last executing test programs: 5m6.383668227s ago: executing program 0 (id=238): io_setup(0x2, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000200)={[{@nojournal_checksum}]}, 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x1, 0x803, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r4, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000200)=[{&(0x7f00000004c0)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000240)}, 0x24008004) 4m56.78359935s ago: executing program 0 (id=256): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0xfffffffc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 4m52.735289291s ago: executing program 0 (id=261): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) creat(0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file1\x00') r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local, @loopback}, 0xc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_buf(r4, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) 4m50.506616798s ago: executing program 0 (id=267): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0xf}}, {@noblock_validity}, {@jqfmt_vfsv1}, {@norecovery}, {@acl}, {@errors_remount}, {@minixdf}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000000)='./file1\x00', 0x109041, 0x80) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) fallocate(r0, 0x20, 0x0, 0x7000000) 4m46.952456375s ago: executing program 0 (id=273): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a00)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = timerfd_create(0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(r4, &(0x7f0000000180)='maps\x00') sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000005c0)="a00b4ff9873519ff2bd476dfa12492be4b10e86bccd2c16a6de3d8360180ccc76d5f3cc999fdf7d5c6a001ba6d862af3607e06e5f1cadb93050503abfcfa6705fb395fdab05bd5a89a0d7bf19ab99bdeff711e48488176934613e06bf103e0025aade4e3804923490f065db143aed8c1d27c6091912a725f9a043d2b3924c27a359b72e107d64ac8e1804a52ea67ca289325be48e7329b261adeca10df3ce4e429eb2969cf4b67f472f495d5254bc8d96f5ce32908909b3b9c0813404c04359ef750", 0xc2}, {0x0}, {&(0x7f0000002580)="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", 0xdbe}], 0x3, &(0x7f0000000040)=[{0x10, 0x10b, 0x8}], 0x10}, 0x80) ioctl$TIOCL_PASTESEL(r5, 0x541c, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) syz_usb_disconnect(0xffffffffffffffff) execve(0x0, &(0x7f0000000280), &(0x7f0000000580)) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) timerfd_gettime(r3, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 4m43.57972035s ago: executing program 0 (id=281): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x35, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r5, 0x4030ae7b, &(0x7f0000000180)={0x80000001, 0x4, 0xb3, 0xd5f1, 0x6}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'macsec0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r7], 0x20}}, 0x0) 4m43.194874523s ago: executing program 32 (id=281): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x35, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r5, 0x4030ae7b, &(0x7f0000000180)={0x80000001, 0x4, 0xb3, 0xd5f1, 0x6}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'macsec0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r7], 0x20}}, 0x0) 4m24.193825128s ago: executing program 4 (id=322): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2200050, &(0x7f0000000000)=ANY=[], 0x1, 0x1516, &(0x7f0000003140)="$eJzs3Am4T+X2OPC13vfdHDJ8k8x7vWvzTYaXJMmQJEOSJCGZE5IkSZLEIVMSkpDxJJlD5nTSMc9D5qSTK0mSkJDk/T+n4e823H/33l/3r9896/M8+znv2nu/a6991vmePTzPOV90HVa9UY0q9ZkZ/h365wH++CURABIAYCAAZAeAAADK5CiTI217Jo2J/9ZBxH9IgxmXuwJxOUn/0zfpf/om/U/fpP/pm/Q/fZP+p2/S//RN+i9EujYr75WypN9F3v//L6f+J5Pl+v/fB/G3q/7RvtL//zb6X9pb+p9uZPi9ldL/9OL3LwHS//RN+p+eBZe7AHGZyec/fZP+C5Gu/envlDecu9zvtGX5FxYhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEOL/g3P+EgMAP48vd11CCCGEEEIIIYT48/i3LncFQgghhBBCCCGE+M9DUKDBQAAZICMkQCbIDFdAFsgK2SA7xOBKyAFXQU64GnJBbsgDeSEf5IcCEAKBBYYICkIhiMM1UBiuhSJQFIpBcXBQAkrCdVAKrofScAOUgRuhLNwE5aA8VICKcDNUglugMtwKVeA2qArVoDrUgNuhJtwBteBOqA13QR24G+rCPVAP7oX60AAawn3QCO6HxtAEmkIzaA4toOUfzE/K/nvzn4Ee8Cz0hF6QCL2hDzwHfaEf9IcBMBCeh0HwAgyGF2EIDIVh8BIMh5dhBLwCI2EUjIZXYQyMhXEwHibAREiC12ASvA6T4Y37s8JUmAbTYQbMhFnwJsyGOTAX3oJ5MB8WQFKmRbAYlsDbsBTegWR4F5bBe5ACy2EFrIRVsBrWwFpYB+thA2yETbAZtsBW2Abvw3bYATthF+yGPbAXPoB98CHsh48gFT/+F+ef/eV86IaAgAoVGjSYATNgAiZgZsyMWTALZsNsGMMY5sAcmBNzYi7MhXkwD+bDfFgACyAhISNjQSyIcYxjYSyMRbAIFsNi6NBhSSyJpfB6LI2lsQyWwbJYFstheSyPFbEiVsJKWBkrYxWsglWxKlbH6ng73o53YC2shbWxNtbBOlgX62I9rIf1sT42xIbYCBthY2yMTbEpNsfm2BJbYitsha2xNbbFttgO22F7bI8dsAN2xI7YCTthZ+yMXbALdsWu2A2fxqfxGXwGn8VnsRdWVb2xD/bBvtgX++MAHIDP4yB8AV/AF3EIDsVh+BK+hC/jCDyDI3EUjsbRWEmNxXE4HllNxCRMwowwCSfjZJyCU3EqTscZOBNn4SycjXNwDr6F83A+zseFuBAX4xJcgkvxHUzGZFyGZzEFl+MKXImrcDWuwrW4DtfiBtyIG3AzbsatuBXfx/dxB+7AXbgL9+Ae/AA/wA/xQxyCqZiKB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5wDgPJ7HC3gBL+LFtA+/SmOUURlUBpWgElRmlVllUVlUNpVNxVRM5VA5VE6VU+VSuVQelUflU/lUAVVAkSLFKlIFVUEVV3FVWBVWRVQRVUwVU045VVKVVKVUKVValVZl1I2qrLpJlVPlVRtXUVVUlVRbV1ndqqqoKqqqqqaqqxqqhqqpaqpaqpaqrWqrOqqOqqvuUfVUb+yPDVRaZxqpodhYDcOmqplqrlqol/EB1UqNwNaqjWqrHlKjcCS2V61cB/Wo6qjGYSf1uBqPT6guaiJ2VU+pbupp1V09o3qo1q6n6qWmYG/VR03Hvqqf6q8GqNlYTaV1rLp6UQ1RQ9Uw9ZJajC+rEeoVNVKNUqPVq2qMGqvGqfFqgpqoktRrapJ6XU1Wb6gpaqqapqarGWqmmqXeVLPVHDVXvaXmqflqgVqoFqnFaol6Wy1V76hk9a5apt5TKWq5WqFWqlVqtVqj1qp1ar3aoDaqTWqz2qK2qm3qfbVd7VA71S61W+1Re9UHap/6UO1XH6lU9bE6oP6mDqpP1CH1qTqsPlNH1OfqqPpCHVNfquPqK3VCnVSn1NfqtPpGnVFn1Tn1rTqvvlMX1PfqovIKNGqltTY60Bl0Rp2gM+nM+gqdRWfV2XR2HdNX6hz6Kp1TX61z6dw6j8mr8+n8uoAONWmrWUe6oC6k4/oaXVhfq4voorqYLq6dLqFL6ut0KX29Lq1v0GX0jbqsvkmX0+V1BQ/6Zl1J36Ir61t1FX2brqqr6eq6hr5d19R36Fr6Tl1b36Xr6Lt1XX2Prqfv1fV1A91Q36cb6ft1Y91EN9XNdHPdQrfUD+hW+kHdWrfRbfVDup1+WLfXj+gO+lHdUT+mO+nHdWf9hO6in9Rd9VO6m35ad9ff64va6566l07UvXUf/Zzuq/vp/nqAHqif14P0C3qwflEP0UP1MP2SHq5f1iP0K3qkHqVH61f1GD1Wj9Pj9QQ9USfp1/Qk/bqerN/QU/RUPU1P1zP0TN3/p0xz/4n5r//O/ME/HH2r3qbf19v1Dr1T79K79R69V+/V+/Q+vV/v16k6VR/QB/RBfVAf0of0YX1YH9FH9FF9VB/Tx/RxfVyf0Cf1t/prfVp/o8/os/qs/laf1+f1hZ++B2DQKKONMYHJYDKaBJPJZDZXmCwmq8lmspuYudLkMFeZnOZqk8vkNnlMXpPP5DcFTGjIWMMmMgVNIRM315jC5lpTxBQ1xUxx40wJU9Jc9z+e/0f1tTQtTSvTyrQ2rU1b09a0M+1Me9PedDAdTEfT0XQynUxn09l0MV1MV9PVdDPdTHfT3fQwPUxP09MkmkTTxzxn+pp+pr8ZYAaa580gM8gMNoPNEDPEDDPDzHAz3IwwI8xIM9KMNqPNGDPGjDPjzAQzwST57GaSmWQmm8lmiplipg3MbmaYGWaWmWVmm9lmrplr5pl5ZoFZYBaZRWaJWWKWmqUm2SSbZWaZSTHLzXKz0qw0q81qs9asNevNerPRbDSbzWaTYraZbWa72W52mp1mt9lt9pq9Zp/ZZ/ab/SbVpJoD5oA5aA6aQ+aQOWwOmyPmiDlqjppj5pg5bo6bE+aEOWVOmdPmtDljzphz5pw5b86bC+aCuWgupt32BSpQgQlMkCHIECQECUHmIHOQJcgSZAuyBbEgFuQIcgQ5g6uDXEHuIE+QN8gX5A8KBGFAgQ04iIKCQaEgHlwTFA6uDYoERYNiQfHABSWCksF1Qang+qB0cENQJrgxKBvcFJQLygcVgorBzUGl4JagcnBrUCW4LagaVAuqBzWC24OawR1BreDOoHZwV1AnuDuoG9wT1AvuDeoHDYKGwX1Bo+D+oHHQJGgaNAuaBy2Cln9qfu/P5H7Q9Qx7hYlh77BP+FzYN+wX9g8HhAPD58NB4Qvh4PDFcEg4NBwWvhQOD18OR4SvhCPDUeHo8NVwTDg2HBeODyeEE8Ok8LVwUvh6ODl8I5wSTg2nBdPDGeHMcFb4Zjg7nBPODd8K54XzwwXhwnBRuDhE/PFuPDl8N1wWvhemhMvDFeHKcFW4OlwTrg3XhevDDeHGcFO4ucygH3cNt4c7wp3hrnB3uCfcG34Q7gs/DPeHH4Wp4cfhgfBv4cHwk/BQ+Gl4OPwsPBJ+Hh4NvwiPhV+Gx8OvwhPhyUwQfh2eDr8Jz4Rnw3Pht+H58LvwQvh9eDH0aTf3aZd3MmQoA2WgBEqgzJSZslAWykbZKEYxykE5KCflpFyUi/JQHspH+agAFaA0TEwFqSDFKU6FqTAVoSJUjIqRI0clqSSVolJUmkpTGSpDZakslSNLFagC3Uw30y10C91Kt9JtdBtVo2pUg2oQYk2qRbWoNtWmOlSH6lJdqkf1qD7Vp4bUkBpRI2pMjakpNaXm1JxaUktqRa2oNbWmttSW2lE7ak/tqQN1oI7UkTpRJ+pMnakLdaGu1JW6UTfqTt2pB/WgntSTEimR+lAf6kt9qT/1p4E0kAbRIBpMg2kIDaFhNIyG03AaQSNoJI2i0fQqjaGxNI7G0wSaSEmURJNoEk2myTSFptA0mkYzaAbNolk0m2bTXJpL82geLaAFtIgW0RJaQktpKSVTMi2jZZRCKbSCVtAqWkVraA2to3W0gTbQJtpEW2gLbaNttJ22007aSbtpN+2lvbSP9tF+2k+plEoH6AAdpIN0iA7RYTpMR+gIHaWjdIyO0XE6TifoBJ2iU3SaTtMZOkPn6Bydp+/oAn1PF8lTgs1kM9srbBab1Waz2e2v4zw2r81n89sCNrS5bO5fxGStLWKL2mK2uHW2hC1pr/tNXM6WtxVsRXuzrWRvsZVtOZsJ/j6uae+wteydtra9y9awt/8irmPvtnXt/baebWLr22a2oW1hG9n7bWPbxDa1zWxz28K2sw/b9vYR28E+ajvax34TL7Xv2HV2vd1gN9p99kN7zn5rj9ov7Hn7ne1pe9mB9nk7yL5gB9sX7RA79JcxgB1tX7Vj7Fg7zo63E+zE38TT7HQ7w860s+ybdrad85t4iX3bzrPJdoFdaBfZxT/EaTUl23ftMvueTbHL7Qq70q6yq+0au/b/1rrSbrZb7Fa7135gt9sddqfdZXfbPT/Eaeex335kU+3H9oj93B60n9hD9pg9bD/7IU47v2P2S3vcfmVP2JP2lP3anrbf2DP27A/nn3buX9vv7UXrLTCyYs2GA87AGTmBM3FmvoKzcFbOxtk5xldyDr6Kc/LVnItzcx7Oy/k4PxfgkIktM0dckAtxnK/hwnwtF+GiXIyLs+MSXJKv41J8PZfmG7gM38hl+SYux+W5Alfkm7kS38KV+VauwrdxVa7G1bkG3841+Q6uxXdybb6L6/DdXJfv4Xp8L9fnBtyQ7+NGfD835ibclJtxc27BLfkBbsUPcmtuw235IW7HD3N7foQ78KPckR/jTvw4d+YnuAs/yV35Ke7GT3N3foZ78LPck3txIvfmPvwc9+V+3J8H8EB+ngfxCzyYX+QhPJSH8Us8nF/mEfwKj+RRPJpf5TE8lsfxeJ7AEzmJX+NJ/DpP5jd4Ck/laTydZ/BMnsVv8myew3P5LZ7H83kBL+RFvJiX8Nu8lN/hZH6Xl/F7nMLLeQWv5FW8mtfwWl7H63kDb+RNvJm38Fbexu/zdt7BO3kX7+Y9vJc/4H38Ie/njziVP+YD/Dc+yJ/wIf6UD/NnfIQ/56P8BR/jL/k4f8Un+CSf4q/5NH/DZ/gsn+Nv+Tx/xxf4e77IniHCSEU6MlEQZYgyRglRpihzdEWUJcoaZYuyR7HoyihHdFWUM7o6yhXljvJEeaN8Uf6oQBRGFNmIoygqGBWK4tE1UeHo2qhIVDQqFhWPXFQiKhldF5WKro9KRzdEZaIbo7LRTVG5qHxUIaoY3RxVim6JKke3RlWi26KqUbWoelQjuj2qGd0R1YrujGpHd0Wlo7ujutE9Ub3o3qh+1CBqGN0XNYrujxpHTaKmUbOoedQiahk9ELWKHoxaR22ittFDUbvo4ah99EjUIXo06hg9dml70eDHq+mvtidGvSP90xuyO/Wi+OL4kvjb8aXxd+LJ8Xfjy+LvxVPiy+Mr4ivjq+Kr42via+Pr4uvjG+Ib45vim+Nb4lvj3tfICA7THoTBuMBlcBldgsvkMrsrXBaX1WVz2V3MXelyuKtcTne1y+Vyuzwur8vn8rsCLnTkrGMXuYKukIu7a1xhd60r4oq6Yq64c66EK+lauJaupWvlHnStXRvX1j3kHnIPu4fdI+4R96jr6B5zndzjrrN7wnVxT7on3VOum3vadXfPuB7uWdfT9XKJLtH1cX1cX9fX9Xf93UA30A1yg9xgN9gNcUPcMDfMDXfD3Qg3wo10I91oN9qNcWPcODfOTXATXJJLcpPcJDfZTXZT3BQ3zU1zM9wMN8vNcrPdbDfXzXXz3Dy3wC1wi9wit8QtcUvdUpfskt0yt8yluBS3wq1wq9wqt8atcevcOrfBbXCb3Ca3xW1x29w2t91tdzvdTrfb7XZ73V63z+1z+91+l+pS3QF3wB10B90h96k77D5zR9zn7qj7wh1zX7rj7it3wp10p9zX7rT7xp1xZ9059607775zF9z37qLzLin2WmxS7PXY5NgbsSmxqbFpsemxGbGZsVmxN2OzY3Nic2NvxebF5scWxBbGFsUWx5bE3o4tjb0TS469G1sWey+WElseWxFbGVsVWx3zPv/2yBf0hXzcX+ML+2t9EV/UF/PFvfMlfEl/nS/lr/el/Q2+jL/Rl/U3+XK+vK/gm/imvplv7lv4lv4B38o/6Fv7Nr6tf8i38w/79v4R38E/6jv6x3wn/7jv7J/wXfyTvqt/av5PP56+h3/W9/S9fKLv7fv453xf38/39wP8QP+8H+Rf8IP9i36IH+qH+Zf8cP+yH+Ff8SP9KD/av+rH+LF+nB/vJ/iJPsm/5if51/1k/4af4qf6aX66n+Fn+ln+TT/bz/Fz/Vt+np/vF/iFfpFf7Jf4t/1S/45P9u/6Zf49n+KX+xV+pV/lV/s1fq1f59f7DX6j3+Q3+y1+q9/mM8J2v8Pv9Lv8br/H7/Uf+H3+Q7/ff+RT/cf+gP+bP+g/8Yf8p/6w/8wf8Z/7o/4Lf8x/6Y/7r/wJf9Kf8l/70/4bf8af9ef8t/68/85f8N/7i/I3a0IIIYQQ/xT9B9t7/8469dNiAKAPAGTdkffwr3NuyvXjuJ/a1zEGAI/26trg56VBg8TExJ/2TdEQFFoIALFL8zPApXg5tIWHoQO0gVK/W18/VQH5V/mDv9uelj9+I0BmgEw/r0uAH+Jf5b/+H+Rv8vav8/+6/vhCgCKFLs1JO9DP8aX8pf9B/j3t/iB/pk+SAFr/3ZwscCm+lL8kPAiPQYdf7CmEEEIIIYQQQvyonzrf7Y+eb9Oez/OZS3MywqX4j57P/0DlP+MchBBCCCGEEEII8f/2xNPdH3mgQ4c2nf+bBxn/GmX8BQYIAH+BMmTw1x9c7t9MQgghhBBCiD/bpZv+y12JEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgiRfv37/yFM/dM7X+5zFEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIS63/xMAAP//gUVOqg==") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1) creat(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x179) creat(0x0, 0x11a) rename(&(0x7f0000001800)='./file0\x00', &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4m23.983619s ago: executing program 4 (id=323): bpf$PROG_LOAD(0x5, 0x0, 0x0) lstat(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000000300)={[{@nombcache}, {@barrier_val={'barrier', 0x3d, 0x3ff}}, {@stripe={'stripe', 0x3d, 0x7}}, {@discard}, {@data_ordered}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@max_batch_time}, {@test_dummy_encryption}]}, 0xd, 0x5f6, &(0x7f0000000c00)="$eJzs3c9rHFUcAPDvbH40aapJi6j1YBdEWtAmTdpKEQ/tVUqoP/DixdiktXbbhiaiqUJTqBdBvIgInjxYwT9Ci732pCB48OJJCkWlR8GV2cyk2exufmyTbOx8PrDNzHsz8950882befvebACFVU7/KUXsjYjpJGIwmV/M644ss7yw3b2/PzqdvpKoVl/7M4kkS8u3T7KfA9nOfRHx049J7OlqLHdm7sr5iUpl6nK2PjJ7YXpkZu7KwXMXJs5OnZ26OPbC2LGjR44eGz3U1nldbZJ28vq77w9+Mv7mN1/9k4x++9t4Esfj5WzDpecREb+U2iq1XjnKtf+TpDFr4NgGHH876Mp+T5a+xUl3ByvEuuTvX09EPBGD0RX337zB+PiVjlYO2FTVJKIKFFQi/qGg8uuA/N5+2X1wbMR9MLA93T2x0AHQGP/dC32D0VfrG9h5L4ml3TpJRLTXM1dvV0TcvjV+/cyt8evR2A8HbKL5axHxZLP4T2rxPxR9MVSL/1Jd/KfXBaeyn2n6q22Wv7yruDH+D7d5ZGA1C/Hft2L8R4v4f2tJ/L/dZvnl+4vv9NfFf3+7pwQAAAAAAACFdfNERDzf7PP/0uL4n2gy/mcgIo5vQPnlZeuNn/+X7mxAMUATd09EvNR0/G8pH/071JUtPVIbD9CTnDlXmToUEY9GxIHo2ZGuj65QxsFP93zZKq+cjf/LX2n5t7OxgFk97nTvqN9ncmJ24kHPG4i4ey3iqabjf5PF9j9p0v6nfw+m11jGnmdvnGqVt3r8A5ul+nXE/qbt//2nViQrP59jpHY9MJJfFTR6+sPPvm9Vfrvx7xET8ODS9n/nyvE/lCx9Xs/M+ss4PNddbZXX7vV/b/J67ZEzvVnaBxOzs5dHI3qTk11pal362PrrDA+jPB7yeEnj/8AzK/f/Nbv+74+I+WXHTv6qn1Oce/zfgd9b1cf1P3ROGv+T62r/178wdmPoh1blr639P1Jr6w9kKfr/YMEXeZj21qc3RuFiQNdlbXV9AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBhUIqIXZGUhheXS6Xh4YiBiHgsdpYql2Zmnztz6b2Lk2le7fv/S/k3/Q4urCf59/8PLVkfW7Z+OCJ2R8TnXf219eHTlyqTnT55AAAAAAAAAAAAAAAAAAAA2CYGWsz/T/3R1enaAZuuu9MVADqmSfz/3Il6AFtP+w/FJf6huMQ/FJf4h+IS/1Bc4h+KS/xDcYl/AAAAAAB4qOzed/PXJCLmX+yvvVK9WV5PR2sGbLZSpysAdIxH/EBxGfoDxeUeH0hWye9rudNqe65k+vQD7AwAAAAAAAAAAAAAhbN/r/n/UFTm/0Nxmf8PxZXP/9/X4XoAW889PhCrzORvOv9/1b0AAAAAAAAAAAAAgI00M3fl/ESlMnV5Ixd2xBo3/m4zSm934Y3tUY2tXKhWq1fT34LtUp//+UI+FH6LS++OtW2cz/Vb25E79zcJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACo918AAAD//x99I+M=") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x31c4024, 0x0, 0x1, 0x0, &(0x7f0000000480)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000003c0)={0xa, &(0x7f0000000180)=[{0x1, 0x4d, 0x2, 0x8}, {0x4, 0x7, 0x9, 0x1}, {0x7, 0x5, 0x3, 0xf}, {0x80, 0x1, 0x10, 0x3ff}, {0x1, 0x18, 0x9, 0x4}, {0xf0, 0xf9, 0x8, 0x7}, {0x2, 0x0, 0x8}, {0xb, 0x8, 0x69, 0xa6f}, {0x1, 0x0, 0x2, 0x2}, {0x7, 0x3, 0xa, 0x9}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000400)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00'}, 0x10) r4 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 4m22.67953026s ago: executing program 4 (id=326): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) gettid() syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000200)={[{@noinit_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20000}}, {@grpjquota}, {@nodelalloc}, {@grpquota}, {@nouid32}, {@barrier}, {@dioread_lock}]}, 0x1, 0xb92, &(0x7f0000001740)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0185879, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x92300, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) 4m14.695632251s ago: executing program 4 (id=333): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0xfffffffc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 4m10.671325851s ago: executing program 4 (id=339): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) execve(&(0x7f0000002e00)='./file0\x00', 0x0, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r4, 0x0, 0x9}, 0x18) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file0\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000001800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x200082, 0x10) readlinkat(r5, 0x0, &(0x7f0000000780)=""/188, 0xbc) r6 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r6, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001580)=[{&(0x7f0000000200)="a9050000000074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000000340)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001280)=[{0x0}], 0x1}}], 0x2, 0x4) 4m7.273721257s ago: executing program 4 (id=344): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000008c0)='GPL\x00', 0x9, 0x0, 0x0, 0x1e00, 0x19, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000940)='kmem_cache_free\x00', r0, 0x0, 0x10}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) r5 = epoll_create1(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000800), 0x101007, 0x0) preadv(r6, 0x0, 0x0, 0x81, 0x8000) epoll_wait(r5, &(0x7f0000001e40)=[{}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1, 0x0, 0x0, @void, @value}, 0x20) setfsuid(0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@nfs_export_on}], [], 0x2c}) 3m51.457277647s ago: executing program 33 (id=344): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000008c0)='GPL\x00', 0x9, 0x0, 0x0, 0x1e00, 0x19, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000940)='kmem_cache_free\x00', r0, 0x0, 0x10}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) r5 = epoll_create1(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000800), 0x101007, 0x0) preadv(r6, 0x0, 0x0, 0x81, 0x8000) epoll_wait(r5, &(0x7f0000001e40)=[{}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1, 0x0, 0x0, @void, @value}, 0x20) setfsuid(0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@nfs_export_on}], [], 0x2c}) 2m32.486864119s ago: executing program 5 (id=560): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="743100002c00010026bd7000fcdbdf250400000060311180593701c1a2fd461b2d510766527345ab2f7b266c8708575184bc18d50f3a909eb3b723a4eae5c220d0d3cdd9c657e2"], 0x3174}, 0x1, 0x0, 0x0, 0x20000008}, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e0600120c"], 0x9) 2m31.333052807s ago: executing program 5 (id=564): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0xfffffffc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 2m27.287818608s ago: executing program 5 (id=576): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x100, 0x100, 0x4, [@decl_tag={0xc, 0x0, 0x0, 0x11, 0x8, 0x2}, @union={0xc, 0x4, 0x0, 0x5, 0x1, 0x8, [{0x4, 0x0, 0x9}, {0xb, 0x3, 0x8}, {0x3, 0x0, 0x10000}, {0x6, 0x0, 0x6639}]}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0x80}}, @restrict={0x5, 0x0, 0x0, 0xb, 0x4}, @const={0x5, 0x0, 0x0, 0xa, 0x3}, @enum64={0x10, 0x2, 0x0, 0x13, 0x1, 0x3, [{0xd, 0x8, 0x1}, {0x4, 0x8, 0xf2}]}, @float={0xa, 0x0, 0x0, 0x10, 0xa}, @func={0x8, 0x0, 0x0, 0xc, 0x1}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x9, 0x5}, {0x2}, {0x10, 0x3}, {0x3}, {0x3, 0x4}, {0x7}]}]}, {0x0, [0x30, 0x2e]}}, &(0x7f0000000600)=""/88, 0x11c, 0x58, 0x1, 0x0, 0x0, @void, @value}, 0x28) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000070400008500000021000000b700000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x34, r2, 0x1, 0x70bd24, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x21}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009005}, 0x24044084) 2m27.00186157s ago: executing program 5 (id=577): syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$key(0xffffffffffffffff, 0x0, 0x4814) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x880e, 0x0, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8af, 0x640, 0x1, 0x2, 0xd59f83, 0x19ef, 0x42, 0x4, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0xd, 0x23, {0x8, 0xffffffff}, 0xd0, 0x9}}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) r3 = io_uring_setup(0x5570, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x40) close(r3) ioctl$TCSETSW2(r2, 0x5425, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r6) 2m23.589143136s ago: executing program 5 (id=587): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = dup2(r1, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) statfs(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01032abd7000fbdbdf2516000000140001800d00b1e2007af83484617baeb0b377d20201007564703a73797a3000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4010}, 0x18) 2m22.200216737s ago: executing program 5 (id=592): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) r3 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0xf}, 0x0, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 2m7.162980112s ago: executing program 34 (id=592): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) r3 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0xf}, 0x0, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 1m1.095617134s ago: executing program 1 (id=801): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x80a0000, 0x1000, 0x1}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000002300)=[{0x0}], 0x1) close(0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32, @ANYBLOB], 0x48}}, 0x0) 1m0.922477086s