last executing test programs: 2m47.937391225s ago: executing program 5 (id=782): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x4, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) chmod(&(0x7f0000000240)='./file0\x00', 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0xfeff) creat(&(0x7f0000000300)='./file0\x00', 0x0) 2m47.628568181s ago: executing program 5 (id=785): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x40210}}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x800000000000001) 2m47.358646311s ago: executing program 5 (id=789): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e4001020303090224"], 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_usb_disconnect(r0) 2m41.602778939s ago: executing program 5 (id=799): fsopen(&(0x7f0000000480)='incremental-fs\x00', 0x1) 2m40.634733482s ago: executing program 5 (id=802): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00'}, 0x10) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x800000000000001) 2m39.212666909s ago: executing program 5 (id=805): r0 = socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000140)={0xfffffffd, {{0xa, 0x4e22, 0xa, @remote, 0x9}}}, 0xffffffffffffffc4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sync() r2 = socket(0x1d, 0x2, 0x6) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@mcast2, @empty, 0x16, 0x1}}) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r3 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x92a0, 0x0, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_setup(0x234, &(0x7f0000000380)={0x0, 0xce08, 0x10100, 0x1, 0x170}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x2, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}) io_uring_enter(r3, 0x3516, 0xc2de, 0x8, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) 2m23.47304833s ago: executing program 32 (id=805): r0 = socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000140)={0xfffffffd, {{0xa, 0x4e22, 0xa, @remote, 0x9}}}, 0xffffffffffffffc4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sync() r2 = socket(0x1d, 0x2, 0x6) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@mcast2, @empty, 0x16, 0x1}}) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r3 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x92a0, 0x0, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_setup(0x234, &(0x7f0000000380)={0x0, 0xce08, 0x10100, 0x1, 0x170}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x2, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}) io_uring_enter(r3, 0x3516, 0xc2de, 0x8, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) 1m17.889452321s ago: executing program 6 (id=1069): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x30, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18207}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x10, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe0}, {0x0, 0x7}, {0xf, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40004) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x4000000) 1m11.821620958s ago: executing program 6 (id=1091): r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) syz_open_procfs(r0, &(0x7f00000003c0)='net/netlink\x00') mkdir(0x0, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x66}}}}, 0x104) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='veth0_to_team\x00', 0x10) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmmsg$unix(r3, 0x0, 0x0, 0x10000, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x4, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r4, 0x5) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x118, 0x4) ptrace$pokeuser(0x6, r5, 0x102, 0x5ffffffd) r6 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r6, 0x402, 0x8000003d) fcntl$setown(r6, 0x8, 0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0xfd00, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 1m8.242882976s ago: executing program 6 (id=1100): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x40210}}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x10) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) 1m7.917197465s ago: executing program 6 (id=1103): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x400, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x5, 0x80, 0x3, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x404}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'hsr0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x18) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffff9]}, 0x0, 0x8) setpriority(0x0, 0x0, 0xacf0165) r3 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff6000/0x2000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r4 = dup(r1) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) shmget(0x0, 0x3000, 0x1, &(0x7f0000000000/0x3000)=nil) 1m6.382645616s ago: executing program 6 (id=1114): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000080)=0x454a, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 1m1.872644959s ago: executing program 6 (id=1132): r0 = socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000140)={0xfffffffd, {{0xa, 0x4e22, 0xa, @remote, 0x9}}}, 0xffffffffffffffc4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sync() r2 = socket(0x1d, 0x2, 0x6) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@mcast2, @empty, 0x16, 0x1}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x8c}}, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r4 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x92a0, 0x0, 0x4, 0x30a}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_setup(0x234, &(0x7f0000000380)={0x0, 0xce08, 0x100, 0x1, 0x170, 0x0, r4}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) syz_io_uring_submit(r8, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x2, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}) io_uring_enter(r4, 0x3516, 0xc2de, 0x8, 0x0, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES8=r10], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x8800) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10001000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) 46.33661415s ago: executing program 33 (id=1132): r0 = socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000140)={0xfffffffd, {{0xa, 0x4e22, 0xa, @remote, 0x9}}}, 0xffffffffffffffc4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sync() r2 = socket(0x1d, 0x2, 0x6) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@mcast2, @empty, 0x16, 0x1}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x8c}}, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r4 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x92a0, 0x0, 0x4, 0x30a}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_setup(0x234, &(0x7f0000000380)={0x0, 0xce08, 0x100, 0x1, 0x170, 0x0, r4}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) syz_io_uring_submit(r8, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x2, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}) io_uring_enter(r4, 0x3516, 0xc2de, 0x8, 0x0, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES8=r10], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x8800) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10001000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) 19.216371931s ago: executing program 2 (id=1247): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) rt_tgsigqueueinfo(0x0, r1, 0x1a, 0x0) r5 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0080bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) 12.5636263s ago: executing program 0 (id=1269): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000080)={[{@quota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x37]}}]}) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 12.35709328s ago: executing program 3 (id=1270): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x1}}}, 0xc4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 12.114775267s ago: executing program 0 (id=1271): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)="000004000100", 0x6) socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0x71}, {@rand_addr=0x64010102, 0x4e26, 0x12001, 0x3, 0x8001, 0x1}}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="b4000000000000007910000000000000c300e4ff50000000950074000000000007cd68541c8ecf9531b5304b5cc21956f2bc86279e6ad8df17d9770ecf3cf86fc3e24813c30a62be8343fd64d83b7a67d4fe75024d408c8c6efad5de675dd7c2fd4bc5150ac10908d8ed5d462d8b3d226984e301c5303515a91caae004c5b15d99b0603e513689df039b1b3be2397b3e4ceded9089bc2e15d40b2051974e6b2478ae72cf47bee3a056433e3c9ec50f965cb28a3e9ed5f403cb7753bb80134316c458ef5fc56add28eb81da659d42e1efe216f3f7fe157783ba79e1b2d5f2212e804de42b27f23214bebff612b6287d969b02d2f8c9fa6eb8da5fb47c68478a3972a3760cab8ed724a951c4e98eb2fcf27e92142b602215c964"], &(0x7f0000003ff6)='GPL\x00', 0x2}, 0x94) r3 = socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x6, 0x3, 0x1c, 0x2001, 0xffffffffffffffff, 0x3, '\x00', r1, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r4, &(0x7f0000000240)="b22ea68f6c12d5bf58b950f8641230724289405edc74ffaeed1c91db12edcdf37df40133e3c47ba23234f4ceb341fb8a36b2f6701364fb9966b3cede738bc2", &(0x7f0000000400)=""/115, 0x4}, 0x20) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x40000c0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000000)={r7, 0x8}, 0x8) 10.920303856s ago: executing program 3 (id=1273): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000003a000000000040120000006e7000000100000000200002000a00000000800000000000000000000200000000000000aa000000000d000100756470"], 0x6c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000200), &(0x7f0000000340)=r7}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) 10.642905796s ago: executing program 0 (id=1274): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffe8d, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000815}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) sendfile(r2, r2, 0x0, 0x40008) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 10.358273771s ago: executing program 2 (id=1275): syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffffffffffe) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x66, &(0x7f0000000b80)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) timer_create(0x3, 0x0, &(0x7f0000bbdffc)) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newsa={0x158, 0x10, 0x413, 0x70bd2c, 0x25dfdbf9, {{@in6=@dev, @in=@remote, 0x0, 0x1}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1ebf5fdf}, {0x0, 0x0, 0x0, 0x90}, {}, 0x4, 0x0, 0xa, 0x2, 0x0, 0xa0}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x70bd2d, 0x70bd2b, 0x70bd2d, 0x1}}]}, 0x158}}, 0x0) 10.309918277s ago: executing program 3 (id=1276): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f00000004c0), &(0x7f0000001c40)=r1}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 9.174697597s ago: executing program 2 (id=1277): socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x161141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0xd, @val=@perf_event={0x9}}, 0x18) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000680)=0x41) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x36, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8a}, 0x94) 8.79663374s ago: executing program 4 (id=1278): socket$inet6(0xa, 0x3, 0x3c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = getpid() syz_pidfd_open(r2, 0x0) preadv(0xffffffffffffffff, &(0x7f00000018c0), 0x0, 0x8081f3, 0x0) pselect6(0x40, &(0x7f0000000080)={0x5, 0x0, 0x120000000000, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32, @ANYBLOB="2398a8843a6c3858dfee975be8e73cd2de2a8df47bba9e176e37f0dab1a6282bb8ebb4aa02000000000000000000001ebda2f3f738c1076579763eda0dea31b83df768662c9e09a834"], 0x20}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 8.051659075s ago: executing program 2 (id=1279): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(0x0, 0x80000, 0x113) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe0200108500000007000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x7], 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff}}, 0x3c) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15) write$vga_arbiter(r0, &(0x7f0000000180), 0xf) r2 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) io_setup(0x13, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x2, r2, 0x0}]) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x6, 0x10001, 0x34324152, 0x0, 0xb, [{}, {0x10}, {0x2}, {0x40, 0x101}, {0x0, 0xffffffff}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) rseq(0x0, 0x0, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 6.705540157s ago: executing program 4 (id=1280): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) chdir(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r5 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 4.731444531s ago: executing program 2 (id=1282): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000080)={[{@quota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x37]}}]}) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 4.730845114s ago: executing program 4 (id=1283): symlinkat(0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x82}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x802}, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000180)='encrypted\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) 4.670487821s ago: executing program 7 (id=1284): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_open_dev$sg(0x0, 0x0, 0x38dd80) r0 = socket$inet6(0xa, 0xa, 0x400000) sendmmsg$inet6(r0, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) syz_open_procfs$pagemap(0x0, 0x0) madvise(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x76) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x8) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) 4.602729043s ago: executing program 3 (id=1285): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, 0x0, &(0x7f0000000080)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) close(r1) 4.503415827s ago: executing program 2 (id=1286): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) rt_tgsigqueueinfo(0x0, r1, 0x1a, 0x0) r5 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0080bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) 4.428443119s ago: executing program 7 (id=1287): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000003a000000000040120000006e7000000100000000200002000a00000000800000000000000000000200000000000000aa000000000d000100756470"], 0x6c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000200), &(0x7f0000000340)=r7}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) 4.389460131s ago: executing program 3 (id=1288): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x87) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) readv(r8, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/214, 0xd6}], 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000380)={{{@in=@multicast1, @in=@broadcast, 0xfffd, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x1d}, {0xffbffffffffffffe, 0x4, 0x1, 0x0, 0x0, 0x2009, 0xf0e, 0x10000}, {0x3, 0xb, 0x4053e5, 0x20}, 0x8, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in6=@remote, 0x1, 0x32}, 0xa, @in=@empty, 0x3502, 0x1, 0x0, 0x0, 0x2, 0x1, 0x3}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r11 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r11, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) sendmmsg(r11, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @remote, 0x3}, 0x1c) 4.362715997s ago: executing program 1 (id=1289): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x80) getdents64(r2, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="7b1713b4c6f02da7493fb6859f0143c68a58166f472c5078104b859bc37f9a49a8f85c9101df3b2736ff9bebcb1a3c2f570b28279b8ff7afdef7451b3d10b4578c2e81784b6e4f410800d997f0689546cee0852e9e9c64c1f95df7b136243cf7aee1b8e7a4e1d6e6fc01337370f0dfc098d975e9a6f90a08f5b845054d1e1fc81adadbf2836ff758bade0484377855b05b3556a91827599638458ad30baea03240b302638b88423ecaba6da1e40f6f1b24d60dde1652f2d5f818af43d49dd55c4eadea945e9b6aa744dca07ec2e00320bef5b045414836941469129670c4cdb953ed61efeeae2ced1b7cb3e7fa4c93cce5623a9e33c69d068b801fd1369aba759e2829c67c705853262fef6669aab956f0f733619dd361be5e1414c7e7ff6218e330156d609fa9f3244a0a4fb678a58e70b86f6dabc3331f755b786c42b4198149941a7a58c83f1f2811209025269c5ffcbe0c34ac98cc091cec2c993bca0aa8400ff9e39cc9fba8dda886f95357957bbad8bb850ab92f7aa9bebcdb0ef188749a1742e5597d199f3ccdc2d807bf757da45acc93e3e9645a1036cb041b3c38dafef367b8dae802bbbc03bacb905d40e1da78591687b416ee380103a670aa8f722c76e13f7f0e3effbb37f15a821b8315fe541e3ffc09289d96db1dfa8861e5da41c812b54ee20ca8b3180f2f46db56954791465cb572de0cce16d789d6fff216ca46977ed724dc0cc8cef7b295ebb2998a5c4662e32ae1001e59f3bfefcd72543bfe1aa6688d65c547089ec0fe1f1d9610095a5a4008b14f46775c368417376ee143856031947db71c455dc40eeeda210fbf258452781ce46e51f6df683a7918770f73d324d9401648d271cb9a7e919401567e400fec420cf363444a78eea03e73176abd6546e1657945aa88f64a21e07fc23edd74512cf89781e8ffe9bb1601ab25d31801332a6c5be9cebb6cb08207bb832106553ea9fc19b4b4f1f0cd55efc2925ffef75e9b12f06b5a7496506a274ca25f88398a1734b7013c3f78a2e49ef0d946a1aff362e37c9b5f5473de11401097722adda87944ee3eeb1bdde60e97484af4d2e5f8b0a9c63bb8bb99461b16edd824add1caf9d5247811cc4f6b48004774f1a4fe4dd125ddbfd8b69ff3ee314aeb445bee9f217a2f5a9e0e84ccd8718471f949086df6cdcbf95e568317e31dd01be1b826cf9a09373b16935fc864794a3886a2f4aacc42135db85f8921916a10aa7111a686979e2a5c9959cafc9774c416c4dfe0b9e06657feb2fbc31e7c11f6e2841680986557c1f2b1ec3c0fcc6a749a3c97a5b370550ab7110e25851b13c0b75a7fb0cd3c4659878209867659c216b467bdcf51e786a59fad084886490fc77e186ab827d844d0ac4682651fc4043f8e87b905532a53017ada44feee1f89f9bc6d2a8b144e721a479f7b90acb91033774f4c12df633548a9097c791ec7e80fa2607c86fce6e9abcae1296528b8488ccf18a4bb0fc9b50c15d294e8d380465465b4eeae26eb6800faba611785cd2ff95ca1923dfa47d5923f89e4eadb612002caceaebbe779c4e3a3833455752eae63689ab8dc03db63d82feeab7f1162eed5909b69ccd5abeb9c071da82cfc76cc692a51d99e0c4bdfa6c81c9878e893a77e1e7105e7910827ddb3353612fa8d5e547b43b5abfe50829c1eb7bfda1731db2a9a1e8f0fc298dfa7009679489f9d9323338b7e59f1e48419ca531d88170a5a1995f576aa125edae9e9ea26f6e9c4bc26323b7db0998c528a7b343ccd87ff44c77e6cfc0a324cc1d4ea79c30015f0caaeccd46e5db580aa5ce8030c2b13b37494557da58abbdc7ce9fc9afa49ce0e8a7a6fa058db210ed654203e7879cf5004ebec57522ed34481b749554b36cd7171209b0763e110096704604f2d3f28c5ddc66c877e3ab63f36137d5a67cbf872aa6af79cb3a66c9040009b5e1c7b718c1b8788156b82d6d800dbe9fc3d16c812a963c73599b79efb89aa74bdbd9b1a2dc0b8ad853f79c0867a3a45d7a1645059171877687a72dd5ed4213c0ab84ef6185e7935346a84450887bdb2b216883e907b13b03c133adc04ab3c5f60209bd90aad3d94443105f08f0ee1b2231e1a1f8cce71de74d5308b78b5d99ce4ad4573faba9fab48bc1615f14d453c67714b99f274de041512b07b885679e6f89f481c28b082084b853c9afcda31def2898284d6ca28fb124df67142821c9705e28093ded60992d9587fb466df839aa2a4973dd48f9372a55da6592646fc918e533955566a2d8dc59277308223aea4dbe0daf839f95516b8995e9eec87df1df9d38693e0824dca7423b08d553b0ae1c5c44533b918eaa02dd17b4c8ce515ae7de410970f670e17b5e3c0a207fb8464d5d442694a271d593fc23ac19619bac32ac17cc6705ce2e6262361eba24277a471602e7ca57cc614ee116e60a9e0b6ac5e3228ea2c650baf1a09e9e5c7a1b25a078d1d11a673d88f6ee33e50d036d7fe4b9c06adc70aede2e35c6738b255690ed3f7a8d2d14e36e360f3bb66978d6cfcfc41887c751c0efc9325d4485a2f561060413fe6af4ce40d87a476201f15a584fc7ba18ddfef5f1d729d5f544c2c6b06befccb444f0408451089f20b06f05ab7d6702b97819b0eff6fb090f21afb3076558e692920053702fc2348f8dade0cb2b007f38d6dcd4ed3bb42553b1bd684791743a1941e5bf2ed234f44be64a95b485a3e949538a40542f25ca4bfce44e291037ab282082f02157a96f4ca0a0c5cd39215fd07461093a4d87a7979f7aa97142bf5b9ef71db537f9acc90f22ca2ded5c1ecd1ba972d05db7f71e8466085c9b3e975fa3a948f2c4049d1a8e46f71157017a3a74ad25e215dcfe7a4c5cb0a7baea0b0ec60c5df82555c553ac60dd39174c721edc0304b836a4de539c3ee55401e13848018f889cc4a0fcd01d9f4978eb730fb1b4a94ede0283f8c95062f01c8c8a3169b2d5c50cdd4f3a248d80a26c950b4036fc6ffefaf5101269fe3594c2cc128220a1d0b5f9f23121f2b184894e129159eaa92d9a30e878839be44d20cbdff3c338cc95795c86121b2b498bd376e895c98d67f6a27eecb46a203aa9de744feedf27b6825cc17aaa098b5ca05cad6bdbe320908ed36bdc8a8f2c777eeb9b037b36c0e36019c264b3e36196501d6cc90e7b1899a72bea5c8a24a5ae62e3684a39a06208bd382cd32acfabd742c76334797fa0c09a2a2a7e1240974afe0f3d6eb44590cf171efb7602009a93bde85cea6701c765dbca7c6a879be41dd08847802d4f59e933df65f