last executing test programs: 7m30.220950362s ago: executing program 2 (id=257): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) pipe2$9p(&(0x7f0000000000), 0x80080) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_open_procfs(r0, &(0x7f00000003c0)='net/igmp6\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000380)='sched_switch\x00', r4}, 0x18) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000008c0)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYRES8=0x0, @ANYBLOB="5ef8d1e7b2d4b5e6abd9eae5912ca8100c8fd189972abd0c2dba6330ba9e7e957869d03217c8eacaa11d65e105b47336babc99e31600cfc04897c803a626fb987fe0e27f6e885396473b04a5d44aebc93db8163bd701cf4c60588319fbbd404dbdcad7aa2a39203b9b53af3cfd9a8f2a3d03bd5ec01822d83114235d206f113ccec0d9edd2a7d133f1209e07df41c296b7df91ae7e37f0fbf6430b15befacfeda8c7e600f9ecfe0939bbe97c637d7c7d0b2f92d10d88f70f0484f9013fb487eb9980f478daa69d24946a71cd2000a07e8cd0689f2355754ebf6eb7e5122408c4a8929254c62fa1cedf44338d9e90ee8c22", @ANYRES64=r5, @ANYRESOCT, @ANYRES16=0x0], 0x23, 0x203, &(0x7f0000000ec0)="$eJzsmT+IE0EUxr+Z3ducQQQbCxEsPDCit9ndqFxzhYKlIJx/GyF463G6d5FkhcuBRbCxsbQQbG0sLSxSWdjZ2WqhgmBhKrHUkZmdzU52k6BJlMC9H2Tyzbw3b+a9XV6zIAhiz/L504+Pj8+vXD4FYD+WUNLrX63Mhxv+H57eP/lk9cKzl++fv9k+8KCbj8cACPHn50v/1y+yuRCDu5eAnyJBasUVcJzQ+hoYXMvYrHeHYLihl+8ozZRu7NOLUchuNaL125tR6MnBl0MghxqQXcEG0OswrANY1Ecw436t9u7degQ0ExGFqVgQ6TkF09+KcfVT9zvHsWqUQD6v648eduTc1eseeL9+Pjh8rWtgWNN6BSW4rpuVxMj/sJ3Ftwr5zyDJfyEOLhdMN61ECPFLTB45zV6vXP0+6JO9Y3NQhP8iZLazjXxkhEnWdsojWH6FZY+y1T7U674t7voyH3WeSKjGBaBgeleOootTRHb0ez5oqpRz/YnZwHGjP9mw+/ZqvHWv2mrvLm9u1TfCjXA7CGpnvdOedyaoqkaUjGP636LqT2Uj/sIIX4c52KnHcdPfAeKm358HyWh03LVXjW9qD1f9j6NyLIkhXxWVdmn4GUz/uPqXqmKNvDxBEARBEARBEARBEARBEMRYnNz8KBj0FzOWfhMbQnBJef8OAAD//71rahU=") syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) 7m25.760277959s ago: executing program 2 (id=263): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x18) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) 7m24.048512787s ago: executing program 2 (id=267): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x11, "79820fde98abdd00b771eecbbba14da08fe8cfcf2d39005755e339df6e3474ee07e13a269fce2bb3dc5ed34394903821e81be586d9ee749d76a7285644943ebe", "ba646f857993f0c5787944d335671e614090022d722436df22213419a5999377aead1d59f9928abd899cc24fbe73d652739fc43c0e45ac5209ccdc91ae82cb81", "e461519b104962775f9527ad4d3ff4ad351f4bd845ffcfba9be710877453dd32", [0x92be790, 0x3]}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x1320022, 0x0, 0x0, 0x0, 0x0) 7m20.814972658s ago: executing program 2 (id=272): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x8, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb598}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000380)='task_rename\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) 7m15.977081124s ago: executing program 2 (id=278): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, 0x0) vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) 7m15.62378777s ago: executing program 2 (id=281): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = userfaultfd(0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r8}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="8fae18ae8c41246be32a4522ab1868c96cf8a670cd598e170d75d746b2d1b2ee752c7843afb50c46a04d6c89ebca4d6c9c4c91997a7fb9f927785e91284f904e3bbae31fcb229c2e7f3943a24d4e4f141bff56832fad0d20d0a86af1e255b3966da6babf41fe1e", 0x67, 0x20008880, &(0x7f00000000c0)={0x11, 0x4, r8, 0x1, 0x69, 0x6, @random="495d77dd6f96"}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) 6m59.510320224s ago: executing program 32 (id=281): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = userfaultfd(0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r8}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="8fae18ae8c41246be32a4522ab1868c96cf8a670cd598e170d75d746b2d1b2ee752c7843afb50c46a04d6c89ebca4d6c9c4c91997a7fb9f927785e91284f904e3bbae31fcb229c2e7f3943a24d4e4f141bff56832fad0d20d0a86af1e255b3966da6babf41fe1e", 0x67, 0x20008880, &(0x7f00000000c0)={0x11, 0x4, r8, 0x1, 0x69, 0x6, @random="495d77dd6f96"}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) 5m26.984399967s ago: executing program 0 (id=503): bpf$MAP_CREATE(0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xfffffffffffffff9, 0xcc9f, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000100)={0xfffffff8, 0xaeb, 0xe57, 0x1, 0x7, "3ce6920887000000000000000d00", 0x4, 0x1ff}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x41) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r5, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r6], 0x18}}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 5m22.466970399s ago: executing program 0 (id=508): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r6, &(0x7f0000000fc0)=""/224, 0xe0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000012", @ANYRES64=r5], 0x0, 0x2, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[], 0x1c, 0x0) llistxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000001c00)=""/4084, 0xff4) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, r7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x76, 0x0, 0x0) 5m21.004669977s ago: executing program 0 (id=514): gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x809d) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x3010011, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x1, 0x36b, &(0x7f0000000500)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r4, 0x0) 5m19.869881634s ago: executing program 0 (id=519): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x1100, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@empty, 0x1f82}, {@broadcast, 0x9}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 5m19.509649766s ago: executing program 0 (id=521): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) creat(&(0x7f0000000080)='./file1\x00', 0x80) 5m15.689176681s ago: executing program 0 (id=530): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001ac0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_LK(r4, &(0x7f0000000340)={0x28, 0x0, r5, {{0x6, 0xed, 0x2, r0}}}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r7}, &(0x7f0000000800), &(0x7f0000000840)=r8}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES64=r6, @ANYRES64, @ANYRES16], 0x1, 0x374, &(0x7f0000000f80)="$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") r9 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r9, 0x0, 0x0, 0x1000f4) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r10, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="96", 0xfffffe10}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r9, 0x0, 0x0, 0xffffffffffffffff}]) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x820000, &(0x7f00000003c0)=ANY=[], 0x25, 0x34c, &(0x7f0000001740)="$eJzs3T9oJGUUAPC3mU12EziTQji0Wu0EOS4RC21MOE44TKEni/8aFy7nn+wqZHEhFtlLo1gqNoJWdldoebVYiNhZ2HqCnIqN1x3c4cjuTHY3mcn9EbOn3u9XhJf3fW++byZDdhKSt6+uxua52Th/9eqVqNcrUV09tRrXKrEUM5FE5kIAAP8n19I0/kgzw8RTN5v90ULMZtHcVHYHAByF4ev/a8fGidrd3A0AMA2Fn//LPVuaffvItgUAHKHC6//D+4YP/Jq/OvqbAADgv+v5l15+Zm094myjUY/ovN9r9prx5Hh87Xy8Ee3YiJOxGDcisgeF7Glh8PHpM+unTzYGflmK5qCi14zo9HvN7ElhLRnW12I5FmMpr09H9cmgfnlY34iIC/3h+tGp9JqzsZCv/+NCbMRKLMb9hfqIM+unVxr5AZqdvfp+xG7U905isP8TsRjfzww/OReD2uxYg8zOcqNxKl3fV9+7WBvOAwAAAAAAAAAAAAAAAAAAAACAo3BiPvLuOY2lUf+btNPvvXc2n9Aojg/7+2TDeX+g3aw/UFrb687zQXKwP9D+/jy9ZjVm7uqZAwAAAAAAAAAAAAAAAAAAwL9Hd3suWu32xlZ3+93NcTDX7k9k3vr2i6/n4+CcN5NxJqrZ4fbNyXMxUZXEqDwdlafJvjl5kETkkyvRunhptOPJObXRWRTKB0GtMFTJ99Rqt4899POnZVV/jjNJjIbqpUtU8vUnhjr3Zamy/dw8qHS3V24x53KapoeV73xSrIp6RLXwhfsngm+uvP7AY93jj3cr1c3WV3nTh0ceXXzh8sef/7bZakd+adrtua3ujfRvr5VM3D+V/DpXSu6E8mB3nNnd6m63kh9+f/HBD787MDkpv3/Sycw7h6/15cHMXBYMtnk7ZzpbcvOXB69cH929d34xj3+22rq089OvexfzVlUT3yQ06gAAAAAAAAAAAAAAAAAAgKmY+F/xO/DEc0e3IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYvvH7/08Eu4XM7QTX+1Ecqm1sdQ9dfH6qpwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwD3srwAAAP//JT9zjQ==") socket$inet6_udp(0xa, 0x2, 0x0) 5m0.43690204s ago: executing program 33 (id=530): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001ac0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_LK(r4, &(0x7f0000000340)={0x28, 0x0, r5, {{0x6, 0xed, 0x2, r0}}}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r7}, &(0x7f0000000800), &(0x7f0000000840)=r8}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES64=r6, @ANYRES64, @ANYRES16], 0x1, 0x374, &(0x7f0000000f80)="$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") r9 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r9, 0x0, 0x0, 0x1000f4) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r10, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="96", 0xfffffe10}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r9, 0x0, 0x0, 0xffffffffffffffff}]) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x820000, &(0x7f00000003c0)=ANY=[], 0x25, 0x34c, &(0x7f0000001740)="$eJzs3T9oJGUUAPC3mU12EziTQji0Wu0EOS4RC21MOE44TKEni/8aFy7nn+wqZHEhFtlLo1gqNoJWdldoebVYiNhZ2HqCnIqN1x3c4cjuTHY3mcn9EbOn3u9XhJf3fW++byZDdhKSt6+uxua52Th/9eqVqNcrUV09tRrXKrEUM5FE5kIAAP8n19I0/kgzw8RTN5v90ULMZtHcVHYHAByF4ev/a8fGidrd3A0AMA2Fn//LPVuaffvItgUAHKHC6//D+4YP/Jq/OvqbAADgv+v5l15+Zm094myjUY/ovN9r9prx5Hh87Xy8Ee3YiJOxGDcisgeF7Glh8PHpM+unTzYGflmK5qCi14zo9HvN7ElhLRnW12I5FmMpr09H9cmgfnlY34iIC/3h+tGp9JqzsZCv/+NCbMRKLMb9hfqIM+unVxr5AZqdvfp+xG7U905isP8TsRjfzww/OReD2uxYg8zOcqNxKl3fV9+7WBvOAwAAAAAAAAAAAAAAAAAAAACAo3BiPvLuOY2lUf+btNPvvXc2n9Aojg/7+2TDeX+g3aw/UFrb687zQXKwP9D+/jy9ZjVm7uqZAwAAAAAAAAAAAAAAAAAAwL9Hd3suWu32xlZ3+93NcTDX7k9k3vr2i6/n4+CcN5NxJqrZ4fbNyXMxUZXEqDwdlafJvjl5kETkkyvRunhptOPJObXRWRTKB0GtMFTJ99Rqt4899POnZVV/jjNJjIbqpUtU8vUnhjr3Zamy/dw8qHS3V24x53KapoeV73xSrIp6RLXwhfsngm+uvP7AY93jj3cr1c3WV3nTh0ceXXzh8sef/7bZakd+adrtua3ujfRvr5VM3D+V/DpXSu6E8mB3nNnd6m63kh9+f/HBD787MDkpv3/Sycw7h6/15cHMXBYMtnk7ZzpbcvOXB69cH929d34xj3+22rq089OvexfzVlUT3yQ06gAAAAAAAAAAAAAAAAAAgKmY+F/xO/DEc0e3IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYvvH7/08Eu4XM7QTX+1Ecqm1sdQ9dfH6qpwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwD3srwAAAP//JT9zjQ==") socket$inet6_udp(0xa, 0x2, 0x0) 2m45.550161332s ago: executing program 1 (id=820): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4d68f}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x3fb9}]]}}}]}, 0x38}}, 0x4) 2m44.232664668s ago: executing program 1 (id=822): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_ALLOC_STREAMS(r2, 0x8008551c, &(0x7f0000000000)=ANY=[@ANYBLOB="4a9800"]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="f8000000160001000000000000000000000000000000000000000000000000006401010200"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000033000000ffff"], 0xf8}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r9, 0x400452c8, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 2m42.897915135s ago: executing program 1 (id=827): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) epoll_create1(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x4008805, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) 2m40.607570624s ago: executing program 1 (id=834): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) pipe2$9p(0x0, 0x44080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) ioctl$F2FS_IOC_COMPRESS_FILE(r3, 0xf518, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2) 2m39.60554245s ago: executing program 1 (id=836): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) 2m39.229040825s ago: executing program 1 (id=838): socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) futex(0xfffffffffffffffd, 0x8, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r5 = syz_open_procfs(0x0, 0x0) pread64(r5, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x437, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x5120b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) 2m24.127935577s ago: executing program 34 (id=838): socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) futex(0xfffffffffffffffd, 0x8, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r5 = syz_open_procfs(0x0, 0x0) pread64(r5, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x437, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x5120b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) 52.544663541s ago: executing program 4 (id=1066): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000740)={0x3}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000480)={0x2, 0x0, [{0x80a0000, 0x0, 0x0}, {0x100000, 0xc9, &(0x7f0000000300)=""/201}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x2c, r6, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 49.485146075s ago: executing program 4 (id=1077): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) 48.151140202s ago: executing program 4 (id=1081): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x18, 0x1, 0x1, [r3, r2]}}], 0x18, 0x50}}], 0x1, 0x404c040) sendmmsg$inet(r4, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x43, 0x4000) close_range(r1, 0xffffffffffffffff, 0x0) 46.890065115s ago: executing program 4 (id=1084): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r0 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x8, r0) r1 = syz_pidfd_open(r0, 0x0) process_mrelease(r1, 0x700000000000000) 43.056450386s ago: executing program 4 (id=1092): unshare(0x22020600) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, 0x0, 0x0) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@dellinkprop={0x4c, 0x6c, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1a, 0x2800}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) 38.176377135s ago: executing program 4 (id=1106): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000340)=ANY=[@ANYBLOB="2aaa1600650000020690780a010100ac1414bb440200004e264e23", @ANYRES32=0x41424344, @ANYRES8=r0], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x60000001, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x6, &(0x7f0000000180)=0xfffffffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000600)=@security={'security\x00', 0x44, 0x4, 0x3c0, 0xffffffff, 0x108, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @empty, [], [], 'nr0\x00', 'nr0\x00'}, 0x203, 0xe0, 0x108, 0x8502, {0x700}, [@common=@unspec=@quota={{0x38}, {0x800}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x4}}}, {{@ipv6={@local, @mcast1, [], [], 'ip6erspan0\x00', 'veth1_macvtap\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) 22.223317543s ago: executing program 35 (id=1106): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000340)=ANY=[@ANYBLOB="2aaa1600650000020690780a010100ac1414bb440200004e264e23", @ANYRES32=0x41424344, @ANYRES8=r0], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x60000001, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x6, &(0x7f0000000180)=0xfffffffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000600)=@security={'security\x00', 0x44, 0x4, 0x3c0, 0xffffffff, 0x108, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @empty, [], [], 'nr0\x00', 'nr0\x00'}, 0x203, 0xe0, 0x108, 0x8502, {0x700}, [@common=@unspec=@quota={{0x38}, {0x800}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x4}}}, {{@ipv6={@local, @mcast1, [], [], 'ip6erspan0\x00', 'veth1_macvtap\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) 21.077366828s ago: executing program 5 (id=1151): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket(0x10, 0x3, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) wait4(r2, 0x0, 0x8, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r7}, 0x18) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x7, 0x6, "2d5115", 0x0, 0x2b, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @local}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000026000186"], 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x20004440) 17.3089309s ago: executing program 5 (id=1154): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$usbfs(0x0, 0xf, 0x8041) ioctl$USBDEVFS_ALLOC_STREAMS(r2, 0x8008551c, &(0x7f0000000000)=ANY=[@ANYBLOB="4a98000201"]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="f8000000160001000000000000000000000000000000000000000000000000006401010200"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000033000000ffff"], 0xf8}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r9, 0x400452c8, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 15.898128718s ago: executing program 5 (id=1159): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000040)) 15.828808937s ago: executing program 7 (id=1160): socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, 0x0, 0x80800, 0x15b) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x29}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000000c06010100000000000000000500000205000100070000000900020073797a32000000000500010007000000050001000700000005c2a20007000000beb8fc3195eb81488b91675d4b07bb034c74b28872a73e0da6629343f86c866780fa4b4660990467ac74e88c5ac8e5b5152d92dfda6b32fb42816f"], 0x40}, 0x1, 0x0, 0x0, 0x10040}, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 15.552385322s ago: executing program 5 (id=1161): timer_settime(0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xfdff) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x28, r6, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) syz_open_dev$evdev(0x0, 0x0, 0x100) getpid() ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x0, 0x0, 0xfffffffd, {{0x5, 0x4, 0x0, 0x0, 0x14, 0xffff, 0x0, 0x0, 0x0, 0x0, @loopback, @broadcast}}}}) 15.473016551s ago: executing program 6 (id=1162): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000280)=ANY=[@ANYRES64=r3], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) 14.590321611s ago: executing