last executing test programs: 44.287851349s ago: executing program 3 (id=613): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000040)="8907040400", 0x5) connect$inet(r1, &(0x7f0000000300), 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f00000001c0)=0x6, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000000080)="b6", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @private0}, 0x1c) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={r4}, 0x8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24040040) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmmsg$inet(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)="94a8bd632a4d017551d1", 0xa}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="0400"/11], 0x14}}, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000380)={r4, 0x7ffc, 0x2, 0x403}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000240)='hybla\x00', 0x6) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r7, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r8 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r7, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x12}}], 0x1, 0x0, 0x0) write$binfmt_elf64(r7, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r8], 0xc63b9e35) 42.958007559s ago: executing program 3 (id=618): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff85000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000b40), 0x2b842ac, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) r4 = dup2(r3, r3) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x5) ioctl$int_in(r4, 0x5421, &(0x7f0000000380)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007566cb20f80600b0c8cb0102030109021b0001000000000904000001ffb9ab0009050a"], 0x0) readv(r4, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/139, 0x8b}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setsig(r5, 0xa, 0x100000000000013) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) setresgid(0x0, 0xee00, 0x0) syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000080)='./bus\x00', 0x810484, &(0x7f0000000340)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYRES8, @ANYRES64, @ANYRES16=0x0, @ANYRES16=r1, @ANYRESDEC=0x0], 0x1, 0x675, &(0x7f0000001280)="$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") syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8082, &(0x7f0000007980)=ANY=[], 0x1, 0xc4e, &(0x7f0000006c40)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./file1\x00') 39.30300644s ago: executing program 3 (id=623): r0 = socket$inet6(0xa, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @local}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008002, &(0x7f0000000d40)={[{@grpquota}, {@delalloc}, {@resuid}, {@errors_remount}, {@dioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@nomblk_io_submit}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") r3 = open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x304009a, &(0x7f0000000e40)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c666d61736b3d30313737373737373737373737373737373737373737332c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c2c756e695f786c6174653d302c726f6469722c726f6469722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d312c6572726f72733d636f6e74696e75652c74696d655f6f66667365743d3078303030303030303030303030303465302c757466383d302c0077b5b28056fc4549d277ed7fab6b0be29df17f888ccab55cccc917ad315c8ea56f5a89c104f92d058b92f5881e69e06002f5914c03fef3eb09121733eaf5ded73df976fbd4cfcb8b70b0bf44da1b46bc3935431d5e60a641f9e4ebbf71c77fc9a810ce726b8c6d6295a5f2e2b069b95ba8ecce52ded99b82923228c37d5e1ec11cdbcabb8a89cbf2cf2771d69e3cf0e6760094145e542e426bceaab9b2cf261046247bce0565db3ac5888b74efd48bc9f455e60f49496ca8137aba85fe39756814fda1f0624b33a2025792a477ccfff09befb1d0cf1599d272628028b9786e1fbfb3d637c2561421488c9de8d3739a94bf13ac582f6b67de0cad933631794271b2259fe5d73a74ad7da615c31505c7c0c168052d38e5b64c4bb7d0599e5dcf0000000000000000000000000000002790cf17418aa278cfc0c9d1c81c63e58b877706a4b7eed8a5aff253298db2939adc0efdab4745ab0e09ef8beaaf04e5374c2e7e4672e47fe5a25502919954242f8d779d84091f20646210edf871d3f20ad66fcf4b816323b8abb307381d4ada887dcc71e35f364baa1b93fd5ee36c02aa4628511442992ced893ab946472440b53fc08cc41403e167b1f2605e04d5f0c16ed49969b59d650d88642b10c7893fe9b664421a40f4822ffcc284dfe9aea76e4a04293c970f2dae776decf07b085e16511b0bd365b0f86c7fcd8df00a87f4dbbf8e623667e3b65e4c487055a2e5cd64402a4de537bf113fc7370099e4faebe6ea9d4f155f8f5f4c5f9b205ce1bbc8c0002a19457e05a210d9e9820bc7f318ebfdfcc22f83150503b2", @ANYBLOB="8de47b74fc"], 