmounting filesystem. [ 1385.666143][T15702] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2980'. [ 1385.764771][T15705] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2982'. [ 1385.790112][T15705] device gretap0 entered promiscuous mode [ 1385.827358][T15705] device macvtap3 entered promiscuous mode [ 1386.021791][T15713] loop3: detected capacity change from 0 to 1024 [ 1386.041693][T15713] EXT4-fs: Ignoring removed orlov option [ 1386.052875][T15713] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1386.101358][T15715] loop8: detected capacity change from 0 to 2048 [ 1386.128099][T15713] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1386.155802][T15715] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1386.560494][T13744] EXT4-fs (loop8): unmounting filesystem. [ 1386.934453][T10877] EXT4-fs (loop3): unmounting filesystem. [ 1387.236161][T15741] loop3: detected capacity change from 0 to 2048 [ 1387.316409][T15741] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1388.734099][T10877] EXT4-fs (loop3): unmounting filesystem. [ 1388.805305][T15760] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2997'. [ 1388.876517][T15760] device gretap0 entered promiscuous mode [ 1388.906167][T15760] device macvtap2 entered promiscuous mode [ 1390.266510][T15775] loop1: detected capacity change from 0 to 1024 [ 1390.314181][T15775] EXT4-fs: Ignoring removed orlov option [ 1390.328782][T15775] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1390.432981][T15775] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1392.390899][T11962] EXT4-fs (loop1): unmounting filesystem. [ 1392.697934][T15795] VFS: could not find a valid V7 on nullb0. [ 1393.416534][T15797] loop5: detected capacity change from 0 to 2048 [ 1393.574930][T15797] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1393.895341][T10684] EXT4-fs (loop5): unmounting filesystem. [ 1395.476159][T15823] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1395.532600][T15824] netlink: 'syz.8.3015': attribute type 10 has an invalid length. [ 1396.774753][T15841] loop8: detected capacity change from 0 to 1024 [ 1396.830200][T15841] EXT4-fs: Ignoring removed orlov option [ 1396.912287][T15841] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1397.037354][T15841] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1398.270111][T13744] EXT4-fs (loop8): unmounting filesystem. [ 1398.351435][T15860] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1398.398887][T15860] netlink: 'syz.7.3024': attribute type 10 has an invalid length. [ 1401.244117][T15883] Falling back ldisc for ttyS3. [ 1402.929647][T15895] loop5: detected capacity change from 0 to 1024 [ 1402.936828][T15895] EXT4-fs: Ignoring removed orlov option [ 1403.065890][T15895] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1403.158944][T15895] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1403.297652][ T26] kauditd_printk_skb: 31 callbacks suppressed [ 1403.297666][ T26] audit: type=1326 audit(1731258526.309:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15903 comm="syz.8.3037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1403.376593][ T26] audit: type=1326 audit(1731258526.379:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15903 comm="syz.8.3037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1403.476534][ T26] audit: type=1326 audit(1731258526.379:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15903 comm="syz.8.3037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1403.548964][ T26] audit: type=1326 audit(1731258526.379:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15903 comm="syz.8.3037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1403.664709][ T26] audit: type=1326 audit(1731258526.439:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15903 comm="syz.8.3037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1403.756946][ T26] audit: type=1326 audit(1731258526.439:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15903 comm="syz.8.3037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1403.802283][T10684] EXT4-fs (loop5): unmounting filesystem. [ 1404.005643][ T26] audit: type=1326 audit(1731258526.439:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15903 comm="syz.8.3037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1404.143075][ T26] audit: type=1326 audit(1731258526.439:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15903 comm="syz.8.3037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1405.811001][T15898] loop3: detected capacity change from 0 to 32768 [ 1405.868756][ T26] audit: type=1326 audit(1731258526.439:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15903 comm="syz.8.3037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1405.933516][ T26] audit: type=1326 audit(1731258526.439:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15903 comm="syz.8.3037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1405.988331][T14093] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (14093) [ 1406.074386][T15920] loop1: detected capacity change from 0 to 2048 [ 1406.166734][T15926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3044'. [ 1406.187649][T15926] device bond_slave_0 entered promiscuous mode [ 1406.193963][T15926] device bond_slave_1 entered promiscuous mode [ 1406.200225][T15926] device bridge0 entered promiscuous mode [ 1406.206518][T15926] device macvtap2 entered promiscuous mode [ 1406.212807][T15926] device bond0 entered promiscuous mode [ 1406.221526][T15926] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1406.240954][T15920] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1406.291581][T15932] device bond0 left promiscuous mode [ 1406.297582][T15932] device bond_slave_0 left promiscuous mode [ 1406.303626][T15932] device bond_slave_1 left promiscuous mode [ 1406.309765][T15932] device bridge0 left promiscuous mode [ 1406.396934][T11962] EXT4-fs (loop1): unmounting filesystem. [ 1406.650639][T15939] loop1: detected capacity change from 0 to 512 [ 1406.685572][T15939] ext4: Unknown parameter 'noacl' [ 1408.134564][T15954] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3051'. [ 1408.200196][T15954] device macvtap3 entered promiscuous mode [ 1408.244110][T15954] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 1414.607196][T15996] loop5: detected capacity change from 0 to 764 [ 1414.665561][T15996] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1415.780702][T16000] loop3: detected capacity change from 0 to 256 [ 1415.889807][T16000] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1417.626809][T16022] loop8: detected capacity change from 0 to 512 [ 1417.661922][T16022] ext4: Unknown parameter 'noacl' [ 1418.065908][T16025] loop3: detected capacity change from 0 to 2048 [ 1421.333385][T16025] EXT4-fs warning (device loop3): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop3. [ 1421.811270][T16044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3077'. [ 1423.176358][T16045] loop7: detected capacity change from 0 to 2048 [ 1423.289948][T16045] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1423.326276][T16052] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1423.338948][T16052] netlink: 'syz.3.3079': attribute type 10 has an invalid length. [ 1423.355152][T16052] bridge0: port 2(bridge_slave_1) entered disabled state [ 1423.362511][T16052] bridge0: port 1(bridge_slave_0) entered disabled state [ 1423.471999][ T4787] bond0: (slave bridge0): link status definitely down, disabling slave [ 1423.473158][T13705] EXT4-fs (loop7): unmounting filesystem. [ 1423.555934][T16054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3081'. [ 1423.623773][T16054] device bond_slave_0 entered promiscuous mode [ 1423.630087][T16054] device bond_slave_1 entered promiscuous mode [ 1423.670811][T16054] device macvtap3 entered promiscuous mode [ 1423.687579][T16054] device bond0 entered promiscuous mode [ 1423.698976][T16054] device bridge0 entered promiscuous mode [ 1423.720320][T16054] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 1423.765756][T16055] device bond0 left promiscuous mode [ 1423.793696][T16055] device bridge0 left promiscuous mode [ 1423.834969][T16055] device bond_slave_0 left promiscuous mode [ 1423.841038][T16055] device bond_slave_1 left promiscuous mode [ 1424.948518][T16068] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3084'. [ 1426.949225][T16078] mkiss: ax0: crc mode is auto. [ 1426.977668][T16075] loop7: detected capacity change from 0 to 2048 [ 1427.334276][T16075] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1427.927098][T16087] mkiss: ax0: crc mode is auto. [ 1428.093861][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.429262][T13705] EXT4-fs (loop7): unmounting filesystem. [ 1428.743657][T16089] loop1: detected capacity change from 0 to 2048 [ 1428.820699][T16089] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1428.977172][T16096] netlink: 200 bytes leftover after parsing attributes in process `syz.7.3091'. [ 1429.048333][T11962] EXT4-fs (loop1): unmounting filesystem. [ 1429.330439][T16106] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3095'. [ 1429.377728][T16106] device macvtap2 entered promiscuous mode [ 1429.397443][T16106] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1429.415570][T16105] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3086'. [ 1429.458008][T16105] device macvtap4 entered promiscuous mode [ 1429.472111][T16105] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 1431.466668][T16125] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1431.479978][T16125] netlink: 'syz.3.3101': attribute type 10 has an invalid length. [ 1433.641283][T16132] loop8: detected capacity change from 0 to 2048 [ 1433.763136][T16132] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1434.017169][T13744] EXT4-fs (loop8): unmounting filesystem. [ 1434.247379][T16147] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3107'. [ 1434.551538][T16133] loop3: detected capacity change from 0 to 32768 [ 1434.648711][T16133] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1434.694947][T16133] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1434.728649][T16133] BTRFS info (device loop3): using free space tree [ 1434.879777][T16168] VFS: could not find a valid V7 on nullb0. [ 1435.964094][T16181] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1436.230972][T16181] netlink: 'syz.1.3111': attribute type 10 has an invalid length. [ 1436.588352][T16133] BTRFS error (device loop3): open_ctree failed [ 1438.039248][T16198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3115'. [ 1438.080465][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 1438.080483][ T26] audit: type=1326 audit(1731258561.099:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16199 comm="syz.1.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290c97e719 code=0x7ffc0000 [ 1438.385450][ T26] audit: type=1326 audit(1731258561.249:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16199 comm="syz.1.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f290c97e719 code=0x7ffc0000 [ 1438.621060][ T26] audit: type=1326 audit(1731258561.249:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16199 comm="syz.1.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290c97e719 code=0x7ffc0000 [ 1438.774318][ T26] audit: type=1326 audit(1731258561.249:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16199 comm="syz.1.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f290c97e719 code=0x7ffc0000 [ 1438.828875][T16209] VFS: could not find a valid V7 on nullb0. [ 1438.885794][ T26] audit: type=1326 audit(1731258561.249:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16199 comm="syz.1.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290c97e719 code=0x7ffc0000 [ 1438.928786][ T26] audit: type=1326 audit(1731258561.249:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16199 comm="syz.1.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f290c97e719 code=0x7ffc0000 [ 1439.162276][ T26] audit: type=1326 audit(1731258561.269:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16199 comm="syz.1.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290c97e719 code=0x7ffc0000 [ 1439.274007][ T26] audit: type=1326 audit(1731258561.269:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16199 comm="syz.1.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f290c97e719 code=0x7ffc0000 [ 1439.280266][T16215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3123'. [ 1439.382240][T16217] mkiss: ax0: crc mode is auto. [ 1440.329715][ T26] audit: type=1326 audit(1731258561.269:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16199 comm="syz.1.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290c97e719 code=0x7ffc0000 [ 1440.434228][ T26] audit: type=1326 audit(1731258561.269:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16199 comm="syz.1.