727cbb45e3a4a5019f503b6fad7e0338e653f8b2c87aa7f196444e0dc1be6d7c4f0c7ddd663d06ff1365a9c362384a33b0315adbfb2d73359c485cd5410d36d21044bd8d3771c5492803b19f7f3a1a5c3248e66786479fa4416a55855adebeb09528ff5add597790b97bddc16bb9b7b33a1f800701c4293e2c8428dc2684726cfe5539ae0a9bf89e1b6f1989fd0433cc865b308bd0c636402b4b285c290e2439b9ecf0eba156fb6b613ea7f97b04506fe28e9471343c854fdfd48945a7f564acc817e609be8f8a7fdee12e9b592fd8c5c08f51ba8cb95be12cfa497d1539a4b8217818d47ebb3cc669014261530205948fdb9983a0e5759afa9b290ce838102661750ab06d7fe65a39efa6af36c042d2dee36402a6686d58eb144b76033cab4482b8fbdd213a90170939ec98df1fdfca4b37b143a971b9b59fc351098942bba090056c20e8cfbfe8fcbe361d068c98a020f67e807b8db2e45cad83c9970907646c0049c05c1ed657d53d859f1a47bfe6f022be0689de224034d0160b1dbc878ba6dd685911288d7af22ff5eedc1634c36e25f51d0757c7b9c73d7937955da356dea68749d464a75f56c9f6ba36cc1ca8c2f3aa34beae14fba894ca705111cdb19094432c2f6caa0eac78ab09b0cee330f36b1b91a6a5d4896cd15d96c12547826559441cbf578f189f5f04526a4cf76d60144090c2386b747ad50f7962ef2950d2c6f4ff8477ad0681ab24c47ea7ded8c9accff0dfa30489f43f0f3182b88e757fd9a1d82e1c9bb4efe5215518a6e48c688b2dabbd15107c5c6245de0acfd740ea54e0ec212f405f25bc3aafc63009631a4e4749296d47c2bcf25cc95afceb0a1ddb3c6124208f5134981c30489b42eeb864b3123b03106c9b234a465d87c30ef36e00244390de36a5dd93794467ef37bd01b86387855d2ac24e05370212e845082bb22c8fcda0f0bc78ddf971b0b9d69fc50e0d907408e9c9ac4e5099f47db2d0c14d888e363ece768555362a08c408d0119c45f158aad695d455d28e223be2862c19262c9f43eff8855b5a9af4f2cede95e415e2f597bb64c8bb2d608f86b15950ffe2e6bea3cdb221cf8b7eb35e0bdf6638283b09c68cda0bf1ccb9e353a7f0afb58d806923e36b22db68615a7e4e04d0932d928afdc8af3963378ebd5e05058160ac67fadb7a7d9ec498e00f63671b84d880d196c93afb4fc823e7d6576ad824ffb4c90fc780b163a292899ccfcaed81dee2c992787a66800e206df3dfc4a6b441d54ccb1a19a587402a663d510e45a5b1aa96fc467efaf7e71cbbff087f3d2922a133466d5ae9f86b0bc39bb3093b87ac2db941b1fd9e40427402781425d6e8856a2c66cbdd274f4c689758db6dd58ec7d766b177739e8c9173f2b1946be5396aad6d7ed29d058ac231e8c2e6a9077b4a217df4580a2d72bcf0b73e4bd07465deb8798a55ee855b82f1fa7d3748a40485bd90fab94b617d92219c4b65efa022936895e51873058615a19b9d1347120c405c3254f290b4c8b99c8ea9dde3a749ec538421a29d27b48ccd83852abe1a461123e4d36e56508d1827880960362d10835df77f9d4be51f1447cac5ae2017a814de58cd99bcc0c194254b17114ea48f5a0cfe6547686088d527c65180474fd460ffea5d48767ceb65c6fa3d7d3c632591d2d9d65c6c3a35a6ae4dc56322cd84734b0e7a092a4c46c1c607afa6d0e477e8d04e4993e595ba708a0f4466cd8a89fbc06d3cd366007296a9f05b66cfdcd5b30b6745e71d513205d5dbe1e8516d9e9cf133caa994ec0ac2c543d107efd4b9a7d9ee1ee415830a6c2ea17114ea9683726f2c82741f9ad4ac1be6772f0809f18c13f4cfc82fd1b7b3bd29615336003c6784c03fbcae475a58a3c4d68099732c326dfb7643eb150f2354918077bb798b5ecf491cdd0765e3e1ed5d0a37840f1a28f7e188a021781f1896dae7153f9d6639bf66be0c7857d7eccd2a1e6c9fd0cc3594477bb005df9b29f680c966161e37bcec97fc2ef7a2c3bf64e4df5785c9b080c7f9c6d7c515408445d55da499c03ba66369a31157bb03588e84a5303c46cd393c5bd6fbbb8deed94b62d67a9351c259b263c6c4fa65a4dbdd7eee080d82cc5e478c885678edbc9cfce74169ab748d7f4a08aec3e114394fc1d5e361267b8f3fcf38a024928d58158560f7da427680e7611a9f1b8255c67e6ea6b597ebd31bed9fd6f85f9b6ee63d4374c1e50597d1c9f3c56b4266bc632ba66ebecc396f6bead40392dcc138098b4166ab7f8714bd4db0615480705dd200da92dc51ec215844d7599e0a6262e8d5dc6a9452db8994d8b8f19ad4029e0b41b5e13fd6b56230cecea57f3111fe6c78876b3e657fab112968e83a0b64ce9837b89f5dad0d5f0b8b410e3a9a56ab2e9143e90fe371a944989ee206eef777cf4a235333c647e45aab910af492bc7c2213246374251e23accf5818aa2f24823bcba12efe3658e1e2cb49a5d4ffd26453829739647eccd106605921641afe16bbe79c8739062eabeeda4d4a42cb70d84e1e1d3506c7bfba5f5135aaae85b03dc6518eb30d832175cedc5bdca95e600e04902d9eda90c1da4bdd3138ac889398c239068857103ad70b5d1d9fac27c8ccfbcfcf126d9a5441bc963bce4669047ac901a14ca7c7e76f94c77159cdbda5360e04bb539a9d5ccd16a8cc88bacaa5b952c86b163575d7f1cab58f0d612d796b570f3c5debd7d9abde7e24de2c252173f1edc93817192699bddad45eeb41ff398c1bee4d2194f38bf4d2b4ed3a8895476bc441f464753139e204ff5dee7f45ce639d7541c0d396141aeff30cbbfa7157a61993eec98a4356df98665546a1d1e8429fb0c78684000862aac50f7d9a1413e89958f4defd3f087769cafc32bcd6016e496b41b7754cfbe42b352346fd585fb19a80f4af9a19811311b5fc6ea8eb5519a3cf7dbc1a06eed41668e332224c1daa01776e0886044f5a95e5dffc8d9ccce7840eeae97e8cc916db95bdc33fb420e28030c6edb011d5281db1dbeac9bfcaf938a757e3939b025d339e69b9692c8c7352787d399f342e96096e37ca208609e5f93629e36ee442db9fb822ea236683f79875e7dc73ec97f98fe0795f9d83f473cc80a589043a7edd953473684ea4e80f698683a0fc1d8863adc44fc13c27a08921a681ca1ad76207b1a97f8fff7db247ea09b3a6407ea83d82d82d171fc80a8f5fb9f19cd7e94fe121a6a0ef9c4cff7a8689c0abf750dadcc7442c2ca5ed437af5e88e89b0a783a1164cd1eb2a33a64c919d9f08fe5aa7a775352ab6027a7b73d6fef51acebec5516c2a5f2b932b2621bbd2cdb415fce9ba1dbc3de205869fa0423adcedd5570ab0b4b64afafaa458b3840b48f018297aa46426d7893418033f00b5378eac6a70275ec860609b07851b88ecb5da05086adfb80f47c71a77301ca0f1520dfb7a800bc8421abf5eb94942ec818e3a1d45f09ff93e6549b3ef6152c6abe38231b4a82e355e27e363184df51418286d7073cf464eee02310e84b3eccabd2120fcca333130357e1967f67a69f437dcf6a20ca21797230aad086bd4c28348f58b80ec5d27626004533993b9f85897d00bc271a62ab67f92e2eed6d900000000549e8344ad90b47fb5c1ed5908bce94d03bbe98a87a1733b5031f89644c2d35d729e1375969a82f0252859219407c5c87f5d249d5eb8c17001fc7c6dc5d1825851b41e5e937f2c39d7f7196f38f83619da2cddce747bb0e906d0fc13a11fc6c2be3d140ea6da886cd5e194ca9dbff565d2a82e7e82dc5a36084bf02029ea05a9cfe1f3dc80489b426a14372232940ffad8124bd515f0a73fa85c2aa0cd51d76a0cc6e75ccc35b702a4fed4d2e2828d98939406ddc6df1048f0a22611859d6bfcbb0873d102e4b8a86b5d9af8056447f6c1552a603d9f67009fa070db73a01e1b4adbe4e841d0b9a92d148b626c386b25687817e5ec07dbbfa1d62d078578fe21d546414e3c5e29e8e086d7e542a2eb74a67127e7f171e076bbdd62767aae3db467db1df13b3121023bcee33f814d767a9ef14651f76ec89910ed33e9804df8619f69ad06bf0559b00d4efbf6f44e922d50a18ffa25d8ac58dec53a93642186c0ca81b07fe5c14c9c13397649a53ebfcec118e5bb84db053e6e505d07a09bb50f33906e7febac3c85ca337111dbfcb7b9becccaaefa3d857d48f0b3d8646d70fdcf2f1dfb89cc3ba1394cb5de24d999c88235418bc0f20d4036bd0113d298b91c44fe042d3b8e4070e3f828499972524601c4725389122c7fc3e38eb799f7b755f23bd5362880b9275e58eab2c8f42e583890cb84e17f35025d1d76dd28171bee561d21451b4b2ebf23b923221c9ea06b924815889d2b605af66539c3b0ffc30c7170a5581727f0faddb257cb6ab28b3456737d3588fa3bce0ba6a2a5c3c94301fa8a4e6db358731bd3a4a62b42181e04241010d7bc3e973b9fe428175ec8f8e6cbd4e53c8bd957621acb1e42504e6f8a7bb30c382058fc9dcd0cd0ba0b789c316cd58d7b5606cc2a66c872f10e6663346d572ecc37ad1c3d8146a137e35e54096ddc2a5e2d26765d75615fecd09b864b29adfe92763ab54272365f56feeb9b57059744e765485ee322cb879fd3c8fd8bc4727d860995c548bcd41852349f1b2227f5a1f39b24549693fb05c04ba8f190673d11eb27d0bf628489f9b8049f5f3a1e1fed97ba9881da0031ef5960b6b0af825cfae8252b931f6151cba9bf889a5c74051a176c56d3cbb8915d3f28f8f684629bd1e3f87f27909b4e8eca6b88cdd60f3b5bbe0641a469e396080fdd2feeac7a11703b758f1815f100ab2ca4403af34a655f4c35e62778c276c96bb94a3d9f58f3bbd7ae6c4f133f7c4199f18d02d66598a54769415b376bb04b520881f23b22b32685ea1ea0dc179ab2f33f07c7039d1a5eedd1905d2a8c7d3c9686758ba5aafdd74f36da7f5522aff5c40e565b50cdd92ce353c3d6c97ce87f0495bdb95d70ea52c8c26b87cd337fd2283b88d7301c32f26833451b8f7c2ee5f44eec58d9eef2a39b3021a29c8747d36a2dbca6c0c085399bb720000000000000009d67e17060abad89c7d8b8970244c2f11ad2f4ae878a3676659b77178a9b651b12cf9c21e658a32999d596af4648f636df4de8c037d1fa63b1a685e8850156bf99e00666dbc03d3e3b44018659743127f91d44c99b578b86a44f3bcf1523c8cb45accc3c5fedfd7796411eddfc3a7a6b7c57ae10fd4bd3fe9f662dc59747ac4b7cc2584ae3ce2e42a41066dd0d560f1b4c83edc57121dade5e397380bec5f40b5d0beb14aef21b2c68ccfd0eb4959b5e7f5b5779903963298e3c9a2141f145137de1d604d9124c3c4f60a4d54da38a7c32ef2632fe66a8ce8e95ee95a570e18e9fbd44884afe291550839dd61e65c952a3f5c6b61850d1c2a77e18fde734a305b407cf6dbf17afd66da6e42f0e8f66092df46c79b44711f6e8aafa831fa1188beea696672b0e94cc3cae584b30dccf053634f792c2d9f4c87e306991b407949f2870b525d123f9ca23142a0ee13d05f51ed4ff2653727ad5bf16453276b2d5e7d7a8a0a1c4847cb61ac4b08d9abee25165a120d156775a534a62f9af3a3b62726101b94ae1e14352262f017c5361b3341952d194a6a2d470e60df3fde61d343e0af8fdff36ad976af6732b732ceb69344550555174fa280153e08f74d81f4ee69c1eb44a3468e8cf78bf7c1663dae3d31553466faa207b8e9887cb54209fac0b6f6d12d9588351c76e6bad884799afe856a25b5fe737d0ba737a0f1a12b4eb3ede48a0c38e6787ab42fca1c7f2ab42fa6104d5a99aa36b73ac3622ccae122524c28a6557cb7d0a7c7eb5de795647dca0621fc2c9599441dae7cc2a8631252abb5e0f22e9355e0a156a1ab7b1641e345045e8303b5f6dda5c3c1cc2637700cea25c004460d101fc42ad78ae477739a4efbacc57272cfafae15292dc3b2800d9f42002c2062af9a1f329e11140f8317242c04ac1f11cdb45f5f9ab18877daa214c151fb9ac54e3e010b5e7944d7217442d5c4fc29956c1333cb932424096f5b6afe1128db53f7171be4372be8bae538bcb3e4a2eb29608678735a667135e0f2660956e9e2a3ed862209efe65d9ab2fbbf88e5d3384fb3362af00e1ec6b4d3ca40df442b70951026438877189c4b0ae136a9a35c131fdf19115e8dc1ee2b938bfbfdb3808aebbe7dfbbd3510c7070388f5813e8bc63be744b99116c4b84ea37d57c5da7a80cc883aa915d84a249ebfa78ceb124c63b3a0720b19483189ee50824e8581556f0520e434803204cd0f3dd09fc97c979f9a7e3f8e5eca8fccde98fc4939551338235c0c6378faade0d18f7050f29189485e01ec120239373c5478cd19ab27570921415a6680924baf9c5829f3f2115460d1fceb8a026fa1a0a0047fe1cd6fcf1861dd3784e006abfddfe79461c5001e4e32d99c5bc203c21f8c711c5ecccf8941093d95a8db73722bb7511443fb2670244cc1249492e92fc4bf7e06ec6f08c5c6931929d58232b551957b771ea5e4a932b037904b81916e662e3fe95af894e80f699e5c00ab664f381bd9c0bd41322a8b3cf367577429fa52c0f1c44ffc626c215e7103cba05bff4931d9a202c1eb9068f44983d1e0c6d9fb5fed738561651e854a3c1b362ae354a0b4a270386ed2dbef093bd82f07f25edfae31901cb86fd214576b25f769bcb215214c63026b2581a8d17779aae03ba310f3243b3631f4b01c9e3eb342c3bdb44d8e47cdc1683e3b1cfffef72e385cc8831f99425fc406575170e1c106618d5429144a436b9e92d241d8118b5cbe0dca5e8ddd86e671e13080eddcf8dee9e317d192a3a5386378de9b1ecd8cf5439cfbe9f65965e5a5f6c145627ac23fe30c2e06e623b0eca15b225b32b65ce568b656cec0e0d6752fdebffd39c7538472ad7a195b56fcad3fab80016ff006df6b01d785191e4fca143b14ce68b32571476a779515ccb14d35cf9aabd4849c03c9bf12a42cfc2a7146ed6c25892a9d1c48f95314f641142d38cd882e54534d69b3fcc18044309e6debef6dc79d7737956418b955d33737115b44360e0bac14b71e2e64f0c8aea428dce5b65e210c108f832a6041c0aab116488e5863cd1039dc8af537908be3541352bdad303de43387503d19d7c0f0390bdc5b95f1dfb0701fd0e14a22c210837cc0a1cb059de474f4476bfe9bddfe3e7977fb299e82d9eefb18111f7c4a5fbd406fca720fec69340d978f4c9832204d67f6fa5793325e04d4af84acde0b56158e4c606394286a4b3cfc04a426a665529b753e1ce2d6c613159844bd069a67b5b96cb8ec993f05a8e252ed3d8ed63d524af0845f519f9d47b85a773f37031cb91055fb963db50e6a1e368f10a82fa40ac055e0201c6d29661eadb76f8154ef9c1cc210ccf1ccb063e8c00324ed6a14fdefa0167a9abb04debbbf5e7b8a57a7772373c765947f0f67b5130d77a6ca6ab166147d4eba97b4ddf1465d25b02f4430227b5713a29fd84664bfdfa5fc450e48f5263eaca67c16033b79bf1cb819511cf16bae6ffd5d05a7d9cc93067b6f2512fea2424a9c7d178f653ffa7ce1c00924707e3817c7cd461cb2a8cc5eadc40821258eaad7720ee3976c5a60025c317480016e5e5bd884f3646651f3bdc1185ec1a4112eb24ba5b3b6f94ac66322042d4bc48cb5befabfcf950cf8a0165fba3fa019324b53fb56bbfaec7f4ec733e84c22f841c1c9c1dc51dd3ac4887e155ac4095a6b8846c8f401f3c2d48d4de18906193a9f05ed59e3b0add8bc27c0bad8418ccbb842123ce1d39fdeeaa7984dfba9ef121ab4d4d35de076262636f3815708e4bcf31e634a290b13317425b1a4a2e4ebf8537092c7e524c126faa9622bf1337168e003857805dd420a51816fea3cd37c34e483f64a2da3ab67442314ffff40727835a1bc7b9971ccb5f83183cf1a135defd468907b988d97028f904c4d9c712f7d0ed6abe4d80712a7b7e06efcbe6a5b83e32beb1556326af7a97437c35c6a706c6cf4403b98f5134547ac167fd1abcb9245ec3450202ab80e553952412032a6c3cfa64441d4aecabd1e182c50bf67801fd3b44b40648ac9926bbbd7095425a429f2a9550c2fd1267cbf6156897b705255cadf1c7f233f4effd788b3f446dba19e68bbf8b42ff6caf984a4eb51328ab5e2bc28366e8b4df4df967a166470a00", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b00000000000000000000000000000000000000000200000000000000000000000000000000000000200000000000000000020000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000c0000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0021000000000000467700000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) 3.442756499s ago: executing program 1 (id=1290): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80200, {0x0, 0x0, 0x0, 0x0, {}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.296159976s ago: executing program 7 (id=1291): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, 0x0}, 0x20) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.263900067s ago: executing program 4 (id=1292): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x64, 0xf31, 0xfffffff8, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x48800) 2.929152483s ago: executing program 3 (id=1293): socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x5, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32], 0x48) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000014980)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x34000}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010101}, 0x10, &(0x7f0000010700)=[{&(0x7f0000010140)="9b", 0x1}], 0x1}}], 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fsopen(&(0x7f0000000480)='incremental-fs\x00', 0x1) 2.875217301s ago: executing program 4 (id=1294): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) syz_clone3(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x1}}, 0x3c) 2.098898453s ago: executing program 0 (id=1295): mlockall(0x7) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 2.078252938s ago: executing program 7 (id=1296): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(0x0, 0x80000, 0x113) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe0200108500000007000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x7], 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff}}, 0x3c) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15) write$vga_arbiter(r0, &(0x7f0000000180), 0xf) r2 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) io_setup(0x13, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x2, r2, 0x0}]) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x6, 0x10001, 0x34324152, 0x0, 0xb, [{}, {0x10}, {0x2}, {0x40, 0x101}, {0x0, 0xffffffff}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) rseq(0x0, 0x0, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 1.684441704s ago: executing program 1 (id=1297): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18207}}, 0x20}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x10, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe0}, {0x0, 0x7}, {0xf, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x4000000) 1.430941122s ago: executing program 0 (id=1298): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r3 = syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) process_vm_readv(r3, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/63, 0x3f}], 0x1, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000000340)=""/210, 0xd2}], 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb03"], 0x50}}, 0x0) 1.411551673s ago: executing program 1 (id=1299): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000030000000200000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x1001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 696.183036ms ago: executing program 7 (id=1300): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) close(r1) 673.382335ms ago: executing program 1 (id=1301): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf2504"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) recvfrom(r1, 0x0, 0x0, 0x40002000, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f0000000000)=0x8, 0x4) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@deltclass={0x70, 0x29, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x8, 0xb}, {0x2, 0xa}, {0xfff2, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x1}}, @tclass_kind_options=@c_sfq={0x8}, @TCA_RATE={0x6, 0x5, {0x0, 0x4}}, @TCA_RATE={0x6, 0x5, {0x5, 0xf}}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_hfsc={{0x9}, {0x14, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x4, 0x6, 0x3ff}}]}}]}, 0x70}}, 0x20040089) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001000)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0xc}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x4000880) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x2, 0x1, 0x4, 0x4}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) 418.832647ms ago: executing program 7 (id=1302): rt_sigqueueinfo(0x0, 0x15, &(0x7f0000000240)={0x1, 0xf9e6, 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) 258.397532ms ago: executing program 4 (id=1303): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x80) getdents64(r2, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b00000000000000000000000000000000000000000200000000000000000000000000000000000000200000000000000000020000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000c0000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0021000000000000467700000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) 122.614925ms ago: executing program 1 (id=1304): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000003a000000000040120000006e7000000100000000200002000a00000000800000000000000000000200000000000000aa000000000d000100756470"], 0x6c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000200), &(0x7f0000000340)=r7}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) 0s ago: executing program 0 (id=1305): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x87) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) readv(r8, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/214, 0xd6}], 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000380)={{{@in=@multicast1, @in=@broadcast, 0xfffd, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x1d}, {0xffbffffffffffffe, 0x4, 0x1, 0x0, 0x0, 0x2009, 0xf0e, 0x10000}, {0x3, 0xb, 0x4053e5, 0x20}, 0x8, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in6=@remote, 0x1, 0x32}, 0xa, @in=@empty, 0x3502, 0x1, 0x0, 0x0, 0x2, 0x1, 0x3}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r11 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r11, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) sendmmsg(r11, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @remote, 0x3}, 0x1c) kernel console output (not intermixed with test programs): 0x1001 length: 249 > 9 [ 85.567464][ T5877] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.578476][ T5877] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.582919][ T5879] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.586994][ T5877] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.593956][ T5879] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.600148][ T5877] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 85.614497][ T5877] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.622761][ T5176] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.635846][ T5874] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 85.640519][ T5176] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.486378][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 86.631104][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 86.778934][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 86.837126][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 86.874479][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 86.976663][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 87.039261][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.046486][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.054616][ T5855] bridge_slave_0: entered allmulticast mode [ 87.062242][ T5855] bridge_slave_0: entered promiscuous mode [ 87.102251][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.109348][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.116723][ T5859] bridge_slave_0: entered allmulticast mode [ 87.124911][ T5859] bridge_slave_0: entered promiscuous mode [ 87.170337][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.177533][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.185607][ T5855] bridge_slave_1: entered allmulticast mode [ 87.193119][ T5855] bridge_slave_1: entered promiscuous mode [ 87.215942][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.223178][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.230367][ T5859] bridge_slave_1: entered allmulticast mode [ 87.237994][ T5859] bridge_slave_1: entered promiscuous mode [ 