0xd, 0x2a0, &(0x7f0000000840)="$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") r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r4, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}, 0x1c}}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x10}, 0xfffffffffffffef0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448cc, 0x0) r7 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKGETSIZE64(r7, 0x80081272, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001f00010a00000000000000000000000005000000000000009607184fdfc029f7b8e04ee35a3e2932b0f1538fb1bef05e908cb4486849c44d754241de37"], 0x14}}, 0x0) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r9, &(0x7f00000002c0)=ANY=[], 0xc1) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000008000000000000000001000009504000000000000", @ANYRES32=r3], &(0x7f0000000300)='GPL\x00', 0x401}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r9, 0x0) write$bt_hci(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB="d8c0000000"], 0x6) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x5) openat(0xffffffffffffffff, &(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f00000001c0)) socket$netlink(0x10, 0x3, 0x0) 38.69990196s ago: executing program 3 (id=626): set_mempolicy(0x4005, 0x0, 0x9) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) syz_emit_ethernet(0x4a, &(0x7f0000000400)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 37.794335575s ago: executing program 3 (id=627): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0, @ANYRES8=r0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x23, '\x00', r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="01", 0x1) r4 = accept$alg(r3, 0x0, 0x0) r5 = dup(r4) sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="eb", 0x200000c1}], 0x1}, 0x0) read$alg(r5, &(0x7f00000021c0)=""/4096, 0x34000) sendmsg$alg(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1, &(0x7f00000004c0)=[@op={0x18}], 0x18}, 0x0) 37.713058431s ago: executing program 0 (id=630): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000feff000000000000000000008500000041000000850000009e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000004b5b5f0e6619bbede904", @ANYRES16=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x505}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x1, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2004000, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=") setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240), &(0x7f0000000380)=ANY=[], 0xff27, 0x0) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000016c0)={0x1, &(0x7f0000001680)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002080)={0x9b, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="140100000000b2000500000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r6}, 0x10) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r7, 0x8004745a, 0x0) r8 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r8) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 36.653334328s ago: executing program 3 (id=631): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100800001) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x283, 0x0, &(0x7f0000000140)="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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000000c00010000000000000000000000000a30000000090a000000000000000000000000000008000a40000000000900020073797a32000000000800054000000000140000000c0a0000000000000000000000000000140000001000010000000000000000000000000aa7d103bbc1c239d7e0c4fbe12059aea6a2d265aec9bc52c1c098ca20"], 0x6c}, 0x1, 0x0, 0x0, 