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f290c97e719 code=0x7ffc0000 [ 1441.175513][T16228] Falling back ldisc for ttyS3. [ 1441.386098][T16233] set match dimension is over the limit! [ 1441.511552][T16239] VFS: could not find a valid V7 on nullb0. [ 1442.250370][T16235] loop3: detected capacity change from 0 to 256 [ 1442.349648][T16235] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1442.588511][T16250] loop8: detected capacity change from 0 to 256 [ 1443.323068][T16250] exFAT-fs (loop8): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1443.660979][T16257] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1444.265598][T16270] VFS: could not find a valid V7 on nullb0. [ 1446.337236][T16279] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3140'. [ 1448.078473][T16292] set match dimension is over the limit! [ 1448.647642][T16301] mkiss: ax0: crc mode is auto. [ 1449.279353][ T26] kauditd_printk_skb: 44 callbacks suppressed [ 1449.279394][ T26] audit: type=1326 audit(1731258572.279:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16299 comm="syz.3.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1449.485564][ T26] audit: type=1326 audit(1731258572.389:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16299 comm="syz.3.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1449.508123][ T26] audit: type=1326 audit(1731258572.389:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16299 comm="syz.3.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1449.531790][ T26] audit: type=1326 audit(1731258572.389:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16299 comm="syz.3.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1449.554855][ T26] audit: type=1326 audit(1731258572.409:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16299 comm="syz.3.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1449.595957][ T26] audit: type=1326 audit(1731258572.409:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16299 comm="syz.3.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1449.651694][T16306] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3150'. [ 1449.681929][ T26] audit: type=1326 audit(1731258572.409:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16299 comm="syz.3.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1449.724002][ T26] audit: type=1326 audit(1731258572.409:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16299 comm="syz.3.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1449.771075][ T26] audit: type=1326 audit(1731258572.409:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16299 comm="syz.3.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1449.917482][ T26] audit: type=1326 audit(1731258572.429:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16299 comm="syz.3.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1451.335699][T16331] VFS: could not find a valid V7 on nullb0. [ 1451.429627][T16319] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3143'. [ 1451.551268][T16319] device macvtap5 entered promiscuous mode [ 1451.612850][T16319] 8021q: adding VLAN 0 to HW filter on device macvtap5 [ 1451.876644][T16335] netlink: 'syz.7.3156': attribute type 10 has an invalid length. [ 1452.046628][T16343] set match dimension is over the limit! [ 1452.924605][T16342] mkiss: ax0: crc mode is auto. [ 1453.483438][T16358] VFS: could not find a valid V7 on nullb0. [ 1454.237477][T16372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3167'. [ 1454.490077][T16377] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3169'. [ 1454.557346][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 1454.557363][ T26] audit: type=1326 audit(1731258577.569:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16378 comm="syz.1.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290c97e719 code=0x7ffc0000 [ 1454.578867][T16377] device macvtap6 entered promiscuous mode [ 1454.586177][ C1] vkms_vblank_simulate: vblank timer overrun [ 1454.613929][ T26] audit: type=1326 audit(1731258577.619:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16378 comm="syz.1.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f290c97e719 code=0x7ffc0000 [ 1454.636282][ C1] vkms_vblank_simulate: vblank timer overrun [ 1454.648452][ T26] audit: type=1326 audit(1731258577.619:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16378 comm="syz.1.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290c97e719 code=0x7ffc0000 [ 1454.680059][T16377] 8021q: adding VLAN 0 to HW filter on device macvtap6 [ 1454.753378][ T26] audit: type=1326 audit(1731258577.619:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16378 comm="syz.1.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f290c97e719 code=0x7ffc0000 [ 1454.795773][ T26] audit: type=1326 audit(1731258577.619:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16378 comm="syz.1.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290c97e719 code=0x7ffc0000 [ 1454.818361][ C1] vkms_vblank_simulate: vblank timer overrun [ 1454.832803][ T26] audit: type=1326 audit(1731258577.619:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16378 comm="syz.1.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f290c97e719 code=0x7ffc0000 [ 1454.910725][T16388] VFS: could not find a valid V7 on nullb0. [ 1455.549939][ T26] audit: type=1326 audit(1731258577.619:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16378 comm="syz.1.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290c97e719 code=0x7ffc0000 [ 1455.659131][ T26] audit: type=1326 audit(1731258577.619:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16378 comm="syz.1.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f290c97e719 code=0x7ffc0000 [ 1455.740954][ T26] audit: type=1326 audit(1731258577.619:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16378 comm="syz.1.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290c97e719 code=0x7ffc0000 [ 1455.782532][ T26] audit: type=1326 audit(1731258577.619:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16378 comm="syz.1.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f290c97e719 code=0x7ffc0000 [ 1455.827376][T16393] set match dimension is over the limit! [ 1455.963132][T16395] mkiss: ax0: crc mode is auto. [ 1456.914916][T16401] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3176'. [ 1456.932546][T16404] loop8: detected capacity change from 0 to 1024 [ 1457.013221][T16404] EXT4-fs: Ignoring removed orlov option [ 1457.146666][T16404] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1457.272667][T16404] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1458.980159][T13744] EXT4-fs (loop8): unmounting filesystem. [ 1459.101285][T16434] mkiss: ax0: crc mode is auto. [ 1459.575464][T16437] VFS: could not find a valid V7 on nullb0. [ 1459.996648][T16443] mkiss: ax0: crc mode is auto. [ 1460.815320][T16445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3190'. [ 1460.884678][T16445] device macvtap2 entered promiscuous mode [ 1460.924690][T16448] 9pnet_fd: Insufficient options for proto=fd [ 1460.932769][T16445] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1460.976478][T16454] set match dimension is over the limit! [ 1461.133589][T16450] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3191'. [ 1461.193718][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 1461.193736][ T26] audit: type=1326 audit(1731258584.209:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16460 comm="syz.1.3195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290c97e719 code=0x7ffc0000 [ 1462.014529][ T26] audit: type=1326 audit(1731258585.029:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16460 comm="syz.1.3195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290c97e719 code=0x7ffc0000 [ 1462.016141][T16461] syz.1.3195[16461] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1462.054435][T16461] syz.1.3195[16461] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1462.106792][ T26] audit: type=1326 audit(1731258585.029:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16460 comm="syz.1.3195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f290c97e719 code=0x7ffc0000 [ 1462.366852][ T26] audit: type=1326 audit(1731258585.029:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16460 comm="syz.1.3195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290c97e719 code=0x7ffc0000 [ 1462.474763][ T26] audit: type=1326 audit(1731258585.029:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16460 comm="syz.1.3195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f290c97e719 code=0x7ffc0000 [ 1463.229480][ T26] audit: type=1326 audit(1731258585.199:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16460 comm="syz.1.3195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290c97e719 code=0x7ffc0000 [ 1463.337196][ T26] audit: type=1326 audit(1731258585.199:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16460 comm="syz.1.3195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290c97e719 code=0x7ffc0000 [ 1463.721198][T16489] mkiss: ax0: crc mode is auto. [ 1465.949547][T16492] loop5: detected capacity change from 0 to 1024 [ 1465.967084][T16493] mkiss: ax0: crc mode is auto. [ 1465.981021][T16492] EXT4-fs: Ignoring removed oldalloc option [ 1466.154096][T16492] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1466.566459][T16502] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3207'. [ 1467.210965][T10684] EXT4-fs (loop5): unmounting filesystem. [ 1467.432809][T16510] Cannot find set identified by id 0 to match [ 1467.594346][T16512] VFS: could not find a valid V7 on nullb0. [ 1468.476652][T16525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3215'. [ 1468.536076][T16525] device erspan0 entered promiscuous mode [ 1468.560997][T16525] device macvtap3 entered promiscuous mode [ 1468.579714][T16526] device erspan0 left promiscuous mode [ 1468.638322][T16530] 9pnet_fd: Insufficient options for proto=fd [ 1468.720130][T16532] VFS: could not find a valid V7 on nullb0. [ 1469.846054][T16543] mkiss: ax0: crc mode is auto. [ 1471.431916][T16538] loop3: detected capacity change from 0 to 1024 [ 1471.443098][T16538] EXT4-fs: Ignoring removed orlov option [ 1471.449233][T16538] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1471.523081][T16538] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1471.778085][T16557] set match dimension is over the limit! [ 1472.429116][T16570] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3229'. [ 1472.691300][T10877] EXT4-fs (loop3): unmounting filesystem. [ 1474.329564][T16595] netlink: 'syz.1.3236': attribute type 10 has an invalid length. [ 1476.433458][T16602] set match dimension is over the limit! [ 1476.646761][T16605] IPVS: Error joining to the multicast group [ 1476.816226][T16610] VFS: could not find a valid V7 on nullb0. [ 1477.686180][T16615] can0: slcan on pts0. [ 1477.728916][T16619] mkiss: ax0: crc mode is auto. [ 1478.539949][T16614] can0 (unregistered): slcan off pts0. [ 1478.789305][T16632] VFS: could not find a valid V7 on nullb0. [ 1481.854250][T16652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3251'. [ 1481.902352][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1481.904999][T16653] loop7: detected capacity change from 0 to 512 [ 1481.920241][T16652] netlink: 'syz.3.3251': attribute type 18 has an invalid length. [ 1481.949576][T16653] ext4: Unknown parameter 'noacl' [ 1482.008758][T14093] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1482.037197][T16652] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1482.046764][T16652] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1482.055854][T16652] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1482.064650][T16652] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1482.070746][T16656] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3254'. [ 1482.118842][T16652] device vxlan0 entered promiscuous mode [ 1482.135666][T16658] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3255'. [ 1482.336514][T16663] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 1482.458031][T16665] mkiss: ax0: crc mode is auto. [ 1484.756962][ T26] audit: type=1326 audit(1731258607.769:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16671 comm="syz.5.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e69b7e719 code=0x7ffc0000 [ 1485.711090][ T26] audit: type=1326 audit(1731258607.769:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16671 comm="syz.5.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6e69b7e719 code=0x7ffc0000 [ 1485.789795][ T26] audit: type=1326 audit(1731258607.769:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16671 comm="syz.5.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e69b7e719 code=0x7ffc0000 [ 1485.858639][ T26] audit: type=1326 audit(1731258607.769:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16671 comm="syz.5.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f6e69b7e719 code=0x7ffc0000 [ 1485.958768][ T26] audit: type=1326 audit(1731258607.769:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16671 comm="syz.5.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e69b7e719 code=0x7ffc0000 [ 1486.070648][ T26] audit: type=1326 audit(1731258607.769:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16671 comm="syz.5.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e69b7e719 code=0x7ffc0000 [ 1486.152711][ T26] audit: type=1326 audit(1731258607.769:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16671 comm="syz.5.