program 7 (id=1163): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x48, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x4, 0x0, "7d91b3ccaf4c63521df8f969a9a3ef8377d86e2c440fb055", "8fc99fa615e832d5f00ce4a5807ebb53fbfc8fbe4761a7cfe44dcf957dbdc946"}}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000280)={0x2, {0x2, 0x1, 0x9, 0x101, 0x400}}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 12.995613523s ago: executing program 6 (id=1166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 11.912913726s ago: executing program 5 (id=1167): syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0xfe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}}, 0x1c) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40000022) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x68}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r8, &(0x7f00000029c0)={0x8, {"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", 0x1000}}, 0x1006) sendfile(r0, r8, &(0x7f0000000100), 0x8001) 10.21309217s ago: executing program 8 (id=1168): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) shutdown(0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r4 = syz_pidfd_open(r3, 0x0) pidfd_send_signal(r4, 0x2, 0x0, 0x0) 10.039773537s ago: executing program 7 (id=1169): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000240)=@generic={0x1, 0xffffffff80000000, 0x9}) 9.913004867s ago: executing program 3 (id=1170): openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0xfffffffffffffe3c, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'team_slave_0\x00', &(0x7f0000002fc0)=@ethtool_stats}) 8.658922036s ago: executing program 5 (id=1171): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000100)=0x10, 0x80000) sendmsg(r1, 0x0, 0xa850) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) unshare(0x6a040000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@loopback, @in6=@rand_addr=' \x01\x00', 0x4e24, 0x0, 0x4e22, 0x4, 0xa, 0xa0}, {0x7e, 0x40101, 0x0, 0x20000000000, 0xfffffffbfffffffd, 0x400, 0x0, 0x8}, {0xcb29, 0x40001000000000, 0x8000, 0x20}, 0x0, 0x1, 0x1, 0x0, 0x2, 0x3}, {{@in6=@loopback, 0x0, 0x6c}, 0x2, @in6=@loopback, 0x1502, 0x1, 0x2, 0x0, 0x5, 0xfffffffd, 0x1}}, 0xe8) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mount$cgroup(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000340), 0x20004, &(0x7f0000000380)={[{}, {@clone_children}, {@nofavordynmods}, {@favordynmods}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}]}) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="880000000001010400000000141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000110c00028005000100000000002400028014000180080001000000000008000200ac1e02010c000280050001000000000024000e800c0002800500010093000000140001"], 0x88}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x18) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x200, 0x9377b5336e15b955}}}}}}]}, 0x48}}, 0x0) 8.560377722s ago: executing program 7 (id=1172): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000018110000000000000004000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) sendmsg$nl_route(r2, 0x0, 0x0) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 6.592571682s ago: executing program 8 (id=1173): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x33822}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0xffff}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x440c5}, 0x240408d0) 6.099017176s ago: executing program 3 (id=1174): r0 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x400c, &(0x7f0000000100)={[{@discard}]}, 0x1, 0x787, &(0x7f0000001000)="$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") ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x200, &(0x7f0000000440)={0x0, 0xffffffffffffff98}) 5.88067392s ago: executing program 6 (id=1175): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd6, 0x5, 0x3d3e, 0x4, 0x4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r5, 0x0, r4, 0x0, 0x3, 0x0) dup(0xffffffffffffffff) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ppoll(&(0x7f00000000c0)=[{r6, 0x747}, {r6, 0x6160}], 0x2, 0x0, 0x0, 0x0) unshare(0x2040400) signalfd4(r6, &(0x7f0000000340)={[0x1]}, 0x8, 0x80800) fcntl$setpipe(r3, 0x4, 0xfffffffffffff000) 5.701209905s ago: executing program 3 (id=1176): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.539898417s ago: executing program 8 (id=1177): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206", @ANYBLOB="1eb381f6c93a6e3ff91523d9814fe193281e9e3c21c162ec72c8ae719fef8daf6da31443c7738d9e2998ec71759a265bfcaa6384c5e3d1"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4000) 5.384962454s ago: executing program 3 (id=1178): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x18) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @empty, @local}}}}) 5.070434578s ago: executing program 8 (id=1179): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x20001, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x21}, 0x1d) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r2, 0x0, 0x0}, 0x20) 3.781472195s ago: executing program 6 (id=1180): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) 3.453225851s ago: executing program 8 (id=1181): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000780)={'ip6gre0\x00', 0x0}) 3.452818516s ago: executing program 6 (id=1182): r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) r1 = userfaultfd(0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}, 0x1}) sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="8fae18ae8c41246be32a4522ab1868c96cf8a670cd598e170d75d746b2d1b2ee752c7843afb50c46a04d6c89ebca4d6c9c4c91997a7fb9f927785e91284f904e3bbae31fcb229c2e7f3943a24d4e4f141bff56832fad0d20d0a86af1e255b3966da6babf41fe1e", 0x67, 0x20008880, &(0x7f00000000c0)={0x11, 0x4, 0x0, 0x1, 0x69, 0x6, @random="495d77dd6f96"}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) 3.289866015s ago: executing program 7 (id=1183): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2.456776762s ago: executing program 3 (id=1184): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000100)={0x0, 0x4, 0x3, &(0x7f00000000c0)={0xd, "14a6c63d876ff44271f1aca6e4486718dac2b737f00f2745b3604d70b41d4008e3"}}) 1.944929739s ago: executing program 7 (id=1185): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000007480)={0x3c, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x3c}}, 0x48040) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 770.581463ms ago: executing program 3 (id=1186): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 396.293209ms ago: executing program 8 (id=1187): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x18) io_uring_setup(0x5ea4, &(0x7f0000019080)={0x0, 0xdf4, 0x400, 0x0, 0x4032a}) clock_gettime(0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000380)={0x3c, r7, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) 0s ago: executing program 6 (id=1188): syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x1000008, &(0x7f0000001b40)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030306330612c696f636861727365743d64656661756c742c66696c655f756d61736b3d30303030303030303030303030303030303030303030312c63726561746f723d3a16dd612c63726561746f723dd2d868dc2c002e3edc12a312a3f2e00ebd5235750195d31c5be03a8604fec67da6a04f683d360b0ddd64e0ccc354be2a19862b599cd125a6167c219097b372d55bd14920d6d523016675f14596bc3a789b59b720598b4b09b75d11ebdcbb4d690b62a5af318d45c108594b1dd6d7837c77517ba387c18e4de206feace38e4e5003cf23808c69417287e4649d10fdbee156fe24ef2ae6131684c9a56b32b80aa7f4e1cdf8bdf8b24be0e416046e118a32e4ea6ff5cb9901b422c111932c0000f207007c75a674fa5831a9f88fdcb641a8acb02988e4d412d9b62229cf3d51648ed83e6290837b3d000000000000000000"], 0x4, 0x2e5, &(0x7f0000000140)="$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") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) fchown(r0, 0xee01, 0xffffffffffffffff) kernel console output (not intermixed with test programs): is enabled [ 386.874331][ T7890] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 386.875340][ T7890] EXT4-fs: failed to create workqueue [ 386.891878][ T7890] EXT4-fs (loop3): mount failed [ 388.188863][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.195404][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.654282][ T30] audit: type=1326 audit(1763167313.791:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.3.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77afd8f6c9 code=0x7ffc0000 [ 389.769957][ T30] audit: type=1326 audit(1763167313.791:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.3.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f77afd8f6c9 code=0x7ffc0000 [ 389.852685][ T30] audit: type=1326 audit(1763167313.791:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.3.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77afd8f6c9 code=0x7ffc0000 [ 391.427590][ T7517] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 391.564956][ T7517] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 392.524743][ T7517] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 392.544264][ T7945] loop3: detected capacity change from 0 to 40427 [ 392.577727][ T7517] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 392.710132][ T7945] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 392.728675][ T7945] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 393.201892][ T7517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.292416][ T7517] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.381413][ T5984] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.388609][ T5984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.476019][ T6592] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.483281][ T6592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.729735][ T7517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.749521][ T7993] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 395.757493][ T7993] IPv6: NLM_F_CREATE should be set when creating new route [ 397.181117][ T8012] loop3: detected capacity change from 0 to 512 [ 397.318464][ T8012] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.564: inode has both inline data and extents flags [ 397.385229][ T8012] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.564: couldn't read orphan inode 15 (err -117) [ 397.468542][ T8012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.889310][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.824513][ T30] audit: type=1326 audit(1763167324.871:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8030 comm="syz.5.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4098f6c9 code=0x7ffc0000 [ 401.347505][ T5841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 401.356399][ T5841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 401.368936][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 401.377259][ T5841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 401.387486][ T5841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 401.434192][ T30] audit: type=1326 audit(1763167324.871:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8030 comm="syz.5.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4098f6c9 code=0x7ffc0000 [ 401.495257][ T30] audit: type=1326 audit(1763167324.901:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8030 comm="syz.5.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4098f6c9 code=0x7ffc0000 [ 401.518955][ T30] audit: type=1326 audit(1763167324.901:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8030 comm="syz.5.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4098f6c9 code=0x7ffc0000 [ 401.604123][ T30] audit: type=1326 audit(1763167324.901:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8030 comm="syz.5.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7ffa4098f6c9 code=0x7ffc0000 [ 401.721249][ T30] audit: type=1326 audit(1763167324.911:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8030 comm="syz.5.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4098f6c9 code=0x7ffc0000 [ 402.655167][ T30] audit: type=1326 audit(1763167324.921:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8030 comm="syz.5.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4098f6c9 code=0x7ffc0000 [ 402.730864][ T30] audit: type=1326 audit(1763167324.931:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8030 comm="syz.5.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4098f6c9 code=0x7ffc0000 [ 402.811778][ T30] audit: type=1326 audit(1763167324.931:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8030 comm="syz.5.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4098f6c9 code=0x7ffc0000 [ 402.834642][ T30] audit: type=1326 audit(1763167324.931:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8030 comm="syz.5.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffa4098f6c9 code=0x7ffc0000 [ 402.878972][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 402.896107][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 402.910152][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 402.932140][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 402.950207][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 404.023186][ T5850] Bluetooth: hci6: command tx timeout [ 405.224773][ T5850] Bluetooth: hci1: command tx timeout [ 405.398276][ T8077] loop3: detected capacity change from 0 to 512 [ 405.507896][ T8077] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.576: inode has both inline data and extents flags [ 405.625904][ T8077] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.576: couldn't read orphan inode 15 (err -117) [ 405.879707][ T8081] loop5: detected capacity change from 0 to 512 [ 406.052779][ T8081] EXT4-fs (loop5): blocks per group (95) and clusters per group (32768) inconsistent [ 406.094550][ T5850] Bluetooth: hci6: command tx timeout [ 406.643303][ T8077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.390408][ T5841] Bluetooth: hci1: command tx timeout [ 408.174233][ T5841] Bluetooth: hci6: command tx timeout [ 408.546889][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.021981][ T8095] loop3: detected capacity change from 0 to 512 [ 409.134210][ T8095] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 409.238989][ T8095] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2852: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 409.280995][ T8095] EXT4-fs (loop3): 1 truncate cleaned up [ 409.310146][ T8095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.455728][ T5841] Bluetooth: hci1: command tx timeout [ 409.545723][ T8102] x_tables: unsorted underflow at hook 2 [ 410.254940][ T5841] Bluetooth: hci6: command tx timeout [ 411.330684][ T8040] chnl_net:caif_netlink_parms(): no params data found [ 411.534732][ T5841] Bluetooth: hci1: command tx timeout [ 412.567148][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.639791][ T8129] loop1: detected capacity change from 0 to 512 [ 412.697067][ T8129] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.587: inode has both inline data and extents flags [ 412.741676][ T8129] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.587: couldn't read orphan inode 15 (err -117) [ 412.918784][ T8134] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 412.926775][ T8134] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock [ 412.936049][ T8134] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 412.943935][ T8134] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock [ 413.395118][ T8129] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.440892][ T8141] loop5: detected capacity change from 0 to 4096 [ 414.480537][ T8141] EXT4-fs: Ignoring removed mblk_io_submit option [ 414.533859][ T8141] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 414.541217][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.544355][ T8141] EXT4-fs (loop5): Test dummy encryption mode enabled [ 414.571460][ T8141] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 414.680161][ T8144] loop3: detected capacity change from 0 to 4096 [ 414.720259][ T8144] EXT4-fs (loop3): Test dummy encryption mode enabled [ 414.856583][ T8144] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 414.902949][ T8144] System zones: 0-5 [ 414.961603][ T8144] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.746366][ T8159] overlayfs: failed to resolve './bus': -2 [ 416.570674][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.746289][ T8040] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.763443][ T8040] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.792148][ T8040] bridge_slave_0: entered allmulticast mode [ 416.825862][ T8040] bridge_slave_0: entered promiscuous mode [ 417.139650][ T8058] chnl_net:caif_netlink_parms(): no params data found [ 417.979388][ T8040] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.001627][ T8040] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.487129][ T8040] bridge_slave_1: entered allmulticast mode [ 418.496925][ T8040] bridge_slave_1: entered promiscuous mode [ 418.657364][ T8180] loop5: detected capacity change from 0 to 256 [ 418.787362][ T8180] FAT-fs (loop5): Directory bread(block 64) failed [ 418.793944][ T8180] FAT-fs (loop5): Directory bread(block 65) failed [ 418.840907][ T8180] FAT-fs (loop5): Directory bread(block 66) failed [ 418.847591][ T8180] FAT-fs (loop5): Directory bread(block 67) failed [ 418.854268][ T8180] FAT-fs (loop5): Directory bread(block 68) failed [ 418.860801][ T8180] FAT-fs (loop5): Directory bread(block 69) failed [ 418.867615][ T8180] FAT-fs (loop5): Directory bread(block 70) failed [ 