87.356621][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.364149][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.371600][ T5862] bridge_slave_0: entered allmulticast mode [ 87.379005][ T5862] bridge_slave_0: entered promiscuous mode [ 87.405588][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.429925][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.443393][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.468351][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.475588][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.483164][ T5862] bridge_slave_1: entered allmulticast mode [ 87.491280][ T5862] bridge_slave_1: entered promiscuous mode [ 87.501464][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.546528][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.553737][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.561913][ T5858] bridge_slave_0: entered allmulticast mode [ 87.569601][ T5858] bridge_slave_0: entered promiscuous mode [ 87.581320][ T5874] Bluetooth: hci3: command tx timeout [ 87.581437][ T51] Bluetooth: hci0: command tx timeout [ 87.648918][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.656219][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.663928][ T51] Bluetooth: hci4: command tx timeout [ 87.665541][ T5858] bridge_slave_1: entered allmulticast mode [ 87.676848][ T5858] bridge_slave_1: entered promiscuous mode [ 87.717502][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.740777][ T51] Bluetooth: hci5: command tx timeout [ 87.740797][ T5874] Bluetooth: hci1: command tx timeout [ 87.740917][ T5861] Bluetooth: hci2: command tx timeout [ 87.772942][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.780050][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.787606][ T5856] bridge_slave_0: entered allmulticast mode [ 87.795479][ T5856] bridge_slave_0: entered promiscuous mode [ 87.805165][ T5859] team0: Port device team_slave_0 added [ 87.830931][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.842910][ T5855] team0: Port device team_slave_0 added [ 87.878031][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.885488][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.893011][ T5856] bridge_slave_1: entered allmulticast mode [ 87.901429][ T5856] bridge_slave_1: entered promiscuous mode [ 87.909667][ T5859] team0: Port device team_slave_1 added [ 87.918995][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.932041][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.943813][ T5855] team0: Port device team_slave_1 added [ 87.964772][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.972156][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.979278][ T5857] bridge_slave_0: entered allmulticast mode [ 87.987900][ T5857] bridge_slave_0: entered promiscuous mode [ 88.082930][ T5862] team0: Port device team_slave_0 added [ 88.103063][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.110227][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.117898][ T5857] bridge_slave_1: entered allmulticast mode [ 88.125834][ T5857] bridge_slave_1: entered promiscuous mode [ 88.148424][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.155480][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.181457][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.210073][ T5862] team0: Port device team_slave_1 added [ 88.232657][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.239593][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.266537][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.279311][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.286291][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.312520][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.342328][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.355214][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.365342][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.372968][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.399279][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.421440][ T5858] team0: Port device team_slave_0 added [ 88.443677][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.450693][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.476699][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.552832][ T5856] team0: Port device team_slave_0 added [ 88.561943][ T5858] team0: Port device team_slave_1 added [ 88.568394][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.575703][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.601938][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.644865][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.657321][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.673784][ T5856] team0: Port device team_slave_1 added [ 88.892786][ T5855] hsr_slave_0: entered promiscuous mode [ 88.900160][ T5855] hsr_slave_1: entered promiscuous mode [ 88.908908][ T5857] team0: Port device team_slave_0 added [ 88.918432][ T5857] team0: Port device team_slave_1 added [ 88.953627][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.961008][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.987506][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.000835][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.007771][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.034443][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.052231][ T5862] hsr_slave_0: entered promiscuous mode [ 89.058603][ T5862] hsr_slave_1: entered promiscuous mode [ 89.064909][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 89.070707][ T5862] Cannot create hsr debugfs directory [ 89.096837][ T5859] hsr_slave_0: entered promiscuous mode [ 89.103395][ T5859] hsr_slave_1: entered promiscuous mode [ 89.109613][ T5859] debugfs: 'hsr0' already exists in 'hsr' [ 89.115366][ T5859] Cannot create hsr debugfs directory [ 89.121642][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.128557][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.154558][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.167368][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.174685][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.201076][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.238207][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.245258][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.271983][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.356499][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.363564][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.389937][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.433686][ T5858] hsr_slave_0: entered promiscuous mode [ 89.440240][ T5858] hsr_slave_1: entered promiscuous mode [ 89.446968][ T5858] debugfs: 'hsr0' already exists in 'hsr' [ 89.452916][ T5858] Cannot create hsr debugfs directory [ 89.655715][ T5857] hsr_slave_0: entered promiscuous mode [ 89.661448][ T51] Bluetooth: hci0: command tx timeout [ 89.667959][ T5857] hsr_slave_1: entered promiscuous mode [ 89.670681][ T51] Bluetooth: hci3: command tx timeout [ 89.674279][ T5857] debugfs: 'hsr0' already exists in 'hsr' [ 89.684926][ T5857] Cannot create hsr debugfs directory [ 89.696220][ T5856] hsr_slave_0: entered promiscuous mode [ 89.703389][ T5856] hsr_slave_1: entered promiscuous mode [ 89.709543][ T5856] debugfs: 'hsr0' already exists in 'hsr' [ 89.715793][ T5856] Cannot create hsr debugfs directory [ 89.750785][ T51] Bluetooth: hci4: command tx timeout [ 89.820582][ T51] Bluetooth: hci5: command tx timeout [ 89.820633][ T5861] Bluetooth: hci2: command tx timeout [ 89.825989][ T5874] Bluetooth: hci1: command tx timeout [ 90.351370][ T5859] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.366470][ T5859] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.380317][ T5859] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.394367][ T5859] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.475059][ T5855] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.486489][ T5855] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.498831][ T5855] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.515871][ T5855] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.604518][ T5862] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.644648][ T5862] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.655892][ T5862] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.667640][ T5862] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.743037][ T5858] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 90.760938][ T5858] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 90.781431][ T5858] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 90.796288][ T5858] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 90.938379][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.968855][ T5857] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.980068][ T5857] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.016632][ T5857] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.027680][ T5857] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.107905][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.135178][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.158658][ T5856] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.177366][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.184642][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.197928][ T24] cfg80211: failed to load regulatory.db [ 91.219483][ T5856] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.235720][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.242868][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.258505][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.286679][ T5856] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.299583][ T5856] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.322222][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.352747][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.362349][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.369484][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.401824][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.408935][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.419611][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.426727][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.450271][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.457436][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.637130][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.740851][ T51] Bluetooth: hci3: command tx timeout [ 91.741068][ T5874] Bluetooth: hci0: command tx timeout [ 91.775631][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.821005][ T5874] Bluetooth: hci4: command tx timeout [ 91.862007][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.869161][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.901460][ T5874] Bluetooth: hci2: command tx timeout [ 91.901484][ T51] Bluetooth: hci5: command tx timeout [ 91.906866][ T5874] Bluetooth: hci1: command tx timeout [ 91.927392][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.934715][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.956063][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.055201][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.079109][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.122442][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.137827][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.161645][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.168805][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.187923][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.195071][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.257379][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.264568][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.295078][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.302260][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.444285][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.464442][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.788224][ T5862] veth0_vlan: entered promiscuous mode [ 92.808557][ T5855] veth0_vlan: entered promiscuous mode [ 92.845308][ T5862] veth1_vlan: entered promiscuous mode [ 92.890129][ T5855] veth1_vlan: entered promiscuous mode [ 93.077450][ T5855] veth0_macvtap: entered promiscuous mode [ 93.103477][ T5862] veth0_macvtap: entered promiscuous mode [ 93.118471][ T5862] veth1_macvtap: entered promiscuous mode [ 93.138230][ T5855] veth1_macvtap: entered promiscuous mode [ 93.158473][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.169621][ T5859] veth0_vlan: entered promiscuous mode [ 93.189661][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.224705][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.245837][ T5859] veth1_vlan: entered promiscuous mode [ 93.303543][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.319169][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.364235][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.398069][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.413922][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.454609][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.471445][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.521118][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.537524][ T5859] veth0_macvtap: entered promiscuous mode [ 93.558039][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.585847][ T5859] veth1_macvtap: entered promiscuous mode [ 93.612399][ T5857] veth0_vlan: entered promiscuous mode [ 93.646508][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.662112][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.698300][ T5857] veth1_vlan: entered promiscuous mode [ 93.714204][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.800159][ T5856] veth0_vlan: entered promiscuous mode [ 93.821141][ T5874] Bluetooth: hci0: command tx timeout [ 93.830565][ T5874] Bluetooth: hci3: command tx timeout [ 93.838739][ T5856] veth1_vlan: entered promiscuous mode [ 93.848741][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.873147][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.889394][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.901594][ T5874] Bluetooth: hci4: command tx timeout [ 93.916753][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.935354][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.944922][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.982428][ T5874] Bluetooth: hci5: command tx timeout [ 93.982464][ T5861] Bluetooth: hci1: command tx timeout [ 93.995350][ T51] Bluetooth: hci2: command tx timeout [ 94.034983][ T5978] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.051153][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.057766][ T5857] veth0_macvtap: entered promiscuous mode [ 94.064939][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.079628][ T5857] veth1_macvtap: entered promiscuous mode [ 94.101129][ T5978] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.109856][ T5978] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.130337][ T5858] veth0_vlan: entered promiscuous mode [ 94.142806][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.152851][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.161002][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.168676][ T5856] veth0_macvtap: entered promiscuous mode [ 94.226177][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.239516][ T5862] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.258421][ T5856] veth1_macvtap: entered promiscuous mode [ 94.312681][ T5858] veth1_vlan: entered promiscuous mode [ 94.358007][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.448955][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.473839][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.492033][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.545135][ T5978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.586639][ T5978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.685965][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.693748][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.746201][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.786218][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.807426][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.838348][ T5858] veth0_macvtap: entered promiscuous mode [ 94.857767][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.899118][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.349035][ T5858] veth1_macvtap: entered promiscuous mode [ 96.433158][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.473472][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.628517][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.671389][ T6024] loop4: detected capacity change from 0 to 512 [ 96.759388][ T6024] EXT4-fs (loop4): #blocks per group too big: 466944 [ 96.826529][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.972710][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.993253][ T5978] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.007910][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.079767][ T5978] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.118089][ T5978] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.147343][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.153001][ T30] audit: type=1326 audit(1755899770.766:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.4.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6778ebe9 code=0x7ffc0000 [ 98.202877][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.225724][ T5978] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.226393][ T30] audit: type=1326 audit(1755899770.796:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.4.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5a6778ebe9 code=0x7ffc0000 [ 98.415677][ T6036] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 98.965063][ T30] audit: type=1326 audit(1755899770.796:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.4.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6778ebe9 code=0x7ffc0000 [ 98.989795][ T30] audit: type=1326 audit(1755899770.796:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.4.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5a6778ebe9 code=0x7ffc0000 [ 99.018069][ T30] audit: type=1326 audit(1755899770.796:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.4.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6778ebe9 code=0x7ffc0000 [ 99.085897][ T30] audit: type=1326 audit(1755899770.796:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.4.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f5a6778ebe9 code=0x7ffc0000 [ 99.141824][ T3511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.157071][ T30] audit: type=1326 audit(1755899770.796:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.4.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6778ebe9 code=0x7ffc0000 [ 99.173148][ T3511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.197196][ T30] audit: type=1326 audit(1755899770.796:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.4.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f5a6778ebe9 code=0x7ffc0000 [ 99.246034][ T30] audit: type=1326 audit(1755899770.796:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.4.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6778ebe9 code=0x7ffc0000 [ 99.269364][ T30] audit: type=1326 audit(1755899770.796:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6030 comm="syz.4.