ago: executing program 1 (id=805): setresuid(0xee00, 0xee01, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) 1m0.779758687s ago: executing program 1 (id=808): syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904"], 0x0) 59.983081723s ago: executing program 7 (id=809): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) epoll_create1(0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x800) write$P9_ROPEN(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0xfffffffffffffde8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="040100001a00010000000000fffffffffc01000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a9080000000000000000000000000000000080ff3c0000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b5e8719ff80788fa0000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000a000200000000000000000014000e00ac1414320008000000"], 0x104}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 58.955220111s ago: executing program 7 (id=811): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800140003000401a80009000800024004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 58.787422982s ago: executing program 7 (id=814): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x107) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 58.738360792s ago: executing program 7 (id=816): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x80a0000, 0x1000, 0x1}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000002300)=[{0x0}], 0x1) close(0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32, @ANYBLOB], 0x48}}, 0x0) 58.517193334s ago: executing program 7 (id=818): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 58.375978615s ago: executing program 7 (id=819): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a00)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = timerfd_create(0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000180)='maps\x00') r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000005c0)="a00b4ff9873519ff2bd476dfa12492be4b10e86bccd2c16a6de3d8360180ccc76d5f3cc999fdf7d5c6a001ba6d862af3607e06e5f1cadb93050503abfcfa6705fb395fdab05bd5a89a0d7bf19ab99bdeff711e48488176934613e06bf103e0025aade4e3804923490f065db143aed8c1d27c6091912a725f9a043d2b3924c27a359b72e107d64ac8e1804a52ea67ca289325be48e7329b261adeca10df3ce4e429eb2969cf4b67f472f495d5254bc8d96f5ce32908909b3b9c0813404c04359ef750", 0xc2}, {0x0}, {&(0x7f0000002580)="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", 0xdbe}], 0x3, &(0x7f0000000040)=[{0x10, 0x10b, 0x8}], 0x10}, 0x80) ioctl$TIOCL_PASTESEL(r4, 0x541c, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) syz_usb_disconnect(0xffffffffffffffff) execve(0x0, &(0x7f0000000280), &(0x7f0000000580)) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) timerfd_gettime(r2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 56.946785696s ago: executing program 1 (id=822): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0xfffc, @private}, 0x4}}, 0x26) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) close_range(r7, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="c3ad7f0cddedb7aba898c98c7533a028899712e0eb48f8794fda5bd608"], 0x0) 55.871551814s ago: executing program 1 (id=828): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=@newchain={0x24, 0x2e, 0x901, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x9, 0xfff1}}}, 0x24}}, 0x0) 55.587512996s ago: executing program 1 (id=832): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 43.30142115s ago: executing program 35 (id=819): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a00)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = timerfd_create(0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000180)='maps\x00') r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000005c0)="a00b4ff9873519ff2bd476dfa12492be4b10e86bccd2c16a6de3d8360180ccc76d5f3cc999fdf7d5c6a001ba6d862af3607e06e5f1cadb93050503abfcfa6705fb395fdab05bd5a89a0d7bf19ab99bdeff711e48488176934613e06bf103e0025aade4e3804923490f065db143aed8c1d27c6091912a725f9a043d2b3924c27a359b72e107d64ac8e1804a52ea67ca289325be48e7329b261adeca10df3ce4e429eb2969cf4b67f472f495d5254bc8d96f5ce32908909b3b9c0813404c04359ef750", 0xc2}, {0x0}, {&(0x7f0000002580)="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", 0xdbe}], 0x3, &(0x7f0000000040)=[{0x10, 0x10b, 0x8}], 0x10}, 0x80) ioctl$TIOCL_PASTESEL(r4, 0x541c, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) syz_usb_disconnect(0xffffffffffffffff) execve(0x0, &(0x7f0000000280), &(0x7f0000000580)) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) timerfd_gettime(r2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 39.982419765s ago: executing program 36 (id=832): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 24.758061751s ago: executing program 6 (id=918): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 23.730569379s ago: executing program 6 (id=920): epoll_create(0x10000e9) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socket(0x9, 0x80000, 0x1ffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0), 0x68) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000b00)=ANY=[@ANYBLOB="4c010000100001000000000000000000ac1414aa0000000000000000000000007f0000010000000000000000000000004e22000020008000000020000c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"/267], 0x14c}, 0x1, 0x0, 0x0, 0x4055}, 0x4800) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000002c0)="b2402716dffb6f60ef1a0fcbe347c00e6c324b5280da19b84bed5f67f7e2edab59524b7284a178060db608fc3e4af859fb71b91c1b2100025e9051c070f3d09e29f9db87a8a1b56c59c66f6e16202ee4f5d584bb384a3640a2097d9e2728a336df76a44fff82038f24cfa3b1f79f9f65eb12dbddf1a527f90dc0707bbde50b59c9d178b47b9bb85019f3f3e7f954", 0x8e, r0}, 0x68) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r5}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=ANY=[@ANYBLOB="8002000021000100000000000100000000000000000000000000000000000000fe8000000000000000000000000000bb0000000000000000ffffffee00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x280}}, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) 22.529395288s ago: executing program 6 (id=923): socket$inet(0x2b, 0x801, 0x0) semtimedop(0x0, 0x0, 0x0, &(0x7f0000000080)={0x77359400}) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r3, 0x545c, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x44880, 0x0) 21.567156635s ago: executing program 6 (id=926): socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_get$uid(0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x121400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="02"], 0x10) ioctl$FS_IOC_SETFSLABEL(r6, 0x41009432, &(0x7f0000000300)="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") socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_LEAVE(r8, 0x10f, 0x88) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) 19.423599662s ago: executing program 6 (id=930): socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x2, 0x9000000000000000, 0x8000000000000000, 0x6, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x7}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18.967278915s ago: executing program 6 (id=931): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026008f0900000800"], 0x2c}}, 0x0) 16.104001087s ago: executing program 2 (id=939): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40844) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x440, 0x270, 0x168, 0x9, 0x0, 0xb, 0x370, 0x250, 0x250, 0x370, 0x250, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', [], [], 'ip6tnl0\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x230, 0x270, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x0, 0x7ff, 0x0, 0x0, 0x0, 0x6, 0x1000}}}, @common=@inet=@ipcomp={{0x30}, {[], 0x12}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000480)={{0xffffffffffffffff, 0x2, 0xfffffff9, 0x3, 0xb}, 0x3, 0x5, 0x100000000}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@uuid_off}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000000000)='./file1\x00', 0x40, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') 14.775258017s ago: executing program 2 (id=941): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x26a0c0, 0x0) socket(0x10, 0x803, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) keyctl$join(0x1, &(0x7f0000002180)={'syz', 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r3}) add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000180)="717bceae373a5aff4ea7d7f206aee74fc481c19a8b569ec302644989af796522ecd73c7d00b75af55afc12a02766b17fa0ee2ea45658c2b2df493aa7749b3f5d93e0964689b1799de48fa09ffb8ec849bd9263f30270ceda33f13f705b2a194fe5d92ba4bf828612685dae6d1ddf50696707556234c5adbf1aac1f69c032424546fd9bdd1d5b811dafb972f148e32d4c3a3674d04fef06a57b1294043eab6bd8", 0xa0, r3) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 7.631436571s ago: executing program 8 (id=961): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@migrate={0xcc, 0x21, 0x1, 0x0, 0x25dfdbfc, {{@in6=@private2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xe0, 0x87}}, [@migrate={0x50, 0x11, [{@in=@remote, @in6=@mcast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x9, 0x0}, @in6=@private2, 0x3c, 0x0, 0x0, 0x34ff, 0x2, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in6=@rand_addr=' \x01\x00', @in=@private=0xa010100}}]}, 0xcc}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0xfffc, @private}, 0x4}}, 0x26) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) close_range(r7, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="c3ad7f0cddedb7aba898c98c7533a028899712e0eb48f8794fda5bd608"], 0x0) 6.445928551s ago: executing program 8 (id=963): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x3378, 0x0) 6.234843402s ago: executing program 8 (id=965): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x6000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x48080, 0x6d) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000005, 0x10012, r1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40081271, &(0x7f0000001080)) 6.082002723s ago: executing program 8 (id=966): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@alg={0xe8, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {{'pcbc(fcrypt)\x00'}, '\x00', '\x00', 0x2000, 0x400}, [{0x8, 0x1, 0x7}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000800}, 0x400c0) 5.973740724s ago: executing program 3 (id=967): syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e402010902"], 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x44080) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 5.863434615s ago: executing program 8 (id=968): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000380)='source\xcf\x87\x86\x1bY\x0f\xde\xd6\xcd\xc0\x01\xd3\x19>K\x04\xfe\x86YG\xa5\x0f\xed\xa0\x9f\x1e\x14R\x9e\x04\xfa\xed\xd0TG&\x88\xeaz\x9aD\xf8Tt\x8c\x00{\x1fm\xfe\x9c\xf6_h\x9e\xfc\'', &(0x7f00000001c0)='sou\x01ce', 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendto$packet(r5, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080088484820", 0x100a6, 0x0, &(0x7f0000000140), 0x14) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$igmp(0x2, 0x3, 0x2) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) r8 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x4400) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r8, 0xc10c5541, &(0x7f0000000000)=0x2) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000340)={{0x2, 0x0, @broadcast}, {0x0, @link_local}, 0xa, {0x2, 0x800, @multicast2}, 'wg0\x00'}) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e2a, @broadcast}, {0x0, @remote}, 0x4a, {}, 'veth1_to_bridge\x00'}) r9 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r10 = syz_open_dev$cec(&(0x7f0000000140), 0x0, 0x50400) r11 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x141000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r11, 0xc1105511, &(0x7f0000000140)={0xa, 0x0, 0x1, 0x0, 'syz0\x00'}) madvise(&(0x7f0000cd0000/0x4000)=nil, 0xffffffffdf32ffff, 0x16) ioctl$CEC_ADAP_S_LOG_ADDRS(r10, 0xc05c6104, &(0x7f0000000200)={"6080d517", 0x3, 0x9, 0x1, 0x2, 0xfffffffc, "f9a927627a359827fdc4ed7cb20708", "ae6c49d8", "1c4391b3", "aa04df4e", ["e4e7d0b3748a08eb4117a58f", "a42a5eb8b97b66092e22038e", "00284dc8b857e17ccdef2efa", "d89c67314b6a13a76640b81a"]}) tkill(r9, 0xb) 5.560214137s ago: executing program 9 (id=969): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x800) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x4}, 0x20) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r6 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r6, 0x0, 0x400000000000000, 0x5) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 4.300882147s ago: executing program 9 (id=970): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x1, {{0x42, 0x80000008}}}, 0x10, 0x0}, 0x0) 4.179473888s ago: executing program 3 (id=971): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) dup(0xffffffffffffffff) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 4.179153248s ago: executing program 9 (id=972): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000014c0)=@newtfilter={0x34, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0x9}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.140329508s ago: executing program 9 (id=973): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@migrate={0xcc, 0x21, 0x1, 0x0, 0x25dfdbfc, {{@in6=@private2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xe0, 0x87}}, [@migrate={0x50, 0x11, [{@in=@remote, @in6=@mcast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x9, 0x0}, @in6=@private2, 0x3c, 0x0, 0x0, 0x34ff, 0x2, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in6=@rand_addr=' \x01\x00', @in=@private=0xa010100}}]}, 0xcc}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0xfffc, @private}, 0x4}}, 0x26) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) close_range(r7, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="c3ad7f0cddedb7aba898c98c7533a028899712e0eb48f8794fda5bd608"], 0x0) 2.944939437s ago: executing program 9 (id=974): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x1804, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000012c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20044000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000001300)=@file={0x1, './file0\x00'}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r7, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) 1.912951895s ago: executing program 8 (id=975): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xff05, 0x70bd27, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 1.414188629s ago: executing program 2 (id=976): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xfa000, 0x65f40}) 1.348235199s ago: executing program 2 (id=977): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, 0x0) 1.204159831s ago: executing program 2 (id=978): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00dfff0002000000000000", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 1.099638551s ago: executing program 3 (id=979): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000280)) 1.099132101s ago: executing program 3 (id=980): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x800) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x4}, 0x20) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r6 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r6, 0x0, 0x400000000000000, 0x5) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 947.345972ms ago: executing program 2 (id=981): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'sit0\x00', @ifru_addrs=@nfc={0x27, 0x0, 0x1, 0x5}}) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) 368.040537ms ago: executing program 9 (id=982): r0 = io_uring_setup(0x218a, &(0x7f0000000240)={0x0, 0x3ffffffc, 0x800, 0x4, 0x221}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 20.47617ms ago: executing program 3 (id=983): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x2c, 0x2, 0x0, "d541b01d0000000000ee1e00", 0x33524742}) 0s ago: executing program 3 (id=984): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@migrate={0xcc, 0x21, 0x1, 0x0, 0x25dfdbfc, {{@in6=@private2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xe0, 0x87}}, [@migrate={0x50, 0x11, [{@in=@remote, @in6=@mcast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x9, 0x0}, @in6=@private2, 0x3c, 0x0, 0x0, 0x34ff, 0x2, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in6=@rand_addr=' \x01\x00', @in=@private=0xa010100}}]}, 0xcc}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0xfffc, @private}, 0x4}}, 0x26) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) close_range(r7, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="c3ad7f0cddedb7aba898c98c7533a028899712e0eb48f8794fda5bd608"], 0x0) kernel console output (not intermixed with test programs): 219.572104][ T1277] device hsr_slave_1 left promiscuous mode [ 219.590578][ T1277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.638961][ T1277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.654702][ T1277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.662247][ T1277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.680834][ T1277] device bridge_slave_1 left promiscuous mode [ 219.689249][ T1277] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.716770][ T1277] device bridge_slave_0 left promiscuous mode [ 219.723496][ T1277] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.757422][ T1277] device veth1_macvtap left promiscuous mode [ 219.774367][ T1277] device veth0_macvtap left promiscuous mode [ 219.787215][ T1277] device veth1_vlan left promiscuous mode [ 219.801793][ T1277] device veth0_vlan left promiscuous mode [ 222.353363][ T5411] loop2: detected capacity change from 0 to 1024 [ 222.464617][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 222.464633][ T26] audit: type=1326 audit(1742076402.486:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5412 comm="syz.4.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bfb74169 code=0x7ffc0000 [ 222.554223][ T26] audit: type=1326 audit(1742076402.516:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5412 comm="syz.4.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7bfb74169 code=0x7ffc0000 [ 222.622763][ T26] audit: type=1326 audit(1742076402.516:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5412 comm="syz.4.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bfb74169 code=0x7ffc0000 [ 222.665553][ T5414] capability: warning: `syz.4.313' uses 32-bit capabilities (legacy support in use) [ 222.685244][ T26] audit: type=1326 audit(1742076402.516:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5412 comm="syz.4.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7bfb74169 code=0x7ffc0000 [ 222.754855][ T26] audit: type=1326 audit(1742076402.516:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5412 comm="syz.4.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bfb74169 code=0x7ffc0000 [ 222.810903][ T26] audit: type=1326 audit(1742076402.526:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5412 comm="syz.4.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff7bfb74169 code=0x7ffc0000 [ 222.833191][ T26] audit: type=1326 audit(1742076402.526:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5412 comm="syz.4.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bfb74169 code=0x7ffc0000 [ 222.947669][ T26] audit: type=1326 audit(1742076402.526:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5412 comm="syz.4.