418.874228][ T8180] FAT-fs (loop5): Directory bread(block 71) failed [ 418.880848][ T8180] FAT-fs (loop5): Directory bread(block 72) failed [ 418.887440][ T8180] FAT-fs (loop5): Directory bread(block 73) failed [ 420.883713][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 420.883738][ T30] audit: type=1326 audit(1763167345.031:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 420.957616][ T30] audit: type=1326 audit(1763167345.031:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 421.028604][ T30] audit: type=1326 audit(1763167345.071:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 421.055545][ T30] audit: type=1326 audit(1763167345.071:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 421.079335][ T30] audit: type=1326 audit(1763167345.071:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 421.103558][ T30] audit: type=1326 audit(1763167345.071:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 421.126116][ T30] audit: type=1326 audit(1763167345.081:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 421.148483][ T30] audit: type=1326 audit(1763167345.081:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 421.170937][ T30] audit: type=1326 audit(1763167345.081:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 421.179426][ T8040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.211488][ T30] audit: type=1326 audit(1763167345.081:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 421.479406][ T8188] ip6gre2: entered allmulticast mode [ 421.773171][ T8040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.829261][ T8201] loop5: detected capacity change from 0 to 4096 [ 421.855455][ T8201] EXT4-fs: Ignoring removed mblk_io_submit option [ 421.916914][ T8201] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 421.931703][ T5984] bridge_slave_1: left allmulticast mode [ 421.964245][ T5984] bridge_slave_1: left promiscuous mode [ 421.974938][ T8201] EXT4-fs (loop5): Test dummy encryption mode enabled [ 421.994297][ T5984] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.001618][ T8201] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 422.075947][ T5984] bridge_slave_0: left allmulticast mode [ 422.083777][ T8218] loop3: detected capacity change from 0 to 128 [ 422.083914][ T5984] bridge_slave_0: left promiscuous mode [ 422.124454][ T5984] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.209254][ T8218] FAT-fs (loop3): bogus number of reserved sectors [ 422.223084][ T8218] FAT-fs (loop3): Can't find a valid FAT filesystem [ 422.487176][ T8222] loop3: detected capacity change from 0 to 128 [ 422.534501][ T8222] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 423.414503][ T8232] loop5: detected capacity change from 0 to 1024 [ 423.433152][ T8232] EXT4-fs: Ignoring removed orlov option [ 423.626205][ T8232] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 423.865659][ T8232] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.984940][ T5825] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.382726][ T5984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.407944][ T5984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.446795][ T5984] bond0 (unregistering): Released all slaves [ 426.761480][ T5984] hsr_slave_0: left promiscuous mode [ 426.804677][ T5984] hsr_slave_1: left promiscuous mode [ 426.833748][ T5984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.879999][ T5984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.852017][ T8277] loop5: detected capacity change from 0 to 512 [ 427.876878][ T8274] loop1: detected capacity change from 0 to 4096 [ 427.918336][ T8274] EXT4-fs: Ignoring removed mblk_io_submit option [ 427.948473][ T8274] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 427.967209][ T8277] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.991023][ T8274] EXT4-fs (loop1): Test dummy encryption mode enabled [ 428.015099][ T8274] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 428.073088][ T8277] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 428.199939][ T8277] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.621: corrupted inode contents [ 428.281102][ T8277] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.621: mark_inode_dirty error [ 428.379728][ T8277] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.621: corrupted inode contents [ 428.478504][ T8284] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.621: corrupted inode contents [ 428.554954][ T8284] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.621: mark_inode_dirty error [ 428.570283][ T5984] team0 (unregistering): Port device team_slave_1 removed [ 428.589536][ T8284] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.621: corrupted inode contents [ 428.784394][ T5825] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.097656][ T5984] team0 (unregistering): Port device team_slave_0 removed [ 430.932779][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 430.932805][ T30] audit: type=1326 audit(1763167355.081:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8306 comm="syz.5.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4098f6c9 code=0x7ffc0000 [ 431.098093][ T8308] loop1: detected capacity change from 0 to 128 [ 431.907038][ T30] audit: type=1326 audit(1763167355.111:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8306 comm="syz.5.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa4098f6c9 code=0x7ffc0000 [ 431.929483][ T30] audit: type=1326 audit(1763167355.111:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8306 comm="syz.5.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4098f6c9 code=0x7ffc0000 [ 432.102576][ T30] audit: type=1326 audit(1763167355.121:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8306 comm="syz.5.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4098f6c9 code=0x7ffc0000 [ 432.143095][ T30] audit: type=1326 audit(1763167355.121:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8306 comm="syz.5.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa4098f6c9 code=0x7ffc0000 [ 432.225805][ T30] audit: type=1326 audit(1763167355.131:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8306 comm="syz.5.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4098f6c9 code=0x7ffc0000 [ 432.323752][ T30] audit: type=1326 audit(1763167355.141:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8306 comm="syz.5.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4098f6c9 code=0x7ffc0000 [ 432.422140][ T30] audit: type=1326 audit(1763167355.141:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8306 comm="syz.5.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa4098f6c9 code=0x7ffc0000 [ 432.471190][ T30] audit: type=1326 audit(1763167355.151:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8306 comm="syz.5.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4098f6c9 code=0x7ffc0000 [ 433.661707][ T30] audit: type=1326 audit(1763167355.151:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8306 comm="syz.5.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4098f6c9 code=0x7ffc0000 [ 434.053663][ T8321] loop5: detected capacity change from 0 to 512 [ 434.164922][ T8321] EXT4-fs (loop5): blocks per group (95) and clusters per group (32768) inconsistent [ 434.360474][ T8040] team0: Port device team_slave_0 added [ 434.447290][ T8324] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 434.653277][ T8040] team0: Port device team_slave_1 added [ 435.941884][ T8332] loop1: detected capacity change from 0 to 4096 [ 435.992125][ T8332] EXT4-fs: Ignoring removed mblk_io_submit option [ 436.009168][ T8058] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.040365][ T8332] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 436.052327][ T8058] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.090128][ T8058] bridge_slave_0: entered allmulticast mode [ 436.097880][ T8332] EXT4-fs (loop1): Test dummy encryption mode enabled [ 436.127162][ T8332] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 436.136300][ T8058] bridge_slave_0: entered promiscuous mode [ 436.255052][ T8058] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.265613][ T8058] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.272879][ T8058] bridge_slave_1: entered allmulticast mode [ 436.281535][ T8058] bridge_slave_1: entered promiscuous mode [ 438.038171][ T8058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.079912][ T8040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.121510][ T8040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.221073][ T8040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.284583][ T8040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.291579][ T8040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.344091][ T8040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.401505][ T8058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.445610][ T8361] mmap: syz.4.646 (8361) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 438.450223][ T8360] loop3: detected capacity change from 0 to 512 [ 438.785496][ T8360] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.645: inode has both inline data and extents flags [ 438.822464][ T8360] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.645: couldn't read orphan inode 15 (err -117) [ 439.525375][ T8360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.709862][ T8376] overlayfs: failed to clone upperpath [ 440.464314][ T8379] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 441.099997][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.209954][ T8058] team0: Port device team_slave_0 added [ 441.423343][ T8040] hsr_slave_0: entered promiscuous mode [ 441.456614][ T8040] hsr_slave_1: entered promiscuous mode [ 441.496500][ T8058] team0: Port device team_slave_1 added [ 441.525935][ T8386] loop1: detected capacity change from 0 to 512 [ 441.582385][ T8386] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.818766][ T8401] veth0: entered promiscuous mode [ 443.736349][ T8058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.771201][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.783584][ T8058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.822067][ T8058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.894276][ T8058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.914323][ T8058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.014255][ T8058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.055808][ T8401] veth0: left promiscuous mode [ 445.386986][ T8421] loop5: detected capacity change from 0 to 512 [ 445.475877][ T8424] capability: warning: `syz.3.658' uses deprecated v2 capabilities in a way that may be insecure [ 445.599509][ T8424] loop3: detected capacity change from 0 to 256 [ 446.215185][ T8421] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.660: inode has both inline data and extents flags [ 446.332495][ T8421] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.660: couldn't read orphan inode 15 (err -117) [ 446.408738][ T8421] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.880823][ T8428] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 447.481837][ T8058] hsr_slave_0: entered promiscuous mode [ 447.499311][ T8058] hsr_slave_1: entered promiscuous mode [ 448.481542][ T8058] debugfs: 'hsr0' already exists in 'hsr' [ 448.686871][ T8432] x_tables: duplicate underflow at hook 1 [ 448.736732][ T8058] Cannot create hsr debugfs directory [ 448.855808][ T5825] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.208216][ T5984] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.304830][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.311210][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.954367][ T30] kauditd_printk_skb: 170 callbacks suppressed [ 450.954393][ T30] audit: type=1326 audit(1763167375.101:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8445 comm="syz.4.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 451.064348][ T30] audit: type=1326 audit(1763167375.101:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8445 comm="syz.4.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 451.174291][ T30] audit: type=1326 audit(1763167375.101:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8445 comm="syz.4.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 451.260282][ T30] audit: type=1326 audit(1763167375.101:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8445 comm="syz.4.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 451.364103][ T30] audit: type=1326 audit(1763167375.101:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8445 comm="syz.4.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 451.506600][ T30] audit: type=1326 audit(1763167375.101:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8445 comm="syz.4.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 451.608856][ T30] audit: type=1326 audit(1763167375.101:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8445 comm="syz.4.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 451.656966][ T30] audit: type=1326 audit(1763167375.151:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8445 comm="syz.4.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 453.188032][ T5984] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.273217][ T8465] loop3: detected capacity change from 0 to 4096 [ 453.305500][ T8465] EXT4-fs: Ignoring removed mblk_io_submit option [ 453.339619][ T8472] loop1: detected capacity change from 0 to 128 [ 453.965487][ T8474] loop5: detected capacity change from 0 to 512 [ 454.124784][ T5984] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.266064][ T8474] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.673: inode has both inline data and extents flags [ 454.337566][ T8465] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 454.364156][ T8474] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.673: couldn't read orphan inode 15 (err -117) [ 454.394874][ T8465] EXT4-fs (loop3): Test dummy encryption mode enabled [ 454.424308][ T8465] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 454.462954][ T8474] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.698163][ T8485] fuse: blksize only supported for fuseblk [ 455.560246][ T8489] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 456.076786][ T5825] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.247406][ T5984] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.545428][ T8499] overlayfs: failed to resolve './bus': -2 [ 456.925121][ T8502] loop3: detected capacity change from 0 to 128 [ 464.323199][ T5984] bridge_slave_1: left allmulticast mode [ 464.560099][ T5984] bridge_slave_1: left promiscuous mode [ 464.997607][ T5984] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.015586][ T8535] loop1: detected capacity change from 0 to 4096 [ 465.093659][ T8535] EXT4-fs: Ignoring removed mblk_io_submit option [ 465.254869][ T8535] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 465.267402][ T5984] bridge_slave_0: left allmulticast mode [ 465.273166][ T5984] bridge_slave_0: left promiscuous mode [ 465.304109][ T8535] EXT4-fs (loop1): Test dummy encryption mode enabled [ 465.344360][ T5984] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.352132][ T8535] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 465.568244][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 465.577488][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 465.586090][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 465.595331][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 465.603272][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 468.074120][ T5841] Bluetooth: hci0: command tx timeout [ 469.551090][ T5841] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 469.563507][ T5841] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 469.572506][ T5841] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 469.581668][ T5841] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 469.590360][ T5841] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 469.885841][ T8567] Invalid ELF header type: 3 != 1 [ 470.367435][ T5850] Bluetooth: hci0: command tx timeout [ 470.947565][ T5984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.958625][ T5984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.970662][ T5984] bond0 (unregistering): Released all slaves [ 470.994457][ T8549] ip6gretap1: entered allmulticast mode [ 471.348319][ T8579] loop3: detected capacity change from 0 to 256 [ 471.410038][ T8579] FAT-fs (loop3): Directory bread(block 64) failed [ 471.417297][ T8579] FAT-fs (loop3): Directory bread(block 65) failed [ 471.424026][ T8579] FAT-fs (loop3): Directory bread(block 66) failed [ 471.430865][ T8579] FAT-fs (loop3): Directory bread(block 67) failed [ 471.447270][ T8579] FAT-fs (loop3): Directory bread(block 68) failed [ 471.465295][ T8579] FAT-fs (loop3): Directory bread(block 69) failed [ 471.477937][ T8579] FAT-fs (loop3): Directory bread(block 70) failed [ 471.484742][ T8579] FAT-fs (loop3): Directory bread(block 71) failed [ 471.491620][ T8579] FAT-fs (loop3): Directory bread(block 72) failed [ 471.498279][ T8579] FAT-fs (loop3): Directory bread(block 73) failed [ 471.912645][ T5850] Bluetooth: hci7: command tx timeout [ 472.471947][ T5850] Bluetooth: hci0: command tx timeout [ 473.326422][ T8602] binder_alloc: 8585: binder_alloc_buf, no vma [ 473.374704][ T8601] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 473.934301][ T5850] Bluetooth: hci7: command tx timeout [ 474.201445][ T5984] hsr_slave_0: left promiscuous mode [ 474.244145][ T5984] hsr_slave_1: left promiscuous mode [ 474.256297][ T5984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.283615][ T5984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.295701][ T5984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.313499][ T5984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.423750][ T5984] veth1_macvtap: left promiscuous mode [ 474.473565][ T5984] veth0_macvtap: left promiscuous mode [ 474.494244][ T5850] Bluetooth: hci0: command tx timeout [ 474.504922][ T5984] veth1_vlan: left promiscuous mode [ 474.510273][ T5984] veth0_vlan: left promiscuous mode [ 475.290608][ T8630] loop3: detected capacity change from 0 to 128 [ 475.925850][ T30] audit: type=1800 audit(1763167399.611:714): pid=8630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.704" name="bus" dev="loop3" ino=1048636 res=0 errno=0 [ 476.092924][ T5850] Bluetooth: hci7: command tx timeout [ 478.065428][ T8636] loop5: detected capacity change from 0 to 256 [ 478.129108][ T8636] FAT-fs (loop5): Directory bread(block 64) failed [ 478.144178][ T8636] FAT-fs (loop5): Directory bread(block 65) failed [ 478.154513][ T8636] FAT-fs (loop5): Directory bread(block 66) failed [ 478.161062][ T8636] FAT-fs (loop5): Directory bread(block 67) failed [ 478.174490][ T5850] Bluetooth: hci7: command tx timeout [ 478.218659][ T8636] FAT-fs (loop5): Directory bread(block 68) failed [ 478.234175][ T8636] FAT-fs (loop5): Directory bread(block 69) failed [ 478.240834][ T8636] FAT-fs (loop5): Directory bread(block 70) failed [ 478.294831][ T8636] FAT-fs (loop5): Directory bread(block 71) failed [ 478.301509][ T8636] FAT-fs (loop5): Directory bread(block 72) failed [ 478.352868][ T8636] FAT-fs (loop5): Directory bread(block 73) failed [ 479.905379][ T8652] loop1: detected capacity change from 0 to 512 [ 480.001389][ T8652] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.712: inode has both inline data and extents flags [ 480.017714][ T8652] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.712: couldn't read orphan inode 15 (err -117) [ 480.039950][ T8652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.118609][ T5984] team0 (unregistering): Port device team_slave_1 removed [ 480.230338][ T5984] team0 (unregistering): Port device team_slave_0 removed [ 480.490969][ T8665] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 481.102218][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.707039][ T8676] netlink: 16 bytes leftover after parsing attributes in process `syz.1.718'. [ 482.932194][ T8687] netlink: 277 bytes leftover after parsing attributes in process `syz.3.719'. [ 483.654909][ T8676] veth3: entered promiscuous mode [ 483.662000][ T8676] veth3: entered allmulticast mode [ 484.678465][ T8541] chnl_net:caif_netlink_parms(): no params data found [ 484.795043][ T8699] netlink: 96 bytes leftover after parsing attributes in process `syz.3.724'. [ 485.138778][ T8699] vlan2: entered allmulticast mode [ 485.168082][ T8699] gretap0: entered allmulticast mode [ 485.995223][ T8558] chnl_net:caif_netlink_parms(): no params data found [ 486.393553][ T8723] loop5: detected capacity change from 0 to 512 [ 486.504447][ T8723] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.728: inode has both inline data and extents flags [ 486.534761][ T8723] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.728: couldn't read orphan inode 15 (err -117) [ 486.606665][ T8723] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.875988][ T8541] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.883245][ T8541] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.912884][ T8541] bridge_slave_0: entered allmulticast mode [ 486.955004][ T8541] bridge_slave_0: entered promiscuous mode [ 486.993513][ T8722] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 487.542291][ T5825] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.600350][ T8558] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.612089][ T8558] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.639173][ T8558] bridge_slave_0: entered allmulticast mode [ 487.659889][ T8558] bridge_slave_0: entered promiscuous mode [ 487.721308][ T8541] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.746433][ T8541] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.764270][ T8541] bridge_slave_1: entered allmulticast mode [ 487.780500][ T8541] bridge_slave_1: entered promiscuous mode [ 487.995060][ T8558] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.032825][ T8558] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.050496][ T8558] bridge_slave_1: entered allmulticast mode [ 488.087354][ T8558] bridge_slave_1: entered promiscuous mode [ 488.247611][ T8541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.263546][ T8762] overlayfs: missing 'lowerdir' [ 489.468734][ T8541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.568839][ T8558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.619479][ T8558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.685429][ T8541] team0: Port device team_slave_0 added [ 490.779692][ T8558] team0: Port device team_slave_0 added [ 490.865249][ T8541] team0: Port device team_slave_1 added [ 490.997365][ T8558] team0: Port device team_slave_1 added [ 491.342306][ T8558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.369732][ T8558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.425837][ T8558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.487502][ T8541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.511875][ T8541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.614102][ T8541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.659571][ T8541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.689261][ T8541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.019843][ T8541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.032135][ T8558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.039842][ T8558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.646856][ T8558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.741851][ T8794] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 492.752749][ T8794] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 492.762537][ T8794] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 492.860513][ T8799] loop3: detected capacity change from 0 to 512 [ 493.017831][ T8799] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.742: inode has both inline data and extents flags [ 493.068070][ T8799] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.742: couldn't read orphan inode 15 (err -117) [ 493.102961][ T5984] bridge_slave_1: left allmulticast mode [ 493.117337][ T8799] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.117529][ T5984] bridge_slave_1: left promiscuous mode [ 493.140294][ T5984] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.406304][ T5984] bridge_slave_0: left allmulticast mode [ 493.411992][ T5984] bridge_slave_0: left promiscuous mode [ 494.229376][ T5984] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.261845][ T5984] bridge_slave_1: left allmulticast mode [ 494.276459][ T5984] bridge_slave_1: left promiscuous mode [ 494.289921][ T5984] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.318043][ T5984] bridge_slave_0: left allmulticast mode [ 494.324205][ T5984] bridge_slave_0: left promiscuous mode [ 495.022648][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.048589][ T5984] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.721352][ T5984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.841247][ T5984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.912072][ T5984] bond0 (unregistering): Released all slaves [ 496.517041][ T5984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.558273][ T5984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.624702][ T5984] bond0 (unregistering): Released all slaves [ 496.831094][ T8558] hsr_slave_0: entered promiscuous mode [ 496.874814][ T8558] hsr_slave_1: entered promiscuous mode [ 496.891196][ T8558] debugfs: 'hsr0' already exists in 'hsr' [ 496.921326][ T8558] Cannot create hsr debugfs directory [ 497.081647][ T8541] hsr_slave_0: entered promiscuous mode [ 497.098034][ T8541] hsr_slave_1: entered promiscuous mode [ 497.163370][ T8541] debugfs: 'hsr0' already exists in 'hsr' [ 497.179569][ T8541] Cannot create hsr debugfs directory [ 498.038719][ T5984] hsr_slave_0: left promiscuous mode [ 498.059843][ T5984] hsr_slave_1: left promiscuous mode [ 498.087136][ T5984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.130081][ T5984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.219476][ T5984] hsr_slave_0: left promiscuous mode [ 498.260758][ T5984] hsr_slave_1: left promiscuous mode [ 498.275103][ T5984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.298328][ T5984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.415920][ T5984] team0 (unregistering): Port device team_slave_1 removed [ 499.466138][ T5984] team0 (unregistering): Port device team_slave_0 removed [ 501.641964][ T5984] team0 (unregistering): Port device team_slave_1 removed [ 501.668211][ T8855] xt_socket: unknown flags 0x50 [ 501.723006][ T5984] team0 (unregistering): Port device team_slave_0 removed [ 501.751719][ T30] audit: type=1107 audit(1763167425.891:715): pid=8853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 504.067325][ T8877] netlink: 148 bytes leftover after parsing attributes in process `syz.5.760'. [ 504.076632][ T8877] netlink: 116 bytes leftover after parsing attributes in process `syz.5.760'. [ 504.085754][ T8877] netlink: 24 bytes leftover after parsing attributes in process `syz.5.760'. [ 504.580087][ T8877] netlink: 16 bytes leftover after parsing attributes in process `syz.5.760'. [ 504.592357][ T8877] tc_dump_action: action bad kind [ 506.969183][ T8898] loop3: detected capacity change from 0 to 256 [ 506.980221][ T8898] msdos: Unknown parameter 'ÿÿÿÿ' [ 507.136135][ T8899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.767'. [ 508.336530][ T8912] xt_hashlimit: size too large, truncated to 1048576 [ 510.141581][ T8935] Bluetooth: MGMT ver 1.23 [ 511.103283][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.109723][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.796985][ T8558] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 511.842193][ T8558] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 511.892690][ T8558] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 511.995482][ T8558] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 512.384048][ T8541] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 512.423711][ T8541] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 512.489565][ T8541] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 512.548921][ T8541] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 512.714857][ T5921] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 512.757061][ T8558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.891080][ T8558] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.907034][ T5921] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 513.071447][ T5921] usb 2-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 513.176253][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.399464][ T5921] usb 2-1: config 0 descriptor?? [ 513.661818][ T6593] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.669051][ T6593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.770971][ T6593] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.778225][ T6593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.924756][ T30] audit: type=1326 audit(1763167438.071:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77afd8f6c9 code=0x7ffc0000 [ 514.007918][ T5921] uclogic 0003:2179:0053.0003: interface is invalid, ignoring [ 514.033391][ T30] audit: type=1326 audit(1763167438.071:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77afd8f6c9 code=0x7ffc0000 [ 514.095389][ T30] audit: type=1326 audit(1763167438.081:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f77afd8f6c9 code=0x7ffc0000 [ 514.176819][ T30] audit: type=1326 audit(1763167438.081:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77afd8f6c9 code=0x7ffc0000 [ 514.224750][ T913] usb 2-1: USB disconnect, device number 4 [ 514.269461][ T8541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.052983][ T30] audit: type=1326 audit(1763167438.081:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77afd8f6c9 code=0x7ffc0000 [ 515.237046][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.785'. [ 515.428940][ T8541] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.523551][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.530794][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.615383][ T6592] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.622604][ T6592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.316813][ T30] audit: type=1326 audit(1763167440.471:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9016 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f980178f6c9 code=0x7ffc0000 [ 516.546700][ T30] audit: type=1326 audit(1763167440.471:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9016 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f980178f6c9 code=0x7ffc0000 [ 517.481424][ T30] audit: type=1326 audit(1763167440.641:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9016 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f980178f6c9 code=0x7ffc0000 [ 517.552942][ T30] audit: type=1326 audit(1763167440.641:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9016 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f980178f6c9 code=0x7ffc0000 [ 517.608339][ T8558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.702099][ T30] audit: type=1326 audit(1763167440.641:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9016 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f980178f6c9 code=0x7ffc0000 [ 518.215555][ T9039] loop1: detected capacity change from 0 to 256 [ 518.343465][ T9039] netlink: 48 bytes leftover after parsing attributes in process `syz.1.793'. [ 520.597446][ T9056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.796'. [ 521.386863][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 521.404669][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 521.413351][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 521.434198][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 521.444483][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 523.449727][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 523.468794][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 523.477554][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 523.497209][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 523.516170][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 523.534167][ T5841] Bluetooth: hci0: command tx timeout [ 524.481821][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 524.482507][ T30] audit: type=1326 audit(1763167448.631:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9096 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77afd8f6c9 code=0x7ffc0000 [ 524.592707][ T30] audit: type=1326 audit(1763167448.631:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9096 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77afd8f6c9 code=0x7ffc0000 [ 524.653333][ T30] audit: type=1326 audit(1763167448.631:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9096 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f77afd8f6c9 code=0x7ffc0000 [ 524.715206][ T30] audit: type=1326 audit(1763167448.631:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9096 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77afd8f6c9 code=0x7ffc0000 [ 524.765355][ T30] audit: type=1326 audit(1763167448.631:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9096 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77afd8f6c9 code=0x7ffc0000 [ 524.828532][ T6335] bridge_slave_1: left allmulticast mode [ 524.838435][ T6335] bridge_slave_1: left promiscuous mode [ 524.864598][ T6335] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.948805][ T6335] bridge_slave_0: left allmulticast mode [ 524.984309][ T6335] bridge_slave_0: left promiscuous mode [ 524.990148][ T6335] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.341985][ T9107] loop1: detected capacity change from 0 to 512 [ 525.367712][ T9107] EXT4-fs: Ignoring removed mblk_io_submit option [ 525.402763][ T9107] EXT4-fs: inline encryption not supported [ 525.424167][ T9107] ext4: Unknown parameter 'smackfstransmute' [ 525.629161][ T5850] Bluetooth: hci1: command tx timeout [ 525.636301][ T5850] Bluetooth: hci0: command tx timeout [ 526.380162][ T9116] loop5: detected capacity change from 0 to 1024 [ 526.412294][ T9116] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 526.415084][ T9118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.810'. [ 526.447429][ T9116] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 526.491069][ T9116] EXT4-fs error (device loop5): ext4_lookup:1787: inode #15: comm syz.5.811: inode has both inline data and extents flags [ 526.531758][ T9116] EXT4-fs error (device loop5): ext4_lookup:1787: inode #15: comm syz.5.811: inode has both inline data and extents flags [ 526.639154][ T5825] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 526.797363][ T6335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.037914][ T6335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.050118][ T6335] bond0 (unregistering): Released all slaves [ 527.469553][ T6335] hsr_slave_0: left