last executing test programs: 15m16.785274333s ago: executing program 32 (id=102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 15m11.248350149s ago: executing program 33 (id=118): prlimit64(0x0, 0xe, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x5, 0xfffffffffffffffd, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000200), &(0x7f0000000500)=0x4) recvfrom$inet6(r4, 0x0, 0x0, 0x40000141, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x2000c8, &(0x7f00000005c0)=ANY=[@ANYBLOB='codepage=874,nodots,dots,tz=UTC,dots,nodots,codepage=862,dots,dots,check=strict,allow_utime=000000000000000000001,sys_immutable,nodots,nfs,quiet,dots,nodots,nodots,debug,usefree,tz=UTC,flush,nodots,\x00'], 0xfd, 0x1c9, &(0x7f0000000300)="$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") 14m56.244371546s ago: executing program 34 (id=136): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_usb_connect$printer(0x2, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 11m16.691681446s ago: executing program 35 (id=559): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x42000000) setitimer(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2210886, &(0x7f00000001c0)={[{}, {@dioread_nolock}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 10m30.481726342s ago: executing program 7 (id=735): r0 = socket$pptp(0x18, 0x1, 0x2) recvmmsg(r0, &(0x7f00000065c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2000, 0x0) 10m28.166428315s ago: executing program 7 (id=738): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x1054c3b7, 0x40801) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x20040004) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={'\x00', 0xfff8, 0x7f, 0x10000, 0x0, 0x6}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x530, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff}) r2 = socket(0x15, 0x3, 0x6) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_ifreq(r2, 0x89a3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x1}}, 0x20) 10m25.78707359s ago: executing program 7 (id=750): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x80800) r2 = syz_io_uring_setup(0x10e, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="20000000040603000000800000000000050000020900020073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40400c1}, 0x20040018) r6 = open(&(0x7f0000002240)='.\x00', 0x0, 0xa0) ioctl$EXT4_IOC_GROUP_ADD(r6, 0xc0185879, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOGET_FSCREENINFO(r7, 0x4602, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0xffff8000, 0x2, 0x0, 'queue1\x00', 0x4}) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000"], 0x7c}}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x14) 10m24.621809877s ago: executing program 7 (id=753): syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/meminfo\x00', 0x0, 0x0) r3 = socket(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="122000007d000400"/18, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={r4, &(0x7f0000000340), &(0x7f0000000200)=@tcp6=r3}, 0x20) recvmsg$unix(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40000060) read$FUSE(r2, &(0x7f0000000680)={0x2020}, 0x2020) 10m16.616557927s ago: executing program 7 (id=772): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$9p_fd(0x0, 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000000600)) unshare(0x600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, &(0x7f00000013c0)=ANY=[@ANYBLOB="180000000000000000000000000000fd95"], &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 10m0.97512791s ago: executing program 36 (id=772): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$9p_fd(0x0, 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000000600)) unshare(0x600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, &(0x7f00000013c0)=ANY=[@ANYBLOB="180000000000000000000000000000fd95"], &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 8m30.834946179s ago: executing program 8 (id=984): socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) socket(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}}, 0x18}}, 0x0) 8m30.475230249s ago: executing program 8 (id=985): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, 0x0, 0x23b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/oops_count', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/psched\x00') r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x44, &(0x7f0000000040), 0x5d) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000003c000701000000bd1075717c0000000000017c00000400fc800c00018008000600ffff0000080002800400728008000940", @ANYRES32=r7, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) syz_open_procfs$namespace(r8, 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) 8m28.094987672s ago: executing program 8 (id=989): openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) fanotify_init(0x0, 0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x7}, 0x0, 0x0) 8m24.572044795s ago: executing program 8 (id=996): socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) socket(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}}, 0x18}}, 0x0) 8m24.140020353s ago: executing program 8 (id=997): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) mmap(&(0x7f00008c7000/0x3000)=nil, 0x3000, 0x0, 0x8031, 0xffffffffffffffff, 0x8000000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1997e358660e994000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056087d7200000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x81, 0x3966, 0x6, 0x8000, 0x4, r2, r3, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r4, 0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 8m22.9988146s ago: executing program 8 (id=1000): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() ptrace$getsig(0x4202, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x8f, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000002001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x80000e, &(0x7f0000000340), 0x3, 0x44a, &(0x7f0000000bc0)="$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") 8m20.907309175s ago: executing program 37 (id=976): syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) mount(0x0, &(0x7f0000019080)='./file0\x00', 0x0, 0x23010, 0x0) execve(0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'veth1\x00'}) unshare(0x62040200) 8m7.884649617s ago: executing program 38 (id=1000): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() ptrace$getsig(0x4202, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x8f, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000002001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x80000e, &(0x7f0000000340), 0x3, 0x44a, &(0x7f0000000bc0)="$eJzs271vG2UYAPDn7CSlXyRU5aMfQKAgylfSpKV0YAGBxFAkJBjKGJK0CnUb1ASJVhEEhMqIKjGxIEYk/gImWBAwIbHCjipVKEsLk9HZd43t2E6dOnGpfz/p3Pe9O/d9nrt77ffujQPoW6PpSxKxKyL+iIjharV+h9HqPzdWlqb/WVmaTqJcfuvvpLLf9ZWl6XzX/H0788pAROGzJA40aXfh4qWzU6XS7IWsPr547v3xhYuXnp87N3Vm9szs+ckTJ44dnXjx+OQLXckzzev6/o/mD+57/Z0rb0yfuvLuL98lef4NeXTJaLuNT5bLXW6ut3bXlJOBHgZCR4rVbhqDlf4/HMVYPXnD8dqnPQ0O2FTlcrn8QOvNy2XgLpZEryMAeiP/ok/vf/Nli4Yed4RrL1dvgNK8b2RLdctAFLJ9Bhvub7tpNCJOLf/7dbrE5jyHAACo80M6/nmu2fivELXPhe7N5lBGIuK+iNgTEccjYm9E3B9R2ffBiHiow/YbJ0nWjn8KV2tr5aTDBtaRjv9eyua26sd/+egvRopZbXcl/8Hk9Fxp9kh2TA7H4La0PtGmjR9f/f2LVttqx3/pkrafjwWzOK4ObKt/z8zU4tTt5Fzr2icR+wca8j8ZlQm8fCYgPeT7ImL/BtuYe+bbg622rZ9/G12YZyp/E/FU9fwvR935X73Qkvbzk+P3RGn2yHh+Vaz162+X32zV/m3l3wXp+d/R9Pq/mf9IUjtfu9DJ//7V0+nr5T8/b3lPs9Hrfyh5u1IeytZ9OLW4eGEiYig5WQ26dv3k6nvzer5/mv/hQ837/55YPRIHIiK9iB+OiEci4tEs9sci4vGIONTmKPz8yhPvbTz/zZXmP9PR+V8tDEXjmuaF4tmfvq9rdKST/NPzf6xSOpytuZXPv1uJq9OrGQAAAP6vChGxK5LC2M1yoTA2Vv0b/r2xo1CaX1h89vT8B+dnqr8RGInBQv6ka7jmeehEdluf1ycb6kez58ZfFrdX6mPT86WZXicPfW5ni/6f+qvY6+iATef3WtC/9H/oX/o/9C/9H/pXk/6/vRdxAFuv2ff/xz2IA9h6Df3ftB/0Eff/0L820v99ZsDdoW1fHtq6OIAttbA91v+RvILCmkIU7ogwFDap0OtPJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgO74LwAA///lI+j0") 2m28.876041216s ago: executing program 0 (id=1539): pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x40001043, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x3516, 0x300, 0x0, 0x0, 0x0) 2m24.468771125s ago: executing program 0 (id=1545): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket(0x11, 0x80001, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0xa, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000330001002bbd7000fedbdb25040009cc00000800040002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x28af, 0x0) r5 = syz_open_dev$vim2m(0x0, 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r5, 0x40045612, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) 2m23.2558874s ago: executing program 0 (id=1549): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 2m21.982148752s ago: executing program 0 (id=1551): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x82, &(0x7f0000000140)={[{@user_xattr}, {@errors_remount}, {@noblock_validity}, {@test_dummy_encryption_v1}], [], 0x3d}, 0xfd, 0x464, &(0x7f0000001600)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000240)='kmem_cache_free\x00', r5}, 0x18) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x1}], 0x1}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) r8 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmsg$key(r8, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001000)={0x2, 0x4, 0x1, 0x2, 0x15, 0x0, 0x70bd2c, 0x25dfdbfd, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e21}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d5}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}, @sadb_x_policy={0x8, 0x12, 0x1, 0x0, 0x0, 0x6e6bb1, 0xf, {0x6, 0xff, 0x9, 0x28, 0x0, 0xff, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@empty}}, @sadb_lifetime={0x4, 0x2, 0x1, 0x3, 0x3, 0xd8}, @sadb_ident={0x2, 0xb, 0x1b}, @sadb_x_nat_t_type={0x1, 0x14, 0x10}]}, 0xa8}}, 0x0) 2m17.677240463s ago: executing program 0 (id=1559): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x10c42, &(0x7f0000000d80)=ANY=[@ANYBLOB="756e695f786c6174653d312c6e6f6e756d7461696c3d300000000000000008303030303030303030303034303030303030303030302c73686f72746e616d653d65722c73686f72746e616d653d6d697865642c756e695f786c6174653d312c73686f72f46e616d653d6d697865642c696f630100727365743d757466f69e75731725e72216799ebd57484a7e1948a8aa65667265652c757466383d312c6e66733d6e6f7374616c655f726f2c73686f72682e616d653d6d697865642c757466383d306d653d77696e6e742c007aea3388304ddedb3208ceb9b2c23924743277bd2c0d0019d44efede967f3df81cce421f7aafa8aa7c706311ab7a0ce39abf7858b6ba6ef5206da03692650000000000000001d0559b166f8c433d34c03a60999dea3bab649a260b216354ecc726cd1f6519546e8ef6ae17a0da1b9313ef4b5633c5f1bf756a7816d304d61c4d15539bae9f6e8dc91d178c85744c5cc226ca0568f9f6da8997bc10100b836488e47d0b7e6ccffaf123b1000000d6d876f2e37dde582f497ab6d4d11f7211b4aaf087f529ffc0000ee312a30cc69ae25ac6a986a76824020b12971980e00a27786eef1c2537fdcb1de9c4bed7175c6704f0c39d14da07a8edf97525a0c8138686d6e2b8d90102027245729e944719894ebe079bf1ab2b7002c54c5c714bff93d9475ff23f653874321e4ecc1ebd2baa44aea86a1617e53fcc5683e5c7b14e5158239aebf96ef3b73359414993575bf4e880ac24d7fee38c5a22f6fae6a22a2185cd5a25b7bc11062d649340f8220bfa18cae94fd73afbb38b2fc20a263e091c5eb14ce630628aaf65b7ccab9b4d3b2c220153cd28c86e6c8e58903c66698fd27f4f22a9fd1dd67d70de664e3b985f20ada8c0f531865a9093fe6d3cd52c721dcfe391a812583c4e745b824429ce98f2a7928d22c9b5302719058f593fddbbb60ca7f54653b33118a4e01fcfe3a2329576bf6a45353bf9f720cea11bf481ed7ed0979416e75e6fa5f6b699749e9d4446c849ed79650b35dd0bd6e1955fe9b0c09861cf61fd57be7ba905990ed7a4c5b3793959636630d74ecc23264ea54d4d2cc4f112f49319943f00"/797], 0x1, 0x27a, &(0x7f0000000540)="$eJzs3DFrE38cx/FP0/zbNKVNhr+CgvhFF12ONj4ACdKCGFBqI+ogXO1FQ85cyYVKRGw3FwcfR3F0E9Qn0MXN3a2L4FJQjCRNTdKmitr0onm/oHff5pdP8rvkEr53kNu6+fxBqRA6BbeqWMIUk9a1LaUbVctIax1r1mPqtK7zk5/en7p+6/aVbC43t2A2n128kDGz6dOvHz5+ceZtdfLGy+lX49pM39n6mPmweXzzxNbXxfvF0IqhlYOqubYUBFV3yfdsuRiWHLNrvueGnhXLoVfpGi/4wcpKzdzy8lRypeKFobnlmpW8mlUDq1Zq5t5zi2VzHMemksLP5DcWFtxs1LNA38Qbi0ol645Kmtg3nN+IYlIAACBanf2/Bq7/b3QtP+7/1+n//wD9/zBo9P/J1ue3G/0/AAAAAAAAAAAAAAAAAAAAAAB/g+16PVWv11O7692/cUkJSbv/Rz1P9Afv/3Dr+OFeQvKfruZX85I/0lg2ZAsqypenGaX0pbk/tOzU85dzczPWlNYbf62VX1vNj3bnZ5VSund+didv3fn/lOzMZ5TS/73zmZ75MZ0725F3lNK7uwrka7m5X7fzT2bNLl3N7clPNO8HAAAAAMC/wLHveh6/O85B4zv5Xzg/sOf4Oq6T8Wi3HQAAAACAYRHWHpVc3/cq0RSfWycLIp7GgBfHJP1W/GLHVV/bQ/F9txx28SwYlJduAIuEpEN9wAn1Y6oRfikBAAAA6It20x/1TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGF5HccGzA546dsSbCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAETuWwAAAP//AmwlzQ==") getresuid(0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 2m17.538965269s ago: executing program 0 (id=1560): r0 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2a10886, &(0x7f00000001c0)={[{@quota}, {@dioread_nolock}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x24020400) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) pipe2$9p(0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000001c0), 0x2, 0x51a, &(0x7f0000001200)="$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") r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r5, 0xffffffffffffffff, 0x0, 0x80000000) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) unshare(0x400) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r7 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000140)={0xc, r7}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r0, 0x0, 0x3}, 0x18) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x90000, 0x0, 0x1, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 2m7.342753657s ago: executing program 9 (id=1576): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x1d, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000c40)={0x44, 0x0, &(0x7f0000001180)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0xfcff, &(0x7f0000000b40)='?'}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r6, 0x40045567, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet(0x2, 0x802, 0x1) connect$inet(r7, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r7, 0x0, 0x14, &(0x7f0000000140)=0x8000000a, 0x4) write(r7, &(0x7f0000000440)="08008edf773c8000", 0x8) recvmsg$inet_nvme(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) r9 = eventfd(0x1) ioctl$VHOST_SET_LOG_FD(r8, 0x4004af07, &(0x7f0000000240)=r9) ioctl$VHOST_SET_VRING_KICK(r8, 0x4008af20, &(0x7f00000007c0)={0x1, r9}) syz_usb_connect$hid(0x2, 0x3f, 0x0, &(0x7f0000000980)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x5f, 0x58, 0x1, 0xff, 0xf}, 0x2b, &(0x7f00000001c0)={0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0xfa, 0x5, 0xb, 0x6}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x881, 0x0, 0x9, [0xc0, 0x0, 0xff0030]}, @ptm_cap={0x3}]}, 0x6, [{0xf7, &(0x7f0000000580)=@string={0xf7, 0x3, "3388c3928efd9eb8ccc2f61f405c00897bdf473782abbaa84159579f94302d9796ff20fe73fcc52dca9f1587b42a64fb17e8f4fc7cc9502054ee74a63b9253b0b35bb566e555af7958ad4c5a48f60668e1320ea65ffb19790f72106b0cd7c6c63167cc73560cd841133bc427b9e18fa69870f618fa0475741966d492c543e201a91d080c96d0dae854d629dc2691ed3d5a2f577f0b1694d673b68ef5dff483d1f040384c2347868c14510e0ec1eac43c44424ad4bf842d8b8fc40612aa55dbc60fd3a01085392d1d6ae75d70c3ca4739a2e635d528430c63f7761c90f509e23a0949823db9ec463b609377fcebc6fc4adf96d925e1"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x809}}, {0xce, &(0x7f00000006c0)=ANY=[@ANYBLOB="ce03786b64b121397b297cc60435f098ea287f940b2ec56f0aa50eb16f0a6def19bfcfdceda1bd11d0ed9b74975f800d54dd191da7a96558844b5827c7b801000000000000009bf86b79086bb80478c31128d4df2c0e2e0da836f17e305385bb9f824d5e054a11b9d3b6ca222673149d5bc33e9b5d26ac3bad0ed9a669f4076f976e7de8293e45ec6aab83e7cb0d1d87059a5526634321122ead262f92b9c090169f4dca815a98ae44ae060a9714568630db5d9804797e884a7555c8c9d795615c7610597fd25d8a7207f0315715"]}, {0x0, 0x0}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x4ff}}]}) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) 2m3.559593324s ago: executing program 9 (id=1581): syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) setsockopt(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) socket(0xa, 0x801, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7814, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000004400), 0x0, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x7f, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x1b, 0x0, 0x2, 0x7}, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x8) 2m2.354667864s ago: executing program 39 (id=1560): r0 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2a10886, &(0x7f00000001c0)={[{@quota}, {@dioread_nolock}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x24020400) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) pipe2$9p(0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000001c0), 0x2, 0x51a, &(0x7f0000001200)="$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") r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r5, 0xffffffffffffffff, 0x0, 0x80000000) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) unshare(0x400) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r7 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000140)={0xc, r7}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r0, 0x0, 0x3}, 0x18) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x90000, 0x0, 0x1, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 2m2.197688891s ago: executing program 9 (id=1585): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfffffd9d) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(0xffffffffffffffff, r0, 0x0, 0x8010002b) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x71, 0x4) 2m1.13949225s ago: executing program 9 (id=1586): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x82, &(0x7f0000000140)={[{@user_xattr}, {@errors_remount}, {@noblock_validity}, {@test_dummy_encryption_v1}], [], 0x3d}, 0xfd, 0x464, &(0x7f0000001600)="$eJzs3M9vFFUcAPDvzLIF+VkVVH6o9Vck/qC0oHLwotHEgyYmekASD7UsBFnA0JoIIRaNwaPBeDceTfwLPOnF6Nmr3g0JMVxEL66Z2Zl2S3fbLt12K/v5JEvem3m7733nzRvevNltAANrJPsnidgaEb9l6TTPzmoUhbJyN29cmvz7xqXJJBqNt/5M8n1/3bg0WZYt37elyOxPI9LPktjbpt6pCxdPT9TrtfNFfnT6zAejUxcuPnvqzMTJ2sna2fEjRw4fGnvh+fHnehLntqytez4+t2/3a+9cfWPy6NX3fvkua+/WYn9rHL0yEiPzjmWrJ3pdWZ9ta0knG/rYELpSiYisu6r5+N8RlZjrvB3x6qd9bRywqhqNRmN7592XG8AdLImOuzYVFwjgjlT+R5/d/5avNZp6rAvXX2reAGVx3yxezT0bIi3KVG+5v+2l4WLd5Ojlf76OVVqHAABo9UM2/3mm3fxvOO5rKbc9Xw9uzlfujoh7IuLeiNgZEbsi8rL3R8QDXdY/ckt+4fwnvXZbgS1TNv97sXi2NX/+V8z+/m0MV4rctjz+anLiVL12sDgm+6O6McuPLVLHj6/8+kWnfSPF3K98ZfWXc8GiHdc2bJz/nuMT0xMri3rO9U/yW/yZhfHPPbnKUrsjYs9tfP6miDj11Lf7Ou1fOv5F9OA5U+ObiCeb/X85Fol/keeTo5uiXjs4Wp4Vrco7iCtvdqp/RfH3QNb/m9ue/7PxDyetz2unuq/jyu+fd7yn6eL8P1Zuyc7/oeTtPD1UbPtoYnr6/FjEUPL6wu3jc59W5svy17fuinis/fjPrnHZOZbFvzcispP4wYh4KCIeLtr+SEQ8GvlHtDNzMyJ+fvnx92dPhS7i7/CWnsr6//i8/o8l+r/7ROX0T993qn95/X84T+0vtizn+rfcBq7k2AEAAMD/RZp/Bz5JD8ym0/TAgeZ3+HfG5rR+bmr66RPnPjx7vPld+eGopuVK146W9dCxYm24zI/fkj9UrBt/Vbkrz28u1gaB/tnSYfxn/qj0u3XAqvN7LRhcxj8MLuMfBpfxD4NrueO/scrtANZeu/E/04d2AGvP/B8Gl/EPg8v4h8HVHP/H+t0MYG2t5Hf9EkskZnp8eIfWSVx5ItJ10Yx1kYhI8r+kv3ThajHu6rUv322m+t74Dol+XpUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB6578AAAD//6nq3AI=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000240)='kmem_cache_free\x00', r5}, 0x18) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x1}], 0x1}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) r8 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmsg$key(r8, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001000)={0x2, 0x4, 0x1, 0x2, 0x15, 0x0, 0x70bd2c, 0x25dfdbfd, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e21}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d5}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}, @sadb_x_policy={0x8, 