0x400c804}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x1c8, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffe0}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x198, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x4}, @TCA_GRED_MAX_P={0x8}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x0, 0x0, 0xfffffffe, 0x20000}}, @TCA_GRED_PARMS={0x38, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}, @TCA_GRED_DPS={0x10}]}}]}, 0x1c8}}, 0x8000) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1e, 0x13, r5, 0x2000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="ed232e5964b9483a398efd604de67336e081f79ff536b0acf1102bcba102f10c42d536f2ca9ec3372bece2df926d12c90c975c948d"], 0x7) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c90012000e14000a0000000700ffff00000700000000"], 0x17) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000480), 0x127c00, 0x0) syz_emit_vhci(0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000280), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$pidfd(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 33.537190915s ago: executing program 0 (id=643): socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810714, &(0x7f0000000680)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@init_itable_val}, {@nolazytime}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@debug}, {@data_writeback}, {@bsdgroups}, {@errors_continue}, {@nogrpid}, {@test_dummy_encryption}]}, 0x1, 0x472, &(0x7f0000000c00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000b33000000000000007010000f8ffffffb702000008000000b70300000000000085000000060000e695"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000600)={@ptr={0x70742a85, 0x0, 0x0, 0x6000}, @ptr={0x70742a85, 0x0, 0x0}, @fda}, &(0x7f0000000240)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 30.317401931s ago: executing program 0 (id=637): prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700800008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800c000100636f756e746572005c0002800c0002400000000000000001140000001000010000000000000000000084000a"], 0xa4}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x88, 0x0, &(0x7f0000000140)="2b7393b7c6347cd49978d5023a81022d1e7baeea09c5d463b04397f7a66a0f0b769bc097d48d09754d7e15e59224486b3df2c3fc8b3379a1a30fee142bb1a32d4c3b32006571f5de9d846e7e8b8e64c79a66e2ba19f7eca5d0e0517dcd4eba1ab882af481e477e362ceb1fd11c9d50b5e3afd7f60aa6881b2681c53ee87badeeba28eba948324721"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='fdb_delete\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8937, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r6 = socket$inet(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000), 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="40e47dcb003e4932a1", 0x9}, {0x0}], 0x2}}], 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x60, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @empty}}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_MASTER={0x4}]}, 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r11) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r12, 0x1, 0x3d, &(0x7f0000000080), 0x8) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="2599ad8800000000280012800b00010067656e657665000018000280060005004e220000fdfc0300000000000400060008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="0a002fb8aaaaaaaaaa000800"], 0x64}}, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 29.750001177s ago: executing program 0 (id=640): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0, @ANYRES8=r0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x23, '\x00', r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES32=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="01", 0x1) r6 = accept$alg(r5, 0x0, 0x0) r7 = dup(r6) sendmsg$alg(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="eb", 0x200000c1}], 0x1}, 0x0) read$alg(r7, &(0x7f00000021c0)=""/4096, 0x34000) sendmsg$alg(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1, &(0x7f00000004c0)=[@op={0x18}], 0x18}, 0x0) 24.62331813s ago: executing program 0 (id=645): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r2, &(0x7f00000002c0)=[{&(0x7f0000003dc0)="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", 