promiscuous mode [ 527.695416][ T5841] Bluetooth: hci0: command tx timeout [ 527.700866][ T5841] Bluetooth: hci1: command tx timeout [ 528.096827][ T6335] hsr_slave_1: left promiscuous mode [ 528.116138][ T6335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.454815][ T6335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.801668][ T5850] Bluetooth: hci1: command tx timeout [ 529.807390][ T5850] Bluetooth: hci0: command tx timeout [ 530.372890][ T6335] team0 (unregistering): Port device team_slave_1 removed [ 530.447395][ T6335] team0 (unregistering): Port device team_slave_0 removed [ 530.514053][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 530.688149][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 530.733218][ T24] usb 6-1: config 6 has an invalid interface number: 46 but max is 0 [ 530.762274][ T24] usb 6-1: config 6 has no interface number 0 [ 530.784879][ T24] usb 6-1: config 6 interface 46 has no altsetting 0 [ 530.798867][ T24] usb 6-1: New USB device found, idVendor=046d, idProduct=0850, bcdDevice=66.9c [ 530.808791][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.829387][ T24] usb 6-1: Product: syz [ 530.833578][ T24] usb 6-1: Manufacturer: syz [ 530.849670][ T24] usb 6-1: SerialNumber: syz [ 531.100302][ T24] gspca_main: STV06xx-2.14.0 probing 046d:0850 [ 531.137633][ T24] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 531.192609][ T24] snd-usb-audio 6-1:6.46: probe with driver snd-usb-audio failed with error -22 [ 531.854606][ T5841] Bluetooth: hci1: command tx timeout [ 531.893037][ T24] usb 6-1: USB disconnect, device number 3 [ 531.950500][ T7046] udevd[7046]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:6.46/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 532.113154][ T9057] chnl_net:caif_netlink_parms(): no params data found [ 534.590733][ T9083] chnl_net:caif_netlink_parms(): no params data found [ 534.927343][ T9188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.830'. [ 535.096306][ T9057] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.120577][ T9057] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.136060][ T9057] bridge_slave_0: entered allmulticast mode [ 535.163547][ T9057] bridge_slave_0: entered promiscuous mode [ 535.353664][ T9057] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.376688][ T9057] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.383938][ T9057] bridge_slave_1: entered allmulticast mode [ 535.402833][ T9057] bridge_slave_1: entered promiscuous mode [ 535.745614][ T9083] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.765538][ T9083] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.772781][ T9083] bridge_slave_0: entered allmulticast mode [ 536.126014][ T9083] bridge_slave_0: entered promiscuous mode [ 536.689783][ T9057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.746124][ T9083] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.765334][ T9083] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.779942][ T9083] bridge_slave_1: entered allmulticast mode [ 536.804988][ T9083] bridge_slave_1: entered promiscuous mode [ 536.841466][ T9057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.871796][ T9057] team0: Port device team_slave_0 added [ 540.901589][ T9244] ip6gretap1: entered allmulticast mode [ 541.828133][ T9083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.901707][ T9057] team0: Port device team_slave_1 added [ 542.369798][ T9083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.512971][ T9057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.533650][ T9057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.610945][ T9057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.580998][ T9083] team0: Port device team_slave_0 added [ 543.631305][ T9057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.658978][ T9057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.777972][ T9057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.874892][ T9083] team0: Port device team_slave_1 added [ 544.774497][ T9279] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 544.903644][ T9057] hsr_slave_0: entered promiscuous mode [ 544.925561][ T9057] hsr_slave_1: entered promiscuous mode [ 545.207956][ T9083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.230200][ T9083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.290745][ T9083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.360599][ T9083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.415033][ T9083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.484909][ T9083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.556367][ T9295] loop5: detected capacity change from 0 to 16 [ 545.582328][ T9295] erofs (device loop5): too large lz4 pclusterblks 16832 [ 547.192967][ T9083] hsr_slave_0: entered promiscuous mode [ 547.211436][ T9083] hsr_slave_1: entered promiscuous mode [ 547.226378][ T9083] debugfs: 'hsr0' already exists in 'hsr' [ 547.242349][ T9083] Cannot create hsr debugfs directory [ 547.415556][ T6335] bridge_slave_1: left allmulticast mode [ 547.422473][ T6335] bridge_slave_1: left promiscuous mode [ 547.441828][ T6335] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.469792][ T6335] bridge_slave_0: left allmulticast mode [ 547.484062][ T6335] bridge_slave_0: left promiscuous mode [ 547.500094][ T6335] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.879367][ T6335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.924690][ T6335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.946459][ T6335] bond0 (unregistering): Released all slaves [ 552.876259][ T6335] hsr_slave_0: left promiscuous mode [ 552.915042][ T6335] hsr_slave_1: left promiscuous mode [ 552.930893][ T6335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.934913][ T9309] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 552.974530][ T9309] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 552.994001][ T9309] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 553.023701][ T6335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.317574][ T30] audit: type=1326 audit(1763167477.471:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9338 comm="syz.5.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4098f6c9 code=0x7ffc0000 [ 554.268236][ T9350] netlink: 28 bytes leftover after parsing attributes in process `syz.3.862'. [ 554.288673][ T30] audit: type=1326 audit(1763167477.501:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9338 comm="syz.5.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4098f6c9 code=0x7ffc0000 [ 554.817809][ T9352] netlink: 24 bytes leftover after parsing attributes in process `syz.3.862'. [ 555.373190][ T30] audit: type=1326 audit(1763167477.531:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9338 comm="syz.5.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa4098f6c9 code=0x7ffc0000 [ 556.390845][ T30] audit: type=1326 audit(1763167477.531:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9338 comm="syz.5.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4098f6c9 code=0x7ffc0000 [ 557.184315][ T5850] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 557.202033][ T5850] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 557.215452][ T5850] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 557.222683][ T30] audit: type=1326 audit(1763167477.531:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9338 comm="syz.5.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4098f6c9 code=0x7ffc0000 [ 557.246383][ T5850] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 557.254339][ T5850] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 557.290344][ T30] audit: type=1326 audit(1763167477.591:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9338 comm="syz.5.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa4098f6c9 code=0x7ffc0000 [ 557.313138][ T30] audit: type=1326 audit(1763167477.591:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9338 comm="syz.5.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4098f6c9 code=0x7ffc0000 [ 557.357640][ T30] audit: type=1326 audit(1763167477.591:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9338 comm="syz.5.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4098f6c9 code=0x7ffc0000 [ 557.452111][ T30] audit: type=1326 audit(1763167477.591:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9338 comm="syz.5.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa4098f6c9 code=0x7ffc0000 [ 557.564147][ T30] audit: type=1326 audit(1763167477.601:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9338 comm="syz.5.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4098f6c9 code=0x7ffc0000 [ 560.200815][ T6335] team0 (unregistering): Port device team_slave_1 removed [ 560.215956][ T9383] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 560.334415][ T5850] Bluetooth: hci6: command tx timeout [ 560.351753][ T6335] team0 (unregistering): Port device team_slave_0 removed [ 562.423113][ T5850] Bluetooth: hci6: command tx timeout [ 563.000292][ T6335] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.099468][ T9057] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 563.152795][ T9355] chnl_net:caif_netlink_parms(): no params data found [ 563.396222][ T6335] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.421388][ T9057] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 563.536895][ T9057] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 563.594117][ T6335] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.762051][ T9057] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 564.027227][ T6335] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.642509][ T5850] Bluetooth: hci6: command tx timeout [ 564.941438][ T9355] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.970385][ T9355] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.002789][ T9355] bridge_slave_0: entered allmulticast mode [ 565.020362][ T9355] bridge_slave_0: entered promiscuous mode [ 565.078221][ T9355] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.120875][ T9355] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.150884][ T9355] bridge_slave_1: entered allmulticast mode [ 565.172403][ T9355] bridge_slave_1: entered promiscuous mode [ 565.526893][ T9355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.714415][ T9355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.655212][ T5850] Bluetooth: hci6: command tx timeout [ 566.765737][ T6335] bridge_slave_1: left allmulticast mode [ 566.787648][ T6335] bridge_slave_1: left promiscuous mode [ 566.803722][ T6335] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.123475][ T6335] bridge_slave_0: left allmulticast mode [ 567.129870][ T6335] bridge_slave_0: left promiscuous mode [ 567.136172][ T6335] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.358462][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 568.358488][ T30] audit: type=1326 audit(1763167492.511:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9468 comm="syz.3.881" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f77afd8f6c9 code=0x0 [ 568.868624][ T6033] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 568.922085][ T6335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 568.933418][ T6335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 568.944700][ T6335] bond0 (unregistering): Released all slaves [ 568.967684][ T9355] team0: Port device team_slave_0 added [ 569.022644][ T9355] team0: Port device team_slave_1 added [ 569.065631][ T6033] usb 4-1: Using ep0 maxpacket: 16 [ 569.075647][ T6033] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 569.083825][ T6033] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.095341][ T6033] usb 4-1: config 0 has no interface number 0 [ 569.107581][ T9355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.117026][ T9355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.143771][ T9355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.155871][ T6033] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 569.173399][ T6033] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.182301][ T6033] usb 4-1: Product: syz [ 569.186625][ T6033] usb 4-1: Manufacturer: syz [ 569.191309][ T6033] usb 4-1: SerialNumber: syz [ 569.211440][ T6033] usb 4-1: config 0 descriptor?? [ 569.225381][ T9083] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 569.249432][ T6033] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 569.261132][ T6033] uvcvideo 4-1:0.105: No valid video chain found. [ 569.283041][ T9083] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 569.324575][ T9083] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 569.592635][ T9481] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 570.094825][ T9057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.102684][ T9355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.126287][ T9355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.169794][ T9355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.212957][ T9083] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 570.612915][ T9355] hsr_slave_0: entered promiscuous mode [ 570.630328][ T9355] hsr_slave_1: entered promiscuous mode [ 570.645273][ T9355] debugfs: 'hsr0' already exists in 'hsr' [ 570.658013][ T9355] Cannot create hsr debugfs directory [ 570.748197][ T6335] hsr_slave_0: left promiscuous mode [ 570.755212][ T6335] hsr_slave_1: left promiscuous mode [ 570.761436][ T6335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.770761][ T6335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.779425][ T6335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.788477][ T6335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 571.505199][ T6335] veth0_macvtap: left promiscuous mode [ 571.519821][ T6070] usb 4-1: USB disconnect, device number 2 [ 571.551692][ T6335] veth1_vlan: left promiscuous mode [ 571.573060][ T6335] veth0_vlan: left promiscuous mode [ 573.053781][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.060267][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 574.369267][ T30] audit: type=1326 audit(1763167498.521:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.4.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 574.514114][ T30] audit: type=1326 audit(1763167498.521:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.4.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 574.667748][ T30] audit: type=1326 audit(1763167498.551:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.4.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 575.205141][ T30] audit: type=1326 audit(1763167498.551:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.4.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 575.228107][ T30] audit: type=1326 audit(1763167498.551:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.4.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 575.527285][ T6335] team0 (unregistering): Port device team_slave_1 removed [ 575.581413][ T6335] team0 (unregistering): Port device team_slave_0 removed [ 577.973261][ T9083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.020109][ T9083] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.053792][ T5984] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.061198][ T5984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.154744][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.161919][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.008132][ T9562] ip6gre3: entered promiscuous mode [ 579.013571][ T9562] ip6gre3: entered allmulticast mode [ 579.664444][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 579.675148][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 579.686692][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 579.700975][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 580.357657][ T9355] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 580.385467][ T30] audit: type=1326 audit(1763167504.531:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9577 comm="syz.4.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 580.490481][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 580.509514][ T30] audit: type=1326 audit(1763167504.531:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9577 comm="syz.4.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 580.650764][ T30] audit: type=1326 audit(1763167504.531:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9577 comm="syz.4.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 580.726470][ T9355] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 580.983514][ T30] audit: type=1326 audit(1763167504.531:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9577 comm="syz.4.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 581.413530][ T30] audit: type=1326 audit(1763167504.531:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9577 comm="syz.4.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 581.434106][ T9355] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 581.451986][ T30] audit: type=1326 audit(1763167504.531:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9577 comm="syz.4.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 581.486727][ T30] audit: type=1326 audit(1763167504.561:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9577 comm="syz.4.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 581.494693][ T9355] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 581.553077][ T30] audit: type=1326 audit(1763167504.561:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9577 comm="syz.4.