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e69b7e719 code=0x7ffc0000 [ 1486.226308][ T26] audit: type=1326 audit(1731258607.769:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16671 comm="syz.5.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e69b7e719 code=0x7ffc0000 [ 1486.320860][ T26] audit: type=1326 audit(1731258607.769:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16671 comm="syz.5.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e69b7e719 code=0x7ffc0000 [ 1486.414876][ T26] audit: type=1326 audit(1731258607.769:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16671 comm="syz.5.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f6e69b7e719 code=0x7ffc0000 [ 1486.574367][T16690] VFS: could not find a valid V7 on nullb0. [ 1488.827661][T16716] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1489.522366][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.990226][T16703] loop8: detected capacity change from 0 to 32768 [ 1490.047890][T16703] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by syz.8.3270 (16703) [ 1490.754464][T16703] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1490.836998][T16703] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 1490.880929][T16703] BTRFS info (device loop8): using free space tree [ 1491.044821][T16714] loop1: detected capacity change from 0 to 32768 [ 1491.204518][T16747] loop5: detected capacity change from 0 to 1024 [ 1491.244837][T16747] EXT4-fs: Ignoring removed oldalloc option [ 1491.342825][T16747] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1491.383910][T16703] BTRFS error (device loop8): open_ctree failed [ 1491.390826][T16714] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.3272 (16714) [ 1491.508875][T16714] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1491.538984][T16714] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1491.558833][T16714] BTRFS info (device loop1): using free space tree [ 1491.625442][T10684] EXT4-fs (loop5): unmounting filesystem. [ 1491.884880][T16714] BTRFS error (device loop1): open_ctree failed [ 1492.138045][T16785] loop3: detected capacity change from 0 to 512 [ 1492.209895][T16788] VFS: could not find a valid V7 on nullb0. [ 1492.485569][T16785] ext4: Unknown parameter 'noacl' [ 1493.152276][T16795] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3287'. [ 1493.425971][T16800] loop1: detected capacity change from 0 to 1024 [ 1493.470975][T16800] EXT4-fs: Ignoring removed orlov option [ 1493.497128][T16800] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1493.561572][T16800] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1493.911870][T16817] loop7: detected capacity change from 0 to 2048 [ 1494.027317][T16817] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1494.312106][T13705] EXT4-fs (loop7): unmounting filesystem. [ 1494.474640][T16821] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3294'. [ 1494.624286][T16825] loop8: detected capacity change from 0 to 2048 [ 1494.739874][T16825] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1494.992133][T13744] EXT4-fs (loop8): unmounting filesystem. [ 1496.495267][T11962] EXT4-fs (loop1): unmounting filesystem. [ 1496.882753][T16837] rdma_op ffff88807a51e9f0 conn xmit_rdma 0000000000000000 [ 1497.224816][T16842] IPVS: Error joining to the multicast group [ 1497.730695][T16849] loop1: detected capacity change from 0 to 2048 [ 1497.848764][T16853] mkiss: ax0: crc mode is auto. [ 1498.192792][T16849] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1498.741119][T16858] loop7: detected capacity change from 0 to 256 [ 1498.785897][T16858] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1498.804709][T11962] EXT4-fs (loop1): unmounting filesystem. [ 1498.857159][ T26] kauditd_printk_skb: 79 callbacks suppressed [ 1498.857178][ T26] audit: type=1326 audit(1731258621.869:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16859 comm="syz.8.3306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1499.062592][T16863] lo speed is unknown, defaulting to 1000 [ 1499.102566][T16863] lo speed is unknown, defaulting to 1000 [ 1499.942182][T16863] lo speed is unknown, defaulting to 1000 [ 1499.952149][T16872] loop7: detected capacity change from 0 to 512 [ 1499.977601][T16872] ext4: Unknown parameter 'noacl' [ 1499.988579][ T26] audit: type=1326 audit(1731258621.869:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16859 comm="syz.8.3306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1500.048373][T16863] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1500.060783][T14093] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1500.071249][ T26] audit: type=1326 audit(1731258622.109:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16859 comm="syz.8.3306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1500.190935][T16863] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1500.220955][ T26] audit: type=1326 audit(1731258622.109:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16859 comm="syz.8.3306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1500.304656][ T26] audit: type=1326 audit(1731258622.109:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16859 comm="syz.8.3306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1500.354015][T16863] lo speed is unknown, defaulting to 1000 [ 1500.394190][T16863] lo speed is unknown, defaulting to 1000 [ 1500.422671][T16863] lo speed is unknown, defaulting to 1000 [ 1500.462246][T16863] lo speed is unknown, defaulting to 1000 [ 1500.509918][T16863] lo speed is unknown, defaulting to 1000 [ 1500.516699][T16863] lo speed is unknown, defaulting to 1000 [ 1501.379458][T16902] mkiss: ax0: crc mode is auto. [ 1502.422365][T16904] loop3: detected capacity change from 0 to 256 [ 1502.851315][T16904] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1504.223755][T16909] loop8: detected capacity change from 0 to 512 [ 1504.246396][T16909] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1504.255959][T16909] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1504.397586][T16916] rdma_op ffff88801bbf39f0 conn xmit_rdma 0000000000000000 [ 1504.426927][T13744] EXT4-fs (loop8): unmounting filesystem. [ 1504.782197][T16919] can0: slcan on pts0. [ 1504.889234][T16918] can0 (unregistered): slcan off pts0. [ 1505.596853][T16932] rdma_op ffff88807900d9f0 conn xmit_rdma 0000000000000000 [ 1506.226619][T16942] mkiss: ax0: crc mode is auto. [ 1508.635268][T16959] loop5: detected capacity change from 0 to 512 [ 1508.673963][T16960] loop8: detected capacity change from 0 to 2048 [ 1508.690359][T16959] ext4: Unknown parameter 'noacl' [ 1508.753614][T14093] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1508.799555][T16960] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1508.884552][ T26] audit: type=1800 audit(1731258631.899:551): pid=16960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3340" name="bus" dev="loop8" ino=18 res=0 errno=0 [ 1509.112116][T16948] loop3: detected capacity change from 0 to 32768 [ 1509.122181][T16948] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.3335 (16948) [ 1509.222162][T13744] EXT4-fs (loop8): unmounting filesystem. [ 1509.226046][T16966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3342'. [ 1509.280113][T16966] device macvtap4 entered promiscuous mode [ 1509.299929][T16948] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1509.302852][T16966] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 1509.341150][T16948] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1509.389754][T16948] BTRFS info (device loop3): using free space tree [ 1509.650159][T16948] BTRFS info (device loop3): enabling ssd optimizations [ 1509.939178][T17001] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3345'. [ 1510.661374][T10877] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1510.677792][T17005] loop8: detected capacity change from 0 to 256 [ 1510.736835][T17005] exFAT-fs (loop8): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1511.868468][ T26] audit: type=1326 audit(1731258634.879:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17006 comm="syz.7.3348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c79b7e719 code=0x7ffc0000 [ 1511.927476][T17007] lo speed is unknown, defaulting to 1000 [ 1511.957667][ T26] audit: type=1326 audit(1731258634.919:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17006 comm="syz.7.3348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8c79b7e719 code=0x7ffc0000 [ 1512.016640][ T26] audit: type=1326 audit(1731258634.919:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17006 comm="syz.7.3348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c79b7e719 code=0x7ffc0000 [ 1512.098064][ T26] audit: type=1326 audit(1731258634.919:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17006 comm="syz.7.3348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c79b7e719 code=0x7ffc0000 [ 1512.199906][ T26] audit: type=1326 audit(1731258634.919:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17006 comm="syz.7.3348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f8c79b7e719 code=0x7ffc0000 [ 1512.219144][T17012] capability: warning: `syz.8.3349' uses deprecated v2 capabilities in a way that may be insecure [ 1512.302766][ T26] audit: type=1326 audit(1731258634.919:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17006 comm="syz.7.3348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c79b7e719 code=0x7ffc0000 [ 1512.390248][T17013] can0: slcan on pts0. [ 1512.446127][ T26] audit: type=1326 audit(1731258634.919:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17006 comm="syz.7.3348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c79b7e719 code=0x7ffc0000 [ 1512.514942][T17011] can0 (unregistered): slcan off pts0. [ 1512.520711][ T26] audit: type=1326 audit(1731258634.919:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17006 comm="syz.7.3348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c79b7e719 code=0x7ffc0000 [ 1512.558420][ T26] audit: type=1326 audit(1731258634.919:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17006 comm="syz.7.3348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c79b7e719 code=0x7ffc0000 [ 1512.787209][T17024] loop8: detected capacity change from 0 to 2048 [ 1512.875781][T17024] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1512.969872][T17026] lo speed is unknown, defaulting to 1000 [ 1513.157496][T13744] EXT4-fs (loop8): unmounting filesystem. [ 1513.200295][T17032] smc: net device bond0 applied user defined pnetid SYZ0 [ 1513.211240][T17034] smc: net device bond0 erased user defined pnetid SYZ0 [ 1513.305057][T17035] loop1: detected capacity change from 0 to 256 [ 1513.412252][T17040] mkiss: ax0: crc mode is auto. [ 1514.319444][T17035] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1515.239877][T17048] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3359'. [ 1516.179482][T17056] loop1: detected capacity change from 0 to 256 [ 1516.454344][T17056] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1517.683112][T17075] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3366'. [ 1518.731927][T17087] mkiss: ax0: crc mode is auto. [ 1519.652472][T17093] netlink: 'syz.1.3373': attribute type 16 has an invalid length. [ 1519.666229][T17093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3373'. [ 1519.963510][T17097] loop5: detected capacity change from 0 to 2048 [ 1520.203270][T17097] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1520.809205][T17096] loop5: detected capacity change from 2048 to 0 [ 1520.862903][ C1] I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x83700 phys_seg 1 prio class 2 [ 1520.882926][ C1] I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 1520.898940][T17097] EXT4-fs error (device loop5): ext4_wait_block_bitmap:573: comm syz.5.3374: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 1520.920403][T17108] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3376'. [ 1520.936591][ T8850] loop: Write error at byte offset 9223372036854775807, length 2048. [ 1520.979601][ C0] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1520.989310][ C0] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1520.999807][ C0] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 1521.008135][T17097] EXT4-fs (loop5): I/O error while writing superblock [ 1521.054523][T17097] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 5 [ 1521.139781][T17097] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1521.139781][T17097] [ 1521.274782][ C1] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 1521.295876][ C1] I/O error, dev loop5, sector 16 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 1521.317712][T10684] EXT4-fs error (device loop5): ext4_get_inode_loc:4644: inode #2: block 4: comm syz-executor: unable to read itable block [ 1521.339899][ C1] I/O error, dev loop5, sector 20 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 2 [ 1521.374037][T11634] loop: Write error at byte offset 9223372036854775807, length 2048. [ 1521.405747][ C0] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1521.415360][ C0] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1521.424877][ C0] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 1521.433268][T10684] EXT4-fs (loop5): I/O error while writing superblock [ 1521.449379][T10684] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5885: IO failure [ 1521.465589][ T9] loop: Write error at byte offset 9223372036854775807, length 2048. [ 1521.476187][ C1] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1521.485917][ C1] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 1521.494748][T10684] EXT4-fs (loop5): I/O error while writing superblock [ 1521.507198][T10684] EXT4-fs error (device loop5): ext4_dirty_inode:6089: inode #2: comm syz-executor: mark_inode_dirty error [ 1521.545708][ T8862] loop: Write error at byte offset 9223372036854775807, length 2048. [ 1521.578559][ C0] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 1521.586912][T10684] EXT4-fs (loop5): I/O error while writing superblock [ 1521.729506][T11634] EXT4-fs error (device loop5): __ext4_get_inode_loc_noinmem:4629: inode #18: block 6: comm kworker/u4:1: unable to read itable block [ 1521.772116][ T9] loop: Write error at byte offset 9223372036854775807, length 2048. [ 1521.795850][ C0] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 1521.804278][T11634] EXT4-fs (loop5): I/O error while writing superblock [ 1521.826522][T11634] EXT4-fs error (device loop5): __ext4_get_inode_loc_noinmem:4629: inode #2: block 4: comm kworker/u4:1: unable to read itable block [ 1521.852469][ T8862] loop: Write error at byte offset 9223372036854775807, length 2048. [ 1521.865590][ C0] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 1521.874041][T11634] EXT4-fs (loop5): I/O error while writing superblock [ 1521.903654][T17129] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.3385'. [ 1521.914820][T10684] EXT4-fs (loop5): unmounting filesystem. [ 1521.946278][ T8860] loop: Write error at byte offset 9223372036854775807, length 2048. [ 1521.988676][ C0] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 1521.997770][ T8860] loop: Write error at byte offset 9223372036854906879, length 2048. [ 1522.022256][ C0] Buffer I/O error on dev loop5, logical block 64, lost sync page write [ 1522.124473][T10684] bridge0: port 3(syz_tun) entered disabled state [ 1522.237910][T10684] device syz_tun left promiscuous mode [ 1522.250394][T10684] bridge0: port 3(syz_tun) entered disabled state [ 1522.279764][T17131] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3386'. [ 1522.513261][T17123] loop8: detected capacity change from 0 to 32768 [ 1522.541154][T17123] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by syz.8.3382 (17123) [ 1522.563751][T17134] loop7: detected capacity change from 0 to 256 [ 1522.599482][T11634] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.655317][T17124] loop3: detected capacity change from 0 to 32768 [ 1522.657556][T17134] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1522.737401][T17124] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.3383 (17124) [ 1522.767776][T17123] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1522.810657][T13503] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by udevd (13503) [ 1522.823499][T17123] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 1523.001801][T17127] loop1: detected capacity change from 0 to 32768 [ 1523.011418][T17123] BTRFS info (device loop8): using free space tree [ 1526.422138][T17123] BTRFS error (device loop8): open_ctree failed [ 1526.489154][T11634] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.649460][T13453] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (13453) [ 1527.012700][T17169] loop7: detected capacity change from 0 to 256 [ 1527.054382][T17169] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1527.090946][T11634] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1528.418357][T11634] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.569742][ T4262] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1529.583190][ T4262] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1529.592239][ T9859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1529.600242][ T9859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1529.607856][ T4262] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1529.615360][ T9859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1529.945032][T17186] lo speed is unknown, defaulting to 1000 [ 1530.090408][T17192] tipc: Started in network mode [ 1530.106479][T17192] tipc: Node identity f0, cluster identity 4711 [ 1530.136653][T17192] tipc: Node number set to 240 [ 1530.236360][T17185] loop3: detected capacity change from 0 to 32768 [ 1530.276771][T17185] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1530.338236][T17185] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1530.397946][T17185] BTRFS info (device loop3): using free space tree [ 1530.772844][T17185] BTRFS info (device loop3): enabling ssd optimizations [ 1531.678830][ T4269] Bluetooth: hci1: command tx timeout [ 1531.711756][T17186] chnl_net:caif_netlink_parms(): no params data found [ 1531.965253][T10877] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1533.016973][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1533.746256][T17186] bridge0: port 1(bridge_slave_0) entered blocking state [ 1533.759047][ T4269] Bluetooth: hci1: command tx timeout [ 1533.795470][T17186] bridge0: port 1(bridge_slave_0) entered disabled state [ 1533.803968][T17186] device bridge_slave_0 entered promiscuous mode [ 1533.813686][T17186] bridge0: port 2(bridge_slave_1) entered blocking state [ 1533.820916][T17186] bridge0: port 2(bridge_slave_1) entered disabled state [ 1533.829302][T17186] device bridge_slave_1 entered promiscuous mode [ 1533.866797][T17186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1533.878989][T17186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1533.945259][T17186] team0: Port device team_slave_0 added [ 1534.067909][T17186] team0: Port device team_slave_1 added [ 1535.265035][T11634] device hsr_slave_0 left promiscuous mode [ 1535.284149][T11634] device hsr_slave_1 left promiscuous mode [ 1535.323225][T17241] loop7: detected capacity change from 0 to 32768 [ 1535.349426][T17241] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.3408 (17241) [ 1535.370892][T11634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1535.384319][ T26] kauditd_printk_skb: 85 callbacks suppressed [ 1535.384336][ T26] audit: type=1326 audit(1731258658.399:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17257 comm="syz.8.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1535.391163][T11634] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1535.443622][T17241] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1535.446501][ T26] audit: type=1326 audit(1731258658.399:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17257 comm="syz.8.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1535.467842][T17241] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 1535.491220][T11634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1535.499204][T17241] BTRFS info (device loop7): using free space tree [ 1535.505931][T11634] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1535.515992][T11634] device bridge_slave_1 left promiscuous mode [ 1535.517232][ T26] audit: type=1326 audit(1731258658.439:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17257 comm="syz.8.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1535.530662][T11634] bridge0: port 2(bridge_slave_1) entered disabled state [ 1535.554738][T11634] device bridge_slave_0 left promiscuous mode [ 1535.561280][T11634] bridge0: port 1(bridge_slave_0) entered disabled state [ 1535.631155][ T26] audit: type=1326 audit(1731258658.439:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17257 comm="syz.8.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1535.695479][T17241] BTRFS info (device loop7): enabling ssd optimizations [ 1535.743522][T11634] device bond0 left promiscuous mode [ 1535.755967][ T26] audit: type=1326 audit(1731258658.449:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17257 comm="syz.8.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1535.757494][T11634] device bond_slave_0 left promiscuous mode [ 1535.785064][T11634] device bond_slave_1 left promiscuous mode [ 1535.788649][ T26] audit: type=1326 audit(1731258658.449:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17257 comm="syz.8.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1535.791271][T11634] device bridge0 left promiscuous mode [ 1535.828585][ T26] audit: type=1326 audit(1731258658.449:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17257 comm="syz.8.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1535.858831][ T26] audit: type=1326 audit(1731258658.449:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17257 comm="syz.8.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1535.858855][ T4269] Bluetooth: hci1: command tx timeout [ 1536.009478][ T26] audit: type=1326 audit(1731258658.449:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17257 comm="syz.8.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1536.060386][T11634] device veth1_macvtap left promiscuous mode [ 1536.067292][T11634] device veth0_macvtap left promiscuous mode [ 1536.141998][T11634] device veth1_vlan left promiscuous mode [ 1536.152944][ T26] audit: type=1326 audit(1731258658.449:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17257 comm="syz.8.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1536.212832][T11634] device veth0_vlan left promiscuous mode [ 1536.793319][T11634] bond1 (unregistering): Released all slaves [ 1536.912710][T13705] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1537.539452][T17291] loop7: detected capacity change from 0 to 256 [ 1537.613643][T17291] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1538.646562][ T4269] Bluetooth: hci1: command tx timeout [ 1538.824190][T11634] team0 (unregistering): Port device team_slave_1 removed [ 1538.883708][T11634] team0 (unregistering): Port device team_slave_0 removed [ 1538.940858][T11634] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1539.004717][T11634] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1539.684238][T11634] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1539.703650][T11634] bond0 (unregistering): Released all slaves [ 1539.842674][T17186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1539.888666][T17186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1539.934138][T17186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1539.951085][T13314] lo speed is unknown, defaulting to 1000 [ 1539.973493][T17186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1540.018661][T17186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1540.136614][T17186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1540.973902][T17186] device hsr_slave_0 entered promiscuous mode [ 1541.039801][T17186] device hsr_slave_1 entered promiscuous mode [ 1542.435011][ T26] kauditd_printk_skb: 29 callbacks suppressed [ 1542.435029][ T26] audit: type=1326 audit(1731258665.449:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17326 comm="syz.8.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1542.543115][ T26] audit: type=1326 audit(1731258665.519:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17326 comm="syz.8.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1542.643959][ T26] audit: type=1326 audit(1731258665.519:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17326 comm="syz.8.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1542.694743][ T26] audit: type=1326 audit(1731258665.529:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17326 comm="syz.8.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1542.718909][ T26] audit: type=1326 audit(1731258665.529:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17326 comm="syz.8.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1542.748765][ T26] audit: type=1326 audit(1731258665.529:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17326 comm="syz.8.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1542.793046][ T26] audit: type=1326 audit(1731258665.529:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17326 comm="syz.8.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1542.860197][ T26] audit: type=1326 audit(1731258665.529:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17326 comm="syz.8.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1542.903125][ T26] audit: type=1326 audit(1731258665.529:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17326 comm="syz.8.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1542.936055][T17317] loop7: detected capacity change from 0 to 32768 [ 1542.978893][ T26] audit: type=1326 audit(1731258665.529:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17326 comm="syz.8.