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff7bfb72ad0 code=0x7ffc0000 [ 222.970195][ T26] audit: type=1326 audit(1742076402.526:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5412 comm="syz.4.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bfb74169 code=0x7ffc0000 [ 223.035711][ T26] audit: type=1326 audit(1742076402.526:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5412 comm="syz.4.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7ff7bfb74169 code=0x7ffc0000 [ 223.045559][ T5411] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 224.164150][ T5411] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,dioread_nolock,noquota,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 224.493469][ T1277] team0 (unregistering): Port device team_slave_1 removed [ 224.509298][ T1277] team0 (unregistering): Port device team_slave_0 removed [ 224.525754][ T1277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.551845][ T1277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.723748][ T1277] bond0 (unregistering): Released all slaves [ 224.855714][ T5386] netlink: 44 bytes leftover after parsing attributes in process `syz.3.307'. [ 225.315867][ T5275] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 225.327485][ T5275] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 225.341029][ T5275] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 225.386511][ T5275] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 225.723317][ T5275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.798648][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 225.820431][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 225.854834][ T5275] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.890267][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 226.067165][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 226.093016][ T4232] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.100410][ T4232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.276773][ T5275] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 226.354410][ T5275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 227.167105][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 227.183086][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 227.195214][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 227.203865][ T4232] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.211028][ T4232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.259728][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 227.279229][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 227.319810][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 227.368312][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 227.428191][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 227.491373][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 227.548597][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 227.605856][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 227.661543][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 227.715161][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 227.857462][ T5464] netlink: 'syz.3.321': attribute type 16 has an invalid length. [ 227.865905][ T5464] netlink: 'syz.3.321': attribute type 17 has an invalid length. [ 227.877832][ T5464] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 227.894313][ T5464] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 228.203129][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 228.510150][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 228.819507][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 228.827198][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 230.679123][ T26] kauditd_printk_skb: 41 callbacks suppressed [ 232.594612][ T26] audit: type=1326 audit(1742076409.316:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5474 comm="syz.4.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bfb74169 code=0x7ffc0000 [ 233.010137][ T26] audit: type=1326 audit(1742076409.316:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5474 comm="syz.4.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bfb74169 code=0x7ffc0000 [ 233.097278][ T5275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.099900][ T5491] loop3: detected capacity change from 0 to 256 [ 234.104262][ T26] audit: type=1326 audit(1742076409.656:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5474 comm="syz.4.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff7bfb74169 code=0x7ffc0000 [ 234.130028][ T5491] exfat: Deprecated parameter 'utf8' [ 234.135821][ T5491] exfat: Deprecated parameter 'namecase' [ 234.141593][ T5491] exfat: Deprecated parameter 'utf8' [ 234.147407][ T5491] exfat: Bad value for 'uid' [ 236.344396][ T26] audit: type=1326 audit(1742076409.656:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5474 comm="syz.4.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bfb74169 code=0x7ffc0000 [ 236.600920][ T26] audit: type=1326 audit(1742076409.666:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5474 comm="syz.4.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bfb74169 code=0x7ffc0000 [ 236.704267][ T26] audit: type=1326 audit(1742076409.706:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5474 comm="syz.4.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff7bfb74169 code=0x7ffc0000 [ 236.754142][ T26] audit: type=1326 audit(1742076409.716:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5474 comm="syz.4.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff7bfb741a3 code=0x7ffc0000 [ 236.910164][ T26] audit: type=1326 audit(1742076410.436:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5474 comm="syz.4.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff7bfb72c1f code=0x7ffc0000 [ 236.932329][ T26] audit: type=1326 audit(1742076410.676:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5474 comm="syz.4.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff7bfb741f7 code=0x7ffc0000 [ 236.957619][ T5512] netlink: 'syz.4.333': attribute type 16 has an invalid length. [ 236.965428][ T5512] netlink: 'syz.4.333': attribute type 17 has an invalid length. [ 236.980537][ T5512] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 236.988688][ T5512] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 237.010755][ T26] audit: type=1326 audit(1742076410.676:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5474 comm="syz.4.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff7bfb72ad0 code=0x7ffc0000 [ 237.037807][ T5512] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 237.170198][ T26] audit: type=1326 audit(1742076410.676:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5474 comm="syz.4.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff7bfb72dca code=0x7ffc0000 [ 237.298788][ T26] audit: type=1326 audit(1742076410.686:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5474 comm="syz.4.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bfb74169 code=0x7ffc0000 [ 237.413606][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 237.423325][ T26] audit: type=1326 audit(1742076410.686:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5474 comm="syz.4.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bfb74169 code=0x7ffc0000 [ 237.437409][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 237.540232][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 237.555105][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 237.603776][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 237.655396][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 237.763335][ T5275] device veth0_vlan entered promiscuous mode [ 237.842316][ T5275] device veth1_vlan entered promiscuous mode [ 238.091461][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 238.105197][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 238.175675][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 238.220761][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 238.277519][ T5275] device veth0_macvtap entered promiscuous mode [ 240.102288][ T5275] device veth1_macvtap entered promiscuous mode [ 240.130399][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 240.164823][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 240.668812][ T5275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.734873][ T5275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.772709][ T5275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.854274][ T5275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.905498][ T5275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.942975][ T5275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.791229][ T5275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.877685][ T5275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.958219][ T5275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.028487][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 243.053844][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 243.115608][ T5275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.156706][ T5275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.207873][ T5275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.304423][ T5275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.351000][ T5275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.408720][ T5275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.466754][ T5275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.529331][ T5275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.783103][ T5275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.811788][ T5275] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.821059][ T5275] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.830015][ T5275] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.843309][ T5275] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.075232][ T4410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.100562][ T4410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.144372][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 244.171396][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 244.305275][ T4410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.351716][ T4410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.495846][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 244.507818][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 244.631825][ T5577] loop3: detected capacity change from 0 to 256 [ 246.035913][ T5577] FAT-fs (loop3): Directory bread(block 64) failed [ 246.101058][ T5577] FAT-fs (loop3): Directory bread(block 65) failed [ 246.113790][ T5585] loop5: detected capacity change from 0 to 256 [ 246.120672][ T5577] FAT-fs (loop3): Directory bread(block 66) failed [ 246.178077][ T5577] FAT-fs (loop3): Directory bread(block 67) failed [ 246.198129][ T5577] FAT-fs (loop3): Directory bread(block 68) failed [ 246.276430][ T5577] FAT-fs (loop3): Directory bread(block 69) failed [ 246.286039][ T5585] exfat: Deprecated parameter 'namecase' [ 246.292127][ T5585] exfat: Unknown parameter 'keep_last_dots' [ 246.334472][ T5577] FAT-fs (loop3): Directory bread(block 70) failed [ 246.380883][ T5577] FAT-fs (loop3): Directory bread(block 71) failed [ 246.418518][ T5577] FAT-fs (loop3): Directory bread(block 72) failed [ 246.458714][ T5577] FAT-fs (loop3): Directory bread(block 73) failed [ 246.615545][ T5590] syz.4.344[5590] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 246.615654][ T5590] syz.4.344[5590] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 246.645789][ T5590] overlayfs: failed to clone upperpath [ 246.671810][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 246.671827][ T26] audit: type=1326 audit(1742076426.646:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5569 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bfb74169 code=0x7ffc0000 [ 246.858740][ T26] audit: type=1326 audit(1742076426.646:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5569 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bfb74169 code=0x7ffc0000 [ 247.030268][ T26] audit: type=1326 audit(1742076426.646:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5569 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff7bfb74169 code=0x7ffc0000 [ 247.080826][ T26] audit: type=1326 audit(1742076426.646:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5569 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bfb74169 code=0x7ffc0000 [ 247.174136][ T26] audit: type=1326 audit(1742076426.646:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5569 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bfb74169 code=0x7ffc0000 [ 247.264219][ T26] audit: type=1326 audit(1742076426.646:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5569 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7ff7bfb74169 code=0x7ffc0000 [ 247.393699][ T26] audit: type=1326 audit(1742076426.646:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5569 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bfb74169 code=0x7ffc0000 [ 249.812739][ T26] audit: type=1326 audit(1742076426.646:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5569 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bfb74169 code=0x7ffc0000 [ 249.941153][ T26] audit: type=1326 audit(1742076426.646:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5569 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7ff7bfb74169 code=0x7ffc0000 [ 250.032903][ T26] audit: type=1326 audit(1742076426.646:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5569 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7bfb74169 code=0x7ffc0000 [ 250.482405][ T5626] 9pnet: p9_fd_create_tcp (5626): problem connecting socket to 127.0.0.1 [ 251.819846][ T5641] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 251.861011][ T5641] FAT-fs (loop5): unable to read boot sector [ 252.081838][ T5645] usb usb8: usbfs: process 5645 (syz.1.354) did not claim interface 0 before use [ 252.525160][ T21] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 252.995232][ T21] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.243420][ T21] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 253.317949][ T21] usb 3-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 253.384652][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.592038][ T21] usb 3-1: config 0 descriptor?? [ 253.662884][ T21] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 254.248082][ T5673] loop5: detected capacity change from 0 to 256 [ 254.334971][ T5673] exfat: Deprecated parameter 'utf8' [ 254.340845][ T5673] exfat: Deprecated parameter 'namecase' [ 254.364165][ T5673] exfat: Bad value for 'namecase' [ 254.983391][ T5685] netlink: 20 bytes leftover after parsing attributes in process `syz.3.364'. [ 255.798790][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.805174][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.320645][ T4175] usb 3-1: USB disconnect, device number 6 [ 256.792515][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 256.792531][ T26] audit: type=1326 audit(1742076436.806:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5698 comm="syz.1.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cb2b1169 code=0x7ffc0000 [ 256.990074][ T26] audit: type=1326 audit(1742076436.866:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5698 comm="syz.1.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f31cb2b1169 code=0x7ffc0000 [ 257.091969][ T26] audit: type=1326 audit(1742076436.866:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5698 comm="syz.1.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cb2b1169 code=0x7ffc0000 [ 257.114611][ T26] audit: type=1326 audit(1742076436.866:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5698 comm="syz.1.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cb2b1169 code=0x7ffc0000 [ 257.475711][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 257.485074][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 257.504146][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 258.185643][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 258.194619][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 258.204104][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 258.214105][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 258.223055][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 258.232033][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 260.073826][ T5739] loop5: detected capacity change from 0 to 512 [ 260.478575][ T5739] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 260.594290][ T5739] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 260.839125][ T5753] loop3: detected capacity change from 0 to 256 [ 260.885947][ T5739] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,norecovery,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 260.907247][ T5755] loop2: detected capacity change from 0 to 128 [ 260.923140][ T5739] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.992570][ T5753] FAT-fs (loop3): Directory bread(block 64) failed [ 261.010896][ T5753] FAT-fs (loop3): Directory bread(block 65) failed [ 261.047284][ T5753] FAT-fs (loop3): Directory bread(block 66) failed [ 261.053872][ T5753] FAT-fs (loop3): Directory bread(block 67) failed [ 261.154298][ T5753] FAT-fs (loop3): Directory bread(block 68) failed [ 261.201669][ T5753] FAT-fs (loop3): Directory bread(block 69) failed [ 261.905049][ T5753] FAT-fs (loop3): Directory bread(block 70) failed [ 261.911688][ T5753] FAT-fs (loop3): Directory bread(block 71) failed [ 262.010638][ T5753] FAT-fs (loop3): Directory bread(block 72) failed [ 262.393362][ T5753] FAT-fs (loop3): Directory bread(block 73) failed [ 262.838370][ T5772] loop1: detected capacity change from 0 to 512 [ 263.426642][ T21] Bluetooth: hci5: command 0x0409 tx timeout [ 263.591450][ T5783] loop3: detected capacity change from 0 to 1024 [ 263.626996][ T5783] EXT4-fs (loop3): Ignoring removed orlov option [ 263.654267][ T5783] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 263.663627][ T5772] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 263.796718][ T5772] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 263.888655][ T5756] chnl_net:caif_netlink_parms(): no params data found [ 263.907429][ T5783] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,abort,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 265.257688][ T5756] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.282821][ T5756] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.331697][ T5756] device bridge_slave_0 entered promiscuous mode [ 265.428804][ T5756] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.436217][ T4830] Bluetooth: hci5: command 0x041b tx timeout [ 265.443173][ T5756] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.708302][ T5756] device bridge_slave_1 entered promiscuous mode [ 266.788281][ T5756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.940974][ T5756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.026081][ T5840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.393'. [ 267.046176][ T5840] device bridge_slave_1 left promiscuous mode [ 267.048261][ T5843] loop5: detected capacity change from 0 to 512 [ 267.055363][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.788752][ T21] Bluetooth: hci5: command 0x040f tx timeout [ 267.795320][ T5843] EXT4-fs (loop5): Ignoring