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6778ebe9 code=0x7ffc0000 [ 99.408897][ T6042] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.14'. [ 99.436669][ T5938] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.634970][ T6044] ======================================================= [ 99.634970][ T6044] WARNING: The mand mount option has been deprecated and [ 99.634970][ T6044] and is ignored by this kernel. Remove the mand [ 99.634970][ T6044] option from the mount to silence this warning. [ 99.634970][ T6044] ======================================================= [ 99.879454][ T5938] usb 1-1: Using ep0 maxpacket: 32 [ 100.535734][ T5938] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.547167][ T6045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.589604][ T6045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.608089][ T5938] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.662987][ T5938] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 100.695444][ T5938] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 100.772277][ T5938] usb 1-1: Product: syz [ 100.776487][ T5938] usb 1-1: Manufacturer: syz [ 100.800845][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.875406][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.953424][ T5938] hub 1-1:4.0: USB hub found [ 101.155907][ T5938] hub 1-1:4.0: 2 ports detected [ 101.239477][ T6019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.196536][ T6019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.577273][ T6062] loop1: detected capacity change from 0 to 512 [ 103.781404][ T6064] overlayfs: missing 'lowerdir' [ 105.369674][ T5886] hub 1-1:4.0: hub_ext_port_status failed (err = -32) [ 105.395432][ T6062] EXT4-fs: error -4 creating inode table initialization thread [ 105.403793][ T6062] EXT4-fs (loop1): mount failed [ 105.582429][ T1549] usb 1-1: USB disconnect, device number 2 [ 106.492917][ T6089] loop0: detected capacity change from 0 to 1024 [ 106.876821][ T6097] syz.4.24 uses obsolete (PF_INET,SOCK_PACKET) [ 107.110876][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.111180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.119613][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.280853][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.694940][ T6110] netlink: 'syz.5.27': attribute type 4 has an invalid length. [ 110.352017][ T6141] loop0: detected capacity change from 0 to 512 [ 110.842495][ T6140] loop5: detected capacity change from 0 to 512 [ 111.789324][ T6141] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 111.802467][ T6141] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 112.183897][ T6141] EXT4-fs: error -4 creating inode table initialization thread [ 112.193448][ T6141] EXT4-fs (loop0): mount failed [ 112.356922][ T6140] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.369540][ T6140] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.701896][ T6151] loop1: detected capacity change from 0 to 512 [ 112.756633][ T6151] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 113.126345][ T6159] netlink: 'syz.0.40': attribute type 4 has an invalid length. [ 113.134187][ T6159] netlink: 17 bytes leftover after parsing attributes in process `syz.0.40'. [ 113.803694][ T6151] EXT4-fs (loop1): orphan cleanup on readonly fs [ 113.863747][ T6151] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.39: Block bitmap for bg 0 marked uninitialized [ 114.085116][ T6151] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 114.164930][ T6151] EXT4-fs (loop1): 1 orphan inode deleted [ 114.176098][ T6153] loop3: detected capacity change from 0 to 8192 [ 114.218562][ T6151] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 114.822181][ T5858] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.896214][ T5862] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.527971][ T6194] netlink: 12 bytes leftover after parsing attributes in process `syz.5.52'. [ 117.681801][ T6194] vlan2: entered promiscuous mode [ 117.731057][ T6194] batadv0: entered promiscuous mode [ 117.787174][ T6198] syz.0.51 (6198): /proc/6190/oom_adj is deprecated, please use /proc/6190/oom_score_adj instead. [ 118.757539][ T6202] loop4: detected capacity change from 0 to 512 [ 118.870697][ T6202] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 119.014506][ T6202] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 119.036416][ T6202] EXT4-fs (loop4): 1 truncate cleaned up [ 119.059311][ T6202] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.488162][ T6218] netlink: 'syz.2.57': attribute type 4 has an invalid length. [ 120.495925][ T6218] netlink: 17 bytes leftover after parsing attributes in process `syz.2.57'. [ 121.283676][ T5859] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.346004][ T6222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.58'. [ 121.497442][ T6225] loop3: detected capacity change from 0 to 512 [ 121.582158][ T6225] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 121.751280][ T6225] EXT4-fs (loop3): orphan cleanup on readonly fs [ 121.766415][ T6225] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.60: Block bitmap for bg 0 marked uninitialized [ 121.826654][ T6225] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 121.884162][ T6225] EXT4-fs (loop3): 1 orphan inode deleted [ 121.892605][ T6225] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 123.289604][ T6250] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 123.423545][ T5856] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.485228][ T6246] loop1: detected capacity change from 0 to 512 [ 123.503497][ T6246] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 123.619489][ T6252] netlink: 20 bytes leftover after parsing attributes in process `syz.5.69'. [ 123.672634][ T6246] EXT4-fs (loop1): 1 truncate cleaned up [ 123.681323][ T6246] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.854862][ T6252] vlan2: entered promiscuous mode [ 125.168987][ T6263] loop5: detected capacity change from 0 to 512 [ 125.354679][ T6263] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 125.531449][ T6263] EXT4-fs (loop5): 1 truncate cleaned up [ 125.555779][ T6263] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.802529][ T5862] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.711960][ T6272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.74'. [ 127.668532][ T5886] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 127.708237][ T5858] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.865104][ T5886] usb 1-1: not running at top speed; connect to a high speed hub [ 127.897919][ T5886] usb 1-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 128.148002][ T5886] usb 1-1: config 1 interface 0 has no altsetting 0 [ 128.158292][ T5886] usb 1-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.40 [ 128.169991][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.178427][ T5886] usb 1-1: Product: syz [ 128.200641][ T5886] usb 1-1: Manufacturer: syz [ 128.232692][ T5886] usb 1-1: SerialNumber: syz [ 128.419054][ T6300] tipc: Failed to remove unknown binding: 66,1,1/0:2594215695/2594215697 [ 128.710550][ T6304] loop3: detected capacity change from 0 to 128 [ 129.190582][ T6309] netlink: 'syz.2.83': attribute type 4 has an invalid length. [ 129.198274][ T6309] netlink: 17 bytes leftover after parsing attributes in process `syz.2.83'. [ 129.854930][ T5886] usbhid 1-1:1.0: can't add hid device: -71 [ 129.864954][ T5886] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 129.942145][ T5886] usb 1-1: USB disconnect, device number 3 [ 130.185126][ T6317] tipc: Started in network mode [ 130.190194][ T6317] tipc: Node identity 6e912a3c36fc, cluster identity 4711 [ 130.231794][ T6317] tipc: Enabled bearer , priority 0 [ 130.252879][ T6318] syzkaller0: entered promiscuous mode [ 130.258384][ T6318] syzkaller0: entered allmulticast mode [ 130.337538][ T6317] tipc: Resetting bearer [ 130.384357][ T6315] tipc: Resetting bearer [ 130.652359][ T6315] tipc: Disabling bearer [ 131.997821][ T6334] loop2: detected capacity change from 0 to 512 [ 132.039103][ T6334] EXT4-fs: quotafile must be on filesystem root [ 132.145231][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.152016][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.473990][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 132.474011][ T30] audit: type=1326 audit(1755899805.086:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.5.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d3d8ebe9 code=0x7ffc0000 [ 132.585341][ T30] audit: type=1326 audit(1755899805.086:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.5.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d3d8ebe9 code=0x7ffc0000 [ 132.745772][ T30] audit: type=1326 audit(1755899805.156:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.5.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08d3d8ebe9 code=0x7ffc0000 [ 133.542167][ T30] audit: type=1326 audit(1755899805.156:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.5.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d3d8ebe9 code=0x7ffc0000 [ 133.610807][ T30] audit: type=1326 audit(1755899805.156:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.5.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d3d8ebe9 code=0x7ffc0000 [ 133.716245][ T30] audit: type=1326 audit(1755899805.156:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.5.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08d3d8ebe9 code=0x7ffc0000 [ 133.743139][ T30] audit: type=1326 audit(1755899805.156:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.5.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d3d8ebe9 code=0x7ffc0000 [ 133.873983][ T30] audit: type=1326 audit(1755899805.156:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.5.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08d3d8ebe9 code=0x7ffc0000 [ 134.066367][ T30] audit: type=1326 audit(1755899805.156:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.5.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d3d8ebe9 code=0x7ffc0000 [ 134.121173][ T30] audit: type=1326 audit(1755899805.166:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.5.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f08d3d8ebe9 code=0x7ffc0000 [ 134.172634][ T6368] tipc: Started in network mode [ 134.189852][ T6368] tipc: Node identity 3ec77641561d, cluster identity 4711 [ 134.303101][ T6372] loop1: detected capacity change from 0 to 256 [ 134.639716][ T6368] tipc: Enabled bearer , priority 0 [ 134.870973][ T6375] syzkaller0: entered promiscuous mode [ 134.876476][ T6375] syzkaller0: entered allmulticast mode [ 134.931869][ T6368] tipc: Resetting bearer [ 134.992697][ T6365] tipc: Resetting bearer [ 135.001724][ T12] kworker/u8:0: attempt to access beyond end of device [ 135.001724][ T12] loop3: rw=1, sector=145, nr_sectors = 216 limit=128 [ 135.129478][ T6365] tipc: Disabling bearer [ 136.874851][ T6389] process 'syz.4.107' launched '/dev/fd/6' with NULL argv: empty string added [ 137.460595][ T6390] loop4: detected capacity change from 0 to 1024 [ 139.832278][ T6427] loop2: detected capacity change from 0 to 512 [ 139.909982][ T6427] EXT4-fs (loop2): blocks per group (7872) and clusters per group (32768) inconsistent [ 142.174624][ T6438] loop4: detected capacity change from 0 to 256 [ 142.332085][ T6445] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.128'. [ 142.736207][ T6453] netlink: 'syz.5.127': attribute type 4 has an invalid length. [ 142.743933][ T6453] netlink: 17 bytes leftover after parsing attributes in process `syz.5.127'. [ 142.914997][ T6456] loop4: detected capacity change from 0 to 128 [ 145.551347][ T6474] loop0: detected capacity change from 0 to 512 [ 145.718324][ T6474] EXT4-fs (loop0): blocks per group (7872) and clusters per group (32768) inconsistent [ 147.676167][ T6490] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.141'. [ 152.505507][ T6543] loop3: detected capacity change from 0 to 2048 [ 152.827237][ T6543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.842267][ T6543] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.875702][ T6543] netlink: 20 bytes leftover after parsing attributes in process `syz.3.158'. [ 154.596159][ T5856] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.933972][ T6586] loop3: detected capacity change from 0 to 512 [ 156.017678][ T6586] EXT4-fs (loop3): blocks per group (7872) and clusters per group (32768) inconsistent [ 157.932800][ T6595] syzkaller0: entered promiscuous mode [ 157.941498][ T6595] syzkaller0: entered allmulticast mode [ 157.964919][ T6596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.174'. [ 157.984764][ T6596] vlan2: entered promiscuous mode [ 157.989819][ T6596] batadv0: entered promiscuous mode [ 160.287936][ T5886] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 160.860645][ T6614] netlink: 'syz.2.181': attribute type 4 has an invalid length. [ 160.868326][ T6614] netlink: 17 bytes leftover after parsing attributes in process `syz.2.181'. [ 161.711653][ T5886] usb 1-1: unable to get BOS descriptor or descriptor too short [ 161.733760][ T5886] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 161.759704][ T5886] usb 1-1: can't read configurations, error -71 [ 162.117465][ T6633] netlink: 'syz.0.187': attribute type 1 has an invalid length. [ 162.155902][ T6633] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.187'. [ 162.219274][ T6636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.189'. [ 162.268530][ T6636] vlan2: entered promiscuous mode [ 162.273865][ T6636] batadv0: entered promiscuous mode [ 164.027107][ T6659] loop4: detected capacity change from 0 to 32768 [ 165.290572][ T6666] syz.5.198 (6666) used greatest stack depth: 16872 bytes left [ 167.698894][ T6679] netlink: 'syz.4.203': attribute type 21 has an invalid length. [ 167.757071][ T6679] netlink: 13562 bytes leftover after parsing attributes in process `syz.4.203'. [ 168.322354][ T6686] loop5: detected capacity change from 0 to 4096 [ 168.329808][ T6686] EXT4-fs: Ignoring removed mblk_io_submit option [ 168.395334][ T6686] EXT4-fs (loop5): Test dummy encryption mode enabled [ 168.484093][ T6686] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.549785][ T6686] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 168.576998][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 168.610497][ T30] audit: type=1326 audit(1755899841.186:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.5.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d3d8ebe9 code=0x7ffc0000 [ 168.986107][ T30] audit: type=1326 audit(1755899841.186:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.5.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d3d8ebe9 code=0x7ffc0000 [ 170.605256][ T6701] loop3: detected capacity change from 0 to 512 [ 170.980358][ T6701] EXT4-fs (loop3): blocks per group (7872) and clusters per group (32768) inconsistent [ 171.042251][ T5858] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.980961][ T5938] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 177.051385][ T6772] netlink: 'syz.1.230': attribute type 2 has an invalid length. [ 178.314869][ T5938] usb 3-1: device not accepting address 3, error -71 [ 179.442429][ T6803] netlink: 'syz.3.243': attribute type 4 has an invalid length. [ 179.450105][ T6803] netlink: 17 bytes leftover after parsing attributes in process `syz.3.243'. [ 179.579532][ T6808] netlink: 12 bytes leftover after parsing attributes in process `syz.5.244'. [ 180.383683][ T6818] netlink: 'syz.3.248': attribute type 2 has an invalid length. [ 180.540812][ T90] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 180.924516][ T90] usb 6-1: not running at top speed; connect to a high speed hub [ 180.977279][ T90] usb 6-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 181.208632][ T90] usb 6-1: config 1 interface 0 has no altsetting 0 [ 181.221281][ T90] usb 6-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.40 [ 181.243298][ T90] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.251871][ T90] usb 6-1: Product: syz [ 181.256528][ T90] usb 6-1: Manufacturer: syz [ 181.261566][ T90] usb 6-1: SerialNumber: syz [ 182.949174][ T90] usbhid 6-1:1.0: can't add hid device: -71 [ 182.970049][ T90] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 183.014755][ T90] usb 6-1: USB disconnect, device number 2 [ 183.196082][ T6852] tipc: Enabled bearer , priority 0 [ 183.211849][ T6852] syzkaller0: entered promiscuous mode [ 183.230099][ T6852] syzkaller0: entered allmulticast mode [ 183.264819][ T6852] Zero length message leads to an empty skb [ 183.301190][ T6852] tipc: Resetting bearer [ 183.331401][ T6851] tipc: Resetting bearer [ 183.391565][ T6851] tipc: Disabling bearer [ 184.509742][ T6864] netlink: 'syz.5.263': attribute type 2 has an invalid length. [ 185.166807][ T6875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.265'. [ 185.350018][ T6880] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.266'. [ 185.392645][ T6878] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.266'. [ 187.385141][ T90] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 188.039715][ T90] usb 3-1: not running at top speed; connect to a high speed hub [ 188.228378][ T90] usb 3-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.281638][ T6906] netlink: 20 bytes leftover after parsing attributes in process `syz.1.275'. [ 188.338988][ T90] usb 3-1: config 1 interface 0 has no altsetting 0 [ 188.398000][ T90] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.40 [ 188.689864][ T6910] loop3: detected capacity change from 0 to 512 [ 188.791553][ T6910] EXT4-fs (loop3): blocks per group (7872) and clusters per group (32768) inconsistent [ 188.939545][ T90] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.237188][ T90] usb 3-1: Product: syz [ 189.283469][ T90] usb 3-1: Manufacturer: syz [ 189.340635][ T90] usb 3-1: SerialNumber: syz [ 189.410080][ T90] usb 3-1: can't set config #1, error -71 [ 190.246771][ T90] usb 3-1: USB disconnect, device number 5 [ 190.643972][ T6914] netlink: 'syz.2.278': attribute type 2 has an invalid length. [ 190.805699][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 191.307071][ T6927] loop3: detected capacity change from 0 to 512 [ 191.425444][ T6927] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 191.880784][ T6927] EXT4-fs (loop3): orphan cleanup on readonly fs [ 191.922113][ T6927] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.283: Block bitmap for bg 0 marked uninitialized [ 191.991754][ T6927] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 192.045846][ T6927] EXT4-fs (loop3): 1 orphan inode deleted [ 192.192786][ T6927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 193.741065][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.747429][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.079617][ T5856] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.171734][ T6953] netlink: 20 bytes leftover after parsing attributes in process `syz.0.291'. [ 194.235837][ T6955] netlink: 'syz.4.293': attribute type 2 has an invalid length. [ 194.534421][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.295'. [ 195.280806][ T5947] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 195.426062][ T6974] tipc: Can't bind to reserved service type 2 [ 195.530119][ T5947] usb 2-1: not running at top speed; connect to a high speed hub [ 195.573018][ T5947] usb 2-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.610505][ T5947] usb 2-1: config 1 interface 0 has no altsetting 0 [ 195.644837][ T5947] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.40 [ 195.674624][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.700627][ T5947] usb 2-1: Product: syz [ 195.704811][ T5947] usb 2-1: Manufacturer: syz [ 195.740776][ T5947] usb 2-1: SerialNumber: syz [ 196.689920][ T6995] netlink: 20 bytes leftover after parsing attributes in process `syz.3.307'. [ 196.723841][ T6995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.022005][ T6997] netlink: 68 bytes leftover after parsing attributes in process `syz.3.308'. [ 197.073169][ T6990] loop4: detected capacity change from 0 to 512 [ 197.119160][ T6990] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 197.245890][ T6990] EXT4-fs (loop4): 1 truncate cleaned up [ 197.257861][ T5947] usbhid 2-1:1.0: can't add hid device: -71 [ 197.270689][ T5947] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 197.303300][ T5947] usb 2-1: USB disconnect, device number 2 [ 197.345912][ T6990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.779985][ T7006] netlink: 8 bytes leftover after parsing attributes in process `syz.5.311'. [ 198.249900][ T5859] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.756005][ T7027] netlink: 100 bytes leftover after parsing attributes in process `syz.2.318'. [ 199.841902][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 200.045287][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 200.147704][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 200.250094][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 