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1542.997507][T17317] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.3425 (17317) [ 1543.134343][T17317] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1543.163777][T17317] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 1543.194325][T17317] BTRFS info (device loop7): using free space tree [ 1543.495522][T17317] BTRFS info (device loop7): enabling ssd optimizations [ 1544.191828][T17362] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3434'. [ 1544.230906][T17186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1544.362468][T17186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1544.451890][T17186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1544.590235][T17186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1545.255784][T17382] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 1545.278033][T17186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1545.329136][ T8862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1545.337855][ T8862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1545.364545][T17186] 8021q: adding VLAN 0 to HW filter on device team0 [ 1545.448638][T13705] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1545.459579][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1545.479524][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1545.521244][ T4787] bridge0: port 1(bridge_slave_0) entered blocking state [ 1545.528432][ T4787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1545.540200][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1545.563088][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1545.572892][ T4787] bridge0: port 2(bridge_slave_1) entered blocking state [ 1545.580094][ T4787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1545.880543][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1545.900865][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1545.934203][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1545.961400][ T8837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1546.012915][ T8837] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1546.947179][ T8837] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1546.977544][T17399] loop3: detected capacity change from 0 to 512 [ 1546.995535][ T8837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1547.048829][ T8837] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1547.067001][T17399] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1547.076593][T17399] ext4 filesystem being mounted at /328/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1547.106870][T17403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3448'. [ 1547.187040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1547.216186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1547.259091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1547.287101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1547.340884][T17186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1547.477459][T10877] EXT4-fs (loop3): unmounting filesystem. [ 1547.880735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1547.888281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1547.908007][T17425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3452'. [ 1547.951204][T17186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1548.087665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1548.098426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1548.160060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1548.201488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1548.249083][T17186] device veth0_vlan entered promiscuous mode [ 1548.260164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1548.289230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1548.307600][T17431] loop8: detected capacity change from 0 to 512 [ 1548.324370][T17186] device veth1_vlan entered promiscuous mode [ 1548.405115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1548.415367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1548.420850][T17431] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1548.424857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1548.441257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1548.453358][T17186] device veth0_macvtap entered promiscuous mode [ 1548.465274][T17186] device veth1_macvtap entered promiscuous mode [ 1548.485002][T17186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1548.497871][T17186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1548.504459][T17431] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1548.508779][T17186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1548.529132][T17186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1548.539062][T17186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1548.550278][T17186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1548.560728][T17186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1548.571984][T17186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1548.583740][T17186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1548.593133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1548.616743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1548.626018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1548.644571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1548.660119][T17186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1548.679524][T17186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1548.690698][T17186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1548.702164][T17186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1548.713047][T17186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1548.727518][T17186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1548.743719][T17186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1548.757832][T17186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1548.788306][T17186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1548.812494][T11634] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1548.825254][T11634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1548.854723][T17186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.884052][T17186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.907452][T17186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.916366][T17186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.927633][T13744] EXT4-fs (loop8): unmounting filesystem. [ 1549.024234][T17447] netlink: 'syz.1.3459': attribute type 3 has an invalid length. [ 1549.051641][T17447] netlink: 766 bytes leftover after parsing attributes in process `syz.1.3459'. [ 1549.086523][T11634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1549.104672][T17449] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3460'. [ 1549.115267][T11634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1549.197667][ T8837] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1549.221380][ T8837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1549.273125][ T8837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1549.328348][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1549.551692][T17461] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3463'. [ 1550.962061][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.661276][T17486] netlink: 'syz.1.3469': attribute type 3 has an invalid length. [ 1551.707357][T17492] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 1551.791524][T17496] smc: net device bond0 applied user defined pnetid SYZ0 [ 1551.831697][T17496] smc: net device bond0 erased user defined pnetid SYZ0 [ 1551.860173][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 1551.860191][ T26] audit: type=1326 audit(1731258674.879:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17495 comm="syz.3.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1551.918012][ T26] audit: type=1326 audit(1731258674.909:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17495 comm="syz.3.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1552.002466][ T26] audit: type=1326 audit(1731258674.909:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17495 comm="syz.3.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1552.139597][ T26] audit: type=1326 audit(1731258674.909:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17495 comm="syz.3.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1552.203381][ T26] audit: type=1326 audit(1731258674.909:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17495 comm="syz.3.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1552.226705][ T26] audit: type=1326 audit(1731258674.909:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17495 comm="syz.3.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1552.267793][ T26] audit: type=1326 audit(1731258674.909:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17495 comm="syz.3.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1552.302953][T17504] loop3: detected capacity change from 0 to 2048 [ 1552.393257][ T26] audit: type=1326 audit(1731258674.909:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17495 comm="syz.3.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1552.423068][T17504] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1552.577323][ T26] audit: type=1326 audit(1731258674.909:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17495 comm="syz.3.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1552.635648][ T26] audit: type=1326 audit(1731258674.919:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17495 comm="syz.3.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1552.675334][T10877] EXT4-fs (loop3): unmounting filesystem. [ 1553.293508][T17532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3486'. [ 1553.340131][T17535] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3488'. [ 1553.825642][T17543] netlink: 'syz.3.3490': attribute type 3 has an invalid length. [ 1553.906729][T17550] netlink: 'syz.0.3491': attribute type 3 has an invalid length. [ 1554.800543][T17561] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3497'. [ 1555.587827][T17579] tipc: Started in network mode [ 1555.593005][T17579] tipc: Node identity f0, cluster identity 4711 [ 1555.615049][T17579] tipc: Node number set to 240 [ 1555.722550][T17583] loop7: detected capacity change from 0 to 2048 [ 1555.818995][T17583] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1555.876952][T17595] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3510'. [ 1556.062040][T13705] EXT4-fs (loop7): unmounting filesystem. [ 1556.273530][T17604] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1556.308036][T17608] loop3: detected capacity change from 0 to 164 [ 1556.318276][T17607] loop7: detected capacity change from 0 to 512 [ 1556.347971][T17607] ext4: Unknown parameter 'noacl' [ 1556.377267][T17608] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 1556.492832][T17610] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3515'. [ 1556.732197][T13503] blk_print_req_error: 15 callbacks suppressed [ 1556.732217][T13503] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1558.139937][T17634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3524'. [ 1558.154794][T17634] device veth1_to_bridge entered promiscuous mode [ 1558.217147][T17638] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3521'. [ 1559.127438][ T8837] bridge0: port 2(bridge_slave_1) entered disabled state [ 1559.788869][T17653] loop3: detected capacity change from 0 to 1024 [ 1559.935951][T17653] EXT4-fs: Ignoring removed orlov option [ 1560.248685][T17653] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1560.362908][T17653] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1560.896394][T10877] EXT4-fs (loop3): unmounting filesystem. [ 1561.870700][T17678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3537'. [ 1561.908583][T17678] device veth1_to_batadv entered promiscuous mode [ 1562.183848][T17685] loop1: detected capacity change from 0 to 764 [ 1562.286536][T17685] Symlink component flag not implemented [ 1562.286963][T17685] Symlink component flag not implemented (129) [ 1562.446075][T17690] netlink: 'syz.3.3541': attribute type 3 has an invalid length. [ 1563.147552][T17681] loop8: detected capacity change from 0 to 32768 [ 1563.208701][T17681] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by syz.8.3536 (17681) [ 1565.181596][T17681] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1565.242259][T17681] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 1565.262314][T17681] BTRFS info (device loop8): using free space tree [ 1565.281825][T17716] set match dimension is over the limit! [ 1565.597224][T17743] loop7: detected capacity change from 0 to 512 [ 1565.622443][T17743] ext4: Unknown parameter 'noacl' [ 1566.332302][T17681] BTRFS error (device loop8): open_ctree failed [ 1566.419416][T17747] Falling back ldisc for ttyS3. [ 1570.649931][T17806] smc: net device bond0 applied user defined pnetid SYZ0 [ 1570.671914][T17806] smc: net device bond0 erased user defined pnetid SYZ0 [ 1570.809921][ T26] kauditd_printk_skb: 48 callbacks suppressed [ 1570.809959][ T26] audit: type=1326 audit(1731258693.819:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17805 comm="syz.3.3575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1571.016313][ T26] audit: type=1326 audit(1731258693.879:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17805 comm="syz.3.3575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1571.416486][ T26] audit: type=1326 audit(1731258693.889:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17805 comm="syz.3.3575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1571.492334][ T26] audit: type=1326 audit(1731258693.899:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17805 comm="syz.3.3575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1571.568727][ T26] audit: type=1326 audit(1731258693.909:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17805 comm="syz.3.3575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1571.609201][ T26] audit: type=1326 audit(1731258693.919:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17805 comm="syz.3.3575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1571.719645][T17814] netlink: 'syz.8.3574': attribute type 3 has an invalid length. [ 1573.378522][T17847] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3588'. [ 1576.993003][T17885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3601'. [ 1579.348709][T17908] smc: net device bond0 applied user defined pnetid SYZ0 [ 1579.381460][T17908] smc: net device bond0 erased user defined pnetid SYZ0 [ 1579.439077][ T26] audit: type=1326 audit(1731258702.429:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17905 comm="syz.8.