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 581.630390][ T30] audit: type=1326 audit(1763167504.571:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9577 comm="syz.4.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 581.669691][ T30] audit: type=1326 audit(1763167504.581:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9577 comm="syz.4.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 581.783029][ T9083] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 582.574508][ T5850] Bluetooth: hci4: command tx timeout [ 584.395899][ T9568] chnl_net:caif_netlink_parms(): no params data found [ 584.714071][ T5841] Bluetooth: hci4: command tx timeout [ 585.020855][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 585.037016][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 585.046453][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 585.058517][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 585.067638][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 585.079668][ T9355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.144929][ T6335] bridge_slave_1: left allmulticast mode [ 585.153671][ T6335] bridge_slave_1: left promiscuous mode [ 585.162310][ T6335] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.181313][ T6335] bridge_slave_0: left allmulticast mode [ 585.191095][ T6335] bridge_slave_0: left promiscuous mode [ 585.205206][ T6335] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.091949][ T6335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 586.122479][ T6335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 586.157138][ T6335] bond0 (unregistering): Released all slaves [ 586.774772][ T5850] Bluetooth: hci4: command tx timeout [ 587.134416][ T5850] Bluetooth: hci0: command tx timeout [ 587.444743][ T6335] hsr_slave_0: left promiscuous mode [ 587.453429][ T6335] hsr_slave_1: left promiscuous mode [ 587.471760][ T6335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.481505][ T6335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.847898][ T6335] team0 (unregistering): Port device team_slave_1 removed [ 587.916090][ T6335] team0 (unregistering): Port device team_slave_0 removed [ 588.254302][ T9688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.917'. [ 588.814089][ T5850] Bluetooth: hci4: command tx timeout [ 588.974879][ T9683] vlan2: entered allmulticast mode [ 589.008392][ T9688] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 589.217257][ T5850] Bluetooth: hci0: command tx timeout [ 589.239022][ T9568] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.265683][ T9568] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.273397][ T9568] bridge_slave_0: entered allmulticast mode [ 589.286076][ T9568] bridge_slave_0: entered promiscuous mode [ 589.367147][ T9355] 8021q: adding VLAN 0 to HW filter on device team0 [ 589.409775][ T9568] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.437670][ T9568] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.453533][ T9568] bridge_slave_1: entered allmulticast mode [ 589.472400][ T9568] bridge_slave_1: entered promiscuous mode [ 591.129188][ T6592] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.136438][ T6592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 591.155070][ T9568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.206106][ T9711] veth0: entered promiscuous mode [ 591.364092][ T5850] Bluetooth: hci0: command tx timeout [ 591.967337][ T9568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.038550][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.045746][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.056356][ T9711] veth0: left promiscuous mode [ 592.155619][ T9725] loop3: detected capacity change from 0 to 512 [ 592.163272][ T9725] EXT4-fs: Ignoring removed nomblk_io_submit option [ 592.267501][ T9725] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 3: comm syz.3.926: lblock 0 mapped to illegal pblock 3 (length 1) [ 592.293173][ T9725] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.926: error -117 reading directory block [ 592.309423][ T9725] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 592.320138][ T9725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.386206][ T9568] team0: Port device team_slave_0 added [ 593.123298][ T9732] loop5: detected capacity change from 0 to 512 [ 593.165939][ T9568] team0: Port device team_slave_1 added [ 593.172009][ T9732] ext3: Unknown parameter 'permit_directio' [ 593.383560][ T5850] Bluetooth: hci0: command tx timeout [ 593.656512][ T9568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.677260][ T9568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.712875][ T9568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.746669][ T9568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.766858][ T9568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.827646][ T9568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.681239][ T9727] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set [ 595.335481][ T9568] hsr_slave_0: entered promiscuous mode [ 595.365795][ T9568] hsr_slave_1: entered promiscuous mode [ 595.497839][ T9634] chnl_net:caif_netlink_parms(): no params data found [ 596.027303][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.094986][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 596.095010][ T30] audit: type=1326 audit(1763167520.251:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9769 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 596.156463][ T30] audit: type=1326 audit(1763167520.251:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9769 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 596.215778][ T30] audit: type=1326 audit(1763167520.281:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9769 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 596.267027][ T30] audit: type=1326 audit(1763167520.281:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9769 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 596.295498][ T30] audit: type=1326 audit(1763167520.281:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9769 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 596.319413][ T30] audit: type=1326 audit(1763167520.311:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9769 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 596.342239][ T30] audit: type=1326 audit(1763167520.311:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9769 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 596.369052][ T9634] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.376399][ T30] audit: type=1326 audit(1763167520.311:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9769 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 596.395752][ T9634] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.409885][ T30] audit: type=1326 audit(1763167520.311:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9769 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 596.433058][ T30] audit: type=1326 audit(1763167520.311:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9769 comm="syz.4.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 596.444226][ T9634] bridge_slave_0: entered allmulticast mode [ 596.465563][ T9634] bridge_slave_0: entered promiscuous mode [ 596.514167][ T5963] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 596.552317][ T9634] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.563688][ T9634] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.571239][ T9634] bridge_slave_1: entered allmulticast mode [ 596.581692][ T9634] bridge_slave_1: entered promiscuous mode [ 596.602855][ T9355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 596.612639][ T6335] bridge_slave_1: left allmulticast mode [ 596.628124][ T6335] bridge_slave_1: left promiscuous mode [ 596.633965][ T6335] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.676019][ T5963] usb 4-1: Using ep0 maxpacket: 8 [ 596.684090][ T6335] bridge_slave_0: left allmulticast mode [ 596.686627][ T5963] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 596.689755][ T6335] bridge_slave_0: left promiscuous mode [ 596.689974][ T6335] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.701236][ T5963] usb 4-1: config 179 has no interface number 0 [ 596.721956][ T5963] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 596.742437][ T5963] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 596.770086][ T5963] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 596.825672][ T5963] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 596.870098][ T5963] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 596.908141][ T5963] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 596.939903][ T5963] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.989131][ T9772] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 597.239403][ T9772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.251304][ T9772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.557865][ T24] usb 4-1: USB disconnect, device number 3 [ 597.557877][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 597.572870][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 597.940906][ T6335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 597.958776][ T6335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 597.973271][ T6335] bond0 (unregistering): Released all slaves [ 598.234894][ T6335] hsr_slave_0: left promiscuous mode [ 598.255082][ T6335] hsr_slave_1: left promiscuous mode [ 598.276078][ T6335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.308179][ T6335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.848049][ T6335] team0 (unregistering): Port device team_slave_1 removed [ 598.881313][ T6335] team0 (unregistering): Port device team_slave_0 removed [ 599.172667][ T9802] netlink: 96 bytes leftover after parsing attributes in process `syz.3.942'. [ 599.357888][ T9634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.408335][ T9634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.708188][ T9634] team0: Port device team_slave_0 added [ 599.766460][ T9634] team0: Port device team_slave_1 added [ 600.846986][ T9634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.874599][ T9634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.925682][ T9634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.977155][ T9634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 600.992424][ T9634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.076363][ T9634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.314483][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 602.272310][ T9355] veth0_vlan: entered promiscuous mode [ 602.414547][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 602.423373][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 602.432609][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 602.850625][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 603.183021][ T9849] ./file0: Can't lookup blockdev [ 603.536504][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 603.547938][ T9634] hsr_slave_0: entered promiscuous mode [ 603.569546][ T9634] hsr_slave_1: entered promiscuous mode [ 603.584885][ T9634] debugfs: 'hsr0' already exists in 'hsr' [ 603.600853][ T9634] Cannot create hsr debugfs directory [ 604.130684][ T9355] veth1_vlan: entered promiscuous mode [ 605.168671][ T9863] tipc: Started in network mode [ 605.173592][ T9863] tipc: Node identity ac14140f, cluster identity 4711 [ 605.181112][ T9863] tipc: New replicast peer: 255.255.255.255 [ 605.188045][ T9863] tipc: Enabled bearer , priority 10 [ 605.557223][ T9355] veth0_macvtap: entered promiscuous mode [ 605.702153][ T9355] veth1_macvtap: entered promiscuous mode [ 605.719909][ T9568] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 605.756484][ T9568] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 605.760189][ T9872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.958'. [ 605.784348][ T9568] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 605.826234][ T9568] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 605.942676][ T9355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 606.030060][ T9355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 606.077723][ T198] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.117498][ T198] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.169649][ T198] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.255660][ T198] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.607882][ T24] tipc: Node number set to 2886997007 [ 608.930374][ T1331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.025574][ T1331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.223270][ T9568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.308406][ T9568] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.317895][ T1331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.330837][ T1331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.401075][ T1331] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.408290][ T1331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.491654][ T1331] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.498867][ T1331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.594255][ T9634] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 609.627465][ T9634] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 609.667047][ T9634] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 609.716906][ T9634] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 609.801049][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 609.801074][ T30] audit: type=1326 audit(1763167533.951:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9941 comm="syz.8.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a7318f6c9 code=0x7ffc0000 [ 609.901947][ T30] audit: type=1326 audit(1763167533.951:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9941 comm="syz.8.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a7318f6c9 code=0x7ffc0000 [ 609.951698][ T30] audit: type=1326 audit(1763167533.951:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9941 comm="syz.8.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f4a7318f6c9 code=0x7ffc0000 [ 609.999257][ T30] audit: type=1326 audit(1763167533.951:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9941 comm="syz.8.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a7318f6c9 code=0x7ffc0000 [ 610.132779][ T30] audit: type=1326 audit(1763167533.951:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9941 comm="syz.8.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a7318f6c9 code=0x7ffc0000 [ 610.261695][ T30] audit: type=1326 audit(1763167533.951:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9941 comm="syz.8.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f4a7318f6c9 code=0x7ffc0000 [ 610.347231][ T30] audit: type=1326 audit(1763167533.951:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9941 comm="syz.8.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a7318f6c9 code=0x7ffc0000 [ 610.400452][ T30] audit: type=1326 audit(1763167533.961:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9941 comm="syz.8.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a7318f6c9 code=0x7ffc0000 [ 610.570643][ T9634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.640693][ T9634] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.738336][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.745561][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.759361][ T9966] netlink: 'syz.5.970': attribute type 27 has an invalid length. [ 610.772015][ T30] audit: type=1326 audit(1763167534.911:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9968 comm="syz.4.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 610.799753][ T9966] netlink: 28 bytes leftover after parsing attributes in process `syz.5.970'. [ 610.808170][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.815777][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.853904][ T30] audit: type=1326 audit(1763167534.921:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9968 comm="syz.4.