200.454945][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 201.039297][ T7053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.325'. [ 202.578135][ T7086] netlink: 'syz.4.340': attribute type 10 has an invalid length. [ 202.648146][ T7097] netlink: 'syz.3.334': attribute type 4 has an invalid length. [ 202.664712][ T7086] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 202.811182][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 204.726393][ T7109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.345'. [ 205.129544][ T7119] loop4: detected capacity change from 0 to 512 [ 205.401196][ T7119] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.414324][ T7119] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 205.659509][ T7119] netlink: 20 bytes leftover after parsing attributes in process `syz.4.348'. [ 207.271254][ T5859] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.636390][ T7148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.360'. [ 209.235461][ T7182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.373'. [ 209.262531][ T7180] netlink: 'syz.5.372': attribute type 2 has an invalid length. [ 209.289330][ T7180] netlink: 'syz.5.372': attribute type 1 has an invalid length. [ 209.318653][ T7180] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.372'. [ 209.370588][ T7180] nbd: couldn't find a device at index 16 [ 210.336130][ T7210] netlink: 16 bytes leftover after parsing attributes in process `syz.1.384'. [ 211.024108][ T5880] Bluetooth: hci3: command 0x0406 tx timeout [ 211.030189][ T5880] Bluetooth: hci4: command 0x0406 tx timeout [ 211.030550][ T5871] Bluetooth: hci2: command 0x0406 tx timeout [ 211.036399][ T5880] Bluetooth: hci1: command 0x0406 tx timeout [ 211.046045][ T5876] Bluetooth: hci0: command 0x0406 tx timeout [ 211.048217][ T5879] Bluetooth: hci5: command 0x0406 tx timeout [ 211.602150][ T7215] nbd0: detected capacity change from 0 to 63 [ 211.613790][ T5861] block nbd0: Receive control failed (result -32) [ 211.615223][ T5946] block nbd0: Send control failed (result -32) [ 211.652837][ T5946] block nbd0: Request send failed, requeueing [ 211.666930][ T11] block nbd0: Dead connection, failed to find a fallback [ 211.674526][ T11] block nbd0: shutting down sockets [ 211.680004][ T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 211.689894][ T11] Buffer I/O error on dev nbd0, logical block 0, async page read [ 211.700345][ T5946] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 211.714339][ T5946] Buffer I/O error on dev nbd0, logical block 1, async page read [ 211.725534][ T5946] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 211.735200][ T5946] Buffer I/O error on dev nbd0, logical block 2, async page read [ 211.743602][ T5946] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 211.753051][ T5946] Buffer I/O error on dev nbd0, logical block 3, async page read [ 211.761524][ T5946] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 211.770953][ T5946] Buffer I/O error on dev nbd0, logical block 0, async page read [ 211.779930][ T5946] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 211.795883][ T5946] Buffer I/O error on dev nbd0, logical block 1, async page read [ 211.810140][ T5946] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 211.820521][ T5946] Buffer I/O error on dev nbd0, logical block 2, async page read [ 211.846629][ T5946] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 211.872972][ T5946] Buffer I/O error on dev nbd0, logical block 3, async page read [ 211.873022][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.389'. [ 211.890003][ T5946] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 211.921521][ T5946] Buffer I/O error on dev nbd0, logical block 0, async page read [ 211.947727][ T5946] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 211.977806][ T5946] Buffer I/O error on dev nbd0, logical block 1, async page read [ 212.010625][ T5946] ldm_validate_partition_table(): Disk read failed. [ 212.034747][ T5946] Dev nbd0: unable to read RDB block 0 [ 212.059353][ T5946] nbd0: unable to read partition table [ 212.718340][ T5946] ldm_validate_partition_table(): Disk read failed. [ 212.778615][ T5946] Dev nbd0: unable to read RDB block 0 [ 212.839635][ T5946] nbd0: unable to read partition table [ 213.292793][ T7254] loop3: detected capacity change from 0 to 1024 [ 214.023826][ T7249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.398'. [ 216.105988][ T7264] nbd1: detected capacity change from 0 to 63 [ 216.395352][ T6107] block nbd1: Send control failed (result -32) [ 216.510504][ T5861] block nbd1: Receive control failed (result -32) [ 216.521951][ T7271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.405'. [ 216.552163][ T6107] block nbd1: Request send failed, requeueing [ 216.580754][ T6107] block nbd1: Dead connection, failed to find a fallback [ 216.666783][ T6107] block nbd1: shutting down sockets [ 216.725155][ T6107] blk_print_req_error: 139 callbacks suppressed [ 216.725179][ T6107] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 216.810944][ T6107] buffer_io_error: 139 callbacks suppressed [ 216.810963][ T6107] Buffer I/O error on dev nbd1, logical block 1, async page read [ 216.860712][ T6107] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 216.913296][ T6107] Buffer I/O error on dev nbd1, logical block 2, async page read [ 217.199974][ T6107] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 217.254512][ T6107] Buffer I/O error on dev nbd1, logical block 3, async page read [ 217.306057][ T6107] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 217.327982][ T6107] Buffer I/O error on dev nbd1, logical block 0, async page read [ 217.358419][ T6107] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 217.380653][ T6107] Buffer I/O error on dev nbd1, logical block 1, async page read [ 217.410618][ T6107] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 217.440695][ T6107] Buffer I/O error on dev nbd1, logical block 2, async page read [ 217.460028][ T6107] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 217.489537][ T6107] Buffer I/O error on dev nbd1, logical block 3, async page read [ 217.512293][ T6107] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 217.522056][ T7292] netlink: 'syz.3.412': attribute type 10 has an invalid length. [ 217.540494][ T6107] Buffer I/O error on dev nbd1, logical block 0, async page read [ 217.558733][ T6107] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 217.585841][ T6107] Buffer I/O error on dev nbd1, logical block 1, async page read [ 217.609640][ T6107] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 217.637670][ T6107] Buffer I/O error on dev nbd1, logical block 2, async page read [ 217.673717][ T6107] ldm_validate_partition_table(): Disk read failed. [ 217.703791][ T6107] Dev nbd1: unable to read RDB block 0 [ 217.728911][ T6107] nbd1: unable to read partition table [ 217.821963][ T6107] ldm_validate_partition_table(): Disk read failed. [ 217.851983][ T6107] Dev nbd1: unable to read RDB block 0 [ 217.891439][ T6107] nbd1: unable to read partition table [ 217.948179][ T7292] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 217.976303][ T7299] netlink: 'syz.2.406': attribute type 4 has an invalid length. [ 218.234928][ T7305] netlink: 13 bytes leftover after parsing attributes in process `syz.3.416'. [ 218.495837][ T7311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.420'. [ 219.353550][ T7342] comedi comedi3: das16m1: I/O port conflict (0x6,16) [ 221.960759][ T7383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.444'. [ 223.798654][ T7424] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 225.139217][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.464'. [ 225.311167][ T7446] netlink: 'syz.1.453': attribute type 4 has an invalid length. [ 225.828330][ T7455] netlink: 100 bytes leftover after parsing attributes in process `syz.2.459'. [ 225.841607][ T7455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.459'. [ 227.178921][ T7459] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 227.586400][ T7459] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 227.681901][ T7459] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 228.264054][ T7474] netlink: 48 bytes leftover after parsing attributes in process `syz.1.474'. [ 229.876597][ T7486] loop5: detected capacity change from 0 to 512 [ 229.908756][ T7486] EXT4-fs (loop5): blocks per group (7872) and clusters per group (32768) inconsistent [ 230.175413][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.481'. [ 231.043059][ T7521] netlink: 40 bytes leftover after parsing attributes in process `syz.2.494'. [ 231.638521][ T5861] Bluetooth: hci3: unexpected event for opcode 0x0c0d [ 232.060875][ T7534] netlink: 28 bytes leftover after parsing attributes in process `syz.4.498'. [ 232.092281][ T7534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.498'. [ 233.248484][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.501'. [ 233.375885][ T7553] loop5: detected capacity change from 0 to 1024 [ 234.884300][ T7549] loop4: detected capacity change from 0 to 512 [ 235.032816][ T7549] EXT4-fs (loop4): blocks per group (7872) and clusters per group (32768) inconsistent [ 235.607798][ T7570] netlink: 40 bytes leftover after parsing attributes in process `syz.2.507'. [ 236.971705][ T7591] netlink: 13 bytes leftover after parsing attributes in process `syz.4.516'. [ 237.191002][ T7600] warning: `syz.1.520' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 237.419884][ T7604] loop4: detected capacity change from 0 to 1024 [ 238.261510][ T7617] syzkaller0: entered promiscuous mode [ 238.267036][ T7617] syzkaller0: entered allmulticast mode [ 238.973520][ T7632] 9pnet_virtio: no channels available for device syz [ 239.122965][ T7634] netlink: 'syz.2.531': attribute type 27 has an invalid length. [ 239.399258][ T7634] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.407776][ T7634] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.421798][ T7640] netlink: 12 bytes leftover after parsing attributes in process `syz.4.533'. [ 240.053447][ T7634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.116947][ T7634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.758328][ T7636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.795023][ T7636] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.833492][ T7636] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 240.880313][ T7683] netlink: 'syz.4.543': attribute type 4 has an invalid length. [ 240.888142][ T7683] netlink: 17 bytes leftover after parsing attributes in process `syz.4.543'. [ 240.977290][ T6066] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.024233][ T6066] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.089079][ T7675] syzkaller0: entered promiscuous mode [ 241.140600][ T7675] syzkaller0: entered allmulticast mode [ 241.247386][ T6066] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.262062][ T7690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.548'. [ 241.296454][ T6066] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.562018][ T7696] netlink: 16 bytes leftover after parsing attributes in process `syz.3.549'. [ 241.780789][ T7700] netlink: 'syz.3.549': attribute type 13 has an invalid length. [ 245.877055][ T7737] netlink: 16 bytes leftover after parsing attributes in process `syz.0.565'. [ 246.220687][ T7741] nbd2: detected capacity change from 0 to 63 [ 246.229228][ T7742] nbd: must specify an index to disconnect [ 246.244212][ T5861] block nbd2: Receive control failed (result -104) [ 246.325146][ T7744] syzkaller0: entered promiscuous mode [ 246.331652][ T7744] syzkaller0: entered allmulticast mode [ 248.018412][ T7782] nbd3: detected capacity change from 0 to 63 [ 248.040970][ T5874] Bluetooth: hci0: unexpected event for opcode 0x202d [ 248.051431][ T7784] nbd: must specify an index to disconnect [ 248.113512][ T5861] block nbd3: Receive control failed (result -104) [ 248.850791][ T5861] Bluetooth: hci1: unexpected event 0x14 length: 20 > 6 [ 249.707233][ T30] audit: type=1804 audit(1755899922.296:55): pid=7823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.593" name="/newroot/109/file1" dev="fuse" ino=1 res=1 errno=0 [ 249.822631][ T30] audit: type=1800 audit(1755899922.306:56): pid=7823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.593" name="/" dev="fuse" ino=1 res=0 errno=0 [ 251.229067][ T7854] wg2: entered allmulticast mode [ 251.276816][ T7854] capability: warning: `syz.5.597' uses 32-bit capabilities (legacy support in use) [ 252.624089][ T7876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.606'. [ 254.095236][ T7897] : entered promiscuous mode [ 255.024397][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.040556][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.174696][ T5861] Bluetooth: hci2: unexpected event 0x01 length: 4 > 1 [ 255.929942][ T7915] netlink: 'syz.5.617': attribute type 4 has an invalid length. [ 256.628991][ T7919] netlink: 12 bytes leftover after parsing attributes in process `syz.5.618'. [ 258.842234][ T7936] loop5: detected capacity change from 0 to 64 [ 258.955372][ T7935] block device autoloading is deprecated and will be removed. [ 260.233368][ T7950] netlink: 'syz.5.630': attribute type 2 has an invalid length. [ 260.920413][ T7950] netlink: 'syz.5.630': attribute type 1 has an invalid length. [ 260.928115][ T7950] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.630'. [ 261.436859][ T7964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.635'. [ 261.506126][ T7964] netlink: 'syz.0.635': attribute type 1 has an invalid length. [ 261.589230][ T7964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.635'. [ 264.176237][ T30] audit: type=1800 audit(1755899936.786:57): pid=8008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.646" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 264.475665][ T8018] netlink: 256 bytes leftover after parsing attributes in process `syz.3.653'. [ 264.647075][ T8020] syzkaller0: entered promiscuous mode [ 264.678799][ T8020] syzkaller0: entered allmulticast mode [ 264.767919][ T8031] netlink: 'syz.0.645': attribute type 4 has an invalid length. [ 264.775856][ T8031] netlink: 17 bytes leftover after parsing attributes in process `syz.0.645'. [ 264.874589][ T8020] sch_tbf: burst 0 is lower than device syzkaller0 mtu (313) ! [ 265.921494][ T8045] sctp: [Deprecated]: syz.0.661 (pid 8045) Use of int in maxseg socket option. [ 265.921494][ T8045] Use struct sctp_assoc_value instead [ 265.988201][ T5861] Bluetooth: hci0: unexpected cc 0x2039 length: 9 > 1 [ 266.001853][ T5861] Bluetooth: hci0: unexpected event for opcode 0x2039 [ 266.700470][ T30] audit: type=1804 audit(1755899939.306:58): pid=8057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.665" name="/newroot/121/file1" dev="fuse" ino=1 res=1 errno=0 [ 267.393049][ T8067] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 267.451996][ T30] audit: type=1800 audit(1755899940.066:59): pid=8057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.665" name="/" dev="fuse" ino=1 res=0 errno=0 [ 267.501186][ T8068] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 267.743326][ T8067] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 268.802530][ T8083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.671'. [ 268.969877][ T8086] netlink: 256 bytes leftover after parsing attributes in process `syz.5.672'. [ 269.607732][ T8092] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 269.664437][ T8092] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 270.067435][ T5861] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 270.078502][ T5861] Bluetooth: hci0: Injecting HCI hardware error event [ 270.088564][ T5874] Bluetooth: hci0: hardware error 0x00 [ 270.462119][ T8102] netlink: 'syz.0.673': attribute type 4 has an invalid length. [ 270.469812][ T8102] netlink: 17 bytes leftover after parsing attributes in process `syz.0.673'. [ 271.117190][ T8110] netlink: 16 bytes leftover after parsing attributes in process `syz.4.679'. [ 271.731819][ T8115] netlink: 'syz.4.679': attribute type 13 has an invalid length. [ 272.230627][ T5874] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 272.344290][ T8126] netlink: 256 bytes leftover after parsing attributes in process `syz.2.686'. [ 274.108875][ T8155] mmap: syz.2.695 (8155) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 276.802894][ T8172] loop3: detected capacity change from 0 to 32768 [ 276.906753][ T95] block nbd2: Possible stuck request ffff888024f60000: control (read@0,1024B). Runtime 30 seconds [ 276.918375][ T95] block nbd2: Possible stuck request ffff888024f601c0: control (read@1024,1024B). Runtime 30 seconds [ 276.929347][ T95] block nbd2: Possible stuck request ffff888024f60380: control (read@2048,1024B). Runtime 30 seconds [ 276.940686][ T95] block nbd2: Possible stuck request ffff888024f60540: control (read@3072,1024B). Runtime 30 seconds [ 278.718458][ T11] block nbd3: Possible stuck request ffff888024f90000: control (read@0,1024B). Runtime 30 seconds [ 278.729308][ T11] block nbd3: Possible stuck request ffff888024f901c0: control (read@1024,1024B). Runtime 30 seconds [ 278.741227][ T11] block nbd3: Possible stuck request ffff888024f90380: control (read@2048,1024B). Runtime 30 seconds [ 278.752359][ T11] block nbd3: Possible stuck request ffff888024f90540: control (read@3072,1024B). Runtime 30 seconds [ 278.919122][ T8206] wg2: entered allmulticast mode [ 279.619341][ T8207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.712'. [ 282.413020][ T8234] loop5: detected capacity change from 0 to 64 [ 285.460691][ T8247] block device autoloading is deprecated and will be removed. [ 285.476314][ T8270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.731'. [ 287.645622][ T8281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.735'. [ 288.347229][ T8283] gtp0: entered promiscuous mode [ 288.926103][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.741'. [ 289.578495][ T8305] loop4: detected capacity change from 0 to 4096 [ 289.591733][ T8305] EXT4-fs: Ignoring removed mblk_io_submit option [ 289.712410][ T8305] EXT4-fs (loop4): Test dummy encryption mode enabled [ 289.876646][ T8305] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.180586][ T30] audit: type=1326 audit(1755899962.786:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8301 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6778ebe9 code=0x7ffc0000 [ 291.279953][ T30] audit: type=1326 audit(1755899962.786:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8301 comm="syz.4.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6778ebe9 code=0x7ffc0000 [ 291.464701][ T5859] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.719447][ T8313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.744'. [ 294.048859][ T5947] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 294.058726][ T8322] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 294.363782][ T5947] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 294.455625][ T5947] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 294.530032][ T5947] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 294.595006][ T5947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.453052][ T8332] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 295.537796][ T5947] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 296.070254][ T30] audit: type=1326 audit(1755899968.676:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.0.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d8f38ebe9 code=0x7ffc0000 [ 296.833434][ T30] audit: type=1326 audit(1755899968.676:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.0.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d8f38ebe9 code=0x7ffc0000 [ 297.008516][ T5886] usb 2-1: USB disconnect, device number 3 [ 298.633674][ T8376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.766'. [ 299.289522][ T30] audit: type=1326 audit(1755899971.886:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8393 comm="syz.1.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e078ebe9 code=0x7ffc0000 [ 299.356604][ T30] audit: type=1326 audit(1755899971.886:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8393 comm="syz.1.