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1579.651376][ T26] audit: type=1326 audit(1731258702.429:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17905 comm="syz.8.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1579.848327][ T26] audit: type=1326 audit(1731258702.439:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17905 comm="syz.8.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1580.093667][ T26] audit: type=1326 audit(1731258702.439:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17905 comm="syz.8.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1580.128928][ T26] audit: type=1326 audit(1731258702.439:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17905 comm="syz.8.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1580.213661][ T26] audit: type=1326 audit(1731258702.439:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17905 comm="syz.8.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1580.249599][ T26] audit: type=1326 audit(1731258702.439:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17905 comm="syz.8.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1581.070295][ T26] audit: type=1326 audit(1731258702.439:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17905 comm="syz.8.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1581.163356][ T26] audit: type=1326 audit(1731258702.439:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17905 comm="syz.8.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1581.186578][ T26] audit: type=1326 audit(1731258702.439:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17905 comm="syz.8.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fc2ce17e719 code=0x7ffc0000 [ 1583.945432][T17948] loop7: detected capacity change from 0 to 2048 [ 1586.741830][T17948] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1588.053420][T13705] EXT4-fs (loop7): unmounting filesystem. [ 1589.016812][T17994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3633'. [ 1589.740614][T18018] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1589.850661][T18026] loop1: detected capacity change from 0 to 512 [ 1589.858093][T18026] EXT4-fs: Ignoring removed oldalloc option [ 1589.873645][T18026] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1590.088788][T18026] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1590.242832][T18026] ext4 filesystem being mounted at /349/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1591.078186][T18046] 9pnet_fd: Insufficient options for proto=fd [ 1591.673814][T18044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3647'. [ 1591.823033][T11962] EXT4-fs (loop1): unmounting filesystem. [ 1593.159410][T18077] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3658'. [ 1597.612272][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 1597.612291][ T26] audit: type=1326 audit(1731258720.629:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18124 comm="syz.3.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1597.713954][ T26] audit: type=1326 audit(1731258720.629:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18124 comm="syz.3.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1597.848867][ T26] audit: type=1326 audit(1731258720.629:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18124 comm="syz.3.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1597.974306][ T26] audit: type=1326 audit(1731258720.629:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18124 comm="syz.3.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1598.002028][ T26] audit: type=1326 audit(1731258720.629:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18124 comm="syz.3.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1598.038642][ T26] audit: type=1326 audit(1731258720.629:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18124 comm="syz.3.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1598.310201][ T26] audit: type=1326 audit(1731258720.629:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18124 comm="syz.3.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1599.071156][ T26] audit: type=1326 audit(1731258720.629:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18124 comm="syz.3.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1599.121473][ T26] audit: type=1326 audit(1731258720.629:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18124 comm="syz.3.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1599.147471][ T3621] udevd[3621]: worker [14093] terminated by signal 33 (Unknown signal 33) [ 1599.160765][T18133] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3676'. [ 1599.180163][ T3621] udevd[3621]: worker [14093] failed while handling '/devices/virtual/block/loop7' [ 1599.199711][ T26] audit: type=1326 audit(1731258720.659:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18124 comm="syz.3.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1599.297936][ T3621] udevd[3621]: worker [13503] terminated by signal 33 (Unknown signal 33) [ 1599.313652][ T3621] udevd[3621]: worker [13503] failed while handling '/devices/virtual/block/loop3' [ 1600.062550][T18163] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1600.451972][T18173] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1601.308582][T18176] loop7: detected capacity change from 0 to 764 [ 1601.372954][T18176] Symlink component flag not implemented [ 1601.384940][T18176] Symlink component flag not implemented (129) [ 1601.653086][T18188] set match dimension is over the limit! [ 1602.113668][T18203] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3699'. [ 1602.214803][T18205] netlink: 'syz.3.3700': attribute type 32 has an invalid length. [ 1602.463093][T18207] loop3: detected capacity change from 0 to 4096 [ 1602.482475][T18207] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1602.707004][T10877] EXT4-fs (loop3): unmounting filesystem. [ 1602.933059][T18215] mkiss: ax0: crc mode is auto. [ 1603.808191][T18221] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1603.906655][T18224] loop8: detected capacity change from 0 to 512 [ 1603.913853][T18224] EXT4-fs: Ignoring removed oldalloc option [ 1603.924389][T18224] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1603.971305][T18224] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1603.992917][T18224] ext4 filesystem being mounted at /252/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1604.082767][T18230] netlink: 'syz.0.3707': attribute type 3 has an invalid length. [ 1604.443176][T13744] EXT4-fs (loop8): unmounting filesystem. [ 1604.615850][T18240] netlink: 'syz.3.3711': attribute type 32 has an invalid length. [ 1604.782614][T18244] netlink: 'syz.0.3710': attribute type 3 has an invalid length. [ 1607.037649][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 1607.037669][ T26] audit: type=1326 audit(1731258730.049:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18259 comm="syz.3.3717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1607.068929][ T26] audit: type=1326 audit(1731258730.049:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18259 comm="syz.3.3717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1607.091551][ T26] audit: type=1326 audit(1731258730.049:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18259 comm="syz.3.3717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1607.114207][ T26] audit: type=1326 audit(1731258730.049:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18259 comm="syz.3.3717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1607.137324][ T26] audit: type=1326 audit(1731258730.059:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18259 comm="syz.3.3717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1607.160094][ T26] audit: type=1326 audit(1731258730.059:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18259 comm="syz.3.3717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1607.196908][ T26] audit: type=1326 audit(1731258730.059:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18259 comm="syz.3.3717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1607.227447][ T26] audit: type=1326 audit(1731258730.079:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18259 comm="syz.3.3717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1607.271244][ T26] audit: type=1326 audit(1731258730.079:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18259 comm="syz.3.3717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1607.294686][ T26] audit: type=1326 audit(1731258730.089:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18259 comm="syz.3.3717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609937e719 code=0x7ffc0000 [ 1612.410820][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1673.840703][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.281264][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1759.598789][ T28] INFO: task kworker/0:6:4299 blocked for more than 143 seconds. [ 1759.606570][ T28] Not tainted 6.1.116-syzkaller #0 [ 1759.612318][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1759.621148][ T28] task:kworker/0:6 state:D stack:21624 pid:4299 ppid:2 flags:0x00004000 [ 1759.630481][ T28] Workqueue: events rfkill_sync_work [ 1759.635859][ T28] Call Trace: [ 1759.639275][ T28] [ 1759.642241][ T28] __schedule+0x143f/0x4570 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1759.646809][ T28] ? release_firmware_map_entry+0x186/0x186 [ 1759.668581][ T28] ? print_irqtrace_events+0x210/0x210 [ 1759.674125][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 1759.720189][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1759.728474][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 1759.733748][ T28] schedule+0xbf/0x180 [ 1759.737857][ T28] schedule_preempt_disabled+0xf/0x20 [ 1759.762610][ T28] __mutex_lock+0x6b9/0xd80 [ 1759.767660][ T28] ? __mutex_lock+0x53c/0xd80 [ 1759.772645][ T28] ? rfkill_sync_work+0x25/0xe0 [ 1759.777567][ T28] ? mutex_lock_nested+0x10/0x10 [ 1759.782851][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1759.789480][ T28] ? print_irqtrace_events+0x210/0x210 [ 1759.794996][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1759.801262][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 1759.806500][ T28] rfkill_sync_work+0x25/0xe0 [ 1759.811265][ T28] ? process_one_work+0x7a9/0x11d0 [ 1759.816486][ T28] process_one_work+0x8a9/0x11d0 [ 1759.821594][ T28] ? worker_detach_from_pool+0x260/0x260 [ 1759.827786][ T28] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1759.833418][ T28] ? kthread_data+0x4e/0xc0 [ 1759.837967][ T28] ? wq_worker_running+0x97/0x190 [ 1759.843824][ T28] worker_thread+0xa47/0x1200 [ 1759.848704][ T28] kthread+0x28d/0x320 [ 1759.852810][ T28] ? worker_clr_flags+0x190/0x190 [ 1759.857901][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1759.862611][ T28] ret_from_fork+0x1f/0x30 [ 1759.867073][ T28] [ 1759.870261][ T28] INFO: task kworker/0:0:12433 blocked for more than 143 seconds. [ 1759.878084][ T28] Not tainted 6.1.116-syzkaller #0 [ 1759.883786][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1759.892578][ T28] task:kworker/0:0 state:D stack:22648 pid:12433 ppid:2 flags:0x00004000 [ 1759.903356][ T28] Workqueue: events rfkill_global_led_trigger_worker [ 1759.910412][ T28] Call Trace: [ 1759.913737][ T28] [ 1759.916682][ T28] __schedule+0x143f/0x4570 [ 1759.921295][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 1759.926537][ T28] ? release_firmware_map_entry+0x186/0x186 [ 1759.932617][ T28] ? print_irqtrace_events+0x210/0x210 [ 1759.938112][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 1759.943410][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1759.948773][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 1759.954000][ T28] schedule+0xbf/0x180 [ 1759.958068][ T28] schedule_preempt_disabled+0xf/0x20 [ 1759.963674][ T28] __mutex_lock+0x6b9/0xd80 [ 1759.968220][ T28] ? __mutex_lock+0x53c/0xd80 [ 1759.972987][ T28] ? rfkill_global_led_trigger_worker+0x23/0xd0 [ 1759.979407][ T28] ? mutex_lock_nested+0x10/0x10 [ 1759.984377][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1759.990466][ T28] ? print_irqtrace_events+0x210/0x210 [ 1759.995954][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1760.002408][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 1760.007729][ T28] ? process_one_work+0x7a9/0x11d0 [ 1760.012941][ T28] rfkill_global_led_trigger_worker+0x23/0xd0 [ 1760.019077][ T28] ? process_one_work+0x7a9/0x11d0 [ 1760.024257][ T28] process_one_work+0x8a9/0x11d0 [ 1760.029320][ T28] ? worker_detach_from_pool+0x260/0x260 [ 1760.034996][ T28] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1760.040739][ T28] ? kthread_data+0x4e/0xc0 [ 1760.045280][ T28] ? wq_worker_running+0x97/0x190 [ 1760.050378][ T28] worker_thread+0xa47/0x1200 [ 1760.055096][ T28] ? _raw_spin_unlock+0x40/0x40 [ 1760.060060][ T28] kthread+0x28d/0x320 [ 1760.064165][ T28] ? worker_clr_flags+0x190/0x190 [ 1760.069356][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1760.074058][ T28] ret_from_fork+0x1f/0x30 [ 1760.078552][ T28] [ 1760.081631][ T28] INFO: task syz.7.3695:18184 blocked for more than 143 seconds. [ 1760.089661][ T28] Not tainted 6.1.116-syzkaller #0 [ 1760.095315][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1760.105641][ T28] task:syz.7.3695 state:D stack:25832 pid:18184 ppid:13705 flags:0x00004004 [ 1760.114961][ T28] Call Trace: [ 1760.118255][ T28] [ 1760.121304][ T28] __schedule+0x143f/0x4570 [ 1760.125872][ T28] ? release_firmware_map_entry+0x186/0x186 [ 1760.131863][ T28] schedule+0xbf/0x180 [ 1760.135956][ T28] schedule_timeout+0xac/0x300 [ 1760.140804][ T28] ? console_conditional_schedule+0x40/0x40 [ 1760.146788][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1760.152880][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 1760.158114][ T28] ? wait_for_completion+0x2f9/0x610 [ 1760.163498][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1760.168796][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 1760.174028][ T28] ? wait_for_completion+0x2f9/0x610 [ 1760.179542][ T28] wait_for_completion+0x350/0x610 [ 1760.184687][ T28] ? io_schedule+0x100/0x100 [ 1760.189365][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 1760.194586][ T28] ? __flush_work+0xe5/0xad0 [ 1760.199271][ T28] __flush_work+0x95b/0xad0 [ 1760.203797][ T28] ? __flush_work+0xe5/0xad0 [ 1760.208444][ T28] ? flush_work+0x20/0x20 [ 1760.212808][ T28] ? move_linked_works+0x230/0x230 [ 1760.217953][ T28] ? print_irqtrace_events+0x210/0x210 [ 1760.223577][ T28] ? __cancel_work_timer+0x467/0x6a0 [ 1760.228929][ T28] __cancel_work_timer+0x519/0x6a0 [ 1760.234061][ T28] ? rcu_is_watching+0x11/0xb0 [ 1760.239097][ T28] ? cancel_work_sync+0x20/0x20 [ 1760.243996][ T28] ? nla_put+0x12d/0x1e0 [ 1760.248269][ T28] ? nfc_unregister_device+0x5f/0x290 [ 1760.253718][ T28] ? mutex_lock_nested+0x10/0x10 [ 1760.258724][ T28] ? nfc_genl_device_removed+0x251/0x370 [ 1760.264389][ T28] ? nfc_genl_setup_device_added+0x3f0/0x3f0 [ 1760.270444][ T28] rfkill_unregister+0x92/0x220 [ 1760.275340][ T28] nfc_unregister_device+0x92/0x290 [ 1760.280628][ T28] virtual_ncidev_close+0x55/0x90 [ 1760.285697][ T28] ? virtual_ncidev_open+0xc0/0xc0 [ 1760.291113][ T28] __fput+0x3f6/0x8d0 [ 1760.295158][ T28] task_work_run+0x246/0x300 [ 1760.299870][ T28] ? task_work_cancel+0x2e0/0x2e0 [ 1760.304950][ T28] ? exit_to_user_mode_loop+0x39/0x100 [ 1760.310497][ T28] exit_to_user_mode_loop+0xde/0x100 [ 1760.315858][ T28] exit_to_user_mode_prepare+0xb1/0x140 [ 1760.321490][ T28] syscall_exit_to_user_mode+0x60/0x270 [ 1760.327082][ T28] do_syscall_64+0x47/0xb0 [ 1760.331579][ T28] ? clear_bhb_loop+0x45/0xa0 [ 1760.336297][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1760.342283][ T28] RIP: 0033:0x7f8c79b7e719 [ 1760.346733][ T28] RSP: 002b:00007ffc4efceee8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1760.355206][ T28] RAX: 0000000000000000 RBX: 00007f8c79d37a80 RCX: 00007f8c79b7e719 [ 1760.363268][ T28] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1760.371330][ T28] RBP: 00007f8c79d37a80 R08: 00007f8c79d22000 R09: 00007ffc4efcf1df [ 1760.379366][ T28] R10: 00000000005f8ce4 R11: 0000000000000246 R12: 0000000000187324 [ 1760.387358][ T28] R13: 00007ffc4efceff0 R14: 0000000000000032 R15: ffffffffffffffff [ 1760.395455][ T28] [ 1760.398710][ T28] INFO: task syz.1.3696:18192 blocked for more than 144 seconds. [ 1760.406463][ T28] Not tainted 6.1.116-syzkaller #0 [ 1760.412213][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1760.420946][ T28] task:syz.1.3696 state:D stack:25216 pid:18192 ppid:11962 flags:0x00004004 [ 1760.430253][ T28] Call Trace: [ 1760.433560][ T28] [ 1760.436518][ T28] __schedule+0x143f/0x4570 [ 1760.441542][ T28] ? __mutex_lock+0x6b4/0xd80 [ 1760.446253][ T28] ? release_firmware_map_entry+0x186/0x186 [ 1760.452199][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 1760.457696][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 1760.462975][ T28] schedule+0xbf/0x180 [ 1760.467067][ T28] schedule_preempt_disabled+0xf/0x20 [ 1760.472499][ T28] __mutex_lock+0x6b9/0xd80 [ 1760.477040][ T28] ? __mutex_lock+0x53c/0xd80 [ 1760.481910][ T28] ? nfc_rfkill_set_block+0x4c/0x2f0 [ 1760.487233][ T28] ? mutex_lock_nested+0x10/0x10 [ 1760.492217][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 1760.497444][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 1760.502716][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1760.508869][ T28] ? _raw_spin_unlock+0x40/0x40 [ 1760.513752][ T28] nfc_rfkill_set_block+0x4c/0x2f0 [ 1760.518949][ T28] ? nfc_unregister_device+0x290/0x290 [ 1760.524437][ T28] rfkill_set_block+0x1e7/0x430 [ 1760.529414][ T28] rfkill_fop_write+0x5b7/0x790 [ 1760.534297][ T28] ? __might_fault+0xa1/0x110 [ 1760.539056][ T28] ? rfkill_fop_read+0x470/0x470 [ 1760.544052][ T28] do_iter_write+0x503/0xc40 [ 1760.548730][ T28] ? vfs_iter_write+0xa0/0xa0 [ 1760.553457][ T28] do_writev+0x27b/0x460 [ 1760.557728][ T28] ? do_readv+0x460/0x460 [ 1760.562145][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1760.568194][ T28] ? print_irqtrace_events+0x210/0x210 [ 1760.573752][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1760.579815][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 1760.585041][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1760.591142][ T28] do_syscall_64+0x3b/0xb0 [ 1760.595592][ T28] ? clear_bhb_loop+0x45/0xa0 [ 1760.600340][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1760.606269][ T28] RIP: 0033:0x7f290c97e719 [ 1760.610759][ T28] RSP: 002b:00007f290d81c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1760.619415][ T28] RAX: ffffffffffffffda RBX: 00007f290cb35f80 RCX: 00007f290c97e719 [ 1760.627408][ T28] RDX: 0000000000000007 RSI: 0000000020000440 RDI: 0000000000000003 [ 1760.635478][ T28] RBP: 00007f290c9f139e R08: 0000000000000000 R09: 0000000000000000 [ 1760.643539][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1760.651668][ T28] R13: 0000000000000000 R14: 00007f290cb35f80 R15: 00007ffeb65fa268 [ 1760.659735][ T28] [ 1760.662787][ T28] INFO: task syz.8.3709:18235 blocked for more than 144 seconds. [ 1760.670577][ T28] Not tainted 6.1.116-syzkaller #0 [ 1760.676318][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1760.685065][ T28] task:syz.8.3709 state:D stack:25216 pid:18235 ppid:13744 flags:0x00004004 [ 1760.694378][ T28] Call Trace: [ 1760.697676][ T28] [ 1760.700674][ T28] __schedule+0x143f/0x4570 [ 1760.705232][ T28] ? __mutex_lock+0x6b4/0xd80 [ 1760.709988][ T28] ? release_firmware_map_entry+0x186/0x186 [ 1760.715984][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 1760.721536][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 1760.726911][ T28] schedule+0xbf/0x180 [ 1760.731204][ T28] schedule_preempt_disabled+0xf/0x20 [ 1760.736600][ T28] __mutex_lock+0x6b9/0xd80 [ 1760.741179][ T28] ? __mutex_lock+0x53c/0xd80 [ 1760.745889][ T28] ? rfkill_fop_open+0x130/0x680 [ 1760.750924][ T28] ? mutex_lock_nested+0x10/0x10 [ 1760.755898][ T28] ? __init_waitqueue_head+0xaa/0x140 [ 1760.761357][ T28] rfkill_fop_open+0x130/0x680 [ 1760.766161][ T28] ? rfkill_fop_ioctl+0x230/0x230 [ 1760.771281][ T28] misc_open+0x304/0x380 [ 1760.775643][ T28] chrdev_open+0x54a/0x630 [ 1760.780131][ T28] ? cd_forget+0x160/0x160 [ 1760.784589][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 1760.789881][ T28] ? fsnotify_perm+0x472/0x590 [ 1760.794673][ T28] ? cd_forget+0x160/0x160 [ 1760.799556][ T28] do_dentry_open+0x7f9/0x10f0 [ 1760.804378][ T28] path_openat+0x2644/0x2e60 [ 1760.809091][ T28] ? mark_lock+0x9a/0x340 [ 1760.813468][ T28] ? do_filp_open+0x480/0x480 [ 1760.818161][ T28] do_filp_open+0x230/0x480 [ 1760.822715][ T28] ? vfs_tmpfile+0x4a0/0x4a0 [ 1760.827361][ T28] ? _raw_spin_unlock+0x24/0x40 [ 1760.832313][ T28] ? alloc_fd+0x5a0/0x640 [ 1760.836671][ T28] do_sys_openat2+0x13b/0x4f0 [ 1760.841583][ T28] ? bpf_raw_tracepoint_open+0xcf/0x210 [ 1760.847176][ T28] ? do_sys_open+0x220/0x220 [ 1760.852276][ T28] __x64_sys_openat+0x243/0x290 [ 1760.857162][ T28] ? __ia32_sys_open+0x270/0x270 [ 1760.862222][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1760.868245][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 1760.873503][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1760.880221][ T28] do_syscall_64+0x3b/0xb0 [ 1760.884681][ T28] ? clear_bhb_loop+0x45/0xa0 [ 1760.889451][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1760.895396][ T28] RIP: 0033:0x7fc2ce17e719 [ 1760.899911][ T28] RSP: 002b:00007fc2ceecd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1760.908455][ T28] RAX: ffffffffffffffda RBX: 00007fc2ce335f80 RCX: 00007fc2ce17e719 [ 1760.916448][ T28] RDX: 0000000000000602 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 1760.924488][ T28] RBP: 00007fc2ce1f139e R08: 0000000000000000 R09: 0000000000000000 [ 1760.932504][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1760.940619][ T28] R13: 0000000000000000 R14: 00007fc2ce335f80 R15: 00007ffef9c2c8a8 [ 1760.948844][ T28] [ 1760.951896][ T28] INFO: task syz.0.3710:18242 blocked for more than 144 seconds. [ 1760.959710][ T28] Not tainted 6.1.116-syzkaller #0 [ 1760.965358][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1760.974095][ T28] task:syz.0.3710 state:D stack:27560 pid:18242 ppid:17186 flags:0x00004004 [ 1760.983400][ T28] Call Trace: [ 1760.986784][ T28] [ 1760.989783][ T28] __schedule+0x143f/0x4570 [ 1760.994357][ T28] ? __mutex_lock+0x6b4/0xd80 [ 1760.999133][ T28] ? release_firmware_map_entry+0x186/0x186 [ 1761.005054][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 1761.010860][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 1761.016099][ T28] schedule+0xbf/0x180 [ 1761.020269][ T28] schedule_preempt_disabled+0xf/0x20 [ 1761.025663][ T28] __mutex_lock+0x6b9/0xd80 [ 1761.030308][ T28] ? __mutex_lock+0x53c/0xd80 [ 1761.035203][ T28] ? misc_open+0x58/0x380 [ 1761.039853][ T28] ? mutex_lock_nested+0x10/0x10 [ 1761.044830][ T28] ? kobject_get_unless_zero+0x229/0x320 [ 1761.050606][ T28] misc_open+0x58/0x380 [ 1761.054809][ T28] chrdev_open+0x54a/0x630 [ 1761.059453][ T28] ? cd_forget+0x160/0x160 [ 1761.063898][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 1761.069209][ T28] ? fsnotify_perm+0x472/0x590 [ 1761.074016][ T28] ? cd_forget+0x160/0x160 [ 1761.078522][ T28] do_dentry_open+0x7f9/0x10f0 [ 1761.083326][ T28] path_openat+0x2644/0x2e60 [ 1761.087923][ T28] ? mark_lock+0x9a/0x340 [ 1761.092427][ T28] ? do_filp_open+0x480/0x480 [ 1761.097171][ T28] do_filp_open+0x230/0x480 [ 1761.101754][ T28] ? vfs_tmpfile+0x4a0/0x4a0 [ 1761.106737][ T28] ? _raw_spin_unlock+0x24/0x40 [ 1761.111726][ T28] ? alloc_fd+0x5a0/0x640 [ 1761.116084][ T28] do_sys_openat2+0x13b/0x4f0 [ 1761.120844][ T28] ? do_sys_open+0x220/0x220 [ 1761.125497][ T28] __x64_sys_openat+0x243/0x290 [ 1761.130494][ T28] ? __ia32_sys_open+0x270/0x270 [ 1761.135476][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1761.141512][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 1761.146731][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1761.152862][ T28] do_syscall_64+0x3b/0xb0 [ 1761.157301][ T28] ? clear_bhb_loop+0x45/0xa0 [ 1761.162048][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1761.167973][ T28] RIP: 0033:0x7f7b17f7e719 [ 1761.172669][ T28] RSP: 002b:00007f7b18d89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1761.181152][ T28] RAX: ffffffffffffffda RBX: 00007f7b18136058 RCX: 00007f7b17f7e719 [ 1761.189235][ T28] RDX: 0000000000000002 RSI: 0000000020002540 RDI: ffffffffffffff9c [ 1761.197223][ T28] RBP: 00007f7b17ff139e R08: 0000000000000000 R09: 0000000000000000 [ 1761.205255][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1761.213337][ T28] R13: 0000000000000001 R14: 00007f7b18136058 R15: 00007ffcfa31cf88 [ 1761.221405][ T28] [ 1761.224457][ T28] INFO: task syz.3.3718:18265 blocked for more than 144 seconds. [ 1761.232273][ T28] Not tainted 6.1.116-syzkaller #0 [ 1761.237915][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1761.246619][ T28] task:syz.3.3718 state:D stack:27560 pid:18265 ppid:10877 flags:0x00004004 [ 1761.255935][ T28] Call Trace: [ 1761.259282][ T28] [ 1761.262257][ T28] __schedule+0x143f/0x4570 [ 1761.266827][ T28] ? __mutex_lock+0x6b4/0xd80 [ 1761.271593][ T28] ? release_firmware_map_entry+0x186/0x186 [ 1761.277506][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 1761.283255][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 1761.288564][ T28] schedule+0xbf/0x180 [ 1761.292693][ T28] schedule_preempt_disabled+0xf/0x20 [ 1761.298066][ T28] __mutex_lock+0x6b9/0xd80 [ 1761.302631][ T28] ? __mutex_lock+0x53c/0xd80 [ 1761.307347][ T28] ? misc_open+0x58/0x380 [ 1761.311809][ T28] ? mutex_lock_nested+0x10/0x10 [ 1761.316776][ T28] ? kobject_get_unless_zero+0x229/0x320 [ 1761.322544][ T28] misc_open+0x58/0x380 [ 1761.326830][ T28] chrdev_open+0x54a/0x630 [ 1761.331322][ T28] ? cd_forget+0x160/0x160 [ 1761.335770][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 1761.341063][ T28] ? fsnotify_perm+0x472/0x590 [ 1761.345865][ T28] ? cd_forget+0x160/0x160 [ 1761.350354][ T28] do_dentry_open+0x7f9/0x10f0 [ 1761.355161][ T28] path_openat+0x2644/0x2e60 [ 1761.359855][ T28] ? mark_lock+0x9a/0x340 [ 1761.364253][ T28] ? do_filp_open+0x480/0x480 [ 1761.369045][ T28] do_filp_open+0x230/0x480 [ 1761.373591][ T28] ? vfs_tmpfile+0x4a0/0x4a0 [ 1761.378222][ T28] ? _raw_spin_unlock+0x24/0x40 [ 1761.383159][ T28] ? alloc_fd+0x5a0/0x640 [ 1761.387514][ T28] do_sys_openat2+0x13b/0x4f0 [ 1761.392415][ T28] ? __fget_files+0x28/0x4a0 [ 1761.397031][ T28] ? do_sys_open+0x220/0x220 [ 1761.401720][ T28] __x64_sys_openat+0x243/0x290 [ 1761.406611][ T28] ? __ia32_sys_open+0x270/0x270 [ 1761.411654][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1761.417662][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 1761.423013][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1761.429090][ T28] do_syscall_64+0x3b/0xb0 [ 1761.433540][ T28] ? clear_bhb_loop+0x45/0xa0 [ 1761.438221][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1761.444203][ T28] RIP: 0033:0x7f609937e719 [ 1761.448676][ T28] RSP: 002b:00007f609a126038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1761.457288][ T28] RAX: ffffffffffffffda RBX: 00007f6099535f80 RCX: 00007f609937e719 [ 1761.465352][ T28] RDX: 0000000000000000 RSI: 0000000020000140 RDI: ffffffffffffff9c [ 1761.473372][ T28] RBP: 00007f60993f139e R08: 0000000000000000 R09: 0000000000000000 [ 1761.481435][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1761.489486][ T28] R13: 0000000000000000 R14: 00007f6099535f80 R15: 00007fff63451d08 [ 1761.497506][ T28] [ 1761.500803][ T28] [ 1761.500803][ T28] Showing all locks held in the system: [ 1761.508628][ T28] 1 lock held by rcu_tasks_kthre/12: [ 1761.514049][ T28] #0: ffffffff8d32b110 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 1761.524939][ T28] 1 lock held by rcu_tasks_trace/13: [ 1761.530283][ T28] #0: ffffffff8d32b910 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 1761.541440][ T28] 1 lock held by khungtaskd/28: [ 1761.546328][ T28] #0: ffffffff8d32af40 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 1761.556364][ T28] 2 locks held by getty/4004: [ 1761.561094][ T28] #0: ffff888030715098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1761.570951][ T28] #1: ffffc900032462f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 1761.581139][ T28] 3 locks held by kworker/0:6/4299: [ 1761.586334][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1761.596756][ T28] #1: ffffc9000458fd20 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1761.608968][ T28] #2: ffffffff8e7ab208 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_sync_work+0x25/0xe0 [ 1761.619037][ T28] 3 locks held by kworker/0:0/12433: [ 1761.624350][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1761.634833][ T28] #1: ffffc900044a7d20 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1761.647793][ T28] #2: ffffffff8e7ab208 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x23/0xd0 [ 1761.659293][ T28] 1 lock held by syz.7.3695/18184: [ 1761.664422][ T28] #0: ffff888058b06100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x5f/0x290 [ 1761.674249][ T28] 2 locks held by syz.1.3696/18192: [ 1761.679476][ T28] #0: ffffffff8e7ab208 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a5/0x790 [ 1761.689671][ T28] #1: ffff888058b06100 (&dev->mutex){....}-{3:3}, at: nfc_rfkill_set_block+0x4c/0x2f0 [ 1761.699429][ T28] 2 locks held by syz.8.3709/18235: [ 1761.704621][ T28] #0: ffffffff8da812a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 1761.713171][ T28] #1: ffffffff8e7ab208 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_open+0x130/0x680 [ 1761.723487][ T28] 1 lock held by syz.0.3710/18242: [ 1761.728851][ T28] #0: ffffffff8da812a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 1761.737360][ T28] 1 lock held by syz.3.3718/18265: [ 1761.742550][ T28] #0: ffffffff8da812a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 1761.751078][ T28] 1 lock held by syz-executor/18270: [ 1761.756386][ T28] #0: ffffffff8da812a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 1761.765034][ T28] 1 lock held by syz-executor/18271: [ 1761.770400][ T28] #0: ffffffff8da812a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 1761.778962][ T28] 1 lock held by syz-executor/18274: [ 1761.784256][ T28] #0: ffffffff8da812a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 1761.792783][ T28] 1 lock held by syz-executor/18275: [ 1761.798073][ T28] #0: ffffffff8da812a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 1761.806603][ T28] 1 lock held by syz-executor/18277: [ 1761.811940][ T28] #0: ffffffff8da812a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 1761.820510][ T28] 1 lock held by syz-executor/18282: [ 1761.825817][ T28] #0: ffffffff8da812a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 1761.834536][ T28] 1 lock held by syz-executor/18283: [ 1761.840043][ T28] #0: ffffffff8da812a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 1761.848731][ T28] 1 lock held by syz-executor/18286: [ 1761.854028][ T28] #0: ffffffff8da812a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 1761.862544][ T28] 1 lock held by syz-executor/18288: [ 1761.867851][ T28] #0: ffffffff8da812a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 1761.876530][ T28] 1 lock held by syz-executor/18290: [ 1761.881877][ T28] #0: ffffffff8da812a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 1761.890395][ T28] 1 lock held by syz-executor/18293: [ 1761.895689][ T28] #0: ffffffff8da812a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 1761.904213][ T28] 1 lock held by syz-executor/18295: [ 1761.909667][ T28] #0: ffffffff8da812a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 1761.918172][ T28] 1 lock held by syz-executor/18297: [ 1761.923701][ T28] #0: ffffffff8da812a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 1761.932269][ T28] 1 lock held by syz-executor/18299: [ 1761.937562][ T28] #0: ffffffff8da812a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 1761.946242][ T28] 1 lock held by syz-executor/18301: [ 1761.951611][ T28] #0: ffffffff8da812a8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 1761.960195][ T28] [ 1761.962532][ T28] ============================================= [ 1761.962532][ T28] [ 1761.971029][ T28] NMI backtrace for cpu 0 [ 1761.975380][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.116-syzkaller #0 [ 1761.983285][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1761.993344][ T28] Call Trace: [ 1761.996625][ T28] [ 1761.999558][ T28] dump_stack_lvl+0x1e3/0x2cb [ 1762.004247][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 1762.009736][ T28] ? panic+0x764/0x764 [ 1762.013813][ T28] ? vprintk_emit+0x622/0x740 [ 1762.018514][ T28] ? printk_sprint+0x490/0x490 [ 1762.023293][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 1762.028417][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 1762.033372][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 1762.039542][ T28] ? _printk+0xd1/0x111 [ 1762.043736][ T28] ? panic+0x764/0x764 [ 1762.047829][ T28] ? __wake_up_klogd+0xcc/0x100 [ 1762.052688][ T28] ? panic+0x764/0x764 [ 1762.056765][ T28] ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0 [ 1762.062838][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1762.068916][ T28] nmi_trigger_cpumask_backtrace+0x1ae/0x3f0 [ 1762.074913][ T28] watchdog+0xf88/0xfd0 [ 1762.079096][ T28] ? watchdog+0x1f8/0xfd0 [ 1762.083439][ T28] kthread+0x28d/0x320 [ 1762.087509][ T28] ? hungtask_pm_notify+0x50/0x50 [ 1762.092541][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1762.097137][ T28] ret_from_fork+0x1f/0x30 [ 1762.101580][ T28] [ 1762.105138][ T28] Sending NMI from CPU 0 to CPUs 1: [ 1762.110415][ C1] NMI backtrace for cpu 1 [ 1762.110433][ C1] CPU: 1 PID: 27 Comm: kworker/1:1 Not tainted 6.1.116-syzkaller #0 [ 1762.110450][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1762.110462][ C1] Workqueue: events_power_efficient wg_ratelimiter_gc_entries [ 1762.110485][ C1] RIP: 0010:__raw_callee_save___pv_queued_spin_unlock+0xc/0x12 [ 1762.110515][ C1] Code: 56 57 41 50 41 51 41 52 41 53 e8 cf 0a 00 00 41 5b 41 5a 41 59 41 58 5f 5e 5a 59 c3 66 90 52 b8 01 00 00 00 31 d2 f0 0f b0 17 <3c> 01 75 02 5a c3 56 0f b6 f0 e8 c5 ff ff ff 5e 5a c3 66 90 55 48 [ 1762.110534][ C1] RSP: 0018:ffffc90000a3fb88 EFLAGS: 00000246 [ 1762.110548][ C1] RAX: 0000000000000001 RBX: 1ffffffff1ba0339 RCX: 0000000000000001 [ 1762.110560][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8dd019c0 [ 1762.110571][ C1] RBP: dffffc0000000000 R08: dffffc0000000000 R09: fffffbfff1ba0339 [ 1762.110584][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffffff1ba033a [ 1762.110597][ C1] R13: ffffffff8dd019d0 R14: ffffffff8dd019c8 R15: ffffffff8dd019c0 [ 1762.110611][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1762.110626][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1762.110638][ C1] CR2: 00005633a52f2088 CR3: 000000000d08e000 CR4: 00000000003506e0 [ 1762.110660][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1762.110670][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1762.110681][ C1] Call Trace: [ 1762.110687][ C1] [ 1762.110694][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 1762.110712][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1762.110741][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 1762.110759][ C1] ? nmi_handle+0x25/0x440 [ 1762.110794][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 1762.110811][ C1] ? nmi_handle+0x12e/0x440 [ 1762.110837][ C1] ? nmi_handle+0x25/0x440 [ 1762.110863][ C1] ? __raw_callee_save___pv_queued_spin_unlock+0xc/0x12 [ 1762.110889][ C1] ? default_do_nmi+0x62/0x150 [ 1762.110910][ C1] ? exc_nmi+0xa8/0x100 [ 1762.110927][ C1] ? end_repeat_nmi+0x16/0x31 [ 1762.110949][ C1] ? __raw_callee_save___pv_queued_spin_unlock+0xc/0x12 [ 1762.110976][ C1] ? __raw_callee_save___pv_queued_spin_unlock+0xc/0x12 [ 1762.111004][ C1] ? __raw_callee_save___pv_queued_spin_unlock+0xc/0x12 [ 1762.111031][ C1] [ 1762.111036][ C1] [ 1762.111042][ C1] do_raw_spin_unlock+0x137/0x8a0 [ 1762.111064][ C1] _raw_spin_unlock+0x1a/0x40 [ 1762.111086][ C1] wg_ratelimiter_gc_entries+0x3a7/0x470 [ 1762.111107][ C1] ? process_one_work+0x7a9/0x11d0 [ 1762.111128][ C1] process_one_work+0x8a9/0x11d0 [ 1762.111157][ C1] ? worker_detach_from_pool+0x260/0x260 [ 1762.111192][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1762.111213][ C1] ? kthread_data+0x4e/0xc0 [ 1762.111241][ C1] ? wq_worker_running+0x97/0x190 [ 1762.111258][ C1] worker_thread+0xa47/0x1200 [ 1762.111291][ C1] kthread+0x28d/0x320 [ 1762.111305][ C1] ? worker_clr_flags+0x190/0x190 [ 1762.111323][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1762.111339][ C1] ret_from_fork+0x1f/0x30 [ 1762.111370][ C1] [ 1762.423394][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 1762.430275][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.116-syzkaller #0 [ 1762.438172][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1762.448229][ T28] Call Trace: [ 1762.451509][ T28] [ 1762.454439][ T28] dump_stack_lvl+0x1e3/0x2cb [ 1762.459125][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 1762.464589][ T28] ? panic+0x764/0x764 [ 1762.468697][ T28] ? llist_add_batch+0x160/0x1d0 [ 1762.473654][ T28] ? vscnprintf+0x59/0x80 [ 1762.477992][ T28] panic+0x318/0x764 [ 1762.481897][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 1762.488057][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 1762.493442][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 1762.499599][ T28] ? nmi_trigger_cpumask_backtrace+0x338/0x3f0 [ 1762.505762][ T28] ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0 [ 1762.511921][ T28] watchdog+0xfc7/0xfd0 [ 1762.516093][ T28] ? watchdog+0x1f8/0xfd0 [ 1762.520449][ T28] kthread+0x28d/0x320 [ 1762.524517][ T28] ? hungtask_pm_notify+0x50/0x50 [ 1762.529548][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1762.534143][ T28] ret_from_fork+0x1f/0x30 [ 1762.538580][ T28] [ 1762.541737][ T28] Kernel Offset: disabled [ 1762.546061][ T28] Rebooting in 86400 seconds..