0x12, 0x1, 0x0, 0x0, 0x6e6bb1, 0xf, {0x6, 0xff, 0x9, 0x28, 0x0, 0xff, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@empty}}, @sadb_lifetime={0x4, 0x2, 0x1, 0x3, 0x3, 0xd8}, @sadb_ident={0x2, 0xb, 0x1b}, @sadb_x_nat_t_type={0x1, 0x14, 0x10}]}, 0xa8}}, 0x0) 1m59.369000664s ago: executing program 9 (id=1591): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) unshare(0x18000080) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800800040000000000060006000000"], 0x4c}}, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_settime(r7, 0x0, &(0x7f00000005c0)={{}, {0x0, 0x989680}}, &(0x7f0000000600)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r8 = fsopen(&(0x7f0000000000)='overlay\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1901) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") 1m56.180653471s ago: executing program 9 (id=1594): prlimit64(0x0, 0xe, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) keyctl$link(0x8, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 1m39.953868229s ago: executing program 40 (id=1594): prlimit64(0x0, 0xe, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) keyctl$link(0x8, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") 1m30.691373364s ago: executing program 6 (id=1638): socket$inet6(0xa, 0x400000000001, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000240)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 1m27.174792414s ago: executing program 6 (id=1644): r0 = open(&(0x7f00000002c0)='./file0\x00', 0x1491ff, 0x22) fcntl$setlease(r0, 0x400, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x8c103, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0xc811) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0x5, &(0x7f0000000640)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x18) syz_open_dev$radio(0x0, 0x1, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0xffff, 0x10000, @mcast1}, {0xa, 0x0, 0x0, @empty, 0x2}, 0x0, {[0x200020, 0x0, 0x0, 0x1000, 0x400]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x0, 0x2]}}, 0x5c) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, &(0x7f0000000080)=0xf, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB="05000000", @ANYRES32], 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1}, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x1, 0x0, 0x3, 0x8, 0x1, 0x7}, 0x20) 1m19.654952858s ago: executing program 6 (id=1659): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 1m19.478642638s ago: executing program 6 (id=1661): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) clock_gettime(0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) pipe2$9p(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x400003, 0x4, 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, 0x0) 1m14.96742356s ago: executing program 6 (id=1662): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4}}}, 0x24}}, 0x0) 1m14.629569424s ago: executing program 6 (id=1664): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) close(r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a80)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 58.720844403s ago: executing program 41 (id=1664): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) close(r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a80)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12.797560111s ago: executing program 5 (id=1891): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1ff) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000080)={0x0, 0x7}) 12.722442986s ago: executing program 3 (id=1892): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000001140)={0x1, 0x1, 0xffff, 0x8000000000000001}) 12.417990606s ago: executing program 3 (id=1894): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x2000003) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 12.046916092s ago: executing program 4 (id=1898): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/243, 0x0, 0x80a0000}) r1 = dup2(r0, r0) write$vhost_msg_v2(r1, &(0x7f0000000600)={0x2, 0x0, {&(0x7f00000001c0)=""/128, 0x80, 0x0, 0x2, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000380)=0x1) 12.004215752s ago: executing program 5 (id=1899): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x7800, 0x700, 0x1, 0x5, {{0x5, 0x4, 0x3, 0x3f, 0x14, 0x64, 0x0, 0x4, 0x2f, 0x0, @remote, @multicast1}}}}) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 11.169344431s ago: executing program 4 (id=1900): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000180)={0x980000, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0, 0x0}) iopl(0x3) rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f0000000040)={0x11, 0x0, 0x6}) socket$inet_udplite(0x2, 0x2, 0x88) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x40, 0x7fff0001}]}) getitimer(0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) syz_io_uring_setup(0x88f, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f00000001c0)=""/47, 0x2f}], 0x2}, 0x3ff}], 0x1, 0x123, 0x0) socket(0xa, 0x3, 0x3a) 11.084704763s ago: executing program 5 (id=1902): syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x2000000000000178, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 11.079133201s ago: executing program 3 (id=1903): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000140), 0x0) setsockopt$sock_int(r7, 0x1, 0x22, &(0x7f0000000200)=0x1, 0x4) splice(r5, 0x0, r6, 0x0, 0x88000cc, 0x0) 9.901423609s ago: executing program 5 (id=1904): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xffd, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x80a, &(0x7f0000000dc0)=ANY=[@ANYBLOB="696f636861727365743d63703433372c666d61736b3d30303030303030303030303030303030303030303331352c6572726f72733d72656d6f756e742d726f2c756d61736b3d30303030223030303030303030303030303030303137372c6572726f72733d72656d6f756e742d726f2c756d61736b3d30303030303030303030303030da493e63b02204910cc908e0c4a9b3c030eb39709e841e08a07a303030313737352c6769643d", @ANYRESHEX=0x0, @ANYRES64=0x0], 0x5, 0x1516, &(0x7f00000037c0)="$eJzs3AuYTlX7MPD7XmvtMSQ9TXIY1lr35kkOyyRJDknlkCRJkuSUmKRJXklIDDklDUlIDkNyGEJymJg0zufzMUmSJklCckrWd03xeXur7/2//7fv9b/+c/+ua1/Pup+177XXfu7nsPZ2+LbL0FpNat/ViIjg34K/PiQDQCwADASAawAgAIAKcRXisvtzS0z+9w7C/loPp13pGbArieufs3H9czauf87G9c/ZuP45G9c/Z+P652xcf8Zyss3TC1/LW87d+P5/Tsa///+LZJUd++Xastd3/RdSuP45G9f/f63gv7IT1z9n4/rnbFz/nI3rnxPk+tMern/OxvVnLCe70vef/2GLgSs/hxy1Xen3H2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yxnOGMv0wBwKX2lZ4XY4wxxhhjjDHG/jo+15WeAWOMMcYYY4wxxv7/QxAgQUEAMZALYiE35AEBAFdDPrgGInAtxMF1kB+uhwJQEApBYYiHIlAUNBiwQBBCMSgOUbgBSsCNUBJKQWkoAw7KQgLcBOXgZigPt0AFuBUqwm1QCSpDFagKt0M1uAOqw51wF9wNNaAm1ILacA/UgXuhLtwH9eB+qA8PQAN4EBrCQ9AIHobG8Ag0gUehKTwGzaA5tICW0Oq/lf8i9ICXoCf0gmToDX3gZegL/aA/DICB8AoMgldhMLwGKTAEhsLrMAzegOHwJoyAkTAK3oLR8DaMgbEwDsZDKkyAifAOTIJ3YTJMgakwDdJgOsyA92AmzILZ8D7MgQ9gLsyD+bAA0uFDWAiLIAM+gsXwMWTCElgKy2A5rICVsApWwxpYC+tgPWyAjbAJNsMW2ArbYDvsgJ2wC3bDJ7AHPoW98Bnsg8//xfzT/5DfFQEBBQpUqDAGYzAWYzEP5sG8mBfzYT6MYATjMA7zY34sgAWwEBbCeIzHolgUDRokJCyGxTCKUSyBJbAklsTSWBodOkzABCyHN2N5LI8VsAJWxIpYCStjZayKVbEaVsPqWB3vwruwBtbAWlgL78F7sDfWxbpYD+thfax/6fYUNsJG2BgbYxNsgk2xKTbDZtgCW2ArbIWtsTW2wTaYiInYDtthe2yPSZiEHbADdsSO2Ak7YWfsjF2wC3bFbtgNX8wF+BK+hL2whuiNfbAP9sWUXP1xAA7AV3AQvoqv4muYgkNwKL6Or+MbOBxP4QgciaNwFFYTb+MYHIskxmMqpuJEnIiTcBJOxik4BadhGk7HGTgDZ+IsnIXv4xz8AD/AeTgPF2A6puNCXIQZmIGL8TRm4hJcistwOa7A5bgKV+MqXIvrcC1uwA24CTfhFtyC23Ab7sAduAsVAH6Cn+KnmIL7cB/ux/14AA/gQTyIWZiFh/AQHsbDeASP4FE8isfwOJ7A43gST+IpPI1n8Ayew3N4Hp+P/7rxrlJrUkBkU0KJGBEjYkWsyCPyiLwir8gn8omIiIg4ESfyi/yigCggColCIl7Ei6KiqDDCCBJhDACIqIiKEqKEKClKitKitHDCiQSRIMqJcqK8KC8qiFtFRXGbqCQqi7auqqgqqolEV13cKe4Sd4kaoqaoJWqL2qKOqCPqirqinqgn6ov6ooF4UDQUvbE/PiyyK9NEDMGmYig2E82FvPgN1loMxzairUgUT4qROALbi9YuSTwjOogx2FH8TYzF50RnMR67iBdEV9FNdBcvih6ijespeonJ2Fv0EdOwr+gn+osBYibWFO/jnNy1xGsiRQwRQ8XrYgG+IYaLN8UIMVKMEm+J0eJtMUaMFePEeJEqJoiJ4h0xSbwrJospYqqYJtLEdDFDvCdmillitnhfzBEfiLlinpgvFoh08aFYKBaJDPGRWCw+FpliiVgqlonlYoVYKVaJ1WKNWCvWifVig9goNonNYovYKraJ7WKH2Cl2id3iE7FHfCr2is/EPvG52C++EAfEl+Kg+Epkia/FIfGNOCy+FUfEd+Ko+F4cE8fFCfGDOCl+FKfEaXFGnBXnxE/ivPhZXBBegEQppJRKBjJG5pKxMrfMI6+SeWVw8dW9VsbJ62R+eb0sIAvKQrKwjJdFZFGppZFWkgxlMVlcRuUNsoS8UZaUpWRpWUY6WVYmyJtkOXmzLC9vkRXkrbKivE1WkpVlFVlV3i6ryTskRH49Rg1ZU9aSteU9so68V9aV98l68n5ZXz4gG8gHZUP5kGwkH5aN5SOyiXxUNpWPyWayuWwhW8pW8nHZWj4h28i2MlE+KdvJp2R7+bRMks/IDtJffIs8JzvL52UX+YLsKrvJ7vJneUF62VP2kgC9ZR/5suwr+8n+coAcKF+Rg+SrcrB8TabIIXKofF0Ok2/I4fJNOUKOlKPkW3K0fFuOkWPlODlepsoJcqJ8R06S78rJcoqcKqfJNDld9r840mwp/2n+O3+QP/iXo2+Sm+UWuVVuk9vlDrlT7pK75W65R+6Re+VeuU/uk/vlfnlAHpAH5UGZJbPkIXlIHpaH5RF5RB6VR+UxeVyelT/Ik/JHeUqelqflWXlOnpPnL74GoFAJJZVSgYpRuVSsyq3yqKtUXnW1yqeuURF1rYpT16n86npVQBVUhVRhFa+KqKJKK6OsIhWqYqq4iqob8OIbRpVWZZRTZVWCuulfyVcl1I2qpCr1m/xL80v+k/m1Uq1Ua9VatVFtVKJKVO1UO9VetVdJKkl1UB1UR9VRdVKdVGfVWXVRXVRX1VV1V91VD9VD9VQ9VbJKVn3Uy6qv6qf6qwFqoHpFDVKD1GA1WKWoFDVUDVXD1DA1XA1XI9QINUqNUqPVaDVGjVHj1DiVqlLVRDVRTVKT1GQ1WU1VU1WaSlMz1Aw1U81Us9VsNUfNUXPVXDVfzVfpKl0tVAtVhspQi9VilamWqCVqmVqmVqgVapVapdaoNWqdWqc2qA0qU21Wm9VWtVVtV9vVTrVT7Va71R61R+1Ve9U+tU/tV/vVAXVAHVQHVZbKUofUIXVYHVZH1BF1VB1Vx9QxdUKdUCfVSXVKnVJn1Bl1Tp1T59V5dUFdyF72BSIQgQpUEBPEBLFBbJAnyBPkDfIG+YJ8QSSIBHFBXJA/uD4oEBQMCgWFg/igSFA00IEJbCAuFj0a3BCUCG4MSgalgtJBmcAFZYOE4KagXHBzUD64JagQ3BpUDG4LKgWVgypB1eD2oFpwR1A9uDO4K7g7qBHUDGoFtYN7gjrBvUHd4L6gXnB/UD94IGgQPBg0DB4KGgUPB42DR4ImwaNB0+CxoFnQPGgRtAxa/aXje3+q4BOup+6lk3Vv3Ue/rPvqfrq/HqAH6lf0IP2qHqxf0yl6iB6qX9fD9Bt6uH5Tj9Aj9Sj9lh6t39Zj9Fg9To/XqXqCnqjf0ZP0u3qynqKn6mk6TU/XM/R7eqaepWfr9/Uc/YGeq+fp+XqBTtcf6oV6kc7QH+nF+mOdqZfopXqZXq5X6JV6lV6t1+i1ep1erzfojXqT3qy36K16m96ud+idepferT/Re/Sneq/+TO/Tn+v9+gt9QH+pD+qvdJb+Wh/S3+jD+lt9RH+nj+rv9TF9XJ/QP+iT+kd9Sp/WZ/RZfU7/pM/rn/UF7bMX99k/70YZZWJMjIk1sSaPyWPymrwmn8lnIiZi4kycyW/ymwKmgClkCpl4E2+KmqImGxkyxUwxEzVRU8KUMCVNSVPalDbOOJNgEkw5U86UN+VNBVPBVDQVTSVTyVQxVczt5nZzh7nD3GnuNHebu01NU9PUNrVNHVPH1DV1TT1Tz9Q39U0D08A0NA1NI9PINDaNTRPTxDQ1TU0z08y0MC1MK9PKtDatTRvTxiSaRNPOtDPtTXuTZJJMB9PBdDQdTSfTyXQ2nU0X08V0NV1Nd9Pd9DA9TE/T0ySbZNPH9DF9TV/T3/Q3A81AM8gMMoPNYJNiUsxQM9QMM8PMcDPcjDAjzajshap524wxY804M96kmlQz0Uw0k8wkM9lMNlPNVJNm0swMM8PMNDPNbDPbzDFzzFwz18w38026STcLzUKTYTLMYrPYZJpMs9QsNcvNcrPSrDSrzWqz1qw162G92Wg2ms1ms9lqtprtZrvZaXaa3Wa32WP2mL1mr9ln9pn9Zr85YA6Yg+agyTJZ5pA5ZA6bw+aIOWKOmqPmmDlmTpgT5qQ5aU6ZU+aMOWPOmYIXfy+9ibW5bR57lc1rr7b57DX2H+NCtrCNt0VsUattAVvwN7Gx1pa0pWxpW8Y6W9Ym2Jt+F1eylW0VW9XebqvZO2z138V17L22rr3P1rP329r2nt/E9e0DtoF91DZEBLDNbWPb0jaxj9qm9jHbzDa3LWxL284+Zdvbp22SfcZ2sM/+Ll5oF9nVdo1da9fZPfZTe8aetYftt/ac/cn2tL3sQPuKHWRftYPtazbFDvldPMq+ZUfbt+0YO9aOs+N/F0+102yanW5n2PfsTDvrd3G6/dDOsRl2rp1n59sFv8TZc8qwH9nF9mObaZfYpXaZXW5X2JV21f+d6zK7wW60m+xu+4ndarfZ7XaH3Wl3/RJnn8de+5ndZz+3h+w39oD90h60R2yW/fqXOPv8jtjv7FH7vT1mj9sT9gd70v5oT9nTv5x/9rn/YH+2F6y3QEhAkhQFFEO5KJZyUx66ivLS1ZSPrqEIXUtxdB3lp+upABWkQlSY4qkIFSVNhiwRhVSMilOUbqBL6/TSVIYclaUEuonK0c1Unm6hCnQrVaTbqBJVpipUlW6nanQHVac76S66m2pQTapFtekeqkP3Ul26j+rR/VSfHqAG9CA1pIeoET1MjekRakKPUlN6jJpRc2pBLakVPU6t6QlqQ20pkZ6kdvQUtaenKYmeoQ70LHWkv1Eneo460/PUhV6grtSNutOL1INeop7Ui5KpN/Whl6kv9aP+NIAG0is0iF6lwfQapdAQGkqv0zB6g4bTmzSCRtIoeotG09s0hsbSOBpPqTSBJtI7NInepck0habSNEqj6TSD3qOZNItm0/s0hz6guTSP5tMCSqcPaSEtogz6iBbTx5RJS2gpLaPltIJW0ipaTWtoLa2j9bSBNtIm2kxbaCtto+20g3bSLtpNn9Ae+pT20me0jz6n/fQFHaAv6SB9RVn0NR2ib+gwfUtH6Dvfi76nY3ScTtAPdJJ+pFN0ms7QWTpHP9F5+pkukCcIMRShDFUYhDFhrjA2zB3mCa8K84ZXh/nCa8JIeG0YF14X5g+vDwuEBcNCYeEwPiwSFg11aEIbUhiGxcLiYTS8ISwR3hiWDEuFpcMyoQvLhgnhTWG58OawfHhLWCG8NawY3hZWCiuHj95fNbw9rBbeEVYP7wwTw7vDGmHNsFZYO7wnrBPeG9YN7wvrhfeH5cMHwgbhg2HD8KGwUfhw2Dh8JGwSPho2DR8Lm4XNwxZhy7BV+HjYOnwibBO2DRPDJ8N24VNh+/DpMCl8JuwQPvtL/wOL/rw/Oewd9glfDl8Ovb9Pzo8uiKZHP4wujC6KZkQ/ii6OfhzNjC6JLo0uiy6ProiujK6Kro6uia6Nrouuj26IboxuinpfOxc4dMJJp1zgYlwuF+tyuzzuKpfXXe3yuWtcxF3r4tx1Lr+73hVwBV0hV9jFuyKuqNPOOOvIha6YK+6i7gZXwt3oSrpSrrQr45wr6xJcS9fKtXKt3ROujWvrEt2T7kn3lHvKPe2eds+4Du5Z19H9zXVyz7nO7nn3vHvBdXXdXHf3ouvhJuT79TOZ7Pq4Pq6v6+v6u/5uoBvoBrlBbrAb7FJcihvqhrphbpgb7oa7EW6EG+VGudFutBvjxrhxbpxLdaluopvoJrlJbrKb7Ka6qS7NpbkZboab6Wa6arN+PcpcN9fNd/Ndukt3C132mjHDLXaLXabLdEvdUrfcLXcr3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O91Ot9vtdnv8Nb8O6va5/W6/O+AOuIPuK5flvnaH3DfusPvWHXHfuaPue3fMHXcn3A/upPvRnXKn3Rl31p1zP7nz7md3wXmXGpkQmRh5JzIp8m5kcmRKZGpkWiQtMj0yI/JeZGZkVmR25P3InMgHkbmReZH5kQWR9MiHkYWRRZGMyEeRxZGPI5mRJZGlkWWR5ZEVEe+LbA19MV/cR/0NvoS/0Zf0pXxpX8Y7X9Yn+Jt8OX+zL+9v8RX8rb6iv81X8pV9Ff+Yb+ab+xa+pW/lH/et/RO+jW/rE/2Tvp1/yrf3T/sk/4zv4J/1Hf3ffCf/nO/sn/dd/Au+q+/mu/sXfQ//ku/pe/lk39v38S/7vr6f7+8H+IH+FT/Iv+oH+9d8ih/ih/rX/TD/hh/u3/Qj/Eg/KuYtP/rSJTKM96l+gp/o3/GT/Lt+sp/ip/ppPs1P9zP8e36mn+Vn+/f9HP+Bn+vn+fl+gU/3H/qFfpHP8B/5xf5jn+mXXLqp7Ff6VX61X+PX+nV+vd/gN/pNfrPf4rf6bX673+F3+l1+t//E7/Gf+r3+M7/Pf+73+y/8Af+lP+i/8ln+a3/If+MP+2/9Ef+dP+q/98f8cX/C/+BP+h/9KX/an/Fn/Tn/kz/vf/YX+N+sMcYYY4z9l0y43BR/1N/7D54Tf7dzHwC4elvhrL/vz15Rri/wa7ufiG8XAYBnenV5+NJWo0ZycvLFfTMlBMXnAVz6k6BsMXA5XgKJ8BQkQVso94fz7ye6naN/Mn70VoA8f5cTC5fjy+N/8SfjP/7kqIUVwzNx/4/x5wGULH45JzdcjpdAosp+bAvl/2T8gq3/yfxzf5kK0ObvcvLC5fjy/BPgCXgWkn6zJ2OMMcYYY4wx9qt+okqnS9efl/7G5x9dn8eryzm54HL8z67PGWOMMcYYY4wxduU91637048nJbXt9K83qv+3srjxP7XhPcClZxQA/JsDAvzHz2LLf+RYKRc/Ov/YtfysD+B/Rin/isYV/mJijDHGGGOM/eUuL/p/+7y6UhNijDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcZyoP/Efyd2pc+RMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYu9L+TwAAAP//8SoNew==") sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x800) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x28) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000340)=0x17a, 0x4) bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$packet(r3, &(0x7f0000000040)="bb53a94584285101010000853e60", 0xe, 0x14, 0x0, 0x0) recvmmsg(r3, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x10}], 0x2, 0x2040, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd00}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x6}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x2}, {0x7, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x7}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 9.876664227s ago: executing program 4 (id=1905): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) execve(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201010200000010f3044d074000010203010902240001010330050904000801030101000921ff00010122b00b09058103100002ba07213985450f7c58ecf50cbceb6b59391ab2c8d5c780e9156ca7b572ce15ebda428fcd9e9086a06d9446517510dbd34175287e5de94d0034ab86f729f258666acf2b298a1bc955ea198f7421"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0xd01, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xa001, 0x45001}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0x3260, 0x4, 0x1, 0x1fd}, &(0x7f0000000480)=0x0, &(0x7f0000000140)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fe3000", 0x10, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ni={0x4e8ef1decde2b390, 0x0, 0x0, 0x1, 0x2, 0xa6f}}}}}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000540)={0xa, 0x20a, 0xe1f, 0x2, r10}, 0x0) sendmsg$nl_xfrm(r7, 0x0, 0x0) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000005580)='/sys/kernel/vmcoreinfo', 0x0, 0x0) write$binfmt_script(r11, &(0x7f0000000300)={'#! ', './file0', [{0x20, '\xe2.{'}], 0xa, "3390a7cc65a4ea59673aed88b64a927f421cd365b10f3f48c143c5ac6726691f4c6bd2809bcb5cd326bfc32085ffd01372a77744b674ba71a2d9d3b6b1bd84fdfaeeb2280ffb23e482fcec463b5f"}, 0x5d) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RENAMEAT={0x23, 0x30, 0x0, r6, 0x0, 0x0, r6}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0xfffffffffffffd74) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) 8.810004452s ago: executing program 3 (id=1906): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/179, 0xb3}], 0x1) 8.426895244s ago: executing program 3 (id=1907): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) 7.798117345s ago: executing program 1 (id=1908): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x15}, {0x6}]}) 7.266253631s ago: executing program 2 (id=1909): bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, 0x0, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4004743b, 0x0) link(&(0x7f0000000140)='./cgroup/../file0\x00', &(0x7f0000000180)='./file0\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_open_dev$media(&(0x7f0000000100), 0x100000000000b, 0x20400) close(r2) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 6.738766245s ago: executing program 2 (id=1910): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x40004d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0xe, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x1, 0x8, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x8001, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x3d9, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x4, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x1, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 5.549877422s ago: executing program 2 (id=1911): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='trylock i'], 0xf) 5.08902219s ago: executing program 2 (id=1912): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000180)={[0xffffffffffffff68]}, 0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1f8, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac=@random="3c192477987a"}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x4, 0x110}}}, {{@arp={@loopback, @private=0xa010102, 0xff, 0xffffff00, 0xd, 0x10, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0x0, 0x0, 0x8, 0x1, 0x5a, 'macvlan0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, {@mac=@link_local, {[0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) syz_open_dev$tty20(0xc, 0x4, 0x1) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setresuid(0xee01, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 5.039239797s ago: executing program 1 (id=1913): r0 = socket(0x2, 0x3, 0x2) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffd, @local}, 0x10) sendmsg$netlink(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)=[{0x0, 0x60}, {&(0x7f0000000200)=ANY=[], 0xc8}], 0x2, 0x0, 0x0, 0x80}, 0x40040802) 4.638778808s ago: executing program 5 (id=1914): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028005000300060000000800014000000017080002400000000c0900010073797a30000000000900020073797a32"], 0x80}}, 0x0) 3.85752447s ago: executing program 2 (id=1915): syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x2000000000000178, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 3.607054643s ago: executing program 1 (id=1916): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000180)={0x980000, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0, 0x0}) iopl(0x3) rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f0000000040)={0x11, 0x0, 0x6}) socket$inet_udplite(0x2, 0x2, 0x88) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x40, 0x7fff0001}]}) getitimer(0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) syz_io_uring_setup(0x88f, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f00000001c0)=""/47, 0x2f}], 0x2}, 0x3ff}], 0x1, 0x123, 0x0) socket(0xa, 0x3, 0x3a) 2.59790738s ago: executing program 2 (id=1917): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x1a01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xec0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594012124fc60", 0x14}], 0x1}, 0x1000000) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) sendto$unix(r1, 0x0, 0x0, 0x20000001, 0x0, 0x0) 2.351916659s ago: executing program 1 (id=1918): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) readv(r0, &(0x7f0000003e40)=[{&(0x7f0000002b40)=""/25, 0x19}], 0x1) 2.151340931s ago: executing program 4 (id=1919): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000001100)=""/4096, &(0x7f0000000040)=0x1000) 1.963732061s ago: executing program 1 (id=1920): openat$dir(0xffffffffffffff9c, 0x0, 0x9a9040, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x20}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x810000, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xf5, 0x304, &(0x7f0000000440)="$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") 1.830605327s ago: executing program 4 (id=1921): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000001700001c000c80180005"], 0x3c}}, 0x0) 636.404828ms ago: executing program 7 (id=1618): recvmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4096, 0x1000}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000005100)=[{0x0}, {&(0x7f0000004f40)=""/101, 0x65}], 0x2}}], 0x3, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @private=0xa010100}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0) r5 = gettid() rt_sigqueueinfo(r5, 0x21, &(0x7f0000001500)={0xc, 0x0, 0x4}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r8 = dup3(r1, r0, 0x0) recvmmsg(r8, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 480.414209ms ago: executing program 3 (id=1922): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x40000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0xfdef) 478.221576ms ago: executing program 1 (id=1923): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 310.876081ms ago: executing program 5 (id=1924): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r1 = getuid() r2 = getgid() unshare(0x2a020480) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) r3 = syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[], [{@subj_user={'subj_user', 0x3d, 'system.posix_acl_access\x00'}}, {@subj_role={'subj_role', 0x3d, '^{+\xbd'}}, {@hash}]}}, 0x0, 0x0, &(0x7f0000000580)="40eb23c97aec5b29870fc2037868f8075b6c71f058d05a27c04b8169fb0321e21c6d46b324b2aa9cb8d349cd387b69092cf41eda703fe97541b992b525a2d22786de4f8babd0194a0ba0b708a0233d9d320557a65fea6a8cfe8dfbe4ffbea233da16245e552bc0ae43d0826c400eddace2c5af050fd4a7053d6aac22d4a9f38630322bcba61116f9eae0fc6c6ff6f3be") syz_fuse_handle_req(r0, &(0x7f0000002180), 0x2000, &(0x7f0000004180)={&(0x7f0000004240)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cc) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0xf7fffffc, @local, 0x2}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20008845, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {r1, r2}}, './file1\x00'}) mknodat(r4, &(0x7f0000000380)='./file1/file0\x00', 0x40, 0x2000000) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r5, &(0x7f0000002300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000001200)={0x50, 0x0, r6, {0x7, 0x27, 0x0, 0x500000, 0x3}}, 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x28, 0x13, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000044}, 0x90) lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_access\x00', 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r9, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)}], 0x1, &(0x7f0000000200)=[@init={0x18, 0x84, 0x0, {0xc71f, 0xfff, 0x8, 0xc4}}], 0x18, 0x48060}], 0x1, 0x200000d0) setsockopt$inet_sctp_SCTP_MAXSEG(r9, 0x84, 0x7d, 0x0, 0x0) fchown(r8, 0x0, r7) read$FUSE(r5, &(0x7f0000004340)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=1925): socket$inet_tcp(0x2, 0x1, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/oops_count', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/psched\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x44, &(0x7f0000000040), 0x5d) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) kernel console output (not intermixed with test programs): evice bond0 [ 733.184356][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.233740][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 733.247577][ T24] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 733.261136][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.314900][ T24] usb 7-1: config 0 descriptor?? [ 733.334998][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 733.354748][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 733.402535][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 733.420696][T11388] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.436210][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 733.477774][ T24] usb 7-1: media controller created [ 733.529329][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 733.561413][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.568655][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 733.590327][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 733.596207][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 733.646158][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input7 [ 733.676419][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 733.688444][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 733.709528][ T24] usb 7-1: USB disconnect, device number 7 [ 733.797356][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 733.824530][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.831784][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.920434][T11637] loop9: detected capacity change from 0 to 1024 [ 733.928149][T11637] EXT4-fs: Ignoring removed nobh option [ 733.933863][T11637] EXT4-fs: Ignoring removed bh option [ 734.002276][T11637] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 734.256374][T11555] chnl_net:caif_netlink_parms(): no params data found [ 734.853640][ T8635] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.859801][T11662] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 736.868741][T11662] PKCS7: Only support pkcs7_signedData type [ 738.150730][T11555] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.158110][T11555] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.170130][T11555] bridge_slave_0: entered allmulticast mode [ 738.178848][T11555] bridge_slave_0: entered promiscuous mode [ 738.281621][T11669] veth2: entered promiscuous mode [ 738.294522][T11669] veth2: entered allmulticast mode [ 738.369969][T11555] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.380013][T11555] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.387301][T11555] bridge_slave_1: entered allmulticast mode [ 738.437105][T11555] bridge_slave_1: entered promiscuous mode [ 738.643562][ T5992] bridge_slave_1: left allmulticast mode [ 738.649369][ T5992] bridge_slave_1: left promiscuous mode [ 738.659656][ T5992] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.675992][ T5992] bridge_slave_0: left allmulticast mode [ 738.684213][ T5992] bridge_slave_0: left promiscuous mode [ 738.696487][ T5992] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.040214][ T970] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 740.911676][ T970] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 740.922014][ T970] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 740.937828][ T970] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 740.967254][ T970] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.006601][ T970] usb 10-1: config 0 descriptor?? [ 741.026900][ T5992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 741.042345][ T970] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 741.066047][ T5992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 741.078798][ T970] dvb-usb: bulk message failed: -22 (3/0) [ 741.091390][ T970] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 741.101867][ T5992] bond0 (unregistering): Released all slaves [ 741.115315][ T970] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 741.130261][ T970] usb 10-1: media controller created [ 741.137362][ T970] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 741.164319][ T970] dvb-usb: bulk message failed: -22 (6/0) [ 741.177135][ T970] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 741.212652][ T970] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input8 [ 741.247567][T11555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.261316][ T970] dvb-usb: schedule remote query interval to 150 msecs. [ 741.288610][ T970] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 741.307553][T11492] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 741.339841][ T970] usb 10-1: USB disconnect, device number 6 [ 741.472032][ T5992] hsr_slave_0: left promiscuous mode [ 741.502195][ T5992] hsr_slave_1: left promiscuous mode [ 741.514829][ T970] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 741.533450][ T5992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 741.628657][ T5992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 743.050133][T11702] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 743.059012][T11702] PKCS7: Only support pkcs7_signedData type [ 744.771733][ T5992] team0 (unregistering): Port device team_slave_1 removed [ 744.820995][T11714] loop6: detected capacity change from 0 to 256 [ 744.859326][T11714] vfat: Unknown parameter 'ciŽ\r¡heck' [ 745.002632][ T5992] team0 (unregistering): Port device team_slave_0 removed [ 746.559271][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.571296][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.726645][T11555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 750.575226][T11492] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 750.728706][T11555] team0: Port device team_slave_0 added [ 750.775063][T11492] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 750.834730][T11492] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 751.664648][T11555] team0: Port device team_slave_1 added [ 751.953429][T11555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 751.996008][T11555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 752.090159][T11555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.130237][T11555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.149982][T11555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 752.240076][T11555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 752.327438][T11388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 752.785696][T11555] hsr_slave_0: entered promiscuous mode [ 752.883124][T11555] hsr_slave_1: entered promiscuous mode [ 752.899705][T11555] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 752.908448][T11555] Cannot create hsr debugfs directory [ 754.187958][T11492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 754.405130][T11492] 8021q: adding VLAN 0 to HW filter on device team0 [ 754.456806][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.464085][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 754.490029][ T5897] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 754.673182][ T5897] usb 1-1: Using ep0 maxpacket: 8 [ 754.696522][ T6032] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.703730][ T6032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 754.704688][ T5897] usb 1-1: unable to get BOS descriptor or descriptor too short [ 754.743656][ T5897] usb 1-1: config 228 has an invalid interface number: 96 but max is 0 [ 754.778638][ T5897] usb 1-1: config 228 has no interface number 0 [ 754.812600][ T5897] usb 1-1: config 228 interface 96 has no altsetting 0 [ 754.837078][ T5897] usb 1-1: string descriptor 0 read error: -22 [ 754.865598][ T5897] usb 1-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice=28.14 [ 754.900630][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.936766][ T5897] appletouch 1-1:228.96: Could not find int-in endpoint [ 754.944178][ T5897] appletouch 1-1:228.96: probe with driver appletouch failed with error -5 [ 754.954507][ T5897] usbhid 1-1:228.96: couldn't find an input interrupt endpoint [ 755.065869][ T5855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 755.077061][ T5855] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 755.092068][ T5855] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 755.101267][ T5855] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 755.109445][ T5855] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 755.158910][ T5897] usb 1-1: USB disconnect, device number 5 [ 755.244052][T11492] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 756.050473][T11775] chnl_net:caif_netlink_parms(): no params data found [ 756.849264][T11555] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 756.897669][T11492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 756.975387][T11555] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 757.152563][T11555] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 757.160897][ T5857] Bluetooth: hci4: command tx timeout [ 758.108718][T11555] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 758.939599][ T6027] bridge_slave_1: left allmulticast mode [ 758.985900][ T6027] bridge_slave_1: left promiscuous mode [ 759.034911][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.066796][ T6027] bridge_slave_0: left allmulticast mode [ 759.119971][ T6027] bridge_slave_0: left promiscuous mode [ 759.131201][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.180265][ T5857] Bluetooth: hci4: command tx timeout [ 761.447818][ T6027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 761.489024][ T6027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 761.520446][ T6027] bond0 (unregistering): Released all slaves [ 761.951429][ T6027] hsr_slave_0: left promiscuous mode [ 761.957576][ T6027] hsr_slave_1: left promiscuous mode [ 761.972757][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 762.011093][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 762.200390][ T5857] Bluetooth: hci4: command tx timeout [ 764.280436][ T5857] Bluetooth: hci4: command tx timeout [ 764.364527][T11842] libceph: resolve '0.' (ret=-3): failed [ 764.589040][ T6027] team0 (unregistering): Port device team_slave_1 removed [ 764.878774][ T6027] team0 (unregistering): Port device team_slave_0 removed [ 765.744530][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 765.744551][ T30] audit: type=1326 audit(1745574976.104:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11851 comm="syz.6.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2889f8e969 code=0x7ffc0000 [ 765.791047][ T30] audit: type=1326 audit(1745574976.134:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11851 comm="syz.6.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f2889f8e969 code=0x7ffc0000 [ 765.813893][T11852] loop6: detected capacity change from 0 to 512 [ 765.825614][T11852] EXT4-fs (loop6): blocks per group (71) and clusters per group (20800) inconsistent [ 765.898689][ T30] audit: type=1326 audit(1745574976.134:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11851 comm="syz.6.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2889f8e969 code=0x7ffc0000 [ 765.983136][ T30] audit: type=1326 audit(1745574976.134:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11851 comm="syz.6.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2889f8e969 code=0x7ffc0000 [ 766.030381][ T30] audit: type=1326 audit(1745574976.134:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11851 comm="syz.6.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2889f8e969 code=0x7ffc0000 [ 766.054159][ T30] audit: type=1326 audit(1745574976.134:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11851 comm="syz.6.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2889f8e9a3 code=0x7ffc0000 [ 766.097271][ T30] audit: type=1326 audit(1745574976.144:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11851 comm="syz.6.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2889f8d41f code=0x7ffc0000 [ 766.124698][ T30] audit: type=1326 audit(1745574976.144:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11851 comm="syz.6.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f2889f8e9f7 code=0x7ffc0000 [ 766.154731][ T30] audit: type=1326 audit(1745574976.144:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11851 comm="syz.6.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2889f8d2d0 code=0x7ffc0000 [ 766.184588][ T30] audit: type=1326 audit(1745574976.144:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11851 comm="syz.6.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2889f8e56b code=0x7ffc0000 [ 768.170169][T11775] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.220114][T11775] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.227542][T11775] bridge_slave_0: entered allmulticast mode [ 768.271974][T11775] bridge_slave_0: entered promiscuous mode [ 768.341012][T11775] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.360041][T11775] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.373517][T11775] bridge_slave_1: entered allmulticast mode [ 768.392338][T11775] bridge_slave_1: entered promiscuous mode [ 768.617413][T11775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 768.654087][T11775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 768.881604][T11775] team0: Port device team_slave_0 added [ 768.904552][T11775] team0: Port device team_slave_1 added [ 769.108678][T11775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 769.131476][T11775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 769.165581][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 769.179847][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 769.188503][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 769.196591][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 769.206456][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 769.224429][T11775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 769.245701][T11775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 769.254106][T11775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 769.280383][T11775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 769.966331][T11882] libceph: resolve '0.' (ret=-3): failed [ 771.042910][T11775] hsr_slave_0: entered promiscuous mode [ 771.058309][T11775] hsr_slave_1: entered promiscuous mode [ 771.431280][ T5855] Bluetooth: hci0: command tx timeout [ 772.077099][T11775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 772.246213][T11775] Cannot create hsr debugfs directory [ 772.294431][T11555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 773.510062][ T5855] Bluetooth: hci0: command tx timeout [ 774.362056][T11555] 8021q: adding VLAN 0 to HW filter on device team0 [ 774.522146][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.529405][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 774.796259][ T6027] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.803506][ T6027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 775.560113][ T5855] Bluetooth: hci0: command tx timeout [ 775.588980][T11930] libceph: resolve '0.' (ret=-3): failed [ 775.673533][T11555] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 775.730319][T11555] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 775.840919][ T5995] bridge_slave_1: left allmulticast mode [ 775.847662][ T5995] bridge_slave_1: left promiscuous mode [ 775.870299][ T5995] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.908460][ T5995] bridge_slave_0: left allmulticast mode [ 775.926468][ T5995] bridge_slave_0: left promiscuous mode [ 776.777655][ T5995] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.644821][ T5855] Bluetooth: hci0: command tx timeout [ 777.931723][T11963] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 777.940698][T11963] PKCS7: Only support pkcs7_signedData type [ 780.919761][ T5857] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 780.938323][ T5857] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 780.946181][ T5857] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 