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e078ebe9 code=0x7ffc0000 [ 300.443878][ T8421] netlink: 'syz.4.775': attribute type 10 has an invalid length. [ 302.146484][ T8442] netlink: 20 bytes leftover after parsing attributes in process `syz.0.786'. [ 303.370871][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 303.540455][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 304.409448][ T30] audit: type=1326 audit(1755899976.566:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8457 comm="syz.1.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e078ebe9 code=0x7ffc0000 [ 304.866780][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.173825][ T30] audit: type=1326 audit(1755899976.566:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8457 comm="syz.1.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e078ebe9 code=0x7ffc0000 [ 306.124525][ T10] usb 6-1: config 0 has no interfaces? [ 306.150566][ T8458] delete_channel: no stack [ 306.246001][ T7762] udevd[7762]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 307.645639][ T95] block nbd2: Possible stuck request ffff888024f60000: control (read@0,1024B). Runtime 60 seconds [ 307.656495][ T95] block nbd2: Possible stuck request ffff888024f601c0: control (read@1024,1024B). Runtime 60 seconds [ 307.668892][ T95] block nbd2: Possible stuck request ffff888024f60380: control (read@2048,1024B). Runtime 60 seconds [ 307.680035][ T95] block nbd2: Possible stuck request ffff888024f60540: control (read@3072,1024B). Runtime 60 seconds [ 307.710534][ T10] usb 6-1: unable to read config index 1 descriptor/start: -71 [ 307.789548][ T10] usb 6-1: can't read configurations, error -71 [ 307.796654][ T8478] afs: Unknown parameter 'dy' [ 308.355503][ T8491] 9pnet_virtio: no channels available for device syz [ 308.780905][ T11] block nbd3: Possible stuck request ffff888024f90000: control (read@0,1024B). Runtime 60 seconds [ 308.791665][ T11] block nbd3: Possible stuck request ffff888024f901c0: control (read@1024,1024B). Runtime 60 seconds [ 308.803535][ T11] block nbd3: Possible stuck request ffff888024f90380: control (read@2048,1024B). Runtime 60 seconds [ 308.814718][ T11] block nbd3: Possible stuck request ffff888024f90540: control (read@3072,1024B). Runtime 60 seconds [ 309.262798][ T8500] netlink: 'syz.4.801': attribute type 10 has an invalid length. [ 309.823694][ T8501] blk_print_req_error: 137 callbacks suppressed [ 309.823738][ T8501] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 309.839317][ T8501] buffer_io_error: 137 callbacks suppressed [ 309.839361][ T8501] Buffer I/O error on dev nbd0, logical block 0, async page read [ 309.856432][ T8501] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 309.865724][ T8501] Buffer I/O error on dev nbd0, logical block 1, async page read [ 309.921862][ T8501] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 309.931918][ T8501] Buffer I/O error on dev nbd0, logical block 2, async page read [ 309.940445][ T8501] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 309.949578][ T8501] Buffer I/O error on dev nbd0, logical block 3, async page read [ 309.957695][ T8501] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 309.966736][ T8501] Buffer I/O error on dev nbd0, logical block 0, async page read [ 309.974640][ T8501] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 309.983726][ T8501] Buffer I/O error on dev nbd0, logical block 1, async page read [ 309.991895][ T8501] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 310.001016][ T8501] Buffer I/O error on dev nbd0, logical block 2, async page read [ 310.008951][ T8501] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 310.041939][ T8501] Buffer I/O error on dev nbd0, logical block 3, async page read [ 310.049853][ T8501] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 310.058893][ T8501] Buffer I/O error on dev nbd0, logical block 0, async page read [ 310.069076][ T8501] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 310.078211][ T8501] Buffer I/O error on dev nbd0, logical block 1, async page read [ 310.089112][ T8501] ldm_validate_partition_table(): Disk read failed. [ 310.097753][ T8501] Dev nbd0: unable to read RDB block 0 [ 310.105069][ T8501] nbd0: unable to read partition table [ 310.111082][ T8501] ADFS-fs (nbd0): error: unable to read block 3, try 0 [ 310.189531][ T8490] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 315.414078][ T30] audit: type=1326 audit(1755899988.016:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8540 comm="syz.1.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e078ebe9 code=0x7ffc0000 [ 315.493723][ T30] audit: type=1326 audit(1755899988.016:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8540 comm="syz.1.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e078ebe9 code=0x7ffc0000 [ 316.649491][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.659306][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.568107][ T8564] loop3: detected capacity change from 0 to 512 [ 318.557036][ T8564] EXT4-fs (loop3): blocks per group (7872) and clusters per group (32768) inconsistent [ 318.671925][ T8568] vivid-000: ================= START STATUS ================= [ 318.679989][ T8568] vivid-000: Test Pattern: 75% Colorbar [ 318.686098][ T8568] vivid-000: Fill Percentage of Frame: 100 [ 318.692349][ T8568] vivid-000: Horizontal Movement: No Movement [ 318.698601][ T8568] vivid-000: Vertical Movement: No Movement [ 318.706532][ T8568] vivid-000: OSD Text Mode: All [ 318.711900][ T8568] vivid-000: Show Border: false [ 318.716931][ T8568] vivid-000: Show Square: false [ 318.722123][ T8568] vivid-000: Sensor Flipped Horizontally: false [ 318.734921][ T8568] vivid-000: Sensor Flipped Vertically: false [ 318.741283][ T8568] vivid-000: Insert SAV Code in Image: false [ 318.747543][ T8568] vivid-000: Insert EAV Code in Image: false [ 318.754011][ T8568] vivid-000: Insert Video Guard Band: false [ 318.760097][ T8568] vivid-000: Reduced Framerate: false [ 318.765836][ T8568] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 318.774025][ T8568] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 318.782265][ T8568] vivid-000: Enable Capture Cropping: true [ 318.788287][ T8568] vivid-000: Enable Capture Composing: true [ 318.794602][ T8568] vivid-000: Enable Capture Scaler: true [ 318.800692][ T8568] vivid-000: Timestamp Source: End of Frame [ 318.806688][ T8568] vivid-000: Colorspace: sRGB [ 318.811793][ T8568] vivid-000: Transfer Function: Default [ 318.817528][ T8568] vivid-000: Y'CbCr Encoding: Default [ 318.823162][ T8568] vivid-000: HSV Encoding: Hue 0-179 [ 318.829347][ T8568] vivid-000: Quantization: Default [ 318.836899][ T8568] vivid-000: Apply Alpha To Red Only: false [ 318.843212][ T8568] vivid-000: Standard Aspect Ratio: 4x3 [ 318.848921][ T8568] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 318.857259][ T8568] vivid-000: DV Timings: 640x480p59 inactive [ 318.866311][ T8568] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 318.874082][ T8568] vivid-000: Maximum EDID Blocks: 2 [ 318.879516][ T8568] vivid-000: Limited RGB Range (16-235): false [ 318.885859][ T8568] vivid-000: Rx RGB Quantization Range: Automatic [ 318.892578][ T8568] vivid-000: Power Present: 0x00000001 [ 318.898257][ T8568] tpg source WxH: 320x240 (Y'CbCr) [ 318.903566][ T8568] tpg field: 1 [ 318.907079][ T8568] tpg crop: (0,0)/320x240 [ 318.911746][ T8568] tpg compose: (0,0)/320x240 [ 318.916678][ T8568] tpg colorspace: 8 [ 318.922849][ T8568] tpg transfer function: 0/0 [ 318.927729][ T8568] tpg Y'CbCr encoding: 0/0 [ 318.932874][ T8568] tpg quantization: 0/0 [ 318.937081][ T8568] tpg RGB range: 0/2 [ 318.941394][ T8568] vivid-000: ================== END STATUS ================== [ 319.022559][ T8568] netlink: zone id is out of range [ 319.029632][ T8568] netlink: zone id is out of range [ 319.046546][ T8568] netlink: zone id is out of range [ 319.051745][ T8568] netlink: zone id is out of range [ 319.158251][ T8568] netlink: set zone limit has 4 unknown bytes [ 322.535638][ T5226] udevd[5226]: worker [7759] /devices/virtual/block/nbd3 is taking a long time [ 322.548940][ T5226] udevd[5226]: worker [7719] /devices/virtual/block/nbd2 is taking a long time [ 325.366541][ T8585] 9pnet_virtio: no channels available for device syz [ 326.532887][ T30] audit: type=1326 audit(1755899999.136:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8591 comm="syz.0.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d8f38ebe9 code=0x7ffc0000 [ 326.598826][ T8595] netlink: 13 bytes leftover after parsing attributes in process `syz.1.831'. [ 326.608274][ T30] audit: type=1326 audit(1755899999.136:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8591 comm="syz.0.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d8f38ebe9 code=0x7ffc0000 [ 328.387146][ T8612] netlink: 'syz.0.836': attribute type 27 has an invalid length. [ 328.555006][ T5861] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 328.567060][ T5861] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 328.579736][ T5861] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 328.592518][ T5861] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 328.610183][ T5861] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 329.478008][ T8624] netlink: 'syz.3.838': attribute type 4 has an invalid length. [ 329.486529][ T8624] netlink: 17 bytes leftover after parsing attributes in process `syz.3.838'. [ 330.700487][ T5874] Bluetooth: hci6: command tx timeout [ 330.713032][ T8612] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.721092][ T8612] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.096818][ T8612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.207055][ T8612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.974541][ T8644] netlink: 13 bytes leftover after parsing attributes in process `syz.1.845'. [ 332.109611][ T8648] loop4: detected capacity change from 0 to 4096 [ 332.116872][ T8648] EXT4-fs: Ignoring removed mblk_io_submit option [ 332.200713][ T8648] EXT4-fs (loop4): Test dummy encryption mode enabled [ 332.319391][ T8648] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.392043][ T30] audit: type=1326 audit(1755900005.006:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.4.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6778ebe9 code=0x7ffc0000 [ 332.433217][ T30] audit: type=1326 audit(1755900005.006:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.4.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6778ebe9 code=0x7ffc0000 [ 332.780468][ T5874] Bluetooth: hci6: command tx timeout [ 333.913228][ T8618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.924970][ T5859] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.083930][ T8618] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.158859][ T8618] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 334.349211][ T6072] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.388670][ T6072] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.466024][ T6072] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.693628][ T3523] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.515971][ T5874] Bluetooth: hci6: command tx timeout [ 336.032456][ T8688] netlink: 'syz.4.860': attribute type 4 has an invalid length. [ 336.220842][ T8690] netlink: 56 bytes leftover after parsing attributes in process `syz.4.860'. [ 336.490218][ T8692] netlink: 24 bytes leftover after parsing attributes in process `syz.1.861'. [ 336.506809][ T8689] netlink: 13 bytes leftover after parsing attributes in process `syz.0.859'. [ 337.594100][ T5874] Bluetooth: hci6: command tx timeout [ 338.868041][ T95] block nbd2: Possible stuck request ffff888024f60000: control (read@0,1024B). Runtime 90 seconds [ 338.868156][ T11] block nbd3: Possible stuck request ffff888024f90000: control (read@0,1024B). Runtime 90 seconds [ 338.878835][ T95] block nbd2: Possible stuck request ffff888024f601c0: control (read@1024,1024B). Runtime 90 seconds [ 338.889421][ T11] block nbd3: Possible stuck request ffff888024f901c0: control (read@1024,1024B). Runtime 90 seconds [ 338.912254][ T11] block nbd3: Possible stuck request ffff888024f90380: control (read@2048,1024B). Runtime 90 seconds [ 338.923574][ T11] block nbd3: Possible stuck request ffff888024f90540: control (read@3072,1024B). Runtime 90 seconds [ 338.961093][ T95] block nbd2: Possible stuck request ffff888024f60380: control (read@2048,1024B). Runtime 90 seconds [ 338.972093][ T95] block nbd2: Possible stuck request ffff888024f60540: control (read@3072,1024B). Runtime 90 seconds [ 340.352841][ T8614] chnl_net:caif_netlink_parms(): no params data found [ 340.698068][ T8724] tipc: Enabling of bearer rejected, failed to enable media [ 340.723075][ T8725] syzkaller0: entered promiscuous mode [ 340.730047][ T8725] syzkaller0: entered allmulticast mode [ 340.922456][ T8734] netlink: 'syz.4.868': attribute type 4 has an invalid length. [ 341.044757][ T8614] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.063120][ T8614] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.101159][ T8614] bridge_slave_0: entered allmulticast mode [ 341.116514][ T8614] bridge_slave_0: entered promiscuous mode [ 341.194478][ T8614] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.206368][ T8614] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.249407][ T8614] bridge_slave_1: entered allmulticast mode [ 341.265055][ T8614] bridge_slave_1: entered promiscuous mode [ 341.311007][ T8745] QAT: Stopping all acceleration devices. [ 341.367562][ T8614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.384877][ T8614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.473196][ T8614] team0: Port device team_slave_0 added [ 341.492174][ T8614] team0: Port device team_slave_1 added [ 341.578883][ T8614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.600938][ T8614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.647388][ T8614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.676692][ T8614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.692583][ T8614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.835140][ T8614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.495440][ T8614] hsr_slave_0: entered promiscuous mode [ 342.522626][ T8614] hsr_slave_1: entered promiscuous mode [ 342.537287][ T8614] debugfs: 'hsr0' already exists in 'hsr' [ 342.561909][ T8614] Cannot create hsr debugfs directory [ 344.449096][ T8776] loop4: detected capacity change from 0 to 4096 [ 344.456581][ T8776] EXT4-fs: Ignoring removed mblk_io_submit option [ 345.696743][ T8776] EXT4-fs (loop4): Test dummy encryption mode enabled [ 345.836539][ T8776] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.896375][ T30] audit: type=1326 audit(1755900018.506:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8773 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6778ebe9 code=0x7ffc0000 [ 345.928710][ T30] audit: type=1326 audit(1755900018.506:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8773 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6778ebe9 code=0x7ffc0000 [ 346.259169][ T8614] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 346.448673][ T8614] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 346.500657][ T5859] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.544402][ T8614] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 346.702611][ T8614] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 347.062334][ T8793] openvswitch: netlink: Tunnel attr 18 out of range max 16 [ 347.208059][ T8614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.652206][ T8614] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.820768][ T8796] netlink: 'syz.4.886': attribute type 4 has an invalid length. [ 348.193346][ T6045] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.200552][ T6045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.332308][ T6045] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.339521][ T6045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.230021][ T8811] netlink: 25 bytes leftover after parsing attributes in process `syz.2.890'. [ 349.768322][ T8614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.854493][ T8818] netlink: 152 bytes leftover after parsing attributes in process `syz.2.892'. [ 350.200560][ T5886] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 350.398343][ T5886] usb 3-1: Using ep0 maxpacket: 32 [ 350.431022][ T5886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.509254][ T5886] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 350.554222][ T5886] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 350.568919][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.645421][ T5886] usb 3-1: Product: syz [ 350.720649][ T5886] usb 3-1: Manufacturer: syz [ 350.951099][ T5886] usb 3-1: SerialNumber: syz [ 350.971542][ T5886] usb 3-1: config 0 descriptor?? [ 352.996310][ T8614] veth0_vlan: entered promiscuous mode [ 353.009463][ T8614] veth1_vlan: entered promiscuous mode [ 353.059516][ T8614] veth0_macvtap: entered promiscuous mode [ 353.076039][ T8614] veth1_macvtap: entered promiscuous mode [ 353.172018][ T8848] usb usb3: usbfs: process 8848 (syz.3.900) did not claim interface 0 before use [ 353.178587][ T8614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.212228][ T8614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.253088][ T5955] usb 3-1: USB disconnect, device number 6 [ 353.279389][ T3511] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.328496][ T3511] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.368351][ T3511] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.395502][ T3511] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.541410][ T5886] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 353.543820][ T8854] netlink: 25 bytes leftover after parsing attributes in process `syz.4.903'. [ 353.833474][ T3511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.850823][ T3511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.890820][ T5886] usb 4-1: Using ep0 maxpacket: 16 [ 353.944156][ T5886] usb 4-1: config index 0 descriptor too short (expected 45918, got 18) [ 353.972806][ T5886] usb 4-1: config 21 has too many interfaces: 201, using maximum allowed: 32 [ 353.993676][ T6072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.004034][ T5886] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 354.031879][ T6072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.154643][ T5886] usb 4-1: config 21 has 0 interfaces, different from the descriptor's value: 201 [ 354.545059][ T5886] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 354.756054][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 354.970737][ T5886] usb 4-1: Product: syz [ 354.974945][ T5886] usb 4-1: Manufacturer: syz [ 355.132126][ T5886] usb 4-1: SerialNumber: syz [ 356.188998][ T10] usb 4-1: USB disconnect, device number 2 [ 357.098031][ T8886] netlink: 152 bytes leftover after parsing attributes in process `syz.3.913'. [ 357.390414][ T5955] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 357.610404][ T5955] usb 4-1: Using ep0 maxpacket: 32 [ 357.633513][ T5955] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.717219][ T5955] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 357.760218][ T5955] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 357.780623][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.808297][ T5955] usb 4-1: Product: syz [ 357.833081][ T5955] usb 4-1: Manufacturer: syz [ 357.837681][ T5955] usb 4-1: SerialNumber: syz [ 357.861560][ T5955] usb 4-1: config 0 descriptor?? [ 360.684207][ T8898] netlink: 'syz.1.918': attribute type 10 has an invalid length. [ 361.114248][ T8898] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 361.176793][ T5955] usb 4-1: USB disconnect, device number 3 [ 361.251940][ T8905] netlink: 13 bytes leftover after parsing attributes in process `syz.6.922'. [ 361.867778][ T8920] netlink: 25 bytes leftover after parsing attributes in process `syz.6.926'. [ 363.013622][ T8928] binder: 8926:8928 ioctl c0905664 2000000003c0 returned -22 [ 363.992719][ T8939] netlink: 'syz.3.928': attribute type 4 has an invalid length. [ 364.000504][ T8939] netlink: 17 bytes leftover after parsing attributes in process `syz.3.928'. [ 364.663915][ T8945] netlink: 'syz.6.933': attribute type 4 has an invalid length. [ 365.611957][ T8960] netlink: 'syz.1.937': attribute