0xfe1}, {&(0x7f0000000400)="9b2f7e9dd799fe2bb80020307877a48044bdf07025b476cc9127b6e1eff4f9fa6fa5d37f1aea08d69d9bcdf479048e3555947e65a377a8001e3d8bf10f2e7a5dafd0d19abf7200cc32ff58e90d413f6351ea9069253f916aeb15306392cd85d7cb00825ad0147d323c474d8b32f3d98fc3ac9092b4491263", 0x78}, {&(0x7f0000000f80)="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", 0x257}, {&(0x7f0000000d00)="60cd1aa66b785e7173949b3ca0b96d182305dbc8da490593c5616809105f26e7830703675a32d203bfe396dc2abb07117746775ac0a9efc95ae38b96116a1bf7bb288cc9086dba45be3eeec21c1c6d427ebee1c15bff8e9397c806205fea2cd700ecb6a8eb15ed367357b7cd48cc52b99ca9ace5bf3e9c0f70a3aaca7cd4afdad1f9337812468c980394c7b346e0614f310c86ae148600eaf786ceba05cf825a29db1b00237b44861dd88d9202c496537c0d20aef64126178bf3bf351d", 0xbd}], 0x4, 0x8, 0x5) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000800)=0x2) r3 = dup(r2) write$nbd(r3, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43, 0x3}}, @common=@inet=@socket3={{0x28}, 0x51}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0x40345410, &(0x7f0000000180)={0x3}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x80e85411, &(0x7f00000003c0)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002e40)=[{&(0x7f0000002c80)="a85e2ee4619fdebb42dec9e5fd6a63541d0b6a2cd8572f61a3a36c52b87eb43afa0240dd8793e2bd2daee1902275da55eceb3870dc8bf4ca25f022061aa5e6945a83df3f3b67a4326e99cbd5e1ac91ca1cc2a071d3d6f163d90100001000000000b1492d6b0cff875a2f044cdab789c10004000013a15d5d99059a6d30ee1147982e5448ba62daff2a5069403fb21875c41b0233cd2e886cd51e8a7b7180fc15161342fc0775", 0xa6}, {&(0x7f0000000680)="3a75b19fb2be2d5b3fd46b18754c3c1aba9086251e7c4d40751093005e4e5d9c1ef3421eee1a7d73c14f83ff56382c3433778b25d2c36bf6bff13a2a662dd9557bb0f5217133c7d80dc25e0afcd48411a86d392615aefbbccc632afd0626c3a37278c4be50aca0b5974b8c56669e079fc331b1175e04b45f6a2054b60aa3ccececf117a4b8b3ef6f818014854d", 0x8d}, {&(0x7f0000002e00)="b201c54f415df9915611b8f46a", 0xd}], 0x3, &(0x7f00000016c0)=ANY=[@ANYRESOCT, @ANYRES8, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000069e4f64000200000000000000000000795b5c0d1311d5a318974b5720bfe1db0f17d130f0000075f337049d3af285a2df03f95ff8616f49b0e0e6", @ANYRESDEC=r3, @ANYRES32=r4, @ANYRESHEX=r2, @ANYBLOB="0000008000000000000001c30000726fdd635d74b656ab8411677b02c7f656dc70731d866469ee2797bddfc4554a8efa498f955eff10068dd6da8767cead7e39eb962ce2f2d6cb84f416dca13e642db53248f1d8ac6a6e912526c54cc8296500478556d044d3d2beba9013f98363265f1fb0ee8d63777cfbe9a09a840beea38986c09e40502f9f9b2d4a38ef798681b83d18556ee563a6a1b955c3fdfe8425a1d3", @ANYRES32, @ANYRES32, @ANYRES64, @ANYRES32, @ANYRES16=r1, @ANYRES32, @ANYRESDEC, @ANYRES32=r2, @ANYRES16=r2, @ANYBLOB="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", @ANYRESDEC, @ANYRESHEX=r2, @ANYRES32, @ANYRESDEC=0x0, @ANYRESHEX=r5, @ANYRES32=r0, @ANYRES16, @ANYBLOB="020000000200000000000000ee1c5a53e18fc875e86b3590bbf967035b", @ANYRES32=r3, @ANYRESDEC=r1, @ANYRES64, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRESOCT=r3, @ANYRES64=r3, @ANYRES64=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRES64, @ANYRESOCT=r0, @ANYRESOCT=r1, @ANYRES32, @ANYRESDEC, @ANYRES16, @ANYRES32=0x0, @ANYRES64=r2, @ANYBLOB="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"], 0x158, 0xc8815}, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000f40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x24, r6, 0x20, 0x70bd28, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x4}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0xfffffffffffffebc, r6, 0xfdd1df4705532f1, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x756, 0x1, 0x7, 0x6}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r6, 0x300, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c051}, 0x4000) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="bb152452885c63bfe19ce3a2eb1a59e98c7faf74018229c0d87dd129db470448f99f70fae2b9cbcdfddf7f5838a27bf32ff8326e0fbbb94a6a4cb13b82c9e9647be7fa18d028438e7f75ba697735f2d0138f86fd6999911364b56b85fe8fdf", @ANYRES16=r6, @ANYBLOB="00032bbd7000ffdbdf2501000000000000000841000000140018000000047564703a73797a3200000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000081) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r6, 