removed nobh option [ 267.839002][ T5840] device bridge_slave_0 left promiscuous mode [ 267.850098][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.903689][ T5850] loop2: detected capacity change from 0 to 1024 [ 267.917167][ T5843] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #16: comm syz.5.395: corrupted inode contents [ 267.988932][ T5843] EXT4-fs (loop5): Remounting filesystem read-only [ 268.012235][ T5843] EXT4-fs error (device loop5): ext4_dirty_inode:6010: inode #16: comm syz.5.395: mark_inode_dirty error [ 268.042670][ T5843] EXT4-fs (loop5): Remounting filesystem read-only [ 268.059562][ T5843] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #16: comm syz.5.395: corrupted inode contents [ 268.076448][ T5843] EXT4-fs (loop5): Remounting filesystem read-only [ 268.084623][ T5843] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #16: comm syz.5.395: mark_inode_dirty error [ 268.093125][ T5850] EXT4-fs (loop2): Ignoring removed orlov option [ 268.104144][ T5843] EXT4-fs (loop5): Remounting filesystem read-only [ 268.111023][ T5843] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #16: comm syz.5.395: corrupted inode contents [ 268.127303][ T5850] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 268.136398][ T5843] EXT4-fs (loop5): Remounting filesystem read-only [ 268.143255][ T5843] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 268.157835][ T5843] EXT4-fs (loop5): Remounting filesystem read-only [ 268.167189][ T4506] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.167677][ T5843] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #16: comm syz.5.395: corrupted inode contents [ 268.185360][ T5850] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,abort,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 268.191090][ T5843] EXT4-fs (loop5): Remounting filesystem read-only [ 268.218727][ T5843] EXT4-fs error (device loop5): ext4_truncate:4272: inode #16: comm syz.5.395: mark_inode_dirty error [ 268.249652][ T5756] team0: Port device team_slave_0 added [ 268.302278][ T5843] EXT4-fs (loop5): Remounting filesystem read-only [ 268.313282][ T5843] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 268.332447][ T5843] EXT4-fs (loop5): Remounting filesystem read-only [ 268.339951][ T5843] EXT4-fs (loop5): 1 truncate cleaned up [ 268.353901][ T5843] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,nobh,. Quota mode: writeback. [ 268.399713][ T5843] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.423810][ T5756] team0: Port device team_slave_1 added [ 268.482271][ T4506] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.770701][ T4506] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.784649][ T5865] loop5: detected capacity change from 0 to 1024 [ 268.815175][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.822172][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.976087][ T5756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.990440][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.997764][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.024509][ T5756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.027810][ T5865] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,lazytime,noblock_validity,,errors=continue. Quota mode: none. [ 269.692482][ T4506] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.803735][ T26] audit: type=1800 audit(1742076449.796:303): pid=5865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.399" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 269.844355][ T4830] Bluetooth: hci5: command 0x0419 tx timeout [ 269.873739][ T5756] device hsr_slave_0 entered promiscuous mode [ 269.943295][ T5756] device hsr_slave_1 entered promiscuous mode [ 269.989603][ T5756] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.008004][ T5756] Cannot create hsr debugfs directory [ 270.845263][ T5756] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 270.911678][ T5756] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 270.947810][ T5756] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 270.992115][ T5756] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 271.477425][ T5756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.592185][ T5896] loop3: detected capacity change from 0 to 40427 [ 271.608549][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 271.624966][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 271.747721][ T5896] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 271.798212][ T5896] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 271.878923][ T5896] F2FS-fs (loop3): invalid crc value [ 271.961896][ T5896] F2FS-fs (loop3): Found nat_bits in checkpoint [ 271.969323][ T5756] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.999349][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 272.019944][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 272.049784][ T4448] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.057038][ T4448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.100304][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 272.127885][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 272.159217][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 272.179115][ T4448] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.186289][ T4448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.211365][ T5896] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 272.224594][ T5896] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 272.294573][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 272.318694][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 272.371014][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 272.414305][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 272.463590][ T5756] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 272.592071][ T5756] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 272.787537][ T5932] loop1: detected capacity change from 0 to 256 [ 273.340708][ T5938] loop2: detected capacity change from 0 to 512 [ 274.073422][ T5940] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 274.244323][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 274.252449][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 274.279512][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 274.287754][ T5938] EXT4-fs (loop2): Ignoring removed orlov option [ 274.295126][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 274.304623][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 274.313385][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 274.340362][ T4448] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 274.351228][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 274.351424][ T5944] loop5: detected capacity change from 0 to 2048 [ 274.366000][ T5938] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.410: casefold flag without casefold feature [ 274.380777][ T4448] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 274.436861][ T5938] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.410: couldn't read orphan inode 15 (err -117) [ 274.484506][ T5944] EXT4-fs (loop5): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue. Quota mode: none. [ 274.524569][ T5938] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,orlov,,errors=continue. Quota mode: writeback. [ 274.561848][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 276.120184][ T5955] overlayfs: failed to resolve './file0': -2 [ 276.164907][ T4506] device hsr_slave_0 left promiscuous mode [ 276.198282][ T4506] device hsr_slave_1 left promiscuous mode [ 276.303034][ T4506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.325584][ T4506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.388274][ T4506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.403566][ T5962] loop5: detected capacity change from 0 to 1024 [ 276.420572][ T4506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.481475][ T5962] EXT4-fs (loop5): Ignoring removed orlov option [ 276.490299][ T4506] device veth1_macvtap left promiscuous mode [ 276.504546][ T4506] device veth0_macvtap left promiscuous mode [ 276.529054][ T5962] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 276.534000][ T4506] device veth1_vlan left promiscuous mode [ 276.559825][ T4506] device veth0_vlan left promiscuous mode [ 276.737650][ T5962] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,bsddf,abort,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 277.308153][ T4506] team0 (unregistering): Port device team_slave_1 removed [ 277.372143][ T4506] team0 (unregistering): Port device team_slave_0 removed [ 277.423756][ T4506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.516844][ T4506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.795898][ T4506] bond0 (unregistering): Released all slaves [ 278.099934][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 278.114381][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 278.164740][ T5756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.869303][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 278.890443][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 278.978958][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 279.005796][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 279.047395][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 279.072756][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 279.116924][ T5756] device veth0_vlan entered promiscuous mode [ 279.177424][ T5756] device veth1_vlan entered promiscuous mode [ 279.325980][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 279.360907][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 279.398526][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 279.429742][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 279.467648][ T5756] device veth0_macvtap entered promiscuous mode [ 279.500809][ T5756] device veth1_macvtap entered promiscuous mode [ 279.567881][ T5756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.600942][ T5756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.640708][ T5756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.668412][ T5756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.702973][ T5756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.769390][ T5756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.779941][ T5756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.800237][ T5756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.838237][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.875428][ T5756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.954209][ T5756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.999832][ T5756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.033448][ T5756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.100509][ T5756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.180423][ T5756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.250798][ T5756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.274131][ T5756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.293000][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.326337][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 280.337951][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 280.363300][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 280.401184][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 280.435530][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 280.472883][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 280.516877][ T5756] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.537535][ T5756] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.575082][ T5756] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.607140][ T5756] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.970829][ T4994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.993322][ T4994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.119175][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 281.149235][ T4655] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.178390][ T4655] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.211806][ T6055] loop5: detected capacity change from 0 to 256 [ 281.217024][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 281.557723][ T6066] overlayfs: missing 'lowerdir' [ 281.596825][ T6052] loop5: detected capacity change from 0 to 512 [ 282.679593][ T6089] loop2: detected capacity change from 0 to 1024 [ 282.781393][ T6089] EXT4-fs (loop2): Ignoring removed orlov option [ 282.810663][ T6089] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 283.045117][ T6089] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,abort,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 284.769151][ T6124] loop5: detected capacity change from 0 to 256 [ 284.925493][ T6124] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 285.435780][ T6129] exFAT-fs (loop5): hint_cluster is invalid (17) [ 286.977906][ T6143] loop5: detected capacity change from 0 to 2048 [ 287.196473][ T6146] loop5: p1 < > p4 [ 287.286274][ T6148] loop6: detected capacity change from 0 to 512 [ 287.293128][ T6146] loop5: p4 size 8388608 extends beyond EOD, truncated [ 288.500870][ T6143] loop5: p1 < > p4 [ 288.516256][ T6148] EXT4-fs (loop6): mounted filesystem without journal. Opts: user_xattr,data_err=ignore,noinit_itable,,errors=continue. Quota mode: none. [ 288.555587][ T6143] loop5: p4 size 8388608 extends beyond EOD, truncated [ 288.640082][ T3546] loop5: p1 < > p4 [ 288.645703][ T3546] loop5: p4 size 8388608 extends beyond EOD, truncated [ 288.667699][ T6148] EXT4-fs error (device loop6): ext4_map_blocks:628: inode #2: block 3: comm syz.6.441: lblock 0 mapped to illegal pblock 3 (length 1) [ 288.734120][ T6148] EXT4-fs warning (device loop6): dx_probe:823: inode #2: lblock 0: comm syz.6.441: error -117 reading directory block [ 288.946334][ T3546] loop5: p1 < > p4 [ 288.990541][ T3546] loop5: p4 size 8388608 extends beyond EOD, truncated [ 289.408415][ T5485] udevd[5485]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 289.420826][ T5824] udevd[5824]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 289.700961][ T6184] udevd[6184]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 289.742456][ T5824] udevd[5824]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 289.837214][ T5824] udevd[5824]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 289.866819][ T6184] udevd[6184]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 290.326189][ T6201] loop6: detected capacity change from 0 to 2048 [ 290.374180][ T23] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 290.546011][ T6201] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 292.030814][ T6215] loop2: detected capacity change from 0 to 1024 [ 292.194733][ T23] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.226575][ T23] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 292.267293][ T6215] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 292.415465][ T23] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 292.436708][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 292.487302][ T23] usb 6-1: SerialNumber: syz [ 292.817532][ T23] usb 6-1: 0:2 : does not exist [ 292.876237][ T23] usb 6-1: USB disconnect, device number 2 [ 293.167848][ T6184] udevd[6184]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 293.537295][ T6250] loop6: detected capacity change from 0 to 128 [ 293.795293][ T6250] tipc: Started in network mode [ 293.800374][ T6250] tipc: Node identity ac1414aa, cluster identity 4711 [ 293.812048][ T6250] tipc: Enabled bearer , priority 10 [ 294.925311][ T4175] tipc: Node number set to 2886997162 [ 295.483108][ T6254] loop1: detected capacity change from 0 to 40427 [ 295.877306][ T6254] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 295.885469][ T6254] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 295.899194][ T6254] F2FS-fs (loop1): invalid crc value [ 295.947557][ T6254] F2FS-fs (loop1): Found nat_bits in checkpoint [ 296.124095][ T6254] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 296.131198][ T6254] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 296.258913][ T6277] loop5: detected capacity change from 0 to 1024 [ 296.826873][ T6277] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 298.384464][ T13] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 298.677739][ T13] usb 7-1: Using ep0 maxpacket: 32 [ 298.794630][ T13] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.823763][ T13] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.563732][ T13] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 299.573584][ T13] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.606812][ T13] usb 7-1: config 0 descriptor?? [ 299.645438][ T13] hub 7-1:0.0: USB hub found [ 300.954272][ T13] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 301.954313][ T13] usbhid 7-1:0.0: can't add hid device: -71 [ 301.960466][ T13] usbhid: probe of 7-1:0.0 failed with error -71 [ 301.984024][ T6346] loop2: detected capacity change from 0 to 256 [ 302.035332][ T13] usb 7-1: USB disconnect, device number 2 [ 302.091032][ T6346] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 302.202298][ T6351] loop1: detected capacity change from 0 to 512 [ 302.731800][ T6351] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 302.749033][ T6351] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 305.402157][ T4207] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 306.114238][ T4207] usb 6-1: Using ep0 maxpacket: 8 [ 306.241631][ T6380] loop1: detected capacity change from 0 to 256 [ 306.349178][ T6380] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 306.404423][ T4207] usb 6-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 306.549517][ T6380] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 306.561529][ T4207] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 308.085054][ T4207] usb 6-1: Product: syz [ 308.089292][ T4207] usb 6-1: Manufacturer: syz [ 308.099049][ T4207] usb 6-1: SerialNumber: syz [ 308.140883][ T6398] loop2: detected capacity change from 0 to 256 [ 308.824018][ T4207] usb 6-1: config 0 descriptor?? [ 308.893521][ T4207] usb 6-1: can't set config #0, error -71 [ 308.900618][ T4207] usb 6-1: USB disconnect, device number 3 [ 314.891906][ T6470] netdevsim netdevsim1: Direct firmware load for . [ 314.891906][ T6470] failed with error -2 [ 314.904095][ T6470] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 314.904095][ T6470] [ 314.996313][ T6473] libceph: resolve '0.0' (ret=-3): failed [ 316.905274][ T6508] netlink: 'syz.3.516': attribute type 16 has an invalid length. [ 317.004399][ T6508] netlink: 'syz.3.516': attribute type 17 has an invalid length. [ 317.019187][ T6508] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 317.027947][ T6508] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 317.047245][ T6508] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 317.198173][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.206278][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.120444][ T21] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 318.605397][ T21] usb 2-1: config 1 interface 0 altsetting 144 endpoint 0x1 is Bulk; changing to Interrupt [ 318.675488][ T21] usb 2-1: config 1 interface 0 altsetting 144 endpoint 0x82 is Bulk; changing to Interrupt [ 318.936414][ T21] usb 2-1: config 1 interface 0 has no altsetting 0 [ 319.274846][ T21] usb 2-1: string descriptor 0 read error: -22 [ 319.287589][ T21] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 319.423405][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.302399][ T6534] loop2: detected capacity change from 0 to 1024 [ 320.372041][ T6534] EXT4-fs (loop2): Ignoring removed orlov option [ 320.421150][ T6534] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 320.563283][ T6534] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 321.324223][ T26] audit: type=1326 audit(1742076501.056:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6533 comm="syz.2.