type 10 has an invalid length. [ 365.769048][ T8958] syzkaller0: entered promiscuous mode [ 365.854715][ T8958] syzkaller0: entered allmulticast mode [ 366.167331][ T8969] 9pnet_virtio: no channels available for device syz [ 367.296804][ T8987] fuse: Bad value for 'fd' [ 367.433043][ T8988] netlink: 'syz.6.947': attribute type 4 has an invalid length. [ 367.441013][ T8988] netlink: 17 bytes leftover after parsing attributes in process `syz.6.947'. [ 368.060915][ T8992] netlink: 12 bytes leftover after parsing attributes in process `syz.3.951'. [ 368.941586][ T95] block nbd2: Possible stuck request ffff888024f60000: control (read@0,1024B). Runtime 120 seconds [ 368.941831][ T11] block nbd3: Possible stuck request ffff888024f90000: control (read@0,1024B). Runtime 120 seconds [ 368.957305][ T9008] syzkaller0: entered promiscuous mode [ 368.970405][ T11] block nbd3: Possible stuck request ffff888024f901c0: control (read@1024,1024B). Runtime 120 seconds [ 368.991038][ T11] block nbd3: Possible stuck request ffff888024f90380: control (read@2048,1024B). Runtime 120 seconds [ 369.013910][ T11] block nbd3: Possible stuck request ffff888024f90540: control (read@3072,1024B). Runtime 120 seconds [ 369.020220][ T9016] 9pnet_virtio: no channels available for device syz [ 369.074792][ T95] block nbd2: Possible stuck request ffff888024f601c0: control (read@1024,1024B). Runtime 120 seconds [ 369.075315][ T9008] syzkaller0: entered allmulticast mode [ 369.086920][ T95] block nbd2: Possible stuck request ffff888024f60380: control (read@2048,1024B). Runtime 120 seconds [ 369.111401][ T95] block nbd2: Possible stuck request ffff888024f60540: control (read@3072,1024B). Runtime 120 seconds [ 369.565916][ T9015] netlink: 'syz.0.957': attribute type 10 has an invalid length. [ 370.712264][ T9015] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 371.094360][ T9036] openvswitch: netlink: VXLAN extension message has 11 unknown bytes. [ 371.780044][ T5874] Bluetooth: hci4: unexpected event for opcode 0x2019 [ 373.672558][ T9080] netlink: 'syz.3.979': attribute type 10 has an invalid length. [ 374.026952][ T9078] syzkaller0: entered promiscuous mode [ 374.105626][ T9078] syzkaller0: entered allmulticast mode [ 374.198094][ T9086] tipc: Started in network mode [ 374.251346][ T9086] tipc: Node identity 62e89b16b79e, cluster identity 4711 [ 374.281301][ T9093] 9pnet_fd: Insufficient options for proto=fd [ 374.290534][ T9086] tipc: Enabled bearer , priority 0 [ 374.377859][ T9084] tipc: Resetting bearer [ 374.426459][ T9089] syzkaller0: entered promiscuous mode [ 374.451154][ T9089] syzkaller0: entered allmulticast mode [ 374.510977][ T9083] tipc: Resetting bearer [ 374.625749][ T9083] tipc: Disabling bearer [ 375.015491][ T9106] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 375.089379][ T9106] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 375.840663][ T5874] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 375.849358][ T5874] Bluetooth: hci4: Injecting HCI hardware error event [ 375.858977][ T5874] Bluetooth: hci4: hardware error 0x00 [ 376.120146][ T9129] Driver unsupported XDP return value 0 on prog (id 320) dev N/A, expect packet loss! [ 376.851165][ T9137] syzkaller0: entered promiscuous mode [ 376.856679][ T9137] syzkaller0: entered allmulticast mode [ 376.864345][ T9142] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1000'. [ 377.618439][ T9162] tipc: Enabled bearer , priority 0 [ 377.746483][ T9167] syzkaller0: entered promiscuous mode [ 377.752423][ T9167] syzkaller0: entered allmulticast mode [ 377.853615][ T9170] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1012'. [ 377.922367][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.934911][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.941896][ T9162] tipc: Resetting bearer [ 378.052179][ T9171] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1010'. [ 378.070603][ T9159] tipc: Resetting bearer [ 378.143488][ T5874] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 378.682848][ T24] tipc: Node number set to 1759147585 [ 378.901057][ T5886] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 379.093299][ T5886] usb 1-1: not running at top speed; connect to a high speed hub [ 379.241423][ T5886] usb 1-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 379.257714][ T9159] tipc: Disabling bearer [ 379.290864][ T5886] usb 1-1: config 1 interface 0 has no altsetting 0 [ 379.527058][ T5886] usb 1-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.40 [ 379.540369][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.554821][ T5886] usb 1-1: Product: syz [ 379.570361][ T5886] usb 1-1: Manufacturer: syz [ 379.574970][ T5886] usb 1-1: SerialNumber: syz [ 379.752054][ T9192] netlink: 'syz.2.1016': attribute type 4 has an invalid length. [ 379.760653][ T9192] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1016'. [ 382.112977][ T5886] usbhid 1-1:1.0: can't add hid device: -71 [ 382.119009][ T5886] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 382.158906][ T5886] usb 1-1: USB disconnect, device number 6 [ 382.608437][ T9214] syzkaller0: entered promiscuous mode [ 382.620584][ T9214] syzkaller0: entered allmulticast mode [ 382.720123][ T9216] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1023'. [ 383.677834][ T9228] fuse: Bad value for 'fd' [ 383.789081][ T9232] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1028'. [ 385.795730][ T9252] netlink: 'syz.0.1035': attribute type 2 has an invalid length. [ 385.861277][ T9252] netlink: 199816 bytes leftover after parsing attributes in process `syz.0.1035'. [ 385.902175][ T9252] nbd: must specify a device to reconfigure [ 386.066018][ T9257] syzkaller0: entered promiscuous mode [ 386.078913][ T9257] syzkaller0: entered allmulticast mode [ 386.538841][ T9279] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1044'. [ 389.103843][ T9303] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1053'. [ 389.194757][ T9307] netlink: 'syz.4.1054': attribute type 2 has an invalid length. [ 389.203052][ T30] audit: type=1800 audit(1755900061.796:76): pid=9305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1055" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 389.300604][ T9307] netlink: 199816 bytes leftover after parsing attributes in process `syz.4.1054'. [ 389.318482][ T9307] nbd: must specify a device to reconfigure [ 390.009754][ T30] audit: type=1326 audit(1755900062.616:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9314 comm="syz.6.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f928998ebe9 code=0x7ffc0000 [ 390.032402][ T30] audit: type=1326 audit(1755900062.616:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9314 comm="syz.6.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f928998ebe9 code=0x7ffc0000 [ 390.070404][ T30] audit: type=1326 audit(1755900062.646:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9314 comm="syz.6.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f928998ebe9 code=0x7ffc0000 [ 390.167124][ T30] audit: type=1326 audit(1755900062.646:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9314 comm="syz.6.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f928998ebe9 code=0x7ffc0000 [ 390.190046][ T30] audit: type=1326 audit(1755900062.646:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9314 comm="syz.6.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f928998ebe9 code=0x7ffc0000 [ 390.683873][ T9340] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1049'. [ 390.743142][ T9341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1049'. [ 390.860581][ T5877] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 390.860674][ T5877] Bluetooth: hci6: Injecting HCI hardware error event [ 391.455844][ T5861] Bluetooth: hci6: hardware error 0x00 [ 391.472761][ T9345] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1066'. [ 391.819754][ T9346] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 391.874468][ T9359] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 393.274214][ T9364] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1071'. [ 393.586915][ T5861] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 393.651124][ T9369] fuse: Bad value for 'fd' [ 393.695304][ T9368] veth1_to_bond: entered allmulticast mode [ 393.751968][ T9368] veth1_to_bond: left allmulticast mode [ 394.510569][ T9371] could not allocate digest TFM handle sha1-ssse3 [ 396.226882][ T9406] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1084'. [ 396.581928][ T9410] No control pipe specified [ 398.581418][ T9421] netlink: 'syz.6.1091': attribute type 27 has an invalid length. [ 399.081892][ T9421] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.090717][ T9421] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.103251][ T95] block nbd2: Possible stuck request ffff888024f60000: control (read@0,1024B). Runtime 150 seconds [ 399.127555][ T9242] block nbd3: Possible stuck request ffff888024f90000: control (read@0,1024B). Runtime 150 seconds [ 399.127552][ T95] block nbd2: Possible stuck request ffff888024f601c0: control (read@1024,1024B). Runtime 150 seconds [ 399.127600][ T95] block nbd2: Possible stuck request ffff888024f60380: control (read@2048,1024B). Runtime 150 seconds [ 399.139964][ T9242] block nbd3: Possible stuck request ffff888024f901c0: control (read@1024,1024B). Runtime 150 seconds [ 399.171643][ T9242] block nbd3: Possible stuck request ffff888024f90380: control (read@2048,1024B). Runtime 150 seconds [ 399.183199][ T95] block nbd2: Possible stuck request ffff888024f60540: control (read@3072,1024B). Runtime 150 seconds [ 399.195426][ T9242] block nbd3: Possible stuck request ffff888024f90540: control (read@3072,1024B). Runtime 150 seconds [ 399.483788][ T9421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.558513][ T9421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.945742][ T6072] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.960797][ T6072] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.090209][ T6072] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.177388][ T6072] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.226708][ T9449] syzkaller0: entered promiscuous mode [ 401.236483][ T9449] syzkaller0: entered allmulticast mode [ 401.308907][ T9456] No control pipe specified [ 401.657469][ T30] audit: type=1800 audit(1755900074.266:82): pid=9463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1103" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 401.687068][ T9467] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 401.958567][ T9473] netlink: 'syz.0.1108': attribute type 2 has an invalid length. [ 401.974281][ T9473] netlink: 199816 bytes leftover after parsing attributes in process `syz.0.1108'. [ 401.987346][ T9473] nbd: must specify a device to reconfigure [ 403.362449][ T9490] netlink: 'syz.2.1105': attribute type 4 has an invalid length. [ 403.380236][ T9490] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1105'. [ 404.871567][ T9503] rtc_cmos 00:00: Alarms can be up to one day in the future [ 405.351701][ T5954] rtc_cmos 00:00: Alarms can be up to one day in the future [ 405.370430][ T5954] rtc_cmos 00:00: Alarms can be up to one day in the future [ 405.399005][ T5954] rtc_cmos 00:00: Alarms can be up to one day in the future [ 405.412011][ T5954] rtc_cmos 00:00: Alarms can be up to one day in the future [ 405.429637][ T5954] rtc rtc0: __rtc_set_alarm: err=-22 [ 406.969394][ T9531] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 407.820653][ T9544] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1132'. [ 409.717562][ T9559] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1130'. [ 409.860362][ T9563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1130'. [ 411.109805][ T5877] Bluetooth: hci3: command 0x0406 tx timeout [ 411.706502][ T9571] 9pnet_fd: Insufficient options for proto=fd [ 412.812937][ T9583] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 413.980605][ T5886] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 414.271110][ T5886] usb 5-1: Using ep0 maxpacket: 8 [ 414.442099][ T5886] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 414.695573][ T5886] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 415.060790][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.821698][ T5954] usb 5-1: USB disconnect, device number 2 [ 417.936851][ T9641] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1162'. [ 418.018339][ T9646] tipc: Started in network mode [ 418.027022][ T9646] tipc: Node identity be8c51811d05, cluster identity 4711 [ 418.047487][ T9646] tipc: Enabled bearer , priority 0 [ 418.058833][ T9646] syzkaller0: entered promiscuous mode [ 418.102178][ T9646] syzkaller0: entered allmulticast mode [ 418.144212][ T9645] tipc: Resetting bearer [ 418.211519][ T9645] tipc: Disabling bearer [ 418.828490][ T9656] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1168'. [ 419.412638][ T9663] netlink: 'syz.3.1170': attribute type 4 has an invalid length. [ 419.552557][ T9666] loop4: detected capacity change from 0 to 512 [ 419.597618][ T9666] EXT4-fs (loop4): blocks per group (7872) and clusters per group (32768) inconsistent [ 419.725684][ T9670] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1171'. [ 419.940222][ T9675] netlink: 'syz.3.1172': attribute type 2 has an invalid length. [ 419.968602][ T9675] netlink: 199816 bytes leftover after parsing attributes in process `syz.3.1172'. [ 419.989182][ T9675] nbd: must specify a device to reconfigure [ 420.000816][ T9678] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1175'. [ 420.263896][ T5954] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 420.466146][ T5954] usb 3-1: Using ep0 maxpacket: 32 [ 420.521237][ T5954] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.626107][ T5954] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 420.747181][ T5954] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 420.830020][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.900764][ T5954] usb 3-1: Product: syz [ 420.943436][ T5954] usb 3-1: Manufacturer: syz [ 420.986785][ T5954] usb 3-1: SerialNumber: syz [ 421.038548][ T5954] usb 3-1: config 0 descriptor?? [ 423.134111][ T5938] usb 3-1: USB disconnect, device number 7 [ 424.401859][ T9711] netlink: 'syz.0.1185': attribute type 4 has an invalid length. [ 424.819953][ T9710] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1186'. [ 424.968453][ T5877] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 424.987995][ T5877] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 424.998099][ T5877] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 425.010549][ T5877] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 425.021014][ T5877] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 425.355767][ T9721] netlink: 'syz.0.1188': attribute type 2 has an invalid length. [ 425.389068][ T9721] netlink: 199816 bytes leftover after parsing attributes in process `syz.0.1188'. [ 425.398386][ T9721] nbd: must specify a device to reconfigure [ 425.799233][ T9731] loop4: detected capacity change from 0 to 512 [ 425.824857][ T9731] EXT4-fs (loop4): blocks per group (7872) and clusters per group (32768) inconsistent [ 427.103698][ T5877] Bluetooth: hci7: command tx timeout [ 427.176680][ T9747] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1195'. [ 427.252343][ T9714] chnl_net:caif_netlink_parms(): no params data found [ 427.338858][ T5954] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 427.488838][ T5886] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 427.530151][ T5954] usb 1-1: Using ep0 maxpacket: 16 [ 427.546278][ T5954] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 427.558380][ T5954] usb 1-1: config 0 has no interface number 0 [ 427.592181][ T5954] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 427.602355][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.626292][ T5954] usb 1-1: Product: syz [ 427.650860][ T5954] usb 1-1: Manufacturer: syz [ 427.660368][ T5886] usb 4-1: Using ep0 maxpacket: 32 [ 427.668675][ T5954] usb 1-1: SerialNumber: syz [ 427.680851][ T5886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.700574][ T9714] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.709904][ T5954] usb 1-1: config 0 descriptor?? [ 427.719980][ T5886] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 427.729604][ T5954] hub 1-1:0.132: bad descriptor, ignoring hub [ 427.735686][ T5954] hub 1-1:0.132: probe with driver hub failed with error -5 [ 427.756038][ T9714] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.776863][ T9714] bridge_slave_0: entered allmulticast mode [ 427.783242][ T5886] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 427.783290][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.798175][ T5954] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input11 [ 427.831127][ T9714] bridge_slave_0: entered promiscuous mode [ 427.860604][ T5886] usb 4-1: Product: syz [ 427.882106][ T9714] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.900235][ T5886] usb 4-1: Manufacturer: syz [ 427.913108][ T9714] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.924096][ T5886] usb 4-1: SerialNumber: syz [ 427.954151][ T9714] bridge_slave_1: entered allmulticast mode [ 427.966295][ T5886] usb 4-1: config 0 descriptor?? [ 428.067692][ T9714] bridge_slave_1: entered promiscuous mode [ 429.179383][ T5877] Bluetooth: hci7: command tx timeout [ 429.794483][ T7042] block nbd3: Possible stuck request ffff888024f90000: control (read@0,1024B). Runtime 180 seconds [ 429.847905][ T7042] block nbd3: Possible stuck request ffff888024f901c0: control (read@1024,1024B). Runtime 180 seconds [ 429.892005][ T7042] block nbd3: Possible stuck request ffff888024f90380: control (read@2048,1024B). Runtime 180 seconds [ 429.945120][ T7042] block nbd3: Possible stuck request ffff888024f90540: control (read@3072,1024B). Runtime 180 seconds [ 430.369244][ T5886] usb 1-1: USB disconnect, device number 7 [ 430.679084][ T95] block nbd2: Possible stuck request ffff888024f60000: control (read@0,1024B). Runtime 180 seconds [ 430.690135][ T95] block nbd2: Possible stuck request ffff888024f601c0: control (read@1024,1024B). Runtime 180 seconds [ 430.704305][ T95] block nbd2: Possible stuck request ffff888024f60380: control (read@2048,1024B). Runtime 180 seconds [ 430.721412][ T95] block nbd2: Possible stuck request ffff888024f60540: control (read@3072,1024B). Runtime 180 seconds [ 431.266338][ T5877] Bluetooth: hci7: command tx timeout [ 432.495665][ T5954] usb 4-1: USB disconnect, device number 4 [ 432.641741][ T9714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.778880][ T9769] netlink: 'syz.0.1200': attribute type 4 has an invalid length. [ 433.064994][ T9714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.292976][ T9776] loop3: detected capacity change from 0 to 512 [ 433.371808][ T5877] Bluetooth: hci7: command tx timeout [ 436.153285][ T9776] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.165883][ T9776] ext4 filesystem being mounted at /194/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 436.448010][ T5856] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.564265][ T9783] binder: 9782:9783 ioctl c00c620f 2000000003c0 returned -22 [ 437.015429][ T9793] loop3: detected capacity change from 0 to 512 [ 437.120557][ T9793] EXT4-fs (loop3): blocks per group (7872) and clusters per group (32768) inconsistent [ 437.212258][ T9795] fuse: Bad value for 'fd' [ 437.841868][ T9714] team0: Port device team_slave_0 added [ 439.090087][ T9714] team0: Port device team_slave_1 added [ 439.342416][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.348942][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.466759][ T9714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.491204][ T9714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.571853][ T9714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.599430][ T9714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.608888][ T9714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.704987][ T9714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.946673][ T9714] hsr_slave_0: entered promiscuous mode [ 439.972392][ T9714] hsr_slave_1: entered promiscuous mode [ 439.995981][ T9714] debugfs: 'hsr0' already exists in 'hsr' [ 440.240401][ T9714] Cannot create hsr debugfs directory [ 442.741891][ T9848] block device autoloading is deprecated and will be removed. [ 442.749998][ T9848] ufs: You didn't specify the type of your ufs filesystem [ 442.749998][ T9848] [ 442.749998][ T9848] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 442.749998][ T9848] [ 442.749998][ T9848] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 442.789052][ T9848] ufs: ufstype=old is supported read-only [ 442.796275][ T9848] blk_print_req_error: 55 callbacks suppressed [ 442.796293][ T9848] I/O error, dev loop1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 445.707879][ T9879] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1232'. [ 445.936960][ T9714] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 445.939607][ T9886] netlink: 'syz.0.1236': attribute type 2 has an invalid length. [ 445.974147][ T9886] netlink: 199644 bytes leftover after parsing attributes in process `syz.0.1236'. [ 446.017662][ T5938] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 446.465745][ T9714] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 446.473561][ T9886] nbd: must specify a device to reconfigure [ 446.535905][ T9714] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 446.897847][ T5938] usb 2-1: Using ep0 maxpacket: 32 [ 446.945565][ T5938] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.170198][ T5938] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 447.274228][ T9714] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 447.494930][ T5938] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 447.516227][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.539651][ T5938] usb 2-1: Product: syz [ 447.554274][ T5938] usb 2-1: Manufacturer: syz [ 447.581990][ T5938] usb 2-1: SerialNumber: syz [ 447.706863][ T5938] usb 2-1: config 0 descriptor?? [ 449.336503][ T9714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.579931][ T9911] 9pnet_virtio: no channels available for device syz [ 449.648194][ T9] usb 2-1: USB disconnect, device number 4 [ 450.017569][ T9714] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.053916][ T6045] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.061103][ T6045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.184614][ T6065] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.191827][ T6065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.671274][ T9927] netlink: 'syz.2.1247': attribute type 4 has an invalid length. [ 450.728535][ T9927] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1247'. [ 451.664643][ T9938] netlink: 'syz.3.1249': attribute type 4 has an invalid length. [ 454.259421][ T9955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1257'. [ 454.590730][ T9714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.525961][ T9979] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1265'. [ 458.620910][ T9714] veth0_vlan: entered promiscuous mode [ 458.715601][ T9714] veth1_vlan: entered promiscuous mode [ 459.115908][ T9714] veth0_macvtap: entered promiscuous mode [ 459.399566][ T9714] veth1_macvtap: entered promiscuous mode [ 460.102919][ T9714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.119653][ T9714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.293023][ T6019] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.327637][ T6019] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.395544][ T6019] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.446031][ T6019] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.457109][ T9242] block nbd3: Possible stuck request ffff888024f90000: control (read@0,1024B). Runtime 210 seconds [ 460.468054][ T9242] block nbd3: Possible stuck request ffff888024f901c0: control (read@1024,1024B). Runtime 210 seconds [ 460.479081][ T9242] block nbd3: Possible stuck request ffff888024f90380: control (read@2048,1024B). Runtime 210 seconds [ 460.496987][ T9242] block nbd3: Possible stuck request ffff888024f90540: control (read@3072,1024B). Runtime 210 seconds [ 460.933315][ T6069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.013221][ T6069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.097683][ T95] block nbd2: Possible stuck request ffff888024f60000: control (read@0,1024B). Runtime 210 seconds [ 461.108497][ T95] block nbd2: Possible stuck request ffff888024f601c0: control (read@1024,1024B). Runtime 210 seconds [ 461.119502][ T95] block nbd2: Possible stuck request ffff888024f60380: control (read@2048,1024B). Runtime 210 seconds [ 461.130479][ T95] block nbd2: Possible stuck request ffff888024f60540: control (read@3072,1024B). Runtime 210 seconds [ 461.341792][ T6146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.366633][ T6146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.727537][T10046] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1281'. [ 464.921072][T10054] 9pnet_virtio: no channels available for device syz [ 465.241812][T10061] fuse: Bad value for 'fd' [ 465.868111][T10065] netlink: 'syz.3.1288': attribute type 10 has an invalid length. [ 465.975450][T10071] netlink: 'syz.2.1286': attribute type 4 has an invalid length. [ 466.096771][T10071] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1286'. [ 466.368979][T10073] tipc: Enabled bearer , priority 0 [ 466.473801][T10073] tipc: Resetting bearer [ 467.476622][ T5886] tipc: Node number set to 2743685505 [ 467.507151][T10072] tipc: Disabling bearer [ 467.863867][T10096] openvswitch: netlink: VXLAN extension message has 11 unknown bytes. [ 468.818845][T10107] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1301'. [ 469.416867][ T31] INFO: task syz.5.805:8515 blocked for more than 143 seconds. [ 469.453012][ T31] Not tainted syzkaller #0 [ 469.475575][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 469.494015][T10115] fuse: Bad value for 'fd' [ 469.514269][ T31] task:syz.5.805 state:D stack:27064 pid:8515 tgid:8508 ppid:5858 task_flags:0x400040 flags:0x00004004 [ 469.563676][ T31] Call Trace: [ 469.578433][ T31] [ 469.594796][ T31] __schedule+0x1798/0x4cc0 [ 469.618330][ T31] ? __pfx___schedule+0x10/0x10 [ 469.642275][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.675527][ T31] ? schedule+0x91/0x360 [ 469.693161][ T31] schedule+0x165/0x360 [ 469.706361][ T31] schedule_preempt_disabled+0x13/0x30 [ 469.727118][T10124] netlink: 'syz.0.1305': attribute type 10 has an invalid length. [ 469.763335][ T31] __mutex_lock+0x7e6/0x1350 [ 469.788354][ T31] ? __mutex_lock+0x5bb/0x1350 [ 469.808091][ T31] ? sync_bdevs+0x1ac/0x340 [ 469.848649][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 469.873009][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.895911][ T31] ? iput+0x398/0x9d0 [ 469.909032][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 469.933383][ T31] sync_bdevs+0x1ac/0x340 [ 469.949451][ T31] ksys_sync+0xb9/0x150 [ 469.968947][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 469.984259][ T31] __ia32_sys_sync+0xe/0x20 [ 469.995257][ T31] do_syscall_64+0xfa/0x3b0 [ 470.023178][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.054425][ T31] ? asm_sysvec_call_function_single+0x1a/0x20 [ 470.084103][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.116145][ T31] RIP: 0033:0x7f08d3d8ebe9 [ 470.137183][ T31] RSP: 002b:00007f08d4b72038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 470.181333][ T31] RAX: ffffffffffffffda RBX: 00007f08d3fb6090 RCX: 00007f08d3d8ebe9 [ 470.200242][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 470.214081][ T31] RBP: 00007f08d3fb6090 R08: 0000000000000000 R09: 0000000000000000 [ 470.349120][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 470.366140][ T31] R13: 00007f08d3fb6128 R14: 00007f08d3fb6090 R15: 00007ffefb999f78 [ 470.393436][ T31] [ 470.404438][ T31] [ 470.404438][ T31] Showing all locks held in the system: [ 470.443976][ T31] 1 lock held by khungtaskd/31: [ 470.692456][ T31] #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 470.719599][ T31] 2 locks held by getty/5614: [ 470.746227][ T31] #0: ffff88814d8430a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 470.781650][ T31] #1: ffffc900036c62f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 470.799165][ T31] 4 locks held by kworker/u8:9/6019: [ 470.806959][ T31] 1 lock held by udevd/7719: [ 470.814649][ T31] #0: ffff888024ef9358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 470.856889][ T31] 1 lock held by udevd/7759: [ 470.882833][ T31] #0: ffff888024edb358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 470.924554][ T31] 1 lock held by syz.5.805/8515: [ 470.952672][ T31] #0: ffff888024edb358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ac/0x340 [ 471.001224][ T31] 1 lock held by syz.6.1132/9543: [ 471.016474][ T31] #0: ffff888024edb358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ac/0x340 [ 471.036091][ T31] 3 locks held by syz.4.1272/10023: [ 471.046205][ T31] 3 locks held by syz.4.1294/10097: [ 471.063078][ T31] 1 lock held by syz.7.1302/10129: [ 471.074719][ T31] 2 locks held by syz.1.1304/10119: [ 471.088205][ T31] #0: ffffffff8f538448 (rtnl_mutex){+.+.}-{4:4}, at: rtm_del_nexthop+0x354/0x5b0 [ 471.117250][ T31] #1: ffffffff8e13f978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 471.145422][ T31] 1 lock held by syz.1.1304/10121: [ 471.164248][ T31] #0: ffffffff8f538448 (rtnl_mutex){+.+.}-{4:4}, at: rtm_new_nexthop+0xe96/0x7eb0 [ 471.189638][ T31] 1 lock held by syz.1.1304/10123: [ 471.206568][ T31] #0: ffffffff8f538448 (rtnl_mutex){+.+.}-{4:4}, at: rtm_new_nexthop+0xe96/0x7eb0 [ 471.236490][ T31] 1 lock held by syz.1.1304/10125: [ 471.246115][ T31] #0: ffffffff8f538448 (rtnl_mutex){+.+.}-{4:4}, at: rtm_new_nexthop+0xe96/0x7eb0 [ 471.276347][ T31] 2 locks held by syz.0.1305/10122: [ 471.296208][ T31] #0: ffffffff8f59da70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 471.323269][ T31] #1: ffffffff8f538448 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930 [ 471.349727][ T31] 1 lock held by syz.0.1305/10124: [ 471.370014][ T31] #0: ffffffff8f538448 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 471.427661][ T31] [ 471.430038][ T31] ============================================= [ 471.430038][ T31] [ 471.454126][ T31] NMI backtrace for cpu 0 [ 471.454148][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 471.454174][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 471.454189][ T31] Call Trace: [ 471.454198][ T31] [ 471.454207][ T31] dump_stack_lvl+0x189/0x250 [ 471.454247][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 471.454277][ T31] ? __pfx__printk+0x10/0x10 [ 471.454327][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 471.454361][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 471.454393][ T31] ? __pfx__printk+0x10/0x10 [ 471.454428][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 471.454460][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 471.454501][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 471.454535][ T31] watchdog+0xf93/0xfe0 [ 471.454576][ T31] ? watchdog+0x1de/0xfe0 [ 471.454616][ T31] kthread+0x711/0x8a0 [ 471.454652][ T31] ? __pfx_watchdog+0x10/0x10 [ 471.454685][ T31] ? __pfx_kthread+0x10/0x10 [ 471.454712][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 471.454751][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 471.454782][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 471.454809][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 471.454842][ T31] ? __pfx_kthread+0x10/0x10 [ 471.454874][ T31] ret_from_fork+0x3fc/0x770 [ 471.454902][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 471.454933][ T31] ? __switch_to_asm+0x39/0x70 [ 471.454964][ T31] ? __switch_to_asm+0x33/0x70 [ 471.454993][ T31] ? __pfx_kthread+0x10/0x10 [ 471.455025][ T31] ret_from_fork_asm+0x1a/0x30 [ 471.455077][ T31] [ 471.455086][ T31] Sending NMI from CPU 0 to CPUs 1: [ 471.619247][ C1] NMI backtrace for cpu 1 [ 471.619266][ C1] CPU: 1 UID: 0 PID: 10023 Comm: syz.4.1272 Not tainted syzkaller #0 PREEMPT(full) [ 471.619290][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 471.619304][ C1] RIP: 0010:dump_user_range+0x34f/0xc90 [ 471.619341][ C1] Code: 8b 44 24 10 4c 8d 70 08 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 f7 e8 34 a9 cf ff 49 8b 1e <48> 89 de 48 83 e6 01 31 ff e8 f3 41 6c ff 48 89 d8 48 83 e0 01 0f [ 471.619359][ C1] RSP: 0018:ffffc9001e90edc0 EFLAGS: 00000246 [ 471.619378][ C1] RAX: 1ffffd4000321fd1 RBX: 0000000000000000 RCX: dffffc0000000000 [ 471.619394][ C1] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000000001000 [ 471.619407][ C1] RBP: ffffc9001e90ef50 R08: ffff88806b4215f7 R09: 1ffff1100d6842be [ 471.619423][ C1] R10: dffffc0000000000 R11: ffffed100d6842bf R12: 1ffff92003d21f7b [ 471.619439][ C1] R13: 0000000000000000 R14: ffffea000190fe88 R15: 00007f5a66cb7000 [ 471.619457][ C1] FS: 00007f5a686536c0(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 471.619476][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 471.619495][ C1] CR2: 00005555925195c8 CR3: 0000000044715000 CR4: 0000000000350ef0 [ 471.619512][ C1] Call Trace: [ 471.619519][ C1] [ 471.619538][ C1] ? __pfx_dump_user_range+0x10/0x10 [ 471.619569][ C1] ? elf_coredump_extra_notes_write+0x42e/0x4b0 [ 471.619601][ C1] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 471.619626][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 471.619655][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 471.619681][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 471.619705][ C1] ? dump_emit+0xa6/0xe0 [ 471.619734][ C1] ? elf_core_dump+0x2cff/0x3990 [ 471.619769][ C1] elf_core_dump+0x337b/0x3990 [ 471.619816][ C1] ? __pfx_elf_core_dump+0x10/0x10 [ 471.619850][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 471.619874][ C1] ? kasan_save_track+0x4f/0x80 [ 471.619899][ C1] ? kasan_save_track+0x3e/0x80 [ 471.619923][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 471.619949][ C1] ? __kvmalloc_node_noprof+0x30d/0x5f0 [ 471.619981][ C1] ? coredump_write+0x340/0x1900 [ 471.620010][ C1] ? vfs_coredump+0x1daa/0x2a50 [ 471.620038][ C1] ? get_signal+0x1109/0x1340 [ 471.620057][ C1] ? arch_do_signal_or_restart+0x9a/0x750 [ 471.620089][ C1] ? irqentry_exit_to_user_mode+0x81/0x120 [ 471.620120][ C1] ? exc_page_fault+0x9f/0xf0 [ 471.620147][ C1] ? asm_exc_page_fault+0x26/0x30 [ 471.620167][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 471.620218][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 471.620247][ C1] ? 0xffffffffff600000 [ 471.620268][ C1] ? up_write+0x1c4/0x420 [ 471.620296][ C1] coredump_write+0x1169/0x1900 [ 471.620340][ C1] ? __pfx_coredump_write+0x10/0x10 [ 471.620401][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 471.620425][ C1] ? unshare_files+0xa9/0x140 [ 471.620454][ C1] vfs_coredump+0x1daa/0x2a50 [ 471.620504][ C1] ? __pfx_vfs_coredump+0x10/0x10 [ 471.620538][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 471.620565][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 471.620590][ C1] ? __lock_acquire+0xab9/0xd20 [ 471.620625][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 471.620653][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 471.620676][ C1] ? __lock_acquire+0xab9/0xd20 [ 471.620712][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 471.620742][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 471.620768][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 471.620804][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 471.620829][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 471.620860][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 471.620893][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 471.620917][ C1] ? kernel_text_address+0xa5/0xe0 [ 471.620947][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 471.620971][ C1] ? __kernel_text_address+0xd/0x40 [ 471.621000][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 471.621024][ C1] ? unwind_get_return_address+0x4d/0x90 [ 471.621049][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 471.621075][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 471.621099][ C1] ? arch_stack_walk+0xfc/0x150 [ 471.621133][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 471.621157][ C1] ? stack_trace_save+0x9c/0xe0 [ 471.621183][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 471.621207][ C1] ? stack_depot_save_flags+0x40/0x860 [ 471.621242][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 471.621266][ C1] ? kasan_save_track+0x4f/0x80 [ 471.621291][ C1] ? kasan_save_track+0x3e/0x80 [ 471.621316][ C1] ? kasan_save_free_info+0x46/0x50 [ 471.621336][ C1] ? __kasan_slab_free+0x5b/0x80 [ 471.621363][ C1] ? kmem_cache_free+0x18f/0x400 [ 471.621390][ C1] ? get_signal+0xa4c/0x1340 [ 471.621408][ C1] ? arch_do_signal_or_restart+0x9a/0x750 [ 471.621439][ C1] ? irqentry_exit_to_user_mode+0x81/0x120 [ 471.621469][ C1] ? exc_page_fault+0x9f/0xf0 [ 471.621499][ C1] ? asm_exc_page_fault+0x26/0x30 [ 471.621553][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 471.621580][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 471.621608][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 471.621631][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 471.621663][ C1] get_signal+0x1109/0x1340 [ 471.621698][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 471.621732][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 471.621759][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 471.621791][ C1] ? __bad_area_nosemaphore+0x3fb/0x780 [ 471.621822][ C1] ? local_irq_enable_exit_to_user+0x5/0x10 [ 471.621853][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 471.621881][ C1] irqentry_exit_to_user_mode+0x81/0x120 [ 471.621912][ C1] exc_page_fault+0x9f/0xf0 [ 471.621943][ C1] asm_exc_page_fault+0x26/0x30 [ 471.621963][ C1] RIP: 0033:0x7f5a6778ebf1 [ 471.621980][ C1] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 471.621997][ C1] RSP: 002b:00000000fffffe10 EFLAGS: 00010217 [ 471.622014][ C1] RAX: 0000000000000000 RBX: 00007f5a679b5fa0 RCX: 00007f5a6778ebe9 [ 471.622029][ C1] RDX: 0000000000000000 RSI: 00000000fffffe10 RDI: 0000000000000000 [ 471.622042][ C1] RBP: 00007f5a67811e19 R08: 0000000000000000 R09: 0000000000000000 [ 471.622056][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.622068][ C1] R13: 00007f5a679b6038 R14: 00007f5a679b5fa0 R15: 00007ffda3887df8 [ 471.622096][ C1] [ 472.255600][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 472.262461][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 472.271578][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 472.281638][ T31] Call Trace: [ 472.284961][ T31] [ 472.287886][ T31] dump_stack_lvl+0x99/0x250 [ 472.292482][ T31] ? __asan_memcpy+0x40/0x70 [ 472.297070][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.302270][ T31] ? __pfx__printk+0x10/0x10 [ 472.306873][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.312507][ T31] vpanic+0x281/0x750 [ 472.316495][ T31] ? __pfx_vpanic+0x10/0x10 [ 472.320996][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 472.326547][ T31] ? preempt_schedule+0xae/0xc0 [ 472.331409][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.337035][ T31] ? preempt_schedule_common+0x83/0xd0 [ 472.342502][ T31] panic+0xb9/0xc0 [ 472.346219][ T31] ? __pfx_panic+0x10/0x10 [ 472.350640][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.356265][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 472.361651][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.367276][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 472.373428][ T31] watchdog+0xfd2/0xfe0 [ 472.377598][ T31] ? watchdog+0x1de/0xfe0 [ 472.381940][ T31] kthread+0x711/0x8a0 [ 472.386016][ T31] ? __pfx_watchdog+0x10/0x10 [ 472.390692][ T31] ? __pfx_kthread+0x10/0x10 [ 472.395278][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.400909][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 472.406115][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.411749][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.416945][ T31] ? __pfx_kthread+0x10/0x10 [ 472.421534][ T31] ret_from_fork+0x3fc/0x770 [ 472.426122][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 472.431279][ T31] ? __switch_to_asm+0x39/0x70 [ 472.436079][ T31] ? __switch_to_asm+0x33/0x70 [ 472.440852][ T31] ? __pfx_kthread+0x10/0x10 [ 472.445443][ T31] ret_from_fork_asm+0x1a/0x30 [ 472.450227][ T31] [ 472.453466][ T31] Kernel Offset: disabled [ 472.457812][ T31] Rebooting in 86400 seconds..