0x2, 0x70bd2c, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000080) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3000ddd3156041a811cf75a8afe0b00f940000bf4862e05e49ea2b602a0c25ac18a12e1401cb3a5401e6a9832ac74fac6a6d345d2c5e6df3ef3f8388d2a7a1e56062897f7fd799b129f3d27dbc921af9167a72d4918605bd9ccb196256072f97cbd32bf3", @ANYRES16=r6, @ANYBLOB="02002cbd7000fcdbdf2501000000000000000b0000000014000062726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044080) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x7, @media='eth\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4008001) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000000840), r7, &(0x7f0000000100)) setreuid(r7, 0xee01) setfsuid(0x0) setfsuid(0xee01) 23.393876792s ago: executing program 0 (id=648): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xc1, 0x2, 0x0, 0x400, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3, 0xa}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000ebffffff9500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000005000080850000007d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r9}, 0x10) setsockopt$sock_attach_bpf(r8, 0x1, 0x21, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000005c04"], 0x0}, 0x90) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0xfe3a) socketpair(0x1d, 0x3, 0x35, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYRESOCT=r3, @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r11}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], 0x0, 0x57, &(0x7f00000004c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x38, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x14, 0xc, &(0x7f0000000400)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r12, @ANYBLOB="0000000000000000b708000000feffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095", @ANYRESOCT=r0], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 16.997957169s ago: executing program 1 (id=657): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xfffffffd, 0x2}, 0x48) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(0x0, 0x58) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c8000c0008000500070800227cca1eb327c95af1d1bccd21c35f16000700"], 0x11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ff"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x44d02) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x5}]}}]}, 0x38}}, 0x0) bind$unix(r2, 0x0, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r6, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000003e00f14500007000fedbdf210a000000342801"], 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x80) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010000100"/20, @ANYRES32=r10, @ANYBLOB="1619020000000000"], 0x20}}, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) 14.045934132s ago: executing program 1 (id=663): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = open(&(0x7f0000000100)='./file0\x00', 0x73b8bf, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x723080, 0x0) fcntl$setlease(r3, 0x400, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3af69c30fdf94d64e67a36", @ANYRES16], 0x50}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000000bc0)=""/102370, 0x18fe2}], 0x1, 0xffffffff, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r5, &(0x7f0000000280)={0xa, 0x0, 0xfffeeffc, @private1, 0x4}, 0xffd0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x3) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000580)={0x4, @pix={0x9, 0x1, 0x49323159, 0x5, 0x3, 0x3, 0x8, 0x9, 0x0, 0x6, 0x2, 0x3}}) madvise(&(0x7f000063a000/0x1000)=nil, 0x1000, 0xf) mmap$IORING_OFF_SQES(&(0x7f000050b000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) sched_setaffinity(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x6, &(0x7f0000000540)=[{0x25, 0x0, 0x1, 0x2}, {0x0, 0x2, 0xf8}, {0x1, 0xfe, 0x58}, {0x3, 0x6, 0x49, 0x4}, {0x81, 0x9d, 0x3, 0xff}, {0x6, 0x8, 0x80, 