780.955164][ T5857] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 780.964004][ T5857] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 781.080583][ T5995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 781.111012][ T5995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 781.145060][ T5995] bond0 (unregistering): Released all slaves [ 781.511479][T11997] libceph: resolve '0.' (ret=-3): failed [ 781.551701][T11870] chnl_net:caif_netlink_parms(): no params data found [ 781.660209][T12000] loop9: detected capacity change from 0 to 256 [ 781.675143][T12000] vfat: Unknown parameter '01777777777777777777777' [ 783.050723][ T5857] Bluetooth: hci6: command tx timeout [ 783.499999][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 783.508763][T12007] loop9: detected capacity change from 0 to 128 [ 783.569167][T12007] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 783.686262][T12007] ext4 filesystem being mounted at /144/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 783.697005][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 783.713312][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 783.732519][ T24] usb 1-1: config 228 has an invalid interface number: 96 but max is 0 [ 783.751347][ T24] usb 1-1: config 228 has no interface number 0 [ 783.765342][ T5995] hsr_slave_0: left promiscuous mode [ 783.800105][ T5995] hsr_slave_1: left promiscuous mode [ 783.808482][ T24] usb 1-1: config 228 interface 96 has no altsetting 0 [ 783.833453][ T5995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 783.850731][ T24] usb 1-1: string descriptor 0 read error: -22 [ 783.878034][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice=28.14 [ 783.893790][ T5995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 783.926685][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.008059][ T8635] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 784.042783][ T24] appletouch 1-1:228.96: Could not find int-in endpoint [ 784.060431][ T24] appletouch 1-1:228.96: probe with driver appletouch failed with error -5 [ 784.115585][ T24] usbhid 1-1:228.96: couldn't find an input interrupt endpoint [ 784.196124][ T24] usb 1-1: USB disconnect, device number 6 [ 785.057206][ T5995] team0 (unregistering): Port device team_slave_1 removed [ 785.080070][ T5857] Bluetooth: hci6: command tx timeout [ 785.319090][ T5995] team0 (unregistering): Port device team_slave_0 removed [ 785.665839][T12037] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 785.674722][T12037] PKCS7: Only support pkcs7_signedData type [ 787.160296][ T5857] Bluetooth: hci6: command tx timeout [ 787.538612][T12065] loop6: detected capacity change from 0 to 512 [ 787.593598][T12065] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1344: invalid indirect mapped block 4294967295 (level 1) [ 787.625690][T12065] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1344: invalid indirect mapped block 4294967295 (level 1) [ 787.653795][T12065] EXT4-fs (loop6): 2 truncates cleaned up [ 787.671789][T12065] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 788.180500][T11870] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.196141][T11870] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.203532][T11870] bridge_slave_0: entered allmulticast mode [ 788.211510][T11870] bridge_slave_0: entered promiscuous mode [ 788.256443][T11870] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.269570][T11870] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.293870][T11870] bridge_slave_1: entered allmulticast mode [ 788.368103][T12081] xt_CT: You must specify a L4 protocol and not use inversions on it [ 789.258220][ T5857] Bluetooth: hci6: command tx timeout [ 789.577615][T11870] bridge_slave_1: entered promiscuous mode [ 789.626529][ T7459] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.018125][T11870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 790.112452][T11870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 790.639191][T11870] team0: Port device team_slave_0 added [ 790.842179][T11870] team0: Port device team_slave_1 added [ 790.890280][ T5897] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 791.119770][ T5897] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 791.178867][ T5897] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 791.219366][ T5897] usb 7-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 791.237921][ T5897] usb 7-1: Manufacturer: syz [ 791.266417][ T5897] usb 7-1: config 0 descriptor?? [ 791.313149][ T5897] hub 7-1:0.0: USB hub found [ 791.503455][ T5897] hub 7-1:0.0: 1 port detected [ 791.700882][T11870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 791.736514][T11870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 791.819156][T11870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 791.867711][T11870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 791.890982][T11870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 791.948031][ T5897] usb 7-1: USB disconnect, device number 8 [ 792.004493][T11870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 792.108392][T11775] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 792.143725][T11986] chnl_net:caif_netlink_parms(): no params data found [ 792.216985][T11775] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 792.297393][T11775] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 792.324202][T11775] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 792.519093][T11870] hsr_slave_0: entered promiscuous mode [ 792.568847][T11870] hsr_slave_1: entered promiscuous mode [ 792.580773][T11870] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 792.807743][T11870] Cannot create hsr debugfs directory [ 792.930050][T12128] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 792.938931][T12128] PKCS7: Only support pkcs7_signedData type [ 793.738850][T12134] loop6: detected capacity change from 0 to 512 [ 793.767935][T12134] EXT4-fs (loop6): Test dummy encryption mode enabled [ 793.810671][T12134] EXT4-fs (loop6): blocks per group (255) and clusters per group (8192) inconsistent [ 794.771208][T11986] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.083666][T11986] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.107266][T11986] bridge_slave_0: entered allmulticast mode [ 795.411661][T11986] bridge_slave_0: entered promiscuous mode [ 795.544530][T11986] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.580305][T11986] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.587599][T11986] bridge_slave_1: entered allmulticast mode [ 795.870391][T11986] bridge_slave_1: entered promiscuous mode [ 796.987132][T11986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 797.024838][T11986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 798.159117][T11986] team0: Port device team_slave_0 added [ 798.170717][T11986] team0: Port device team_slave_1 added [ 798.184865][ T5995] bridge_slave_1: left allmulticast mode [ 798.196021][ T5995] bridge_slave_1: left promiscuous mode [ 798.202254][ T5995] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.494753][ T5995] bridge_slave_0: left allmulticast mode [ 798.513619][ T5995] bridge_slave_0: left promiscuous mode [ 798.532798][ T5995] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.187730][T12204] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 800.197045][T12204] PKCS7: Only support pkcs7_signedData type [ 800.532080][T12212] loop6: detected capacity change from 0 to 128 [ 800.545248][T12212] EXT4-fs: Ignoring removed nobh option [ 800.623062][T12212] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 800.664014][ T5995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 800.676565][T12216] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1362'. [ 800.703491][T12216] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1362'. [ 800.718202][ T5995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 800.736292][T12212] ext4 filesystem being mounted at /227/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 800.769646][ T5995] bond0 (unregistering): Released all slaves [ 801.497301][ T7459] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 801.992078][T11986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 802.017527][T11986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 802.272698][T11986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 802.286640][T11986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 802.296393][T11986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 802.323671][T11986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 803.163521][ T5995] hsr_slave_0: left promiscuous mode [ 803.185931][ T5995] hsr_slave_1: left promiscuous mode [ 803.199410][ T5995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 803.225894][ T5995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 804.154366][ T5995] team0 (unregistering): Port device team_slave_1 removed [ 804.313146][ T5995] team0 (unregistering): Port device team_slave_0 removed [ 805.466899][T12286] loop6: detected capacity change from 0 to 512 [ 805.478354][T12286] EXT4-fs (loop6): Test dummy encryption mode enabled [ 805.514467][T12286] EXT4-fs error (device loop6): __ext4_iget:5025: inode #11: block 1: comm syz.6.1371: invalid block [ 805.527942][T12286] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.1371: couldn't read orphan inode 11 (err -117) [ 805.548632][T12286] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 805.806099][ T7459] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 805.927322][T12296] loop9: detected capacity change from 0 to 512 [ 806.808748][T12296] EXT4-fs (loop9): blocks per group (95) and clusters per group (32768) inconsistent [ 808.599638][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.606044][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.203198][T11986] hsr_slave_0: entered promiscuous mode [ 810.270210][T11986] hsr_slave_1: entered promiscuous mode [ 810.304803][T11986] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 810.350224][T11986] Cannot create hsr debugfs directory [ 811.897451][T11775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 812.518524][T11775] 8021q: adding VLAN 0 to HW filter on device team0 [ 812.816059][ T6027] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.823468][ T6027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 812.935691][ T5965] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.942927][ T5965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 812.984117][T12349] loop6: detected capacity change from 0 to 256 [ 813.035054][T12349] vfat: Unknown parameter 'ciŽ\r¡heck' [ 813.234095][T11870] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 813.503952][T11870] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 813.595847][T11870] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 813.726034][T11870] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 815.225970][T11870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 815.462685][T11870] 8021q: adding VLAN 0 to HW filter on device team0 [ 816.196473][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.203750][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 816.367545][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.374797][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 816.694148][T11986] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 816.782063][T11986] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 816.848904][T11986] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 816.891321][T11986] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 816.979276][T11870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 817.988936][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 817.998760][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 818.007688][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 818.017138][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 818.025524][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 818.192341][T12409] loop9: detected capacity change from 0 to 2048 [ 818.199726][T12409] ext4: Unknown parameter 'noacl' [ 819.793728][T12423] loop6: detected capacity change from 0 to 256 [ 819.825961][T12423] exfat: Bad value for 'umask' [ 821.026556][ T5855] Bluetooth: hci3: command tx timeout [ 823.090055][ T5855] Bluetooth: hci3: command tx timeout [ 823.334267][T11870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 823.786902][T11986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 823.835222][ T5995] bridge_slave_1: left allmulticast mode [ 823.850081][ T5995] bridge_slave_1: left promiscuous mode [ 823.858020][ T5995] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.943309][ T5995] bridge_slave_0: left allmulticast mode [ 823.973694][ T5995] bridge_slave_0: left promiscuous mode [ 823.979524][ T5995] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.730701][T12469] loop6: detected capacity change from 0 to 256 [ 824.748838][T12469] vfat: Unknown parameter 'ciŽ\r¡heck' [ 825.162775][ T5855] Bluetooth: hci3: command tx timeout [ 825.637552][ T5995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 825.664615][ T5995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 825.696583][ T5995] bond0 (unregistering): Released all slaves [ 826.598073][T11986] 8021q: adding VLAN 0 to HW filter on device team0 [ 826.646862][ T5993] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.654073][ T5993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 826.876652][ T5995] hsr_slave_0: left promiscuous mode [ 826.908198][T12501] loop9: detected capacity change from 0 to 128 [ 826.923391][ T5995] hsr_slave_1: left promiscuous mode [ 826.929613][ T5995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 826.948039][ T5995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 827.252309][ T5855] Bluetooth: hci3: command tx timeout [ 828.070078][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 828.070099][ T30] audit: type=1800 audit(1745575038.344:248): pid=12511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1403" name="file1" dev="loop9" ino=306 res=0 errno=0 [ 830.705144][ T5995] team0 (unregistering): Port device team_slave_1 removed [ 830.819271][ T5995] team0 (unregistering): Port device team_slave_0 removed [ 830.911763][ T5857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 830.926479][ T5857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 830.940165][ T5857] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 830.958202][ T5857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 830.970519][ T5857] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 833.001161][ T5857] Bluetooth: hci4: command tx timeout [ 834.915829][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.923147][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 835.027548][T12397] chnl_net:caif_netlink_parms(): no params data found [ 835.211986][T12590] loop6: detected capacity change from 0 to 512 [ 835.230241][ T5857] Bluetooth: hci4: command tx timeout [ 835.377043][T12590] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 835.440667][T12590] EXT4-fs (loop6): orphan cleanup on readonly fs [ 835.484131][T12590] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1416: bg 0: block 248: padding at end of block bitmap is not set [ 835.505439][T12590] Quota error (device loop6): write_blk: dquota write failed [ 835.513540][T12590] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 835.523793][T12590] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.1416: Failed to acquire dquot type 1 [ 835.542511][T12590] EXT4-fs (loop6): 1 truncate cleaned up [ 835.566254][T12590] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 837.247546][ T5857] Bluetooth: hci4: command tx timeout [ 837.286534][T12597] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 837.293915][T12597] IPv6: NLM_F_CREATE should be set when creating new route [ 837.574699][ T7459] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 837.853354][T12540] chnl_net:caif_netlink_parms(): no params data found [ 839.330048][ T5857] Bluetooth: hci4: command tx timeout [ 839.993504][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 840.001986][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 840.010932][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 840.022172][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 840.030714][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 840.088127][T12397] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.124002][T12397] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.165566][T12397] bridge_slave_0: entered allmulticast mode [ 840.177170][T12397] bridge_slave_0: entered promiscuous mode [ 840.945661][T12397] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.953794][T12397] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.971946][T12397] bridge_slave_1: entered allmulticast mode [ 840.985361][T12397] bridge_slave_1: entered promiscuous mode [ 841.155268][T12397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 841.238196][T12540] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.261798][T12540] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.279337][T12540] bridge_slave_0: entered allmulticast mode [ 841.322500][T12540] bridge_slave_0: entered promiscuous mode [ 841.412674][T12540] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.434760][T12540] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.445273][T12540] bridge_slave_1: entered allmulticast mode [ 841.467090][T12540] bridge_slave_1: entered promiscuous mode [ 841.492948][T12397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 841.666140][T12397] team0: Port device team_slave_0 added [ 841.766911][T12397] team0: Port device team_slave_1 added [ 841.889688][T12540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 841.922488][T12397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 841.929534][T12397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 841.967425][T12397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 841.987182][T12397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 841.994608][T12397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 842.096038][T12397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 842.121116][ T5855] Bluetooth: hci0: command tx timeout [ 842.926345][T12540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 843.257492][T12658] loop6: detected capacity change from 0 to 128 [ 844.220902][ T5855] Bluetooth: hci0: command tx timeout [ 846.280269][ T5855] Bluetooth: hci0: command tx timeout [ 847.044006][T12540] team0: Port device team_slave_0 added [ 847.083702][T12540] team0: Port device team_slave_1 added [ 847.436053][T12397] hsr_slave_0: entered promiscuous mode [ 848.188597][T12397] hsr_slave_1: entered promiscuous mode [ 848.195836][T12397] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 848.206326][T12397] Cannot create hsr debugfs directory [ 848.360399][ T5855] Bluetooth: hci0: command tx timeout [ 848.536257][T12684] loop6: detected capacity change from 0 to 512 [ 849.355620][T12684] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 849.406331][T12684] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 849.421558][T12684] EXT4-fs (loop6): 1 truncate cleaned up [ 849.429105][T12684] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 