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7693f1169 code=0x7ffc0000 [ 321.604155][ T26] audit: type=1326 audit(1742076501.056:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6533 comm="syz.2.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7693f1169 code=0x7ffc0000 [ 321.902015][ T26] audit: type=1326 audit(1742076501.056:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6533 comm="syz.2.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fb7693f1169 code=0x7ffc0000 [ 322.659946][ T26] audit: type=1326 audit(1742076501.056:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6533 comm="syz.2.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7693f1169 code=0x7ffc0000 [ 322.731324][ T26] audit: type=1326 audit(1742076501.066:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6533 comm="syz.2.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7693f1169 code=0x7ffc0000 [ 322.827823][ T26] audit: type=1326 audit(1742076501.066:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6533 comm="syz.2.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fb7693f1169 code=0x7ffc0000 [ 323.013113][ T26] audit: type=1326 audit(1742076501.066:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6533 comm="syz.2.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7693f1169 code=0x7ffc0000 [ 323.754475][ T21] usb 2-1: can't set config #1, error -71 [ 323.771503][ T21] usb 2-1: USB disconnect, device number 6 [ 323.838543][ T26] audit: type=1326 audit(1742076501.066:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6533 comm="syz.2.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7693f1169 code=0x7ffc0000 [ 323.894110][ T26] audit: type=1326 audit(1742076501.066:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6533 comm="syz.2.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7fb7693f1169 code=0x7ffc0000 [ 324.026247][ T26] audit: type=1326 audit(1742076501.086:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6533 comm="syz.2.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7693f1169 code=0x7ffc0000 [ 324.151673][ T6576] 9pnet_virtio: no channels available for device 127.0.0.1 [ 324.494124][ T6576] netlink: 12 bytes leftover after parsing attributes in process `syz.6.529'. [ 324.707069][ T6579] netlink: 132 bytes leftover after parsing attributes in process `syz.3.530'. [ 327.195710][ T6599] loop1: detected capacity change from 0 to 1024 [ 327.334335][ T6599] EXT4-fs (loop1): Ignoring removed orlov option [ 327.340743][ T6599] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 327.386080][ T6608] mkiss: ax0: crc mode is auto. [ 327.476814][ T6599] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 328.379086][ T6632] tmpfs: Bad value for 'mpol' [ 328.710598][ T6638] loop5: detected capacity change from 0 to 1024 [ 328.866181][ T6638] EXT4-fs (loop5): Ignoring removed orlov option [ 329.093623][ T6638] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 329.202092][ T6647] netlink: 'syz.3.541': attribute type 16 has an invalid length. [ 329.209954][ T6647] netlink: 'syz.3.541': attribute type 17 has an invalid length. [ 329.220912][ T6647] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 329.228976][ T6647] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 329.252471][ T6647] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 329.498664][ T6638] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,bsddf,abort,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 332.449382][ T4177] Bluetooth: min 6 > max 0 [ 333.697468][ T4257] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 334.547468][ T4207] Bluetooth: hci4: command 0x2021 tx timeout [ 334.594196][ T4257] usb 6-1: Using ep0 maxpacket: 8 [ 334.698688][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 334.698728][ T26] audit: type=1326 audit(1742076514.686:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6685 comm="syz.3.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753dd32169 code=0x7ffc0000 [ 335.452161][ T4207] Bluetooth: hci0: command 0x0406 tx timeout [ 335.544294][ T4257] usb 6-1: unable to read config index 0 descriptor/all [ 335.560720][ T4257] usb 6-1: can't read configurations, error -71 [ 335.591295][ T6698] trusted_key: encrypted_key: key user:syz not found [ 337.100933][ T6704] netlink: 20 bytes leftover after parsing attributes in process `syz.6.557'. [ 337.181624][ T6707] netlink: 24 bytes leftover after parsing attributes in process `syz.6.557'. [ 338.917837][ T26] audit: type=1326 audit(1742076514.686:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6685 comm="syz.3.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753dd32169 code=0x7ffc0000 [ 338.974579][ T4175] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 340.111178][ T26] audit: type=1326 audit(1742076514.696:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6685 comm="syz.3.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f753dd32169 code=0x7ffc0000 [ 340.149032][ T6723] tmpfs: Unknown parameter 'usrquota' [ 340.328681][ T26] audit: type=1326 audit(1742076514.696:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6685 comm="syz.3.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753dd32169 code=0x7ffc0000 [ 340.512897][ T26] audit: type=1326 audit(1742076514.696:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6685 comm="syz.3.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753dd32169 code=0x7ffc0000 [ 342.081323][ T26] audit: type=1326 audit(1742076514.696:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6685 comm="syz.3.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f753dd32169 code=0x7ffc0000 [ 342.123284][ T26] audit: type=1326 audit(1742076514.696:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6685 comm="syz.3.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753dd32169 code=0x7ffc0000 [ 342.294962][ T26] audit: type=1326 audit(1742076514.696:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6685 comm="syz.3.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753dd32169 code=0x7ffc0000 [ 342.373900][ T26] audit: type=1326 audit(1742076514.706:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6685 comm="syz.3.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f753dd32169 code=0x7ffc0000 [ 342.501091][ T26] audit: type=1326 audit(1742076514.706:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6685 comm="syz.3.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753dd32169 code=0x7ffc0000 [ 342.663591][ T26] audit: type=1326 audit(1742076514.706:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6685 comm="syz.3.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753dd32169 code=0x7ffc0000 [ 342.729652][ T26] audit: type=1326 audit(1742076514.706:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6685 comm="syz.3.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f753dd32169 code=0x7ffc0000 [ 343.056345][ T6768] netlink: 20 bytes leftover after parsing attributes in process `syz.3.572'. [ 343.076479][ T6768] netlink: 24 bytes leftover after parsing attributes in process `syz.3.572'. [ 343.732715][ T4175] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 343.806891][ T4175] Bluetooth: hci0: Injecting HCI hardware error event [ 343.816533][ T4177] Bluetooth: hci0: hardware error 0x00 [ 343.897682][ T6771] fuse: Bad value for 'fd' [ 346.529265][ T6786] syz.5.577 uses obsolete (PF_INET,SOCK_PACKET) [ 347.910179][ T6822] netlink: 20 bytes leftover after parsing attributes in process `syz.3.583'. [ 347.929694][ T6822] netlink: 24 bytes leftover after parsing attributes in process `syz.3.583'. [ 349.588594][ T6844] xt_hashlimit: size too large, truncated to 1048576 [ 350.017873][ T6858] netlink: 'syz.1.586': attribute type 16 has an invalid length. [ 350.025770][ T6858] netlink: 'syz.1.586': attribute type 17 has an invalid length. [ 350.037799][ T6858] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 350.056152][ T6858] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 351.096466][ T6879] netlink: 20 bytes leftover after parsing attributes in process `syz.2.599'. [ 351.143799][ T6879] netlink: 24 bytes leftover after parsing attributes in process `syz.2.599'. [ 356.204741][ T6966] netlink: 24 bytes leftover after parsing attributes in process `syz.6.612'. [ 356.324427][ T4257] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 356.545681][ T4175] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 357.674559][ T4175] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 357.703088][ T4175] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.749576][ T4175] usb 2-1: config 0 descriptor?? [ 357.850633][ T4175] usb 2-1: selecting invalid altsetting 3 [ 357.890007][ T4175] comedi comedi0: could not set alternate setting 3 in high speed [ 357.926798][ T4175] usbduxsigma 2-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 357.970111][ T4175] usbduxsigma: probe of 2-1:0.0 failed with error -22 [ 358.042346][ T4175] usb 2-1: USB disconnect, device number 7 [ 359.174582][ T7001] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 359.648469][ T7002] netlink: 'syz.3.618': attribute type 16 has an invalid length. [ 359.675847][ T7002] netlink: 'syz.3.618': attribute type 17 has an invalid length. [ 359.807215][ T7002] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 359.858135][ T7002] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 359.907545][ T7002] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 362.025505][ T7022] netlink: 'syz.6.624': attribute type 8 has an invalid length. [ 362.121761][ T7026] netlink: 24 bytes leftover after parsing attributes in process `syz.2.625'. [ 365.703902][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 365.703918][ T26] audit: type=1326 audit(1742076545.716:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7082 comm="syz.6.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c45d4169 code=0x7ffc0000 [ 366.041397][ T26] audit: type=1326 audit(1742076545.736:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7082 comm="syz.6.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c45d4169 code=0x7ffc0000 [ 366.100862][ T26] audit: type=1326 audit(1742076545.916:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7082 comm="syz.6.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f57c45d4169 code=0x7ffc0000 [ 366.125266][ T26] audit: type=1326 audit(1742076545.916:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7082 comm="syz.6.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c45d4169 code=0x7ffc0000 [ 366.147459][ C1] vkms_vblank_simulate: vblank timer overrun [ 366.196070][ T26] audit: type=1326 audit(1742076545.916:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7082 comm="syz.6.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c45d4169 code=0x7ffc0000 [ 366.249363][ T26] audit: type=1326 audit(1742076545.916:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7082 comm="syz.6.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f57c45d4169 code=0x7ffc0000 [ 366.301599][ T26] audit: type=1326 audit(1742076545.916:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7082 comm="syz.6.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c45d4169 code=0x7ffc0000 [ 366.385009][ T26] audit: type=1326 audit(1742076545.916:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7082 comm="syz.6.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c45d4169 code=0x7ffc0000 [ 366.418658][ T26] audit: type=1326 audit(1742076545.916:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7082 comm="syz.6.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f57c45d4169 code=0x7ffc0000 [ 366.501294][ T7093] netlink: 'syz.3.646': attribute type 16 has an invalid length. [ 366.542329][ T26] audit: type=1326 audit(1742076545.916:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7082 comm="syz.6.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c45d4169 code=0x7ffc0000 [ 366.557937][ T7093] netlink: 'syz.3.646': attribute type 17 has an invalid length. [ 366.564573][ C1] vkms_vblank_simulate: vblank timer overrun [ 366.650250][ T7097] capability: warning: `syz.2.648' uses deprecated v2 capabilities in a way that may be insecure [ 366.735871][ T7093] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 366.770833][ T7093] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 366.795621][ T7101] loop6: detected capacity change from 0 to 1024 [ 366.824423][ T7093] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 366.851526][ T7101] EXT4-fs (loop6): Ignoring removed orlov option [ 366.864234][ T7101] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 367.029519][ T7101] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 367.096195][ T7077] chnl_net:caif_netlink_parms(): no params data found [ 368.076994][ T6708] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.269682][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 368.348500][ T6708] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.491275][ T7077] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.528575][ T7077] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.545457][ T7077] device bridge_slave_0 entered promiscuous mode [ 368.575681][ T7077] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.615423][ T7077] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.633012][ T7077] device bridge_slave_1 entered promiscuous mode [ 368.675192][ T6708] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.808428][ T7077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.817834][ T4177] Bluetooth: hci5: Dropping invalid advertising data [ 368.825298][ T4177] Bluetooth: hci5: Malicious advertising data. [ 368.837055][ T7077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.939477][ T6708] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.978480][ T7133] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 369.114974][ T7077] team0: Port device team_slave_0 added [ 369.156998][ T7077] team0: Port device team_slave_1 added [ 370.299015][ T7141] loop2: detected capacity change from 0 to 1024 [ 370.324295][ T4207] Bluetooth: hci1: command 0x041b tx timeout [ 370.565373][ T7141] EXT4-fs (loop2): Ignoring removed orlov option [ 370.594348][ T7141] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 370.616423][ T7077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.623533][ T7077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.712541][ T7077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.742384][ T7141] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 370.794897][ T7077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.812213][ T7077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.843147][ T7077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.238290][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 371.238448][ T26] audit: type=1326 audit(1742076551.246:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.2.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7693f1169 code=0x7ffc0000 [ 371.246669][ T26] audit: type=1326 audit(1742076551.246:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.2.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7693f1169 code=0x7ffc0000 [ 371.246960][ T26] audit: type=1326 audit(1742076551.246:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.2.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fb7693f1169 code=0x7ffc0000 [ 371.247260][ T26] audit: type=1326 audit(1742076551.246:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.2.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7693f1169 code=0x7ffc0000 [ 371.247620][ T26] audit: type=1326 audit(1742076551.246:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.2.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7693f1169 code=0x7ffc0000 [ 371.248034][ T26] audit: type=1326 audit(1742076551.246:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.2.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fb7693f1169 code=0x7ffc0000 [ 371.248415][ T26] audit: type=1326 audit(1742076551.246:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.2.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7693f1169 code=0x7ffc0000 [ 371.249011][ T26] audit: type=1326 audit(1742076551.246:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.2.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7693f1169 code=0x7ffc0000 [ 371.250720][ T26] audit: type=1326 audit(1742076551.246:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.2.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7fb7693f1169 code=0x7ffc0000 [ 371.251245][ T26] audit: type=1326 audit(1742076551.256:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.2.