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 611.024819][ T9568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.297896][ T9634] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 611.722332][ T9988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.976'. [ 611.838249][ T5837] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 612.033459][ T5837] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 612.090655][ T9998] loop3: detected capacity change from 0 to 128 [ 612.179383][ T5837] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 612.255567][ T5837] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 612.361558][ T5837] usb 9-1: New USB device found, idVendor=0525, idProduct=85a1, bcdDevice= 0.40 [ 612.436465][ T5837] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.483820][ T5837] usb 9-1: Product: syz [ 612.510904][ T5837] usb 9-1: Manufacturer: syz [ 612.564514][ T5837] usb 9-1: SerialNumber: syz [ 613.438985][ T9634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.726042][ T5837] cdc_ncm 9-1:1.0: CDC Union missing and no IAD found [ 614.752625][ T5837] cdc_ncm 9-1:1.0: bind() failure [ 614.941138][ T5837] usb 9-1: USB disconnect, device number 2 [ 615.772521][ T9568] veth0_vlan: entered promiscuous mode [ 615.845301][ T9568] veth1_vlan: entered promiscuous mode [ 616.054977][ T9568] veth0_macvtap: entered promiscuous mode [ 616.348176][ T9568] veth1_macvtap: entered promiscuous mode [ 616.526023][ T9568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 616.670200][ T9568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 616.896838][ T1331] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.024190][ T1331] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.033074][ T1331] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.152608][ T1331] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.181994][T10028] loop8: detected capacity change from 0 to 512 [ 617.267214][T10028] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 617.297010][T10028] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 617.522254][ T9634] veth0_vlan: entered promiscuous mode [ 617.559018][ T9634] veth1_vlan: entered promiscuous mode [ 617.593116][ T9634] veth0_macvtap: entered promiscuous mode [ 617.622342][ T9634] veth1_macvtap: entered promiscuous mode [ 617.703807][ T6288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.724950][ T9634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 617.765441][ T6288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.812832][ T9634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.846460][ T1331] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.866093][ T6370] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.878064][ T9355] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.980874][ T6370] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.028480][ T6370] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.151500][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.211517][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.646873][ T6075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.694173][ T6075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.934068][ T6370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.938257][T10057] loop7: detected capacity change from 0 to 512 [ 618.997999][ T6370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.059158][T10057] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 619.100113][T10057] EXT4-fs (loop7): orphan cleanup on readonly fs [ 619.126618][T10057] __quota_error: 4 callbacks suppressed [ 619.126639][T10057] Quota error (device loop7): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 619.244209][T10057] EXT4-fs warning (device loop7): ext4_enable_quotas:7176: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 619.344039][T10057] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 619.445210][T10057] EXT4-fs error (device loop7): ext4_validate_block_bitmap:440: comm syz.7.560: bg 0: block 40: padding at end of block bitmap is not set [ 619.522660][T10057] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 619.649987][T10057] EXT4-fs (loop7): 1 truncate cleaned up [ 619.681222][T10057] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 619.832034][T10066] loop8: detected capacity change from 0 to 128 [ 619.850595][ T30] audit: type=1800 audit(1763167544.001:857): pid=10066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.993" name="bus" dev="loop8" ino=1048653 res=0 errno=0 [ 620.410720][ T9568] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.588449][T10092] Bluetooth: MGMT ver 1.23 [ 621.598843][T10087] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1000'. [ 625.463753][T10126] loop3: detected capacity change from 0 to 128 [ 625.592783][ T30] audit: type=1800 audit(1763167549.691:858): pid=10126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1010" name="bus" dev="loop3" ino=1048654 res=0 errno=0 [ 627.334131][T10146] loop3: detected capacity change from 0 to 512 [ 628.458659][T10146] EXT4-fs: Ignoring removed i_version option [ 628.642710][T10146] EXT4-fs: Ignoring removed nobh option [ 628.861062][T10146] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 629.314141][T10146] EXT4-fs (loop3): 1 truncate cleaned up [ 629.326809][T10146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 629.738648][T10160] loop6: detected capacity change from 0 to 512 [ 629.841566][T10162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1015'. [ 630.046574][T10160] EXT4-fs: inline encryption not supported [ 630.626931][T10160] EXT4-fs warning (device loop6): read_mmp_block:114: Error -117 while reading MMP block 17 [ 631.404728][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.949633][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 633.956263][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.651504][ T30] audit: type=1326 audit(1763167558.801:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10222 comm="syz.8.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a7318f6c9 code=0x7ffc0000 [ 635.299277][ T30] audit: type=1326 audit(1763167558.801:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10222 comm="syz.8.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f4a7318f6c9 code=0x7ffc0000 [ 635.364436][T10229] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 635.447597][ T30] audit: type=1326 audit(1763167558.801:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10222 comm="syz.8.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a7318f6c9 code=0x7ffc0000 [ 635.560572][T10235] loop7: detected capacity change from 0 to 128 [ 635.644175][ T30] audit: type=1800 audit(1763167559.731:862): pid=10235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1039" name="bus" dev="loop7" ino=1048655 res=0 errno=0 [ 639.007746][T10263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1047'. [ 641.484083][ T6070] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 641.696933][ T6070] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.766601][ T6070] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.830060][ T6070] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 641.910173][ T6070] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 641.956109][ T6070] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.047372][ T6070] usb 4-1: config 0 descriptor?? [ 642.530557][ T6070] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 642.609370][ T6070] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 642.664028][ T6070] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 642.721238][ T6070] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 642.772444][ T6070] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 642.842878][ T6070] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 642.924022][ T6070] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 642.974904][ T6070] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 642.982350][ T6070] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 643.091670][ T6070] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 643.185132][ T6070] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 644.332674][ T5913] usb 4-1: USB disconnect, device number 4 [ 644.830591][ T30] audit: type=1326 audit(1763167568.981:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10348 comm="syz.3.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77afd8f6c9 code=0x7ffc0000 [ 644.954027][ T30] audit: type=1326 audit(1763167568.981:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10348 comm="syz.3.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77afd8f6c9 code=0x7ffc0000 [ 645.139538][ T30] audit: type=1326 audit(1763167568.981:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10348 comm="syz.3.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f77afd8f6c9 code=0x7ffc0000 [ 645.720723][ T30] audit: type=1326 audit(1763167568.981:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10348 comm="syz.3.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77afd8f6c9 code=0x7ffc0000 [ 645.752025][ T30] audit: type=1326 audit(1763167568.981:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10348 comm="syz.3.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77afd8f6c9 code=0x7ffc0000 [ 645.915323][ T30] audit: type=1326 audit(1763167568.981:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10348 comm="syz.3.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f77afd8f6c9 code=0x7ffc0000 [ 645.938321][ T30] audit: type=1326 audit(1763167569.241:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10348 comm="syz.3.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77afd8f6c9 code=0x7ffc0000 [ 645.973539][T10354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1066'. [ 646.019332][ T30] audit: type=1326 audit(1763167569.241:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10348 comm="syz.3.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77afd8f6c9 code=0x7ffc0000 [ 646.201044][ T30] audit: type=1326 audit(1763167569.271:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10348 comm="syz.3.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f77afd8f6c9 code=0x7ffc0000 [ 646.276791][T10361] input: syz0 as /devices/virtual/input/input6 [ 646.302808][ T30] audit: type=1326 audit(1763167569.271:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10348 comm="syz.3.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77afd8f6c9 code=0x7ffc0000 [ 646.307879][T10365] loop5: detected capacity change from 0 to 256 [ 647.046551][ T6070] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 647.954041][ T6070] usb 4-1: Using ep0 maxpacket: 8 [ 647.961342][ T6070] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 647.983946][ T6070] usb 4-1: config 179 has no interface number 0 [ 647.990238][ T6070] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 648.022834][ T6070] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 648.048601][ T6070] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 648.075720][ T6070] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 648.117007][ T6070] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 648.185320][ T6070] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 648.239361][ T6070] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.276614][T10376] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 650.051423][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 650.051451][ T30] audit: type=1326 audit(1763167574.001:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10400 comm="syz.4.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 650.105397][T10376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.209711][T10376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.495907][ T6070] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input8 [ 650.555931][ T30] audit: type=1326 audit(1763167574.011:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10400 comm="syz.4.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 651.050008][ T30] audit: type=1326 audit(1763167574.341:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10400 comm="syz.4.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 651.633536][ T30] audit: type=1326 audit(1763167574.941:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10400 comm="syz.4.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 651.816787][ T30] audit: type=1326 audit(1763167574.941:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10400 comm="syz.4.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 652.203989][ T30] audit: type=1326 audit(1763167575.041:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10400 comm="syz.4.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 652.239666][ T24] usb 4-1: USB disconnect, device number 5 [ 652.239716][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 652.253872][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 653.051779][ T30] audit: type=1326 audit(1763167575.041:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10400 comm="syz.4.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 653.154258][ T30] audit: type=1326 audit(1763167575.041:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10400 comm="syz.4.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 653.464667][ T30] audit: type=1326 audit(1763167575.061:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10400 comm="syz.4.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 653.487436][ T30] audit: type=1326 audit(1763167575.061:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10400 comm="syz.4.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2c98f6c9 code=0x7ffc0000 [ 654.589970][T10431] wireguard0: entered promiscuous mode [ 654.662258][T10431] wireguard0: entered allmulticast mode [ 654.725385][T10448] loop8: detected capacity change from 0 to 128 [ 654.815484][T10448] syz.8.1097: attempt to access beyond end of device [ 654.815484][T10448] loop8: rw=0, sector=121, nr_sectors = 920 limit=128 [ 656.276443][T10452] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 656.286390][T10452] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 656.298539][T10452] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 656.467364][T10460] dummy0: entered promiscuous mode [ 656.757267][T10465] FAT-fs (loop15): unable to read boot sector [ 657.586059][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 657.586084][ T30] audit: type=1326 audit(1763167581.741:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10469 comm="syz.5.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4098f6c9 code=0x7ffc0000 [ 657.614478][ C0] vkms_vblank_simulate: vblank timer overrun [ 657.713408][ T30] audit: type=1326 audit(1763167581.741:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10469 comm="syz.5.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4098f6c9 code=0x7ffc0000 [ 658.817339][ T30] audit: type=1326 audit(1763167581.801:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10469 comm="syz.5.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa4098f6c9 code=0x7ffc0000 [ 659.832416][ T30] audit: type=1326 audit(1763167581.801:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10469 comm="syz.5.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4098f6c9 code=0x7ffc0000 [ 660.291647][ T30] audit: type=1326 audit(1763167581.811:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10469 comm="syz.5.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa4098f6c9 code=0x7ffc0000 [ 660.557182][ T30] audit: type=1326 audit(1763167581.811:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10469 comm="syz.5.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4098f6c9 code=0x7ffc0000 [ 660.582949][ T30] audit: type=1326 audit(1763167581.811:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10469 comm="syz.5.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4098f6c9 code=0x7ffc0000 [ 660.632957][ T30] audit: type=1326 audit(1763167581.821:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10469 comm="syz.5.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ffa4098f6c9 code=0x7ffc0000 [ 660.931269][ T30] audit: type=1326 audit(1763167581.821:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10469 comm="syz.5.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4098f6c9 code=0x7ffc0000 [ 660.994107][ T30] audit: type=1326 audit(1763167581.821:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10469 comm="syz.5.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4098f6c9 code=0x7ffc0000 [ 661.284568][T10508] xt_hashlimit: size too large, truncated to 1048576 [ 661.556552][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 662.608042][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.744065][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 662.753844][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 662.920456][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 662.964472][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.010121][ T24] usb 6-1: config 0 descriptor?? [ 664.023205][ T24] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd [ 664.054449][ T24] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 664.218326][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 664.218351][ T30] audit: type=1326 audit(1763167588.371:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10530 comm="syz.3.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77afd8f6c9 code=0x7ffc0000 [ 664.336467][ T30] audit: type=1326 audit(1763167588.371:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10530 comm="syz.3.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77afd8f6c9 code=0x7ffc0000 [ 664.435713][ T30] audit: type=1326 audit(1763167588.371:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10530 comm="syz.3.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f77afd8f6c9 code=0x7ffc0000 [ 664.541264][ T30] audit: type=1326 audit(1763167588.371:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10530 comm="syz.3.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77afd8f6c9 code=0x7ffc0000 [ 664.698155][ T30] audit: type=1326 audit(1763167588.371:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10530 comm="syz.3.