0x2}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x19) socket$kcm(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000140)) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000980)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES16], 0x4c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'dvmrp1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0xc00, r4, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x48) 12.457212353s ago: executing program 1 (id=665): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="070000000000000000000000000000000000002a81918e4ac47434082ffbe05e754baa0a140000001100010000000000000000000000000a"], 0x28}}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0xe}]}}, 0x0, 0x26, 0x0, 0x10000000, 0x9}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001640)={0x8, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r1, 0x0, 0x4}, 0x48) close(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x26e1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_emit_ethernet(0x32, &(0x7f0000000580)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @private=0xa010102, {[@noop, @lsrr={0x83, 0x3}]}}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x43) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@minixdf}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x23, 0x44d, &(0x7f0000000980)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.empty_time\x00', 0x275a, 0x0) flistxattr(r4, 0x0, 0xfbffffff) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000001680)=0x7e) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000a80)=0xff) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@dellink={0x20, 0x11, 0x421, 0x0, 0x2, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x24004800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r8 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r8, 0x12081ff) fcntl$setstatus(r7, 0x4, 0x46100) pwritev2(r7, &(0x7f0000000340)=[{&(0x7f0000000300)='\"', 0x1}], 0x1, 0x0, 0x0, 0x11) write$cgroup_type(r7, &(0x7f0000000200), 0xf642e7e) fallocate(r7, 0x20, 0x0, 0x1000) 10.844593506s ago: executing program 2 (id=668): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x6, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x41, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000240)={0x0, 0x8, 0x7, [0xc, 0x0, 0x8, 0x5, 0x2, 0x6d, 0xc3a8]}, 0x16) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) mmap(&(0x7f000063f000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x110, 0xffffffffffffffff, 0x4000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000002c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) process_mrelease(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_PIT(r7, 0x4048aec9, &(0x7f0000000180)={[{0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}]}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000055000000080001000000000c009920"], 0x28}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000140)=[{0x25}, {0x24, 0x0, 0x0, 0x8000000}, {0x6}]}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="c4010014d20033060000000000000000ac1414bb000000000000000000000000ff02000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="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"], 0x1c4}}, 0x0) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/net\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r3, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r11}]}, 0x24}}, 0x0) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r13 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r13, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r13, &(0x7f0000000100)={&(0x7f0000001340)=@in={0x2, 0x4e20, @empty}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000013c0)="62031400d755af176510122f1eafbcf72be104326c648d5a0063116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e24732caf215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872ce401e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7dfd652684d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de", 