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7693f1169 code=0x7ffc0000 [ 371.947021][ C1] vkms_vblank_simulate: vblank timer overrun [ 372.745389][ C1] vkms_vblank_simulate: vblank timer overrun [ 373.017237][ T4447] Bluetooth: hci1: command 0x040f tx timeout [ 373.122549][ T7177] xt_ipcomp: unknown flags 12 [ 373.801036][ T7172] netlink: 'syz.1.672': attribute type 16 has an invalid length. [ 373.809390][ T7172] netlink: 'syz.1.672': attribute type 17 has an invalid length. [ 373.826592][ T7172] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 373.905537][ T7172] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 374.019813][ T7077] device hsr_slave_0 entered promiscuous mode [ 374.045599][ T7077] device hsr_slave_1 entered promiscuous mode [ 374.075590][ T7077] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.581652][ T7077] Cannot create hsr debugfs directory [ 374.845570][ T7210] loop6: detected capacity change from 0 to 512 [ 375.218876][ T4208] Bluetooth: hci1: command 0x0419 tx timeout [ 375.367619][ T7210] EXT4-fs (loop6): orphan cleanup on readonly fs [ 375.380906][ T7210] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.680: bg 0: block 248: padding at end of block bitmap is not set [ 375.389641][ T7210] EXT4-fs error (device loop6): ext4_acquire_dquot:6197: comm syz.6.680: Failed to acquire dquot type 1 [ 375.395521][ T7210] EXT4-fs (loop6): 1 truncate cleaned up [ 375.401457][ T7210] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 375.876279][ T7223] netlink: 'syz.3.683': attribute type 39 has an invalid length. [ 375.924226][ T4208] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 376.141534][ T7077] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 376.164349][ T4208] usb 3-1: Using ep0 maxpacket: 8 [ 376.167974][ T7077] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 376.190873][ T7077] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 376.284215][ T4208] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 376.284276][ T4208] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 376.284303][ T4208] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 376.284331][ T4208] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 376.284366][ T4208] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 376.284421][ T4208] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 376.284448][ T4208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.544337][ T4208] usb 3-1: GET_CAPABILITIES returned 0 [ 376.544380][ T4208] usbtmc 3-1:16.0: can't read capabilities [ 376.944159][ T7077] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 376.956769][ T4208] usb 3-1: USB disconnect, device number 9 [ 376.968078][ T7217] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 378.914672][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.921015][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.963981][ T7077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.133852][ T7077] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.175470][ T7260] overlayfs: failed to clone upperpath [ 379.189630][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 379.235021][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 379.335265][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 379.355125][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 379.406063][ T4410] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.413209][ T4410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.545648][ T7275] loop6: detected capacity change from 0 to 512 [ 379.593589][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 379.716027][ T7275] EXT4-fs (loop6): orphan cleanup on readonly fs [ 379.734188][ T7275] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.694: bg 0: block 248: padding at end of block bitmap is not set [ 379.762803][ T7275] __quota_error: 10 callbacks suppressed [ 379.762857][ T7275] Quota error (device loop6): write_blk: dquota write failed [ 379.776639][ T7275] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 379.786854][ T7275] EXT4-fs error (device loop6): ext4_acquire_dquot:6197: comm syz.6.694: Failed to acquire dquot type 1 [ 379.819342][ T7275] EXT4-fs (loop6): 1 truncate cleaned up [ 379.829874][ T7275] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 379.984387][ T6708] device hsr_slave_0 left promiscuous mode [ 380.135892][ T6708] device hsr_slave_1 left promiscuous mode [ 380.182778][ T6708] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.245767][ T6708] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.276408][ T6708] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.283884][ T6708] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.376290][ T6708] device bridge_slave_1 left promiscuous mode [ 380.408843][ T6708] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.471331][ T6708] device bridge_slave_0 left promiscuous mode [ 380.504534][ T6708] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.602496][ T6708] device veth1_macvtap left promiscuous mode [ 380.645095][ T6708] device veth0_macvtap left promiscuous mode [ 380.671791][ T6708] device veth1_vlan left promiscuous mode [ 380.698696][ T6708] device veth0_vlan left promiscuous mode [ 381.572475][ T6708] team0 (unregistering): Port device team_slave_1 removed [ 381.589684][ T6708] team0 (unregistering): Port device team_slave_0 removed [ 381.603586][ T6708] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.253652][ T6708] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.441574][ T6708] bond0 (unregistering): Released all slaves [ 382.544446][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 382.581242][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 382.602223][ T4256] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.609965][ T4256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.619714][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 383.474313][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 383.511500][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 383.536965][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 383.558321][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 384.242447][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 384.262772][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 384.614369][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 384.630931][ T7077] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 384.763079][ T7077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 384.947168][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 385.433987][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 386.041693][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 386.219190][ T7334] loop2: detected capacity change from 0 to 512 [ 388.116393][ T7334] EXT4-fs (loop2): orphan cleanup on readonly fs [ 388.134197][ T7334] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.710: bg 0: block 248: padding at end of block bitmap is not set [ 389.771947][ T7334] Quota error (device loop2): write_blk: dquota write failed [ 389.780024][ T7334] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 389.790281][ T7334] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.710: Failed to acquire dquot type 1 [ 389.818632][ T7334] EXT4-fs (loop2): 1 truncate cleaned up [ 389.999857][ T7334] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 390.952792][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 391.011048][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 391.036786][ T7077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.960862][ T7402] loop2: detected capacity change from 0 to 512 [ 393.094963][ T7404] netlink: 'syz.3.725': attribute type 16 has an invalid length. [ 393.102817][ T7404] netlink: 'syz.3.725': attribute type 17 has an invalid length. [ 393.137008][ T7404] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 395.123113][ T7404] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 396.389470][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 396.471331][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 396.630510][ T7077] device veth0_vlan entered promiscuous mode [ 397.577637][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 397.587861][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 397.759512][ T7077] device veth1_vlan entered promiscuous mode [ 397.806687][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 397.835611][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 398.035577][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 398.077550][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 398.129315][ T7077] device veth0_macvtap entered promiscuous mode [ 398.157066][ T7077] device veth1_macvtap entered promiscuous mode [ 398.357002][ T7077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.444091][ T7077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.594361][ T7077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.694403][ T7077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.779682][ T7077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.846047][ T7077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.905552][ T7077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.944109][ T21] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 398.974514][ T7077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.031395][ T7077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.060471][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 399.084965][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 399.161291][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 399.204239][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 399.222470][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 399.277014][ T7077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.338126][ T7077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.382767][ T7077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.436983][ T7077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.492572][ T7077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.544246][ T21] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 399.546105][ T7077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.582290][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.650112][ T21] usb 3-1: Product: syz [ 399.650144][ T7077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.695060][ T21] usb 3-1: Manufacturer: syz [ 399.699697][ T21] usb 3-1: SerialNumber: syz [ 399.704195][ T7077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.785985][ T7077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.795645][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 399.804333][ T21] r8152-cfgselector 3-1: config 0 descriptor?? [ 399.814288][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 399.885748][ T7077] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.932662][ T7077] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.997947][ T7077] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.054310][ T7077] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.476848][ T1277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.478648][ T4256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.494913][ T21] r8152-cfgselector 3-1: Unknown version 0x0000 [ 400.501560][ T21] r8152-cfgselector 3-1: bad CDC descriptors [ 400.519581][ T1277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.588489][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 401.294329][ T4256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.294329][ T21] r8152-cfgselector 3-1: Unknown version 0x0000 [ 401.545583][ T21] r8152-cfgselector 3-1: USB disconnect, device number 10 [ 402.359128][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 402.397426][ T7453] netlink: 'syz.1.736': attribute type 16 has an invalid length. [ 402.405675][ T7453] netlink: 'syz.1.736': attribute type 17 has an invalid length. [ 402.417177][ T7453] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 402.426859][ T7453] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 402.547253][ T7476] loop2: detected capacity change from 0 to 512 [ 407.019586][ T7476] EXT4-fs: failed to create workqueue [ 407.026689][ T7476] EXT4-fs (loop2): mount failed [ 410.344324][ T4257] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 410.529332][ T7530] loop2: detected capacity change from 0 to 1024 [ 410.640183][ T7530] EXT4-fs (loop2): Ignoring removed orlov option [ 410.721766][ T7530] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 411.434611][ T4257] usb 7-1: unable to read config index 0 descriptor/all [ 411.441641][ T4257] usb 7-1: can't read configurations, error -71 [ 411.516223][ T7530] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,abort,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 411.741614][ T7550] netlink: 20 bytes leftover after parsing attributes in process `syz.3.753'. [ 411.757858][ T7550] netlink: 24 bytes leftover after parsing attributes in process `syz.3.753'. [ 414.509631][ T7559] loop1: detected capacity change from 0 to 1024 [ 415.173634][ T7559] EXT4-fs (loop1): Ignoring removed orlov option [ 415.781882][ T7559] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 415.891147][ T7559] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 418.422616][ C1] ODEBUG: Out of memory. ODEBUG disabled [ 420.875334][ T7598] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.766'. [ 421.280147][ T7610] loop7: detected capacity change from 0 to 1024 [ 421.472893][ T7610] EXT4-fs (loop7): Ignoring removed orlov option [ 421.484303][ T7610] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 422.300436][ T7610] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,bsddf,abort,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 426.065688][ T7660] device veth0_to_bond entered promiscuous mode [ 426.101200][ T7660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.780'. [ 427.652205][ T7660] bond0: (slave bond_slave_0): Releasing backup interface [ 428.269850][ T7697] netlink: 44 bytes leftover after parsing attributes in process `syz.3.789'. [ 428.332324][ T7699] netlink: 16 bytes leftover after parsing attributes in process `syz.7.788'. [ 430.314094][ T4207] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 430.412327][ T7738] netlink: 44 bytes leftover after parsing attributes in process `syz.1.801'. [ 430.575622][ T4207] usb 7-1: Using ep0 maxpacket: 8 [ 430.734154][ T7449] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 430.905884][ T4207] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.952671][ T4207] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 431.074880][ T4207] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 431.189569][ T4207] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 431.280551][ T4207] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 431.530729][ T4207] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.784512][ T7449] usb 3-1: Using ep0 maxpacket: 32 [ 431.809794][ T7769] netlink: 20 bytes leftover after parsing attributes in process `syz.7.809'. [ 431.855158][ T1325] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 431.914391][ T7449] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 432.055472][ T4207] hub 7-1:1.0: bad descriptor, ignoring hub [ 432.141185][ T4207] hub: probe of 7-1:1.0 failed with error -5 [ 432.169066][ T4207] cdc_wdm 7-1:1.0: skipping garbage [ 432.183125][ T4207] cdc_wdm 7-1:1.0: skipping garbage [ 432.220834][ T4207] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 432.229247][ T4207] cdc_wdm 7-1:1.0: Unknown control protocol [ 432.512598][ T7779] netlink: 'syz.7.811': attribute type 21 has an invalid length. [ 432.526925][ T7779] netlink: 'syz.7.811': attribute type 20 has an invalid length. [ 432.548338][ T7779] IPv6: NLM_F_CREATE should be specified when creating new route [ 432.575000][ T1325] usb 2-1: Using ep0 maxpacket: 32 [ 432.614375][ T7449] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 432.636912][ T7449] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 432.647328][ T7449] usb 3-1: Product: syz [ 432.651531][ T7449] usb 3-1: Manufacturer: syz [ 432.657174][ T7449] usb 3-1: SerialNumber: syz [ 432.690113][ T7449] usb 3-1: config 0 descriptor?? [ 432.704176][ T1325] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.734438][ T7747] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 432.754913][ T7449] hub 3-1:0.0: bad descriptor, ignoring hub [ 432.760866][ T7449] hub: probe of 3-1:0.0 failed with error -5 [ 432.825993][ T7790] netlink: 44 bytes leftover after parsing attributes in process `syz.7.816'. [ 432.884255][ T1325] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 432.909697][ T1325] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 432.924367][ T1325] usb 2-1: Product: syz [ 432.934462][ T1325] usb 2-1: Manufacturer: syz [ 432.949430][ T1325] usb 2-1: SerialNumber: syz [ 432.965512][ T1325] usb 2-1: config 0 descriptor?? [ 433.012122][ T7725] usb 7-1: reset high-speed USB device number 5 using dummy_hcd [ 433.022218][ T1325] hub 2-1:0.0: bad descriptor, ignoring hub [ 433.034670][ T1325] hub: probe of 2-1:0.0 failed with error -5 [ 433.404370][ T2286] usb 2-1: USB disconnect, device number 8 [ 433.407821][ T7725] usb 7-1: device firmware changed [ 433.424881][ T4207] usb 7-1: USB disconnect, device number 5 [ 433.438690][ T7725] cdc_wdm 7-1:1.0: Error autopm - -16 [ 433.462286][ T7747] cdc_wdm 7-1:1.0: Error autopm - -16 [ 433.515088][ T7449] usb 3-1: USB disconnect, device number 11 [ 433.754347][ T4207] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 434.719942][ T7826] netlink: 20 bytes leftover after parsing attributes in process `syz.6.821'. [ 435.544288][ T4207] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 435.720350][ T7845] netlink: 44 bytes leftover after parsing attributes in process `syz.3.829'. [ 435.829647][ T7849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.831'. [ 435.929760][ T7852] netlink: 'syz.6.830': attribute type 16 has an invalid length. [ 435.937811][ T7852] netlink: 'syz.6.830': attribute type 17 has an invalid length. [ 435.982840][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 435.991885][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 436.030725][ T7852] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 436.264573][ T4207] usb 3-1: unable to get BOS descriptor or descriptor too short [ 436.520615][ T4207] usb 3-1: config 1 interface 0 altsetting 180 endpoint 0x82 is Bulk; changing to Interrupt [ 436.548642][ T4207] usb 3-1: config 1 interface 0 altsetting 180 endpoint 0x3 is Bulk; changing to Interrupt [ 436.578902][ T4207] usb 3-1: config 1 interface 0 has no altsetting 0 [ 437.028079][ T7864] netlink: 20 bytes leftover after parsing attributes in process `syz.6.836'. [ 437.064430][ T4207] usb 3-1: string descriptor 0 read error: -22 [ 437.070906][ T4207] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 437.261469][ T4207] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.304694][ T7836] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 437.311793][ T7836] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 437.500430][ T4207] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 438.139547][ T4207] usb 3-1: USB disconnect, device number 12 [ 438.571292][ T7882] xt_ipcomp: unknown flags 12 [ 438.750445][ T7882] overlayfs: failed to clone upperpath [ 438.988438][ T7881] netlink: 44 bytes leftover after parsing attributes in process `syz.6.841'. [ 439.747728][ T7898] netlink: 'syz.3.844': attribute type 16 has an invalid length. [ 439.755609][ T7898] netlink: 'syz.3.844': attribute type 17 has an invalid length. [ 439.821357][ T7898] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 440.676554][ T7896] orangefs_mount: mount request failed with -4 [ 440.754588][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.761420][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.997779][ T7898] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 441.397008][ T7916] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 442.098774][ T7922] netlink: 20 bytes leftover after parsing attributes in process `syz.3.849'. [ 442.936297][ T7933] loop2: detected capacity change from 0 to 1024 [ 443.069362][ T7933] EXT4-fs (loop2): Ignoring removed orlov option [ 443.082773][ T7933] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 443.193446][ T7933] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,abort,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 444.158272][ T7943] netlink: 44 bytes leftover after parsing attributes in process `syz.3.854'. [ 444.400992][ T7950] loop2: detected capacity change from 0 to 512 [ 445.351074][ T7950] EXT4-fs (loop2): Ignoring removed oldalloc option [ 447.757151][ T7950] EXT4-fs: failed to create workqueue [ 447.762639][ T7950] EXT4-fs (loop2): mount failed [ 448.444493][ T7966] loop6: detected capacity change from 0 to 512 [ 448.681803][ T7967] netlink: 'syz.3.858': attribute type 16 has an invalid length. [ 448.689752][ T7967] netlink: 'syz.3.858': attribute type 17 has an invalid length. [ 448.787773][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 448.862158][ T7967] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 450.037073][ T7966] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 450.053843][ T7966] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 451.601837][ T7851] Set syz1 is full, maxelem 65536 reached [ 452.123450][ T7979] netlink: 20 bytes leftover after parsing attributes in process `syz.3.863'. [ 452.436568][ T7988] loop6: detected capacity change from 0 to 1024 [ 452.659435][ T7988] EXT4-fs (loop6): Ignoring removed orlov option [ 452.674187][ T7988] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 452.723143][ T7988] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,bsddf,abort,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 452.869808][ T8006] netlink: 44 bytes leftover after parsing attributes in process `syz.3.867'. [ 454.189615][ T8008] netlink: 108 bytes leftover after parsing attributes in process `syz.2.868'. [ 454.637664][ T4175] Bluetooth: hci0: command 0x0409 tx timeout [ 454.714608][ T4175] Bluetooth: hci2: command 0x0409 tx timeout [ 454.806142][ T1277] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.053589][ T1277] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.126157][ T7991] chnl_net:caif_netlink_parms(): no params data found [ 455.227521][ T8047] netlink: 20 bytes leftover after parsing attributes in process `syz.3.875'. [ 455.229610][ T1277] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.267583][ T8050] loop2: detected capacity change from 0 to 1024 [ 455.287378][ T7995] chnl_net:caif_netlink_parms(): no params data found [ 455.338658][ T8050] EXT4-fs (loop2): Ignoring removed orlov option [ 455.352628][ T8050] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 455.368103][ T8054] netlink: 44 bytes leftover after parsing attributes in process `syz.6.877'. [ 455.408222][ T1277] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.425222][ T8050] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,abort,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 456.714645][ T4210] Bluetooth: hci0: command 0x041b tx timeout [ 457.578054][ T4254] Bluetooth: hci2: command 0x041b tx timeout [ 457.607386][ T7995] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.624179][ T7995] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.664258][ T7995] device bridge_slave_0 entered promiscuous mode [ 457.696153][ T7991] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.719993][ T7991] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.749105][ T7991] device bridge_slave_0 entered promiscuous mode [ 457.798599][ T7991] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.837025][ T7991] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.881213][ T7991] device bridge_slave_1 entered promiscuous mode [ 457.922571][ T7995] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.930042][ T7995] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.118288][ T7995] device bridge_slave_1 entered promiscuous mode [ 459.120643][ T8107] netlink: 20 bytes leftover after parsing attributes in process `syz.2.889'. [ 459.162959][ T7991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.220902][ T7991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.252905][ T7995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.350573][ T7995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.594239][ T4175] Bluetooth: hci0: command 0x040f tx timeout [ 459.669616][ T7991] team0: Port device team_slave_0 added [ 459.674208][ T4175] Bluetooth: hci2: command 0x040f tx timeout [ 460.473029][ T7995] team0: Port device team_slave_0 added [ 460.584489][ T7991] team0: Port device team_slave_1 added [ 460.677935][ T7995] team0: Port device team_slave_1 added [ 460.720992][ T7991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.764186][ T7991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.799630][ T7991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.857543][ T7991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.874045][ T7991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.915800][ T7449] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 460.926585][ T7991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.988993][ T7995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.999566][ T7995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.039719][ T7995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.086880][ T7991] device hsr_slave_0 entered promiscuous mode [ 461.112394][ T7991] device hsr_slave_1 entered promiscuous mode [ 461.134872][ T7991] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 461.152704][ T7991] Cannot create hsr debugfs directory [ 461.163500][ T7995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.172983][ T7995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.200379][ T7449] usb 3-1: Using ep0 maxpacket: 8 [ 461.230204][ T7995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.425847][ T7995] device hsr_slave_0 entered promiscuous mode [ 461.432870][ T7995] device hsr_slave_1 entered promiscuous mode [ 462.797771][ T4175] Bluetooth: hci0: command 0x0419 tx timeout [ 462.804449][ T4175] Bluetooth: hci2: command 0x0419 tx timeout [ 462.824405][ T7449] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 462.841439][ T7995] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 462.849735][ T7995] Cannot create hsr debugfs directory [ 462.861559][ T7449] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.883545][ T7449] usb 3-1: Product: syz [ 462.888272][ T7449] usb 3-1: Manufacturer: syz [ 462.893649][ T7449] usb 3-1: SerialNumber: syz [ 462.907169][ T8155] netlink: 20 bytes leftover after parsing attributes in process `syz.6.900'. [ 462.942686][ T7449] usb 3-1: config 0 descriptor?? [ 463.215232][ T7449] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 464.267574][ T8165] device syzkaller0 entered promiscuous mode [ 464.466966][ T7991] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 464.505676][ T7991] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 464.549950][ T7991] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 464.602372][ T7991] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 464.671406][ T7995] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 464.748172][ T1277] device hsr_slave_0 left promiscuous mode [ 464.757861][ T1277] device hsr_slave_1 left promiscuous mode [ 464.772120][ T1277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.788600][ T1277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.804974][ T1277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.822704][ T1277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.834867][ T1277] device bridge_slave_1 left promiscuous mode [ 464.846118][ T1277] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.855647][ T1277] device bridge_slave_0 left promiscuous mode [ 464.861914][ T1277] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.877902][ T1277] device veth1_macvtap left promiscuous mode [ 464.884369][ T1277] device veth0_macvtap left promiscuous mode [ 464.890573][ T1277] device veth1_vlan left promiscuous mode [ 464.897591][ T1277] device veth0_vlan left promiscuous mode [ 465.082284][ T8201] netlink: 20 bytes leftover after parsing attributes in process `syz.6.910'. [ 465.283570][ T1277] team0 (unregistering): Port device team_slave_1 removed [ 465.309049][ T1277] team0 (unregistering): Port device team_slave_0 removed [ 465.367459][ T1277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.386285][ T1277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.523672][ T1277] bond0 (unregistering): Released all slaves [ 465.651872][ T7995] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 466.350918][ T7995] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 466.444176][ T7449] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 466.465986][ T7995] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 466.487503][ T7449] usb 3-1: USB disconnect, device number 13 [ 466.658971][ T7991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.759210][ T6708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 466.865760][ T6708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 466.959983][ T7991] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.996060][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 467.006912][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 467.028480][ T7449] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 467.134589][ T1200] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.141798][ T1200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.360339][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 467.395182][ T7449] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 467.453927][ T7449] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 467.551726][ T7449] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.745476][ T7449] usb 3-1: config 0 descriptor?? [ 467.814607][ T7995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.871495][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 467.892544][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 467.932145][ T1200] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.939337][ T1200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.974759][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 468.002372][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 468.012993][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 468.022876][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 468.032440][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 468.132062][ T8262] netlink: 20 bytes leftover after parsing attributes in process `syz.6.920'. [ 468.205219][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 468.406574][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 468.735054][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 468.777295][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 468.847729][ T7995] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.905795][ T7449] ath6kl: Failed to submit usb control message: -110 [ 468.912676][ T7449] ath6kl: unable to send the bmi data to the device: -110 [ 468.945121][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 468.961100][ T7449] ath6kl: Unable to send get target info: -110 [ 468.975941][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 469.019751][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 469.053029][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 469.084595][ T4410] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.091705][ T4410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.141288][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 469.160492][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 469.190078][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 469.199190][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 469.208711][ T4410] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.215842][ T4410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.226647][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 469.489301][ T7991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 469.855681][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 469.890584][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 469.911472][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 469.935256][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 470.115133][ T7995] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 470.162794][ T7995] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 471.961810][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 471.990140][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 472.035185][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 472.047234][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 472.068306][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 472.082648][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 472.092631][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 472.101870][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 472.116521][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 472.128396][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 472.142615][ T7991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.471095][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 472.495442][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 472.552410][ T6708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 472.578474][ T6708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 472.616413][ T7995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.638198][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 472.672017][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 472.699254][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 472.728013][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 472.760835][ T7991] device veth0_vlan entered promiscuous mode [ 472.813300][ T7991] device veth1_vlan entered promiscuous mode [ 472.821995][ T7449] ath6kl: Failed to init ath6kl core: -110 [ 472.907243][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 472.946813][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 473.025402][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 473.095671][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 473.160863][ T7991] device veth0_macvtap entered promiscuous mode [ 473.174448][ T7991] device veth1_macvtap entered promiscuous mode [ 473.206692][ T7991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.218157][ T7991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.326737][ T7991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.665540][ T7991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.937912][ T7449] ath6kl_usb: probe of 3-1:0.0 failed with error -110 [ 473.950003][ T7991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.957288][ T7449] usb 3-1: USB disconnect, device number 14 [ 474.012354][ T8347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.935'. [ 474.024081][ T7991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.033945][ T7991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.062849][ T7991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.082001][ T7991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.103447][ T7991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.134444][ T7991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.166941][ T7991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.187003][ T7991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.196922][ T7991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.207400][ T7991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.217382][ T7991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.232989][ T7991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.247382][ T8356] overlayfs: failed to clone upperpath [ 474.255730][ T7991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.293049][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 474.342321][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 474.375008][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 474.397360][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 474.431943][ T7991] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.453943][ T7991] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.465916][ T7991] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.475003][ T7991] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.487267][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 474.503218][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 474.607992][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 474.621768][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 474.678813][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 474.687460][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 474.699308][ T7995] device veth0_vlan entered promiscuous mode [ 474.762534][ T7995] device veth1_vlan entered promiscuous mode [ 474.852802][ T4224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.869084][ T4224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.908248][ T7995] device veth0_macvtap entered promiscuous mode [ 474.946438][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 474.969824][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 474.987775][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 475.005253][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 475.026589][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 475.050259][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 475.075152][ T7995] device veth1_macvtap entered promiscuous mode [ 475.099955][ T1200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.140165][ T1200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.161227][ T7995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.185372][ T7995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.203247][ T7995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.214302][ T7995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.236816][ T7995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.259786][ T7995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.274660][ T7995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.316373][ T7995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.338793][ T7995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.361320][ T7995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.383691][ T7995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.400480][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 475.435293][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 475.445844][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 475.594632][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 475.617844][ T8345] chnl_net:caif_netlink_parms(): no params data found [ 475.642234][ T7995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.682590][ T7995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.702606][ T7995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.727058][ T8384] xt_ipcomp: unknown flags 12 [ 476.058744][ T4207] Bluetooth: hci1: command 0x0409 tx timeout [ 476.117439][ T7995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.453515][ T7995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.464501][ T7995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.474393][ T7995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.485258][ T7995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.500068][ T7995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.512219][ T7995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.524388][ T7995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.697471][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 476.712833][ T8387] 9pnet: Insufficient options for proto=fd [ 476.733120][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 476.773337][ T7995] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.783825][ T7995] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.818830][ T7995] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.848442][ T7995] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.872802][ T1277] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.125345][ T1277] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.897145][ T8345] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.912293][ T8345] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.945620][ T8345] device bridge_slave_0 entered promiscuous mode [ 478.083128][ T8345] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.115237][ T8345] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.145451][ T8345] device bridge_slave_1 entered promiscuous mode [ 