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77afd8f6c9 code=0x7ffc0000 [ 668.199094][ T24] usb 6-1: USB disconnect, device number 4 [ 668.803409][T10582] loop6: detected capacity change from 0 to 512 [ 669.162441][T10582] Quota error (device loop6): v2_read_file_info: Free block number 1 out of range (1, 6). [ 669.175174][T10582] EXT4-fs warning (device loop6): ext4_enable_quotas:7176: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 669.208604][T10582] EXT4-fs (loop6): mount failed [ 674.346979][T10635] overlayfs: failed to resolve './file0/file0': -2 [ 674.423698][T10635] syzkaller0: entered promiscuous mode [ 674.440167][T10635] syzkaller0: entered allmulticast mode [ 674.503548][T10640] loop6: detected capacity change from 0 to 512 [ 674.583120][T10640] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 674.674138][ T5963] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 674.695587][T10640] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 674.726205][T10640] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 674.864007][ T5963] usb 4-1: Using ep0 maxpacket: 16 [ 674.887612][ T5963] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 674.934150][ T5963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.006503][ T5963] usb 4-1: Product: syz [ 675.010733][ T5963] usb 4-1: Manufacturer: syz [ 675.066221][ T5963] usb 4-1: SerialNumber: syz [ 675.126506][ T5963] usb 4-1: config 0 descriptor?? [ 677.101355][ T5963] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 678.394558][T10655] wireguard0: entered promiscuous mode [ 678.419840][T10655] wireguard0: entered allmulticast mode [ 678.689889][T10662] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1151'. [ 678.709887][ T5963] usb 4-1: USB disconnect, device number 6 [ 678.886162][ T9634] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 679.015588][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 679.026115][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 679.034398][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 679.044713][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 679.054431][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 680.001641][T10678] loop6: detected capacity change from 0 to 128 [ 680.095536][T10680] loop3: detected capacity change from 0 to 512 [ 680.286904][T10680] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 680.404205][T10680] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 680.833206][T10698] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1160'. [ 681.134100][ T5841] Bluetooth: hci1: command tx timeout [ 681.958399][T10709] loop5: detected capacity change from 0 to 512 [ 682.109912][ T5841] Bluetooth: hci6: command 0x0406 tx timeout [ 682.355594][T10709] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 682.369260][T10709] ext4 filesystem being mounted at /247/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 683.191469][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.218433][ T5850] Bluetooth: hci1: command tx timeout [ 685.238347][T10667] chnl_net:caif_netlink_parms(): no params data found [ 685.899189][ T5850] Bluetooth: hci1: command tx timeout [ 686.048162][ T5825] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.212517][ T30] audit: type=1326 audit(1763167610.351:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10727 comm="syz.3.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77afd8f6c9 code=0x7ffc0000 [ 686.405007][ T30] audit: type=1326 audit(1763167610.351:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10727 comm="syz.3.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77afd8f6c9 code=0x7ffc0000 [ 686.502357][ T30] audit: type=1326 audit(1763167610.351:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10727 comm="syz.3.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f77afd8f6c9 code=0x7ffc0000 [ 686.850117][ T30] audit: type=1326 audit(1763167610.351:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10727 comm="syz.3.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77afd8f6c9 code=0x7ffc0000 [ 686.872866][ T30] audit: type=1326 audit(1763167610.351:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10727 comm="syz.3.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77afd8f6c9 code=0x7ffc0000 [ 687.934922][ T5850] Bluetooth: hci1: command tx timeout [ 688.004534][ T30] audit: type=1326 audit(1763167610.351:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10727 comm="syz.3.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f77afd8f6c9 code=0x7ffc0000 [ 688.027059][ T30] audit: type=1326 audit(1763167610.351:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10727 comm="syz.3.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77afd8f6c9 code=0x7ffc0000 [ 688.901393][T10758] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1171'. [ 690.135010][T10758] veth5: entered promiscuous mode [ 690.140099][T10758] veth5: entered allmulticast mode [ 690.273267][T10667] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.307283][T10667] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.327905][T10667] bridge_slave_0: entered allmulticast mode [ 690.355023][T10667] bridge_slave_0: entered promiscuous mode [ 690.373696][T10767] loop3: detected capacity change from 0 to 2048 [ 690.431827][T10761] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 690.449897][T10767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 690.524388][T10667] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.533202][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 690.553173][T10667] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.561280][T10667] bridge_slave_1: entered allmulticast mode [ 690.581186][T10667] bridge_slave_1: entered promiscuous mode [ 691.066597][T10667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.350396][T10667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 694.162288][T10667] team0: Port device team_slave_0 added [ 695.435095][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.441448][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.559646][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.697491][T10667] team0: Port device team_slave_1 added [ 696.027139][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.217382][T10667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 696.433699][T10667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 696.807941][T10667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 696.875343][T10823] loop6: detected capacity change from 0 to 64 [ 696.883798][T10667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 696.890940][T10667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 696.917088][T10667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 697.043281][T10818] ------------[ cut here ]------------ [ 697.050206][T10818] WARNING: CPU: 0 PID: 10818 at net/mac80211/rate.c:53 rate_control_rate_init+0x5c0/0x720 [ 697.062758][T10818] Modules linked in: [ 697.068524][T10818] CPU: 0 UID: 0 PID: 10818 Comm: syz.8.1187 Not tainted syzkaller #0 PREEMPT(full) [ 697.078585][T10818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 697.089327][T10818] RIP: 0010:rate_control_rate_init+0x5c0/0x720 [ 697.096146][T10818] Code: 48 8d 35 00 00 00 00 e8 6e e9 c3 f6 e8 09 14 ce f6 e9 25 fe ff ff e8 0f 0f e8 f6 90 0f 0b 90 e9 17 fe ff ff e8 01 0f e8 f6 90 <0f> 0b 90 eb b1 e8 f6 0e e8 f6 e8 61 df cc f6 31 ff 89 c3 89 c6 e8 [ 697.103843][T10820] lo speed is unknown, defaulting to 1000 [ 697.116904][T10818] RSP: 0018:ffffc9000b18f208 EFLAGS: 00010283 [ 697.122307][T10820] lo speed is unknown, defaulting to 1000 [ 697.129047][T10818] RAX: 00000000000008c7 RBX: ffff888054d84000 RCX: ffffc90021a03000 [ 697.136914][T10820] lo speed is unknown, defaulting to 1000 [ 697.142654][T10818] RDX: 0000000000080000 RSI: ffffffff8ad4d95f RDI: 0000000000000005 [ 697.154391][T10820] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 697.157518][T10818] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 697.175885][T10818] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888079ed22e0 [ 697.175907][T10820] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 697.183865][T10818] R13: ffff8880326c0e80 R14: ffff888029384000 R15: 0000000000000000 [ 697.199358][T10818] FS: 00007f4a740d06c0(0000) GS:ffff888124a07000(0000) knlGS:0000000000000000 [ 697.208685][T10818] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 697.215828][T10818] CR2: 000055851f1a2950 CR3: 0000000065554000 CR4: 0000000000350ef0 [ 697.223832][T10818] Call Trace: [ 697.227176][T10818] [ 697.230126][T10818] rate_control_rate_init_all_links+0x76/0x1e0 [ 697.236383][T10818] sta_apply_auth_flags.constprop.0+0x4bb/0x510 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 697.242666][T10818] sta_apply_parameters+0xca8/0x1930 [ 697.248052][T10818] ieee80211_add_station+0x3fa/0x6c0 [ 697.253389][T10818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 697.259175][T10818] nl80211_new_station+0x1502/0x1c90 [ 697.265811][T10818] ? __pfx_nl80211_new_station+0x10/0x10 [ 697.272662][T10818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 697.278448][T10818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 697.284197][T10818] ? nl80211_pre_doit+0x1b0/0xb10 [ 697.289260][T10818] genl_family_rcv_msg_doit+0x209/0x2f0 [ 697.295141][T10818] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 697.301252][T10818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 697.307051][T10818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 697.312723][T10818] ? security_capable+0x7e/0x260 [ 697.317745][T10818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 697.323409][T10818] ? ns_capable+0xd7/0x110 [ 697.327983][T10818] genl_rcv_msg+0x55c/0x800 [ 697.332538][T10818] ? __pfx_genl_rcv_msg+0x10/0x10 [ 697.337672][T10818] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 697.343176][T10818] ? __pfx_nl80211_new_station+0x10/0x10 [ 697.348907][T10818] ? __pfx_nl80211_post_doit+0x10/0x10 [ 697.354497][T10818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 697.360170][T10818] netlink_rcv_skb+0x158/0x420 [ 697.365028][T10818] ? __pfx_genl_rcv_msg+0x10/0x10 [ 697.371409][T10818] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 697.377910][T10818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 697.383580][T10818] ? netlink_deliver_tap+0x1ae/0xd30 [ 697.388966][T10818] genl_rcv+0x28/0x40 [ 697.392979][T10818] netlink_unicast+0x5aa/0x870 [ 697.397879][T10818] ? __pfx_netlink_unicast+0x10/0x10 [ 697.404928][T10818] netlink_sendmsg+0x8c8/0xdd0 [ 697.409771][T10818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 697.415154][T10818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 697.420947][T10818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 697.426680][T10818] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 697.432803][T10818] ____sys_sendmsg+0xa98/0xc70 [ 697.437639][T10818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 697.443309][T10818] ? copy_msghdr_from_user+0x10a/0x160 [ 697.448877][T10818] ? __pfx_____sys_sendmsg+0x10/0x10 [ 697.454580][T10818] ? __pfx_futex_wake_mark+0x10/0x10 [ 697.460074][T10818] ___sys_sendmsg+0x134/0x1d0 [ 697.464810][T10818] ? find_held_lock+0x2b/0x80 [ 697.470803][T10818] ? __pfx____sys_sendmsg+0x10/0x10 [ 697.477004][T10818] ? __lock_acquire+0x622/0x1c90 [ 697.482018][T10818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 697.487777][T10818] __sys_sendmsg+0x16d/0x220 [ 697.492452][T10818] ? __pfx___sys_sendmsg+0x10/0x10 [ 697.497665][T10818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 697.503332][T10818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 697.509080][T10818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 697.514788][T10818] do_syscall_64+0xcd/0xfa0 [ 697.519347][T10818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.525387][T10818] RIP: 0033:0x7f4a7318f6c9 [ 697.529827][T10818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 697.549637][T10818] RSP: 002b:00007f4a740d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 697.558653][T10818] RAX: ffffffffffffffda RBX: 00007f4a733e6090 RCX: 00007f4a7318f6c9 [ 697.566743][T10818] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000009 [ 697.576110][T10818] RBP: 00007f4a73211f91 R08: 0000000000000000 R09: 0000000000000000 [ 697.585259][T10818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 697.593273][T10818] R13: 00007f4a733e6128 R14: 00007f4a733e6090 R15: 00007ffd2f3df258 [ 697.601385][T10818] [ 697.604498][T10818] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 697.611809][T10818] CPU: 0 UID: 0 PID: 10818 Comm: syz.8.1187 Not tainted syzkaller #0 PREEMPT(full) [ 697.621214][T10818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 697.631284][T10818] Call Trace: [ 697.634573][T10818] [ 697.637519][T10818] dump_stack_lvl+0x3d/0x1f0 [ 697.642157][T10818] vpanic+0x640/0x6f0 [ 697.646197][T10818] ? rate_control_rate_init+0x5c0/0x720 [ 697.651787][T10818] panic+0xca/0xd0 [ 697.655562][T10818] ? __pfx_panic+0x10/0x10 [ 697.660051][T10818] check_panic_on_warn+0xab/0xb0 [ 697.665031][T10818] __warn+0xf6/0x3c0 [ 697.668948][T10818] ? rate_control_rate_init+0x5c0/0x720 [ 697.674544][T10818] report_bug+0x3c3/0x580 [ 697.678916][T10818] ? rate_control_rate_init+0x5c0/0x720 [ 697.684489][T10818] handle_bug+0x184/0x210 [ 697.688854][T10818] exc_invalid_op+0x17/0x50 [ 697.693392][T10818] asm_exc_invalid_op+0x1a/0x20 [ 697.698262][T10818] RIP: 0010:rate_control_rate_init+0x5c0/0x720 [ 697.704470][T10818] Code: 48 8d 35 00 00 00 00 e8 6e e9 c3 f6 e8 09 14 ce f6 e9 25 fe ff ff e8 0f 0f e8 f6 90 0f 0b 90 e9 17 fe ff ff e8 01 0f e8 f6 90 <0f> 0b 90 eb b1 e8 f6 0e e8 f6 e8 61 df cc f6 31 ff 89 c3 89 c6 e8 [ 697.724093][T10818] RSP: 0018:ffffc9000b18f208 EFLAGS: 00010283 [ 697.730175][T10818] RAX: 00000000000008c7 RBX: ffff888054d84000 RCX: ffffc90021a03000 [ 697.738149][T10818] RDX: 0000000000080000 RSI: ffffffff8ad4d95f RDI: 0000000000000005 [ 697.746127][T10818] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 697.754101][T10818] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888079ed22e0 [ 697.762162][T10818] R13: ffff8880326c0e80 R14: ffff888029384000 R15: 0000000000000000 [ 697.770151][T10818] ? rate_control_rate_init+0x5bf/0x720 [ 697.775730][T10818] ? rate_control_rate_init+0x5bf/0x720 [ 697.781315][T10818] rate_control_rate_init_all_links+0x76/0x1e0 [ 697.787500][T10818] sta_apply_auth_flags.constprop.0+0x4bb/0x510 [ 697.793774][T10818] sta_apply_parameters+0xca8/0x1930 [ 697.799103][T10818] ieee80211_add_station+0x3fa/0x6c0 [ 697.804412][T10818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 697.810071][T10818] nl80211_new_station+0x1502/0x1c90 [ 697.815400][T10818] ? __pfx_nl80211_new_station+0x10/0x10 [ 697.821059][T10818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 697.826743][T10818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 697.832388][T10818] ? nl80211_pre_doit+0x1b0/0xb10 [ 697.837439][T10818] genl_family_rcv_msg_doit+0x209/0x2f0 [ 697.843023][T10818] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 697.849119][T10818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 697.854785][T10818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 697.860436][T10818] ? security_capable+0x7e/0x260 [ 697.865461][T10818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 697.871143][T10818] ? ns_capable+0xd7/0x110 [ 697.875589][T10818] genl_rcv_msg+0x55c/0x800 [ 697.880125][T10818] ? __pfx_genl_rcv_msg+0x10/0x10 [ 697.885177][T10818] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 697.890565][T10818] ? __pfx_nl80211_new_station+0x10/0x10 [ 697.896225][T10818] ? __pfx_nl80211_post_doit+0x10/0x10 [ 697.901804][T10818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 697.907460][T10818] netlink_rcv_skb+0x158/0x420 [ 697.912242][T10818] ? __pfx_genl_rcv_msg+0x10/0x10 [ 697.917287][T10818] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 697.922613][T10818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 697.928358][T10818] ? netlink_deliver_tap+0x1ae/0xd30 [ 697.933660][T10818] genl_rcv+0x28/0x40 [ 697.937657][T10818] netlink_unicast+0x5aa/0x870 [ 697.942440][T10818] ? __pfx_netlink_unicast+0x10/0x10 [ 697.947755][T10818] netlink_sendmsg+0x8c8/0xdd0 [ 697.952544][T10818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 697.957844][T10818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 697.963502][T10818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 697.969148][T10818] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 697.975256][T10818] ____sys_sendmsg+0xa98/0xc70 [ 697.980043][T10818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 697.985786][T10818] ? copy_msghdr_from_user+0x10a/0x160 [ 697.991256][T10818] ? __pfx_____sys_sendmsg+0x10/0x10 [ 697.996669][T10818] ? __pfx_futex_wake_mark+0x10/0x10 [ 698.001979][T10818] ___sys_sendmsg+0x134/0x1d0 [ 698.006666][T10818] ? find_held_lock+0x2b/0x80 [ 698.011369][T10818] ? __pfx____sys_sendmsg+0x10/0x10 [ 698.016576][T10818] ? __lock_acquire+0x622/0x1c90 [ 698.021567][T10818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 698.027277][T10818] __sys_sendmsg+0x16d/0x220 [ 698.031884][T10818] ? __pfx___sys_sendmsg+0x10/0x10 [ 698.036998][T10818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 698.042640][T10818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 698.048301][T10818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 698.053964][T10818] do_syscall_64+0xcd/0xfa0 [ 698.058578][T10818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.064480][T10818] RIP: 0033:0x7f4a7318f6c9 [ 698.068901][T10818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 698.088516][T10818] RSP: 002b:00007f4a740d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 698.096941][T10818] RAX: ffffffffffffffda RBX: 00007f4a733e6090 RCX: 00007f4a7318f6c9 [ 698.104998][T10818] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000009 [ 698.112976][T10818] RBP: 00007f4a73211f91 R08: 0000000000000000 R09: 0000000000000000 [ 698.120949][T10818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 698.128920][T10818] R13: 00007f4a733e6128 R14: 00007f4a733e6090 R15: 00007ffd2f3df258 [ 698.136953][T10818] [ 698.140309][T10818] Kernel Offset: disabled [ 698.144637][T10818] Rebooting in 86400 seconds..