0xd9}, {&(0x7f0000000140)="294f28dfe56d898ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0105869a804dd2a44ce42557b2e32e2bf367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876fe9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdec", 0xc1}, {&(0x7f0000000040)="0a985d7879f1bbff1ec7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f300d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb48bbd3b52d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}, {&(0x7f0000004040)="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", 0x358}, {&(0x7f0000000340)="b8d35a42b704f5117efd3fa6c54b6c6b478b2075f1f35338a8fcdbe33bea89953b1871bd4f6ed34d7e623ce8301b9f88d177e0924e01d4ed1dfe361165d0e4d82134b4f4a9510521ff5a0706da020bb9fdc2b2e04466fd4e3b2b07302e8be1af9a8ee1ee4b5c7162da6d59f98a577418ba1a170809c21015de4cd78edab07534beaf2a5a0dd36525d410831dec10a48e8394f5ab7def8421ddd63cd0", 0x9c}, {&(0x7f00000014c0)="4cf606e77ec950078aa90032b5f91917e8d575402a0962c1c4ad49cf12d752e769a6dd73d7e5babf2f307f07ec7689acc4e73eff16d9ee2f605ef46538b623feeb8f9b6684a17a42a06bb2e1c58799f5b38fddc8feee6d167a1ab639ff2908a71f4b49bdd2e3fa4c7565a28300d0c001bac6b8f46efa7bcaee30d98247ebf5800d463286dd0eaa173b09529696310c09fbc61fc7532c5d957f2ecce1dbed343ff530382b3896f0375b441bab76d1769456b9dab50d082ef3836d87ee1c539250e58f959eee51424d9a2abef1b46d4233303e9fe82ccbdb3c737ad99b66e92d803a88e3c91f51d84baea8fdc2d4683d213f89104034ec19a0cb20f86b771d926e8ffef023a0f4843be9ea1e7b44391569c35b63fa80ab7056645036a52ee13aa7f8436318a3741d297e176e1f0b5ff347dc9b35119c43bbc2454bb0616847c675af4009dc671af7e4008455ea8d99ad33abecffc9b8a52eab33d9de24499616b4110cdb49fc2e282f957dc10b9b912aa4a01bd00bbd75f31f5a09d5558c3530848f65027cfd3b2a4658cfa4457b01663257ce9534190352101557169e41531a04fc6319d6e43e123d3ad4b83db72b7f1a05e097beb7dff8e36d1208cdc40079debb78e7125d09e3122e6df71d2934c44f9f5462e31d518d2a7db5ca47c32c4ed48132128c052b02eca2435eb1bd9a9e222a8c8e05c87958df25b0b4b6bf971b1e66a6865e7b5ff449ce5602a70505fe80b9ec6f52fe0e4d7dc5405f36365e511d72866c79d9cc83ff3015c56b64de0c95b4cca888edb4f73b168ebcfca29f559ec4cb1f56ee727f8c19629b75718702921a98e1da61202c06148ee692b7049efa2ab1d37d9309acb855340b931e63aefe89874d06525fefecdcdf4dd3e3ee78944a7d8fa7f17834224fd911c1cb16e2f56cce651856ec6b8aa54d35ddfc9f0052c1f3341ad69445f27cc738dc25db48cd93da2c18c551548d57f10eb867bfd29e664e9d6aa2b22c6d491095089e840233a4736c550cd8d4d24207f03f091eb5d296d2da40f2c868c933d04c6178cf35499ba0f965b962c1811b6f253a9ff1d9935263b8c79cb9b1b423415c2b87352b71d7405b9366aa5277b756441efb9856e40f4f8b5ea3405be8a8843114a47992815b116e9944b409f7790ab02b54925e471e9895c7d9c600a6e413509065e0c09527d40b544308124aad12ce129203f592910abc82cee55b15f1330a2bcccd6d62568eab5429045f11088bda3a74590aa641ed9ff17b70896d044afe5833d635542f808e2beaad3a796e003b7908918b913575aacc334ed06b0efa37c276aad2ac3ec0bdedc0043f78cb5aec82723b8f5ada6f232846ed80ea0b19fcaa49916373ba365a5bdf95d286771e65223ecf099299a6f06a91371f2da1e64d6b406f500da12c06f44344d97e204a6e8db493d332adb477dda4cca0fb56d3acdc651e0cdf74ea2170a7959c1ec62c0e212c0014e6eabf52b89d4abd80e5ae736e53c0e8f6397232a8af306bd99e72cbf441f24d13b46e9e74c446a1ab3ad7bc6ec6f2b488d4ad9e5e4132a5265799c9102781fe263bad3387b33751e1a1afbad3189183af7e015cbb901c632155506a408a1debe0e9c3078520ad039026cef63f1881eebf73ea768da573ac9ffcc047a1f78974fa1f4fd77d9e6a3954db0976ac000b24a52a17500cec5f55e5f9f58defc614a4fd5d123e50f66cbd95add7ed0ae5203a19e12876768736da5dc958ecdf98c125aef049de4bd313b7216089e0313820c47560febf4656fcc1c47ad6c44a0b41c11200d646dd888936554559269469fc61670dd9cc3c2ff85af8ed648b139c38bd722e1255c323d303e52e5c34aca62e34b95a56155f90721dff88d5ed7d8d08927ec813b2257118fa9fa9ead444c4763ce8b4add358d785c8bc1b5f125b609f8607eb8c743b17f2e6c867b3c4514653f2d66697419a3205af0937e6cdb56c6e7693fe095f00fceb040ca587650eb91c9f47f2575c4b3929a47c9bd7fa4bd277c80c5808b15053a61990b34d51ad81b81e9ccf2ba31a85b1b5e666a91b08b0f69db6b0e7991ef248754618042059bd3477fa8b09666855557ec62087116163f0c77c068119f1e710a4dfa8c8b020b5ce16542e7f75c8f80e8d25229b02e9c2c4b1faea0bcbf3952768d0bfb2993af4dded00d2bec306e1c80101af32db99cff9573bd73001122aafe26512e90fd4a500ab77a9886d3458f55a7b04947e727cafc1cd604ac1a696b09fbee6d6412eecde1633aacf07f5694b961ae9187788d798a9e99d2c8b772577811e90c73c787a6d7ffbf20dfc1bd0b