478.164232][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 478.192526][ T1277] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.233627][ T8407] netlink: 44 bytes leftover after parsing attributes in process `syz.3.947'. [ 478.331271][ T1277] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.409845][ T8345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.465714][ T4410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.486579][ T8345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.496107][ T4410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.615270][ T8420] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 478.681209][ T8417] overlayfs: failed to clone upperpath [ 478.694574][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 478.823324][ T8345] team0: Port device team_slave_0 added [ 478.854857][ T8345] team0: Port device team_slave_1 added [ 478.863002][ T8424] netlink: 176 bytes leftover after parsing attributes in process `syz.8.954'. [ 478.985897][ T4410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.001416][ T4410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.040357][ T8345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.089289][ T8345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.692806][ T8345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.709804][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 479.762555][ T8345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.794634][ T8345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.862599][ T4212] Bluetooth: hci1: command 0x040f tx timeout [ 482.878474][ T8345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.744797][ T1277] tipc: Disabling bearer [ 483.774171][ T1277] tipc: Left network mode [ 483.800322][ T8345] device hsr_slave_0 entered promiscuous mode [ 483.986498][ T8345] device hsr_slave_1 entered promiscuous mode [ 484.026418][ T8345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 484.771734][ T8345] Cannot create hsr debugfs directory [ 485.034744][ T4212] Bluetooth: hci1: command 0x0419 tx timeout [ 487.247939][ T4207] libceph: connect (1)[c::]:6789 error -101 [ 487.296538][ T4207] libceph: mon0 (1)[c::]:6789 connect error [ 487.320886][ T8489] ceph: No mds server is up or the cluster is laggy [ 487.793239][ T4207] libceph: connect (1)[c::]:6789 error -101 [ 487.800618][ T4207] libceph: mon0 (1)[c::]:6789 connect error [ 489.511354][ T1277] device hsr_slave_0 left promiscuous mode [ 489.553097][ T1277] device hsr_slave_1 left promiscuous mode [ 489.580301][ T1277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.604154][ T1277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.628498][ T1277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.662532][ T1277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.673039][ T1277] device bridge_slave_1 left promiscuous mode [ 489.699982][ T1277] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.730617][ T1277] device bridge_slave_0 left promiscuous mode [ 489.745999][ T1277] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.783050][ T1277] device veth1_macvtap left promiscuous mode [ 489.795969][ T1277] device veth0_macvtap left promiscuous mode [ 489.810947][ T1277] device veth1_vlan left promiscuous mode [ 489.825163][ T1277] device veth0_vlan left promiscuous mode [ 489.986713][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ee0c000: rx timeout, send abort [ 490.418235][ T1277] team0 (unregistering): Port device team_slave_1 removed [ 490.433464][ T1277] team0 (unregistering): Port device team_slave_0 removed [ 490.449033][ T1277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.484336][ T1277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 490.497049][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ee0c000: abort rx timeout. Force session deactivation [ 491.365163][ T8541] [ 491.367541][ T8541] ====================================================== [ 491.374567][ T8541] WARNING: possible circular locking dependency detected [ 491.381590][ T8541] 5.15.179-syzkaller #0 Not tainted [ 491.386796][ T8541] ------------------------------------------------------ [ 491.393823][ T8541] syz.9.982/8541 is trying to acquire lock: [ 491.399729][ T8541] ffff888053a11450 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xcf/0x1a0 [ 491.411200][ T8541] [ 491.411200][ T8541] but task is already holding lock: [ 491.418687][ T8541] ffff888053a10120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x22d/0x530 [ 491.427689][ T8541] [ 491.427689][ T8541] which lock already depends on the new lock. [ 491.427689][ T8541] [ 491.438082][ T8541] [ 491.438082][ T8541] the existing dependency chain (in reverse order) is: [ 491.447107][ T8541] [ 491.447107][ T8541] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 491.454838][ T8541] lock_acquire+0x1db/0x4f0 [ 491.459923][ T8541] lock_sock_nested+0x44/0x100 [ 491.465229][ T8541] smc_listen_out+0x11b/0x3d0 [ 491.470435][ T8541] process_one_work+0x8a1/0x10c0 [ 491.475916][ T8541] worker_thread+0xaca/0x1280 [ 491.481137][ T8541] kthread+0x3f6/0x4f0 [ 491.485749][ T8541] ret_from_fork+0x1f/0x30 [ 491.490709][ T8541] [ 491.490709][ T8541] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 491.500903][ T8541] validate_chain+0x1649/0x5930 [ 491.506299][ T8541] __lock_acquire+0x1295/0x1ff0 [ 491.511692][ T8541] lock_acquire+0x1db/0x4f0 [ 491.516738][ T8541] __flush_work+0xeb/0x1a0 [ 491.521695][ T8541] __cancel_work_timer+0x519/0x6a0 [ 491.527344][ T8541] smc_clcsock_release+0x5e/0xe0 [ 491.532833][ T8541] __smc_release+0x3b9/0x530 [ 491.534076][ T4208] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 491.537965][ T8541] smc_close_non_accepted+0xd4/0x1e0 [ 491.537997][ T8541] smc_close_active+0x9f3/0xdb0 [ 491.556712][ T8541] __smc_release+0xa6/0x530 [ 491.561757][ T8541] smc_release+0x2d5/0x530 [ 491.566719][ T8541] sock_close+0xcd/0x230 [ 491.571627][ T8541] __fput+0x3fe/0x8e0 [ 491.576146][ T8541] task_work_run+0x129/0x1a0 [ 491.581332][ T8541] exit_to_user_mode_loop+0x106/0x130 [ 491.587255][ T8541] exit_to_user_mode_prepare+0xb1/0x140 [ 491.593341][ T8541] syscall_exit_to_user_mode+0x5d/0x240 [ 491.599427][ T8541] do_syscall_64+0x47/0xb0 [ 491.604383][ T8541] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 491.610853][ T8541] [ 491.610853][ T8541] other info that might help us debug this: [ 491.610853][ T8541] [ 491.621094][ T8541] Possible unsafe locking scenario: [ 491.621094][ T8541] [ 491.628555][ T8541] CPU0 CPU1 [ 491.633930][ T8541] ---- ---- [ 491.639326][ T8541] lock(sk_lock-AF_SMC/1); [ 491.643846][ T8541] lock((work_completion)(&new_smc->smc_listen_work)); [ 491.653296][ T8541] lock(sk_lock-AF_SMC/1); [ 491.660326][ T8541] lock((work_completion)(&new_smc->smc_listen_work)); [ 491.667351][ T8541] [ 491.667351][ T8541] *** DEADLOCK *** [ 491.667351][ T8541] [ 491.675572][ T8541] 2 locks held by syz.9.982/8541: [ 491.680599][ T8541] #0: ffff8880752c3210 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x98/0x230 [ 491.690900][ T8541] #1: ffff888053a10120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x22d/0x530 [ 491.700354][ T8541] [ 491.700354][ T8541] stack backtrace: [ 491.706292][ T8541] CPU: 1 PID: 8541 Comm: syz.9.982 Not tainted 5.15.179-syzkaller #0 [ 491.714375][ T8541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 491.724459][ T8541] Call Trace: [ 491.727760][ T8541] [ 491.730709][ T8541] dump_stack_lvl+0x1e3/0x2d0 [ 491.735411][ T8541] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 491.741080][ T8541] ? print_circular_bug+0x12b/0x1a0 [ 491.746302][ T8541] check_noncircular+0x2f8/0x3b0 [ 491.751257][ T8541] ? add_chain_block+0x850/0x850 [ 491.756211][ T8541] ? lockdep_lock+0x11f/0x2a0 [ 491.760904][ T8541] ? lock_release+0xb9/0x9a0 [ 491.765518][ T8541] ? read_lock_is_recursive+0x10/0x10 [ 491.771011][ T8541] ? is_bpf_text_address+0x24f/0x260 [ 491.776323][ T8541] ? _find_first_zero_bit+0xcf/0xf0 [ 491.781541][ T8541] validate_chain+0x1649/0x5930 [ 491.784039][ T4208] usb 3-1: Using ep0 maxpacket: 32 [ 491.786417][ T8541] ? check_path+0x40/0x40 [ 491.795853][ T8541] ? reacquire_held_locks+0x660/0x660 [ 491.801251][ T8541] ? __bfs+0x359/0x6e0 [ 491.805334][ T8541] ? check_path+0x40/0x40 [ 491.809675][ T8541] ? noop_count+0x30/0x30 [ 491.814018][ T8541] ? look_up_lock_class+0x77/0x120 [ 491.819145][ T8541] ? register_lock_class+0x100/0x9a0 [ 491.824452][ T8541] ? validate_chain+0x112/0x5930 [ 491.829403][ T8541] ? is_dynamic_key+0x1f0/0x1f0 [ 491.834271][ T8541] ? mark_lock+0x98/0x340 [ 491.838614][ T8541] __lock_acquire+0x1295/0x1ff0 [ 491.843488][ T8541] lock_acquire+0x1db/0x4f0 [ 491.848111][ T8541] ? __flush_work+0xcf/0x1a0 [ 491.852734][ T8541] ? read_lock_is_recursive+0x10/0x10 [ 491.858133][ T8541] ? reacquire_held_locks+0x660/0x660 [ 491.863528][ T8541] ? reacquire_held_locks+0x660/0x660 [ 491.868929][ T8541] ? mark_lock+0x98/0x340 [ 491.873289][ T8541] __flush_work+0xeb/0x1a0 [ 491.877740][ T8541] ? __flush_work+0xcf/0x1a0 [ 491.882361][ T8541] ? flush_work+0x20/0x20 [ 491.886709][ T8541] ? print_irqtrace_events+0x210/0x210 [ 491.892189][ T8541] ? __cancel_work_timer+0x467/0x6a0 [ 491.897490][ T8541] __cancel_work_timer+0x519/0x6a0 [ 491.902658][ T8541] ? cancel_work_sync+0x20/0x20 [ 491.904254][ T4208] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 491.907524][ T8541] ? __local_bh_enable_ip+0x164/0x1f0 [ 491.907550][ T8541] ? lockdep_hardirqs_on+0x94/0x130 [ 491.924129][ T4208] usb 3-1: config 0 has no interface number 0 [ 491.926065][ T8541] ? __local_bh_enable_ip+0x164/0x1f0 [ 491.937504][ T8541] ? __smc_release+0x3b1/0x530 [ 491.942292][ T8541] ? _local_bh_enable+0xa0/0xa0 [ 491.947188][ T8541] smc_clcsock_release+0x5e/0xe0 [ 491.952406][ T8541] __smc_release+0x3b9/0x530 [ 491.957021][ T8541] smc_close_non_accepted+0xd4/0x1e0 [ 491.962327][ T8541] smc_close_active+0x9f3/0xdb0 [ 491.967194][ T8541] __smc_release+0xa6/0x530 [ 491.971718][ T8541] smc_release+0x2d5/0x530 [ 491.976328][ T8541] sock_close+0xcd/0x230 [ 491.980594][ T8541] ? sock_mmap+0x90/0x90 [ 491.984853][ T8541] __fput+0x3fe/0x8e0 [ 491.988853][ T8541] task_work_run+0x129/0x1a0 [ 491.993461][ T8541] exit_to_user_mode_loop+0x106/0x130 [ 491.998847][ T8541] exit_to_user_mode_prepare+0xb1/0x140 [ 492.004407][ T8541] syscall_exit_to_user_mode+0x5d/0x240 [ 492.009971][ T8541] do_syscall_64+0x47/0xb0 [ 492.014488][ T8541] ? clear_bhb_loop+0x15/0x70 [ 492.019178][ T8541] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 492.025084][ T8541] RIP: 0033:0x7f88249f9169 [ 492.029518][ T8541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 492.049253][ T8541] RSP: 002b:00007ffe14b07e08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 492.057692][ T8541] RAX: 0000000000000000 RBX: 0000000000077ee3 RCX: 00007f88249f9169 [ 492.065940][ T8541] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 492.073999][ T8541] RBP: 00007f8824c13ba0 R08: 0000000000000001 R09: 0000000d14b080ff [ 492.081985][ T8541] R10: 00007f882486c000 R11: 0000000000000246 R12: 00007f8824c11fac [ 492.090066][ T8541] R13: 00007f8824c11fa0 R14: ffffffffffffffff R15: 00007ffe14b07f20 [ 492.095099][ T4208] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 492.098049][ T8541] [ 492.107447][ T4208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.132376][ T1277] bond0 (unregistering): Released all slaves [ 492.147004][ T4208] usb 3-1: Product: syz [ 492.158525][ T4208] usb 3-1: Manufacturer: syz [ 492.163897][ T4208] usb 3-1: SerialNumber: syz [ 492.170374][ T4208] usb 3-1: config 0 descriptor?? [ 492.221263][ T4208] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 492.231496][ T8345] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 492.240523][ T4208] usb 3-1: selecting invalid altsetting 1 [ 492.249655][ T4208] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 492.260413][ T8345] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 492.269532][ T4208] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 492.281188][ T4208] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 492.289897][ T4208] usb 3-1: media controller created [ 492.310793][ T4208] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 492.345411][ T8345] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 492.362785][ T8345] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 492.424376][ T4208] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 492.431516][ T4208] zl10353_read_register: readreg error (reg=127, ret==-32) [ 492.464100][ T4208] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 492.492182][ T8345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.514369][ T4208] usb 3-1: USB disconnect, device number 15 [ 492.538288][ T8345] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.553927][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 492.567252][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 492.585377][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 492.598433][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 492.607552][ T4448] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.614699][ T4448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.627226][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 492.636302][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 492.648932][ T4448] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.656056][ T4448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.668533][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 492.677734][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 492.695487][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 492.714647][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 492.723486][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 492.734725][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 492.743517][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 492.753185][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 492.762355][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 492.772011][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 492.782697][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 492.792235][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 492.816227][ T8345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 492.977480][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 492.993697][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 493.009073][ T8345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.136296][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 493.145213][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 493.176803][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 493.190524][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 493.206043][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 493.217297][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 493.233077][ T8345] device veth0_vlan entered promiscuous mode [ 493.254979][ T8345] device veth1_vlan entered promiscuous mode [ 493.299398][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 493.311394][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 493.329365][ T8345] device veth0_macvtap entered promiscuous mode [ 493.355137][ T8345] device veth1_macvtap entered promiscuous mode [ 493.380370][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.394034][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.403936][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.418858][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.428871][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.441597][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.452066][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.462650][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.472591][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.483350][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.494908][ T8345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.510216][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 493.519546][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 493.530571][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 493.539549][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 493.551336][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.562132][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.572536][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.583274][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.593313][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.606794][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.617077][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.627621][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.637495][ T8345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.647961][ T8345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.661918][ T8345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.670981][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 493.679953][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 493.693452][ T8345] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.702720][ T8345] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.711677][ T8345] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.721135][ T8345] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.791407][ T8345] ieee80211 phy24: Selected rate control algorithm 'minstrel_ht' [ 493.816788][ T4410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.821502][ T8345] ieee80211 phy25: Selected rate control algorithm 'minstrel_ht' [ 493.826442][ T4410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.857132][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 493.875539][ T4256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.883392][ T4256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.891391][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 496.063937][ T1200] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.009919][ T1200] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.081181][ T1200] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.130461][ T1200] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.895026][ T1200] device hsr_slave_0 left promiscuous mode [ 498.914225][ T1200] device hsr_slave_1 left promiscuous mode [ 498.920649][ T1200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.944125][ T1200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.951961][ T1200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.973851][ T1200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.982668][ T1200] device bridge_slave_1 left promiscuous mode [ 498.991835][ T1200] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.001266][ T1200] device bridge_slave_0 left promiscuous mode [ 499.010207][ T1200] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.030814][ T1200] device veth1_macvtap left promiscuous mode [ 499.038228][ T1200] device veth0_macvtap left promiscuous mode [ 499.049469][ T1200] device veth1_vlan left promiscuous mode [ 499.055465][ T1200] device veth0_vlan left promiscuous mode [ 499.270500][ T1200] team0 (unregistering): Port device team_slave_1 removed [ 499.282536][ T1200] team0 (unregistering): Port device team_slave_0 removed [ 499.294718][ T1200] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.310955][ T1200] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.376411][ T1200] bond0 (unregistering): Released all slaves