850.666598][T12540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.673729][T12540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.702469][T12540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.757305][T12540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.804595][T12540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.913943][T12540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 851.049473][ T7459] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 851.722342][T12704] loop6: detected capacity change from 0 to 128 [ 852.712661][ T30] audit: type=1800 audit(1745575062.144:249): pid=12704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1436" name="bus" dev="loop6" ino=308 res=0 errno=0 [ 853.042612][T12708] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 853.051634][T12708] PKCS7: Only support pkcs7_signedData type [ 855.694339][T12722] loop9: detected capacity change from 0 to 512 [ 855.714607][T12722] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 855.794217][T12722] EXT4-fs (loop9): orphan cleanup on readonly fs [ 855.841249][T12722] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1439: bg 0: block 248: padding at end of block bitmap is not set [ 855.875452][T12722] Quota error (device loop9): write_blk: dquota write failed [ 855.883471][T12722] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 855.893773][T12722] EXT4-fs error (device loop9): ext4_acquire_dquot:6935: comm syz.9.1439: Failed to acquire dquot type 1 [ 855.924234][T12722] EXT4-fs (loop9): 1 truncate cleaned up [ 855.967687][T12722] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 857.528170][T12728] loop6: detected capacity change from 0 to 256 [ 857.559602][T12728] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 857.902023][ T8635] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 857.983080][T12732] exFAT-fs (loop6): start_clu is invalid cluster(0x0) [ 858.662759][T12540] hsr_slave_0: entered promiscuous mode [ 858.670117][T12540] hsr_slave_1: entered promiscuous mode [ 858.676424][T12540] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 858.700205][ T30] audit: type=1800 audit(1745575068.354:250): pid=12732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1440" name="file1" dev="loop6" ino=309 res=0 errno=0 [ 858.790654][T12540] Cannot create hsr debugfs directory [ 860.593764][T12630] chnl_net:caif_netlink_parms(): no params data found [ 861.321419][T12762] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 861.330355][T12762] PKCS7: Only support pkcs7_signedData type [ 862.267212][ T5995] bridge_slave_1: left allmulticast mode [ 863.225410][ T5995] bridge_slave_1: left promiscuous mode [ 863.231338][ T5995] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.275431][ T5995] bridge_slave_0: left allmulticast mode [ 863.289974][ T5995] bridge_slave_0: left promiscuous mode [ 863.301198][ T5995] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.388012][ T5995] bridge_slave_1: left allmulticast mode [ 863.396151][ T5995] bridge_slave_1: left promiscuous mode [ 863.404495][ T5995] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.419869][ T5995] bridge_slave_0: left allmulticast mode [ 863.427223][ T5995] bridge_slave_0: left promiscuous mode [ 863.433431][ T5995] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.859325][T12782] loop9: detected capacity change from 0 to 512 [ 864.032139][T12782] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.1453: invalid indirect mapped block 256 (level 2) [ 864.070076][T12782] EXT4-fs (loop9): 2 truncates cleaned up [ 864.094498][T12782] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 864.145363][T12782] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 864.574809][T12786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1454'. [ 866.784765][ T5995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 866.803647][ T5995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 866.821464][ T5995] bond0 (unregistering): Released all slaves [ 867.190703][ T5995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 867.202961][ T5995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 867.222780][ T5995] bond0 (unregistering): Released all slaves [ 867.249143][T12630] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.263524][T12630] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.275427][T12630] bridge_slave_0: entered allmulticast mode [ 867.288225][T12630] bridge_slave_0: entered promiscuous mode [ 867.441558][T12630] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.455342][T12630] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.497442][T12630] bridge_slave_1: entered allmulticast mode [ 867.507190][T12630] bridge_slave_1: entered promiscuous mode [ 867.665901][T12801] loop6: detected capacity change from 0 to 512 [ 867.707140][T12801] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 867.788488][T12801] EXT4-fs (loop6): orphan cleanup on readonly fs [ 867.812366][T12801] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1457: bg 0: block 248: padding at end of block bitmap is not set [ 867.843833][T12801] Quota error (device loop6): write_blk: dquota write failed [ 867.852075][T12801] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 867.862336][T12801] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.1457: Failed to acquire dquot type 1 [ 867.880427][T12801] EXT4-fs (loop6): 1 truncate cleaned up [ 868.118659][T12801] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 868.632412][ T5995] hsr_slave_0: left promiscuous mode [ 868.659169][ T5995] hsr_slave_1: left promiscuous mode [ 868.672847][ T5995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 868.692724][ T5995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 868.716954][ T5995] hsr_slave_0: left promiscuous mode [ 868.732620][ T5995] hsr_slave_1: left promiscuous mode [ 868.745048][ T5995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 868.772793][ T5995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 869.408289][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.414866][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.528176][ T5995] team0 (unregistering): Port device team_slave_1 removed [ 869.676923][ T5995] team0 (unregistering): Port device team_slave_0 removed [ 870.002165][ T7459] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 870.323291][T12811] loop6: detected capacity change from 0 to 1024 [ 870.337967][T12811] EXT4-fs: Ignoring removed nobh option [ 870.346026][T12811] EXT4-fs: Ignoring removed bh option [ 870.409170][T12811] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 871.440501][ T7459] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 872.386401][ T5995] team0 (unregistering): Port device team_slave_1 removed [ 872.463841][ T5995] team0 (unregistering): Port device team_slave_0 removed [ 875.254696][T12630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 875.346759][T12630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 876.288157][T12843] overlayfs: missing 'lowerdir' [ 876.962281][ T5857] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 876.976968][ T5857] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 877.010006][ T5857] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 877.032501][ T5857] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 877.050120][ T5857] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 877.072636][T12630] team0: Port device team_slave_0 added [ 877.321982][T12630] team0: Port device team_slave_1 added [ 877.421659][T12630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 877.428842][T12630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 877.500010][T12630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 877.514273][T12630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 877.531708][T12630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 877.599978][T12630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 878.058322][T12630] hsr_slave_0: entered promiscuous mode [ 878.083008][T12630] hsr_slave_1: entered promiscuous mode [ 878.097218][T12630] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 878.115592][T12630] Cannot create hsr debugfs directory [ 879.160358][ T5857] Bluetooth: hci6: command tx timeout [ 879.558224][T12540] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 879.713906][T12540] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 879.747497][T12540] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 879.775532][T12540] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 880.463315][T12846] chnl_net:caif_netlink_parms(): no params data found [ 881.117284][T12874] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1475'. [ 881.128059][T12846] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.150200][T12846] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.157601][T12846] bridge_slave_0: entered allmulticast mode [ 881.182020][T12846] bridge_slave_0: entered promiscuous mode [ 881.240278][ T5857] Bluetooth: hci6: command tx timeout [ 881.260205][T12846] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.267470][T12846] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.310410][T12846] bridge_slave_1: entered allmulticast mode [ 881.329568][T12846] bridge_slave_1: entered promiscuous mode [ 882.474340][T12540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 883.310473][T12846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 883.330499][ T5857] Bluetooth: hci6: command tx timeout [ 883.357029][T12630] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 883.432593][T12846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 883.470545][T12630] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 883.583526][T12630] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 883.777662][T12630] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 883.844134][T12540] 8021q: adding VLAN 0 to HW filter on device team0 [ 884.482277][T12891] loop9: detected capacity change from 0 to 4096 [ 885.400043][ T5857] Bluetooth: hci6: command tx timeout [ 886.817530][T12891] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 887.031654][T12846] team0: Port device team_slave_0 added [ 887.147895][T12540] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 887.158586][T12540] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 887.205469][T12846] team0: Port device team_slave_1 added [ 887.359609][T10159] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.366878][T10159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 888.121044][T10159] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.128244][T10159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 888.168002][ T6484] bridge_slave_1: left allmulticast mode [ 888.199942][ T6484] bridge_slave_1: left promiscuous mode [ 888.207019][ T6484] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.234649][ T6484] bridge_slave_0: left allmulticast mode [ 888.245804][ T6484] bridge_slave_0: left promiscuous mode [ 888.252592][ T6484] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.286068][T12905] netlink: 'syz.6.1482': attribute type 4 has an invalid length. [ 888.515493][ T6484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 888.571148][ T6484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 888.612648][ T6484] bond0 (unregistering): Released all slaves [ 888.723878][T12846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 888.733430][T12846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 888.765886][T12846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 888.819511][T12846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 888.828390][T12846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 888.858054][T12846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 888.927881][ T6484] hsr_slave_0: left promiscuous mode [ 888.966203][ T6484] hsr_slave_1: left promiscuous mode [ 888.975885][ T6484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 889.023535][ T6484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 889.746580][ T6484] team0 (unregistering): Port device team_slave_1 removed [ 889.780426][T12894] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 889.841904][ T6484] team0 (unregistering): Port device team_slave_0 removed [ 889.979994][T12894] usb 7-1: Using ep0 maxpacket: 8 [ 889.987719][T12894] usb 7-1: unable to get BOS descriptor or descriptor too short [ 890.040609][T12894] usb 7-1: config 228 has an invalid interface number: 96 but max is 0 [ 890.059297][T12894] usb 7-1: config 228 has no interface number 0 [ 890.084782][T12894] usb 7-1: config 228 interface 96 has no altsetting 0 [ 890.103567][T12894] usb 7-1: string descriptor 0 read error: -22 [ 890.134121][T12894] usb 7-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice=28.14 [ 890.156384][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 890.167488][T12894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.175731][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 890.186129][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 890.194607][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 890.204799][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 890.241062][T12894] appletouch 7-1:228.96: Could not find int-in endpoint [ 890.248113][T12894] appletouch 7-1:228.96: probe with driver appletouch failed with error -5 [ 890.268061][T12894] usbhid 7-1:228.96: couldn't find an input interrupt endpoint [ 890.435840][T12894] usb 7-1: USB disconnect, device number 9 [ 890.522364][T12846] hsr_slave_0: entered promiscuous mode [ 890.529192][T12846] hsr_slave_1: entered promiscuous mode [ 890.535692][T12846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 890.544081][T12846] Cannot create hsr debugfs directory [ 890.825813][ T8635] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 891.085174][T12922] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1486'. [ 892.149675][T12630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 892.282043][ T5857] Bluetooth: hci3: command tx timeout [ 892.671501][T12630] 8021q: adding VLAN 0 to HW filter on device team0 [ 892.744305][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.751537][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 892.845619][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.852830][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 892.967222][T12917] chnl_net:caif_netlink_parms(): no params data found [ 893.842816][T12949] loop6: detected capacity change from 0 to 512 [ 894.031474][T12949] EXT4-fs error (device loop6): ext4_iget_extra_inode:4693: inode #15: comm syz.6.1491: corrupted in-inode xattr: invalid ea_ino [ 894.059952][T12949] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.1491: couldn't read orphan inode 15 (err -117) [ 894.097887][T12949] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 894.624381][ T5857] Bluetooth: hci3: command tx timeout [ 894.851038][T12630] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 894.910233][T12630] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 895.313905][T12917] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.353881][T12917] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.396021][T12917] bridge_slave_0: entered allmulticast mode [ 895.422909][T12917] bridge_slave_0: entered promiscuous mode [ 895.466221][T12917] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.500504][T12917] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.538647][T12917] bridge_slave_1: entered allmulticast mode [ 895.569861][T12917] bridge_slave_1: entered promiscuous mode [ 895.804441][ T7459] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.956084][T12846] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 896.022971][T12917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 896.088451][T12917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 896.142375][T12846] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 896.222578][T12846] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 896.503637][T12846] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 896.671285][T12962] loop6: detected capacity change from 0 to 512 [ 896.687104][T12962] EXT4-fs: Ignoring removed mblk_io_submit option [ 896.694316][T12962] EXT4-fs: inline encryption not supported [ 896.762297][ T5855] Bluetooth: hci3: command tx timeout [ 896.911444][T12962] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 896.925353][T12962] ext4 filesystem being mounted at /273/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 897.631492][T12917] team0: Port device team_slave_0 added [ 897.780601][T12917] team0: Port device team_slave_1 added [ 898.007116][ T6484] bridge_slave_1: left allmulticast mode [ 898.032928][ T6484] bridge_slave_1: left promiscuous mode [ 898.070326][ T6484] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.111322][ T6484] bridge_slave_0: left allmulticast mode [ 898.117072][ T6484] bridge_slave_0: left promiscuous mode [ 898.155211][ T6484] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.528876][ T7459] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 898.840112][ T5855] Bluetooth: hci3: command tx timeout [ 899.048353][ T6484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 899.080483][ T6484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 899.102465][ T6484] bond0 (unregistering): Released all slaves [ 899.442582][T12917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 899.477918][T12917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 899.587218][T12970] xt_CT: You must specify a L4 protocol and not use inversions on it [ 900.261673][T12917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 900.505153][ T6484] hsr_slave_0: left promiscuous mode [ 901.471027][ T6484] hsr_slave_1: left promiscuous mode [ 901.517313][ T6484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 901.538029][ T5857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 901.550453][ T5857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 901.558622][ T5857] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 901.567490][ T5857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 901.581073][ T5857] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 901.791006][ T6484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 903.290104][T12984] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1496'. [ 903.653931][ T5857] Bluetooth: hci4: command tx timeout [ 904.065850][T12991] netlink: 'syz.6.1497': attribute type 13 has an invalid length. [ 904.796048][ T6484] team0 (unregistering): Port device team_slave_1 removed [ 904.834397][ T6484] team0 (unregistering): Port device team_slave_0 removed [ 905.255374][T12917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 905.265214][T12917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 905.293731][T12917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 905.371517][ T24] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 905.439156][T12991] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.446795][T12991] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.618518][ T24] usb 10-1: Using ep0 maxpacket: 8 [ 905.643567][T12991] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.652622][T12991] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.661622][T12991] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.670617][T12991] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.790027][ T5857] Bluetooth: hci4: command tx timeout [ 906.409283][ T24] usb 10-1: unable to get BOS descriptor or descriptor too short [ 906.420586][ T24] usb 10-1: config 228 has an invalid interface number: 96 but max is 0 [ 906.430101][ T24] usb 10-1: config 228 has no interface number 0 [ 906.436554][ T24] usb 10-1: config 228 interface 96 has no altsetting 0 [ 906.662034][ T24] usb 10-1: string descriptor 0 read error: -22 [ 906.668549][ T24] usb 10-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice=28.14 [ 906.683627][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.726167][ T24] appletouch 10-1:228.96: Could not find int-in endpoint [ 906.748073][ T24] appletouch 10-1:228.96: probe with driver appletouch failed with error -5 [ 906.791955][ T24] usbhid 10-1:228.96: couldn't find an input interrupt endpoint [ 906.859784][T13002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1501'. [ 906.878715][T12917] hsr_slave_0: entered promiscuous mode [ 906.899107][T12917] hsr_slave_1: entered promiscuous mode [ 906.907613][T12917] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 906.919383][T12917] Cannot create hsr debugfs directory [ 906.940282][T11539] usb 10-1: USB disconnect, device number 7 [ 907.181070][T12846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 907.527945][T12846] 8021q: adding VLAN 0 to HW filter on device team0 [ 907.676973][ T6484] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.684238][ T6484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 907.705321][ T6484] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.713292][ T6484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 907.745300][T12977] chnl_net:caif_netlink_parms(): no params data found [ 907.805655][ T5857] Bluetooth: hci4: command tx timeout [ 908.396405][T12977] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.424291][T12977] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.436270][T12977] bridge_slave_0: entered allmulticast mode [ 908.454582][T12977] bridge_slave_0: entered promiscuous mode [ 908.620157][T12977] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.667814][T12977] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.834076][T12977] bridge_slave_1: entered allmulticast mode [ 909.160111][T12977] bridge_slave_1: entered promiscuous mode [ 909.502439][T12917] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 909.535816][T12917] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 909.579668][T12977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 909.618708][T12977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 909.667853][T12917] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 909.789835][T12917] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 909.891131][ T5857] Bluetooth: hci4: command tx timeout [ 909.958035][T12977] team0: Port device team_slave_0 added [ 910.104390][T12977] team0: Port device team_slave_1 added [ 910.277495][ T5965] bridge_slave_1: left allmulticast mode [ 910.287829][ T5965] bridge_slave_1: left promiscuous mode [ 910.309169][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.340707][ T5965] bridge_slave_0: left allmulticast mode [ 910.346373][ T5965] bridge_slave_0: left promiscuous mode [ 910.366032][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.793618][T13054] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1513'. [ 912.198919][ T5965] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 912.223927][ T5965] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 912.252656][ T5965] bond0 (unregistering): Released all slaves [ 912.327976][T12977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 912.360275][T12977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 912.401903][T12977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 912.556246][T12846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 912.753644][ T5965] hsr_slave_0: left promiscuous mode [ 912.761541][ T5965] hsr_slave_1: left promiscuous mode [ 912.768074][ T5965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 913.696582][ T5965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 914.729570][ T36] Bluetooth: hci0: Frame reassembly failed (-84) [ 914.893192][ T5965] team0 (unregistering): Port device team_slave_1 removed [ 914.955635][ T5965] team0 (unregistering): Port device team_slave_0 removed [ 915.517014][T12977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 915.556481][T12977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 915.604421][T12977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 915.904705][T12977] hsr_slave_0: entered promiscuous mode [ 915.916259][T12977] hsr_slave_1: entered promiscuous mode [ 915.926706][T12977] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 915.945772][T12977] Cannot create hsr debugfs directory [ 916.380746][T12917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 916.460588][T12917] 8021q: adding VLAN 0 to HW filter on device team0 [ 916.513475][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.520764][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 916.565668][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.572966][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 916.712567][T13087] loop6: detected capacity change from 0 to 256 [ 916.737152][T13087] exfat: Deprecated parameter 'namecase' [ 916.762102][ T5857] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 916.768420][ T5855] Bluetooth: hci0: command 0x1003 tx timeout [ 916.839751][T13087] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 917.407083][T12846] veth0_vlan: entered promiscuous mode [ 917.507608][T12846] veth1_vlan: entered promiscuous mode [ 917.676970][T12846] veth0_macvtap: entered promiscuous mode [ 917.727310][T12846] veth1_macvtap: entered promiscuous mode [ 917.788558][T12977] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 917.857906][T12977] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 917.936477][T12846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.983144][T12846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.020265][T12846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 918.043616][T12846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.186241][T12846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 918.219358][T12977] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 918.261149][T12977] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 918.321848][T12846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.353905][T12846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.380012][T12846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.410353][T12846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.451694][T12846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 918.505659][T12846] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.557015][T12846] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.600379][T12846] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.609121][T12846] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.843487][T12917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 919.076819][ T5995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.097352][ T5995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.293353][T12977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 919.354864][ T6382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.427040][ T6382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.468398][T12977] 8021q: adding VLAN 0 to HW filter on device team0 [ 919.515069][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.522373][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 919.580471][ T6382] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.587648][ T6382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 920.035848][T12917] veth0_vlan: entered promiscuous mode [ 920.978392][T13128] loop6: detected capacity change from 0 to 512 [ 921.005467][T12917] veth1_vlan: entered promiscuous mode [ 921.041029][T13128] EXT4-fs: Ignoring removed mblk_io_submit option [ 921.184200][T13128] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 921.256403][T13128] ext4 filesystem being mounted at /284/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 921.313634][T12917] veth0_macvtap: entered promiscuous mode [ 921.356092][T12917] veth1_macvtap: entered promiscuous mode [ 921.845264][T12977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 921.869679][ T7459] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 921.884810][T12917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 921.907962][T12917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 921.920168][T12917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 921.932024][T12917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 921.942619][T12917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 921.955425][T12917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 921.968408][T12917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 922.057263][T12917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 922.088857][T12917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.124282][T12917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 922.160062][T12917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.200228][T12917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 922.229999][T12917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.254188][T12917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 922.297629][T13150] loop9: detected capacity change from 0 to 256 [ 922.405848][T13150] exfat: Deprecated parameter 'namecase' [ 922.452034][T13150] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 922.561331][T12977] veth0_vlan: entered promiscuous mode [ 922.573959][T12977] veth1_vlan: entered promiscuous mode [ 922.765887][T12917] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.905510][T12917] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.064546][T12917] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.211993][T12917] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.422973][T12977] veth0_macvtap: entered promiscuous mode [ 924.575911][T12977] veth1_macvtap: entered promiscuous mode [ 925.510165][ T5965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 925.550326][ T5965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 925.678101][T12977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 925.726176][T12977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.788349][T12977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 925.834451][T12977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.887392][T12977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 925.938207][T12977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.978875][T12977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.007128][T12977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.036850][T12977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 926.076133][ T5965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 926.112290][T12977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.129534][ T5965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 926.145049][T12977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.262748][T12977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.277328][T12977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.302416][T12977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.332962][T12977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.370084][T12977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.479990][T12977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.511635][T12977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 926.557044][T12977] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.594450][T12977] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.631227][T12977] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.661247][T12977] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.181449][ T5994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 927.219679][ T5994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 928.664590][ T6484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 928.673570][ T6484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 930.981127][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.987674][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.425024][T13222] loop6: detected capacity change from 0 to 256 [ 931.454489][T13222] exfat: Deprecated parameter 'namecase' [ 931.541032][T13222] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 932.489385][T13230] loop3: detected capacity change from 0 to 128 [ 932.702224][T13230] bio_check_eod: 102 callbacks suppressed [ 932.702277][T13230] syz.3.1553: attempt to access beyond end of device [ 932.702277][T13230] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 932.759864][ T30] audit: type=1800 audit(1745575142.894:251): pid=13230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1553" name="bus" dev="loop3" ino=336 res=0 errno=0 [ 934.167639][T13245] xt_CT: You must specify a L4 protocol and not use inversions on it [ 936.963370][T13268] veth0_vlan: entered allmulticast mode [ 938.466784][T13275] netlink: 25 bytes leftover after parsing attributes in process `syz.6.1562'. [ 938.476695][T13275] gretap0: entered promiscuous mode [ 938.521719][T13275] loop6: detected capacity change from 0 to 16 [ 939.289757][T13275] erofs (device loop6): rootino(nid 36) is not a directory(i_mode 26000) [ 939.326198][T13275] netlink: 45349 bytes leftover after parsing attributes in process `syz.6.1562'. [ 939.336146][T13275] 0ªX¹¦Dö»: renamed from gretap0 [ 939.374478][T13275] 0ªX¹¦Dö»: left promiscuous mode [ 939.379634][T13275] 0ªX¹¦Dö»: entered allmulticast mode [ 939.629833][T13282] loop3: detected capacity change from 0 to 512 [ 939.699197][T13282] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 939.756776][T13282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 939.814921][T13282] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 941.377351][T12977] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 941.454722][T13293] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1567'. [ 941.548850][T13293] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.557431][T13293] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.780089][ T5895] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 941.972662][ T5895] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 942.240265][ T5895] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 942.267831][ T5895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.402757][T13304] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1570'. [ 943.536612][T13303] loop4: detected capacity change from 0 to 512 [ 944.248375][T13303] EXT4-fs (loop4): Test dummy encryption mode enabled [ 944.291710][ T5895] usb 7-1: config 0 descriptor?? [ 944.310069][T13303] EXT4-fs (loop4): blocks per group (255) and clusters per group (8192) inconsistent [ 944.326051][ T5895] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 944.632289][ T5895] usb 7-1: USB disconnect, device number 10 [ 945.290222][T13312] loop4: detected capacity change from 0 to 256 [ 945.326060][T13312] exfat: Deprecated parameter 'namecase' [ 945.638503][T13312] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 946.750725][T13334] loop6: detected capacity change from 0 to 512 [ 946.936299][T13334] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 946.949520][T13334] ext4 filesystem being mounted at /293/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 949.105014][ T7459] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 949.346989][T13348] loop6: detected capacity change from 0 to 1024 [ 949.477503][T13348] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 949.560235][T13348] ext4 filesystem being mounted at /294/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 950.763173][ T5993] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 950.855558][ T5993] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 496 with max blocks 2048 with error 28 [ 950.938166][T13360] loop5: detected capacity change from 0 to 256 [ 950.958202][ T5993] EXT4-fs (loop6): This should not happen!! Data will be lost [ 950.958202][ T5993] [ 951.034008][ T5993] EXT4-fs (loop6): Total free blocks count 0 [ 951.068175][ T5993] EXT4-fs (loop6): Free/Dirty block details [ 951.090029][ T5993] EXT4-fs (loop6): free_blocks=4293918720 [ 951.095793][ T5993] EXT4-fs (loop6): dirty_blocks=3632 [ 951.250164][ T5993] EXT4-fs (loop6): Block reservation details [ 951.291412][ T5993] EXT4-fs (loop6): i_reserved_data_blocks=227 [ 951.677054][ T13] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2548 with max blocks 1568 with error 28 [ 952.772480][T13369] loop9: detected capacity change from 0 to 512 [ 952.809415][T13369] EXT4-fs (loop9): Test dummy encryption mode enabled [ 952.832877][T13369] EXT4-fs (loop9): blocks per group (255) and clusters per group (8192) inconsistent [ 952.926347][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 953.114326][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 953.125936][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 953.148095][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 953.810937][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 954.809469][T13393] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1591'. [ 954.876805][T13394] overlayfs: missing 'lowerdir' [ 954.948616][T13393] loop9: detected capacity change from 0 to 512 [ 955.062294][T13393] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 955.146306][T13393] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 955.159465][T13393] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 955.880423][ T5855] Bluetooth: hci0: command tx timeout [ 956.855613][T13391] loop6: detected capacity change from 0 to 1024 [ 956.977081][ T8635] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 956.992760][T13391] EXT4-fs: Ignoring removed orlov option [ 957.036459][T13399] loop4: detected capacity change from 0 to 256 [ 957.060169][T13391] EXT4-fs: Ignoring removed nomblk_io_submit option [ 957.091100][T13399] vfat: Unknown parameter 'nnonumtail' [ 957.304951][T13391] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 957.960110][ T5855] Bluetooth: hci0: command tx timeout [ 958.348145][T13409] loop9: detected capacity change from 0 to 512 [ 958.379012][ T7459] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 958.407275][T13409] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 958.546592][T13409] EXT4-fs (loop9): orphan cleanup on readonly fs [ 958.711836][T13409] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1594: bg 0: block 248: padding at end of block bitmap is not set [ 958.797647][T13418] loop6: detected capacity change from 0 to 128 [ 958.866731][T13409] Quota error (device loop9): write_blk: dquota write failed [ 958.917008][T13418] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 958.956415][T13409] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 958.969331][T13409] EXT4-fs error (device loop9): ext4_acquire_dquot:6935: comm syz.9.1594: Failed to acquire dquot type 1 [ 959.052704][T13418] ext4 filesystem being mounted at /298/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 959.066394][T13378] chnl_net:caif_netlink_parms(): no params data found [ 959.077581][T13409] EXT4-fs (loop9): 1 truncate cleaned up [ 959.175126][T13409] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 959.286404][ T7459] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 959.339602][T13412] loop4: detected capacity change from 0 to 2048 [ 959.467410][T13412] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 960.040208][ T5855] Bluetooth: hci0: command tx timeout [ 960.973926][T13378] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.005510][T13378] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.043589][T13378] bridge_slave_0: entered allmulticast mode [ 961.066974][T13378] bridge_slave_0: entered promiscuous mode [ 961.104962][T13378] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.143574][T13378] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.165694][T13378] bridge_slave_1: entered allmulticast mode [ 961.230168][T13378] bridge_slave_1: entered promiscuous mode [ 961.442650][T13434] veth0_vlan: entered allmulticast mode [ 962.200179][ T5855] Bluetooth: hci0: command tx timeout [ 962.598645][T13378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 962.674044][T13378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 963.602713][T13378] team0: Port device team_slave_0 added [ 963.704417][T13378] team0: Port device team_slave_1 added [ 964.591009][T13378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 964.599811][T13378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 964.730218][T13378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 964.790318][T13378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 964.819359][T13378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 964.929987][T13378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 967.382065][T13378] hsr_slave_0: entered promiscuous mode [ 967.414209][T13471] loop4: detected capacity change from 0 to 1024 [ 967.422193][T13378] hsr_slave_1: entered promiscuous mode [ 967.430117][T13378] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 967.450068][T13378] Cannot create hsr debugfs directory [ 967.547957][T13471] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 967.593153][ T30] audit: type=1800 audit(1745575177.954:252): pid=13471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1609" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 967.794185][T13471] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 968.296713][T12917] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 968.459337][T13378] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.573020][T13378] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.736568][T13378] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.971949][T13488] loop4: detected capacity change from 0 to 512 [ 968.991594][T13378] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.040105][T13488] EXT4-fs (loop4): Test dummy encryption mode enabled [ 969.060364][T13488] EXT4-fs (loop4): blocks per group (255) and clusters per group (8192) inconsistent [ 970.889550][T13378] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 970.968522][T13501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1616'. [ 971.873766][T13378] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 973.227218][T13378] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 973.481837][T13378] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 973.646102][T13505] loop4: detected capacity change from 0 to 512 [ 973.740290][T13505] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 973.777449][T13509] loop5: detected capacity change from 0 to 512 [ 973.896938][T13509] EXT4-fs (loop5): orphan cleanup on readonly fs [ 973.941475][T13505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 973.954426][T13505] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 973.965565][T13515] loop6: detected capacity change from 0 to 512 [ 973.992646][T13515] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 974.034829][T13509] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1620: bg 0: block 248: padding at end of block bitmap is not set [ 974.118823][T13509] Quota error (device loop5): write_blk: dquota write failed [ 974.154689][T13509] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 974.186060][T13378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 974.208378][T13509] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.1620: Failed to acquire dquot type 1 [ 974.264424][ T7459] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 974.272381][T13509] EXT4-fs (loop5): 1 truncate cleaned up [ 974.285969][T12917] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 974.308917][T13378] 8021q: adding VLAN 0 to HW filter on device team0 [ 974.319142][T13509] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 974.427224][ T5994] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.434434][ T5994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 974.573396][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.580602][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 974.659524][T12846] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 974.776187][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 974.785228][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 974.793432][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 974.811049][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 974.823169][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 974.861888][T13378] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 975.176486][T13527] loop5: detected capacity change from 0 to 512 [ 975.815720][T13527] EXT4-fs error (device loop5): ext4_orphan_get:1390: inode #15: comm syz.5.1625: casefold flag without casefold feature [ 975.874017][T13527] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.1625: couldn't read orphan inode 15 (err -117) [ 976.161906][T13527] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 976.925867][ T5857] Bluetooth: hci2: command tx timeout [ 976.962543][T13527] overlayfs: failed to resolve './file2': -2 [ 978.120984][T13551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1629'. [ 978.654119][T13378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 979.000272][ T5857] Bluetooth: hci2: command tx timeout [ 979.989789][T13521] chnl_net:caif_netlink_parms(): no params data found [ 980.673388][T13406] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 980.806276][T13378] veth0_vlan: entered promiscuous mode [ 981.081673][ T5857] Bluetooth: hci2: command tx timeout [ 981.157252][T13378] veth1_vlan: entered promiscuous mode [ 981.258370][T13521] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.315641][T13521] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.345527][T13521] bridge_slave_0: entered allmulticast mode [ 981.406226][T13521] bridge_slave_0: entered promiscuous mode [ 981.485929][T13521] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.535997][T13521] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.575530][T13521] bridge_slave_1: entered allmulticast mode [ 981.618612][T13521] bridge_slave_1: entered promiscuous mode [ 981.955433][T13521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 982.193470][T13521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 982.479553][T12846] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 982.620696][ T82] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.160672][ T5857] Bluetooth: hci2: command tx timeout [ 983.703303][ T82] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.828958][T13378] veth0_macvtap: entered promiscuous mode [ 983.858235][T13378] veth1_macvtap: entered promiscuous mode [ 984.684832][T13521] team0: Port device team_slave_0 added [ 984.791663][ T82] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.808241][T13596] loop5: detected capacity change from 0 to 256 [ 984.848776][T13596] exfat: Bad value for 'umask' [ 985.130258][T13378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.195008][T13378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.250762][T13378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.431852][T13378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.594333][T13378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.756725][T13378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.780378][T13378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.819964][T13378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.829807][T13378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.878073][T13378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.962977][T13378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 986.052048][T13521] team0: Port device team_slave_1 added [ 986.152521][ T82] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.269585][T13610] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1645'. [ 986.488346][T13378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 986.509832][T13618] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1645'. [ 986.517024][T13378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.568049][T13378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 986.624398][T13378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.670041][T13378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 986.891054][T13378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.918198][T13378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 986.941826][T13378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.965356][T13378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 987.002036][T13378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 988.018579][T13378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 989.610542][T13521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 989.636083][T13521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 989.744660][T13521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 989.767031][T13521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 989.774527][T13521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 989.813694][T13521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 989.953827][T13378] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.980099][T13378] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.022739][T13378] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.061072][T13378] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.426356][T13650] loop4: detected capacity change from 0 to 512 [ 992.270291][T13650] EXT4-fs (loop4): blocks per group (71) and clusters per group (20800) inconsistent [ 992.285232][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.308896][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.728465][T13656] 9pnet_fd: p9_fd_create_tcp (13656): problem connecting socket to 127.0.0.1 [ 993.405425][T13521] hsr_slave_0: entered promiscuous mode [ 993.441207][T13521] hsr_slave_1: entered promiscuous mode [ 993.447544][T13521] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 993.504962][T13521] Cannot create hsr debugfs directory [ 993.665856][T13661] loop5: detected capacity change from 0 to 512 [ 993.763793][T13661] EXT4-fs (loop5): blocks per group (95) and clusters per group (32768) inconsistent [ 994.371825][T13670] loop4: detected capacity change from 0 to 512 [ 998.239473][T13670] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 998.249033][T13670] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 998.249110][T13670] EXT4-fs: failed to create workqueue [ 998.264138][T13670] EXT4-fs (loop4): mount failed [ 1000.282632][ T5855] Bluetooth: hci6: command 0x0406 tx timeout [ 1001.086152][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1001.109111][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1001.129693][ T82] bond0 (unregistering): Released all slaves [ 1001.161448][ T5993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1001.169551][ T5993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1004.441445][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1004.456165][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1004.832643][T13718] syzkaller0: entered promiscuous mode [ 1004.840367][T13718] syzkaller0: entered allmulticast mode [ 1006.983964][T13733] loop2: detected capacity change from 0 to 256 [ 1007.050510][T13733] exfat: Bad value for 'umask' [ 1012.791710][ T82] hsr_slave_0: left promiscuous mode [ 1012.808399][ T82] hsr_slave_1: left promiscuous mode [ 1012.833645][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1012.844875][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1012.887791][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1012.908680][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1012.949151][ T82] veth1_macvtap: left promiscuous mode [ 1012.955005][ T82] veth0_macvtap: left promiscuous mode [ 1012.961693][ T82] veth1_vlan: left promiscuous mode [ 1012.970455][ T82] veth0_vlan: left promiscuous mode [ 1013.930001][ T82] team0 (unregistering): Port device team_slave_1 removed [ 1013.985543][ T82] team0 (unregistering): Port device team_slave_0 removed [ 1014.849573][ T5857] Bluetooth: hci3: command 0x0406 tx timeout [ 1014.868947][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1014.891426][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1014.899126][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1014.913356][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1014.926281][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1017.011261][ T5855] Bluetooth: hci1: command tx timeout [ 1019.079986][ T5855] Bluetooth: hci1: command tx timeout [ 1021.170782][ T5855] Bluetooth: hci1: command tx timeout [ 1022.104638][T13815] tun0: tun_chr_ioctl cmd 1074025677 [ 1022.130287][T13815] tun0: linktype set to 768 [ 1022.260799][T13852] loop4: detected capacity change from 0 to 512 [ 1022.304446][T13852] EXT4-fs (loop4): blocks per group (71) and clusters per group (20800) inconsistent [ 1022.342734][T13761] chnl_net:caif_netlink_parms(): no params data found [ 1022.776693][T13860] 9pnet_fd: p9_fd_create_tcp (13860): problem connecting socket to 127.0.0.1 [ 1023.781764][ T5855] Bluetooth: hci1: command tx timeout [ 1024.190610][T13521] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1024.267367][T13521] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1024.515767][T13521] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1024.619981][T13521] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1024.885654][ T82] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.340840][ T82] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.416472][T13761] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.444511][T13761] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.459694][T13761] bridge_slave_0: entered allmulticast mode [ 1025.475560][T13761] bridge_slave_0: entered promiscuous mode [ 1025.547952][ T82] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.627293][T13761] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.655499][T13761] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.664354][T13761] bridge_slave_1: entered allmulticast mode [ 1025.674097][T13761] bridge_slave_1: entered promiscuous mode [ 1025.741663][T13521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1026.837070][ T82] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.058720][T13761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1027.157498][T13761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1027.340612][T13761] team0: Port device team_slave_0 added [ 1027.427411][T13761] team0: Port device team_slave_1 added [ 1027.654529][T13521] 8021q: adding VLAN 0 to HW filter on device team0 [ 1027.700473][T13761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1027.715483][T13761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1027.743178][T13761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1027.758205][T13761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1027.765645][T13761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1027.793793][T13761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1027.918173][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.925374][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1028.206602][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.213854][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1028.492253][T13930] loop4: detected capacity change from 0 to 512 [ 1028.550868][T13930] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1028.557685][T13930] EXT4-fs (loop4): blocks per group (255) and clusters per group (8192) inconsistent [ 1030.326942][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1030.355662][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1030.430367][ T82] bond0 (unregistering): Released all slaves [ 1030.726607][T13761] hsr_slave_0: entered promiscuous mode [ 1030.747162][T13761] hsr_slave_1: entered promiscuous mode [ 1030.753880][T13761] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1030.762118][T13761] Cannot create hsr debugfs directory [ 1030.865197][ T82] tipc: Left network mode [ 1031.854929][ T82] hsr_slave_0: left promiscuous mode [ 1031.915102][ T82] hsr_slave_1: left promiscuous mode [ 1032.069037][ T82] veth1_vlan: left promiscuous mode [ 1032.106884][ T82] veth0_vlan: left promiscuous mode [ 1032.307533][ T82] pim6reg (unregistering): left allmulticast mode [ 1033.434772][T13993] loop5: detected capacity change from 0 to 512 [ 1033.530880][T13993] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1033.543566][T13993] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1034.183176][T14003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1766'. [ 1034.240044][T14003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1766'. [ 1034.266312][T12846] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1034.401754][T14003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1766'. [ 1034.471983][T14011] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1034.491699][T14011] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1034.501249][T14011] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1034.535275][T14011] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1034.560210][T14011] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1034.689020][T14003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1766'. [ 1036.302147][T14048] loop5: detected capacity change from 0 to 512 [ 1036.352898][T14048] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1036.366073][T14048] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1036.680119][ T5855] Bluetooth: hci5: command tx timeout [ 1037.129461][T12846] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1038.818163][T14011] Bluetooth: hci5: command tx timeout [ 1038.910296][T14008] chnl_net:caif_netlink_parms(): no params data found [ 1040.443389][T14011] Bluetooth: hci4: command 0x0406 tx timeout [ 1040.850140][ T5855] Bluetooth: hci5: command tx timeout [ 1042.545489][T13761] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1042.570242][T13761] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1042.650466][T13761] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1042.694177][T13761] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1042.921286][ T5855] Bluetooth: hci5: command tx timeout [ 1043.095448][T14008] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.120167][T14008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.129262][T14008] bridge_slave_0: entered allmulticast mode [ 1043.148154][T14008] bridge_slave_0: entered promiscuous mode [ 1043.182751][T14008] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.202503][T14008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.219701][T14008] bridge_slave_1: entered allmulticast mode [ 1043.267497][T14008] bridge_slave_1: entered promiscuous mode [ 1043.529550][T14008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1043.590626][T14008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1043.867230][T14008] team0: Port device team_slave_0 added [ 1043.912452][T14008] team0: Port device team_slave_1 added [ 1043.951043][ T82] bridge_slave_1: left allmulticast mode [ 1043.958272][ T82] bridge_slave_1: left promiscuous mode [ 1044.000411][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.084055][ T82] bridge_slave_0: left allmulticast mode [ 1044.113104][ T82] bridge_slave_0: left promiscuous mode [ 1044.118886][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.176785][ T82] bridge_slave_1: left allmulticast mode [ 1044.187638][ T82] bridge_slave_1: left promiscuous mode [ 1044.194323][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.262982][ T82] bridge_slave_0: left allmulticast mode [ 1044.268949][ T82] bridge_slave_0: left promiscuous mode [ 1044.279949][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.994954][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1046.015771][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1046.033539][ T82] bond0 (unregistering): Released all slaves [ 1046.209431][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1046.220403][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1046.230607][ T82] bond0 (unregistering): Released all slaves [ 1046.343163][T14148] pim6reg1: entered promiscuous mode [ 1046.351779][T14148] pim6reg1: entered allmulticast mode [ 1046.420306][T14008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1046.427503][T14008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1046.463977][T14008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1046.496666][T14008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1046.507938][T14008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1046.550214][T14008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1046.637168][ T82] tipc: Left network mode [ 1047.058817][T14008] hsr_slave_0: entered promiscuous mode [ 1047.086044][T14008] hsr_slave_1: entered promiscuous mode [ 1047.110895][T14008] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1047.138926][T14008] Cannot create hsr debugfs directory [ 1047.400157][T14198] usb usb6: usbfs: process 14198 (syz.3.1830) did not claim interface 0 before use [ 1048.629418][ T82] hsr_slave_0: left promiscuous mode [ 1048.659608][ T82] hsr_slave_1: left promiscuous mode [ 1048.678789][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1048.692078][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1048.723916][ T82] hsr_slave_0: left promiscuous mode [ 1048.737763][ T82] hsr_slave_1: left promiscuous mode [ 1049.238183][ T82] team0 (unregistering): Port device team_slave_1 removed [ 1049.288395][ T82] team0 (unregistering): Port device team_slave_0 removed [ 1050.027826][ T82] team0 (unregistering): Port device team_slave_1 removed [ 1050.084798][ T82] team0 (unregistering): Port device team_slave_0 removed [ 1050.466180][T13761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1050.499763][T13761] 8021q: adding VLAN 0 to HW filter on device team0 [ 1050.639611][ T5995] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.646808][ T5995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1050.699032][ T5995] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.706225][ T5995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1052.508842][T14261] 9pnet_fd: p9_fd_create_tcp (14261): problem connecting socket to 127.0.0.1 [ 1053.030906][T13761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1053.267937][T13761] veth0_vlan: entered promiscuous mode [ 1053.308798][T14264] pim6reg1: entered promiscuous mode [ 1053.320396][T14264] pim6reg1: entered allmulticast mode [ 1053.540760][T13761] veth1_vlan: entered promiscuous mode [ 1053.736864][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.746535][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1053.784722][T13761] veth0_macvtap: entered promiscuous mode [ 1053.804398][T13761] veth1_macvtap: entered promiscuous mode [ 1053.837035][T14008] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1053.942729][T14008] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1053.975181][T13761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1054.041426][T13761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.060499][T13761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1054.079987][T13761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.110032][T13761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1054.137139][T13761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.178324][T13761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1054.213897][T13761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.240292][T13761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1054.260361][T13761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.272529][T13761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1054.293076][T14008] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1054.328946][T14008] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1054.388327][T13761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.425993][T13761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.460041][T13761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.475868][T13761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.504927][T13761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.525882][T13761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.550077][T13761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.570754][T13761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.600525][T13761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.632685][T13761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.691830][T13761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1054.756023][T13761] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.802827][T13761] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.828323][T13761] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.838337][T13761] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.129614][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1056.176024][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1056.401185][T14008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1056.545069][T14008] 8021q: adding VLAN 0 to HW filter on device team0 [ 1056.563006][ T6027] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.570199][ T6027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1056.612057][T14328] loop2: detected capacity change from 0 to 512 [ 1056.629661][T14328] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1056.638857][T14328] EXT4-fs (loop2): blocks per group (255) and clusters per group (8192) inconsistent [ 1056.664119][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1056.675591][ T6027] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.682771][ T6027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1056.800060][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1057.545760][ T30] audit: type=1326 audit(1745575267.904:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14330 comm="syz.5.1881" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faa90f8e969 code=0x0 [ 1059.448101][T14008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1063.406490][T14407] netlink: 'syz.2.1901': attribute type 12 has an invalid length. [ 1063.473080][T14408] loop5: detected capacity change from 0 to 256 [ 1063.950268][T14408] exfat: Bad value for 'umask' [ 1064.025426][T14008] veth0_vlan: entered promiscuous mode [ 1064.381813][T14008] veth1_vlan: entered promiscuous mode [ 1064.440039][ T48] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1064.586982][T14008] veth0_macvtap: entered promiscuous mode [ 1064.636011][T14008] veth1_macvtap: entered promiscuous mode [ 1064.722703][T14008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1064.733494][ T48] usb 5-1: Using ep0 maxpacket: 16 [ 1064.769402][T14008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.893560][T14008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1064.929622][T14008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.188989][T14008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1065.211840][T14008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.222132][T14008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1065.232922][T14008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.275189][T14008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1065.290271][T14008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.305667][T14008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1065.389596][T14008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.002664][T14008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1066.123600][T14008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1066.242080][T14008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.299105][T14008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1066.358598][T14008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.420172][T14008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1066.522664][T14008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.377327][T14008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1067.459334][T14008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.486944][T14008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1067.548495][T14008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.617809][T14008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1067.702670][T14008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.777551][T14008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1067.945185][T14008] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.965427][T14008] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.010681][T14008] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.033275][T14008] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.509595][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.801481][ T48] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1069.822130][ T48] usb 5-1: unable to read config index 0 descriptor/start: -32 [ 1069.829719][ T48] usb 5-1: chopping to 0 config(s) [ 1069.876376][ T48] usb 5-1: can't read configurations, error -32 [ 1069.913105][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1070.896202][ T48] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1071.044473][ T6484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.098265][ T6484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1072.661146][T14466] netlink: 'syz.4.1921': attribute type 5 has an invalid length. [ 1074.205603][T14482] fuse: Unknown parameter 'subj_user' [ 1079.131999][T14011] Bluetooth: hci0: command 0x0406 tx timeout [ 1115.810523][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.816875][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1152.830047][T14485] Bluetooth: hci1: command tx timeout [ 1176.682463][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.688898][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1184.599932][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1184.607116][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P14480/1:b..l [ 1184.615753][ C0] rcu: (detected by 0, t=10503 jiffies, g=82289, q=2663 ncpus=2) [ 1184.623593][ C0] task:syz.7.1618 state:R running task stack:22792 pid:14480 tgid:14470 ppid:14008 task_flags:0x400140 flags:0x00004006 [ 1184.638103][ C0] Call Trace: [ 1184.641398][ C0] [ 1184.644341][ C0] __schedule+0x16e2/0x4cd0 [ 1184.648895][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 1184.654211][ C0] ? __pfx___schedule+0x10/0x10 [ 1184.659089][ C0] ? __lock_acquire+0xaac/0xd20 [ 1184.663973][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1184.669633][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 1184.674945][ C0] preempt_schedule_irq+0xb5/0x150 [ 1184.680077][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1184.685810][ C0] ? tipc_data_ready+0x2b1/0x440 [ 1184.690772][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1184.696415][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1184.702235][ C0] irqentry_exit+0x6f/0x90 [ 1184.706667][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1184.712666][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 1184.718003][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 1b b3 f9 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 1184.737638][ C0] RSP: 0018:ffffc9000c1667d8 EFLAGS: 00000206 [ 1184.743741][ C0] RAX: 83be99c7cab1ce00 RBX: 0000000000000000 RCX: 83be99c7cab1ce00 [ 1184.751731][ C0] RDX: 0000000000000000 RSI: ffffffff8db42415 RDI: ffffffff8be1ba80 [ 1184.759721][ C0] RBP: ffffffff8171a9f5 R08: 0000000000000000 R09: 0000000000000000 [ 1184.767807][ C0] R10: 0000000000000000 R11: ffffffff8171a9f5 R12: 0000000000000002 [ 1184.775795][ C0] R13: ffffffff8e13b860 R14: 0000000000000000 R15: 0000000000000246 [ 1184.783793][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1184.788936][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1184.794092][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1184.799763][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1184.804894][ C0] ? tipc_send_group_bcast+0x79e/0xa70 [ 1184.810379][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1184.815520][ C0] unwind_next_frame+0xc2/0x2390 [ 1184.820475][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1184.825614][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1184.830754][ C0] ? tipc_mcast_xmit+0x1f0/0x1850 [ 1184.835800][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1184.841971][ C0] arch_stack_walk+0x11c/0x150 [ 1184.847114][ C0] ? tipc_send_group_bcast+0x79e/0xa70 [ 1184.852699][ C0] stack_trace_save+0x9c/0xe0 [ 1184.857395][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1184.862847][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1184.868498][ C0] ? stack_trace_save+0x9c/0xe0 [ 1184.873364][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1184.879013][ C0] ? stack_depot_save_flags+0x40/0x910 [ 1184.884499][ C0] kasan_save_track+0x3e/0x80 [ 1184.889195][ C0] ? kasan_save_track+0x3e/0x80 [ 1184.894063][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1184.899106][ C0] ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 1184.905191][ C0] ? kmalloc_reserve+0xbd/0x290 [ 1184.910061][ C0] ? __alloc_skb+0x142/0x2d0 [ 1184.914673][ C0] ? __pskb_copy_fclone+0xab/0xf90 [ 1184.919797][ C0] ? tipc_msg_reassemble+0x10b/0x3b0 [ 1184.925105][ C0] ? tipc_mcast_xmit+0x1f0/0x1850 [ 1184.930322][ C0] ? tipc_send_group_bcast+0x79e/0xa70 [ 1184.935947][ C0] ? kmalloc_reserve+0xbd/0x290 [ 1184.940831][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1184.946752][ C0] __kasan_slab_alloc+0x6c/0x80 [ 1184.951803][ C0] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 1184.957728][ C0] ? kmalloc_reserve+0xbd/0x290 [ 1184.962609][ C0] kmalloc_reserve+0xbd/0x290 [ 1184.967415][ C0] __alloc_skb+0x142/0x2d0 [ 1184.971946][ C0] __pskb_copy_fclone+0xab/0xf90 [ 1184.976905][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1184.982570][ C0] tipc_msg_reassemble+0x10b/0x3b0 [ 1184.987727][ C0] tipc_mcast_xmit+0x1f0/0x1850 [ 1184.992615][ C0] ? __pfx_tipc_mcast_xmit+0x10/0x10 [ 1184.997977][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.003656][ C0] ? _copy_from_iter+0x308/0x15a0 [ 1185.008732][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.014385][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.020037][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.025695][ C0] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1185.031784][ C0] ? __pfx__copy_from_iter+0x10/0x10 [ 1185.037086][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.043082][ C0] ? __build_skb_around+0x257/0x3e0 [ 1185.048310][ C0] ? tipc_msg_build+0x400/0xcf0 [ 1185.053198][ C0] ? net_generic+0x1e/0x240 [ 1185.057729][ C0] ? net_generic+0x1e/0x240 [ 1185.062246][ C0] ? net_generic+0x1e/0x240 [ 1185.066791][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.072444][ C0] ? tipc_group_bc_cong+0x15f/0x210 [ 1185.077680][ C0] tipc_send_group_bcast+0x79e/0xa70 [ 1185.083044][ C0] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 1185.088900][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.094559][ C0] ? tipc_sk_filter_rcv+0x375/0x30b0 [ 1185.099874][ C0] ? __pfx_woken_wake_function+0x10/0x10 [ 1185.105529][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.111195][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.116845][ C0] ? rcu_is_watching+0x15/0xb0 [ 1185.121632][ C0] __tipc_sendmsg+0x2d7/0x2960 [ 1185.126435][ C0] ? __pfx___tipc_sendmsg+0x10/0x10 [ 1185.131649][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.137295][ C0] ? tipc_node_distr_xmit+0xb2/0x3b0 [ 1185.142603][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.148249][ C0] ? aa_label_sk_perm+0x413/0x560 [ 1185.153289][ C0] ? __pfx_tipc_node_distr_xmit+0x10/0x10 [ 1185.159030][ C0] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1185.164428][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.170084][ C0] ? __lock_acquire+0xaac/0xd20 [ 1185.174988][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.180640][ C0] ? __lock_acquire+0xaac/0xd20 [ 1185.185531][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1185.190917][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.196567][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1185.201783][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.207428][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1185.212827][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1185.218563][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.224219][ C0] tipc_sendmsg+0x55/0x70 [ 1185.228564][ C0] ? __pfx_tipc_sendmsg+0x10/0x10 [ 1185.233603][ C0] __sock_sendmsg+0x21c/0x270 [ 1185.238299][ C0] ____sys_sendmsg+0x52d/0x830 [ 1185.243092][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1185.248409][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.254055][ C0] ? import_iovec+0x74/0xa0 [ 1185.258666][ C0] ___sys_sendmsg+0x21f/0x2a0 [ 1185.263370][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 1185.268616][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.274287][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.279935][ C0] ? __might_fault+0xb0/0x130 [ 1185.284651][ C0] __sys_sendmmsg+0x227/0x430 [ 1185.289503][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1185.294706][ C0] ? __pfx_do_futex+0x10/0x10 [ 1185.299386][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.305007][ C0] ? rcu_is_watching+0x15/0xb0 [ 1185.309764][ C0] __x64_sys_sendmmsg+0xa0/0xc0 [ 1185.314612][ C0] do_syscall_64+0xf6/0x210 [ 1185.319141][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1185.324766][ C0] ? exc_page_fault+0x91/0x110 [ 1185.329527][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.335423][ C0] RIP: 0033:0x7fcd4258e969 [ 1185.339908][ C0] RSP: 002b:00007fcd43373038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1185.348331][ C0] RAX: ffffffffffffffda RBX: 00007fcd427b6160 RCX: 00007fcd4258e969 [ 1185.356289][ C0] RDX: 0400000000000181 RSI: 00002000000030c0 RDI: 0000000000000003 [ 1185.364245][ C0] RBP: 00007fcd42610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1185.372200][ C0] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1185.380154][ C0] R13: 0000000000000000 R14: 00007fcd427b6160 R15: 00007ffde023a468 [ 1185.388123][ C0] [ 1188.343669][T14486] Bluetooth: hci5: command tx timeout