411adf476d5f1515a3add96b94fdee4ef8695b7ab5420765465af0531b20f3167c5a27e717ca600073053b591cb2092dbd5df545745c03d87009cbaf667f382f9cc70297d5d792e80df5a4902b35652d7925695217d349a34a51bb70ca2293b5569ca978245aa76a81460bd928e871558e6a49416c629e352af3a667d0ebf6593b0a0a0f069a7a92ac836a305fc13333262692f984703f4e76adc113b18b853ea0c62c54da25f4f99db4b13110fb9739e5dafd89c3cc1ba0a1239644da78949040dacbdffc9a796cbaf9cc087d441481017ba04e4c5b793402421cc209117a357741a95aa214c6faef01609f1ac907e9fa0dc7310ace18538ffb6c26968ba707f706e831cdbd9b137dfad0d47d020efd49a400929237b2085149433ab18e05001ee0e6ba528e22909d22dc3b75623282b066f8c52b5401d3cf0e40089e9a2a65a98f03f67b3a660c48feb292e317fe569c13324eecea3cd215746f18b9ce65b02e0ca3d62d7e9a210c7a424170d9e153f610f51fc90fec616ef07b819dec8b1b9d4817c8f6199a1ab5f074318cd62657e2364edf29deb60c8c69761472081c4e919c9124aa0f8f9919d1ac3ab5a0a01c8312566e5a75f94c79366557979640ff1647e36eafea0b1818619ba7e3f8e9aede3b5746d1f7e75ac20dd1c3550cd50d635395607cd887b453a0f2d9713263f0b2734cc2ee5152a5dafc2d5cdf88d5980a1500f4fa97cdadc74d7e7c47c926a53e4825892f181da5cae89367b7c281549509ed4889c9f2ae15374dff452ae90f0c0d5e5add315c03f3c7dfccaadc06ebf45f08704db8dd8c6258d108c010e1a277829b87bdf2d13e0bf81f9264a0234f717b6a9f9df20fe07feeeff416a81d5e297977692834d3d08c0ccd6d7263e06dae2e081cda29106f669a498833a70a4869829d8c14f9f20a14819feab0b4f5b31ef4de14b6bcc6c3f23109a159d", 0x923}, {&(0x7f0000000800)="c35538bad2a74ae8f55fe629688219e79f4e3b8a5a8b2628106a5e0bc0c79e9cd830f2795862f108efc4072afdd765fe3223f25f7c094b5b8c8e0105f171fb85f7607f7c4cc41c4038cec92c76cdcf99ce8a4432185c148c5290074d6bf4ce2af4006d22ccaddc9c67aef09b185a444a6555d6474c1f075fdf7096fe915ad97ee3e848efc61c7dcafd554225e4927c6f2d4aee017bcb37afa585d9f6347a289fbe9a84bebd42b4505dae2cd8ac9bcfaf3cc4d96612a3cfb7f255b30c166ce0ddd330b5bb41d6c70da9b6baf268095245179f8b28c896f054c3873dd8af8c0b7353c1c31300cf891838df5eb71f4749800afbf387a1c5eb5633b16f", 0xfb}, {&(0x7f0000000480)="b66a02bb9404c030d2dc3b99080284f87d454ef7750be4c0cf641e32c1fc764911169c2638cb3b64d640a2bd9bb40db9", 0x30}, {&(0x7f0000000900)="52ed7d14412229566d99fe83cc5752dbffeae511d85a013d4c83120b631fc588f95843d63722f192c5537c53ac0a110ade0d09cfda70f6d4cfa57f1e661e798482647b9fa50b5b060590173f220025d8818605bc6330b1605f5dfe9e32118c0b3826efcec85e27b0f79dbf8172eaa02738a9d5e67096efaa54ff8dfeafd1c12c3b08a3a98391ddfba28047af9677f4493831375c3034c9902974", 0x9a}], 0x9}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000000000000003c00000180001801400020073797a5f74756e000000000000000500050005000000000002f7c45aea5ed4518c84b327353c42701082c59cc114e1477d1578d1fb2aaa5a8e640d7cd85d7f6a9de127a40aa6e18e1b312f751710a9017fec679fa1b7b38c153ea7de0241aae6f9477d5b8d5724b80b5fe6e5f5cbb8faae79b4087b56988d7d6d1eeac54e28ab44d21ad6e9db2599fb6c5df61e91fad8371fa7d5f0be51215d58e3b9b6bd729cfaf622db3379c4d398560828a916a04422393773ab4740e35419b1201a448f845033390d488c9842867cfe01864153ba025f8e5a135db58e998afd6acb93a5a2"], 0x34}}, 0x0) 10.842105626s ago: executing program 1 (id=669): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_redir={0xa1, 0x0, 0x0, '\x00', @private2, @private0}}}}}}, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xca}, @l2cap_cid_signaling={{0xc6}, [@l2cap_conf_req={{0x4, 0x35, 0x1e}, {0x5, 0x0, [@l2cap_conf_mtu={0x1, 0x2, 0x40}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x0, 0x4, 0x0, 0x3f, 0x800}}, @l2cap_conf_mtu={0x1, 0x2, 0x19e8}, @l2cap_conf_mtu={0x1, 0x2}]}}, @l2cap_conf_req={{0x4, 0x20, 0x30}, {0x9, 0x7, [@l2cap_conf_rfc={0x4, 0x9, {0x2, 0x6, 0xb5, 0x8, 0x5, 0xfffa}}, @l2cap_conf_efs={0x6, 0x10, {0xfc, 0x2, 0x8d7, 0x81, 0x3, 0xe348}}, @l2cap_conf_flushto={0x2, 0x2, 0xff}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x3, 0x0, 0x6, 0x1, 0x800}}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x4, 0x2}, {0x7}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x3, 0x2}, {0x2}}, @l2cap_disconn_req={{0x6, 0x40, 0x4}, {0x1ff, 0x4}}, @l2cap_create_chan_rsp={{0xd, 0x7, 0x8}, {0x6, 0x7, 0x3, 0x7ff}}, @l2cap_create_chan_rsp={{0xd, 0x0, 0x8}, {0x8, 0x9, 0x8000, 0xfff9}}, @l2cap_conn_req={{0x2, 0x80, 0x4}, {0x3, 0x5}}, @l2cap_conf_req={{0x4, 0x39, 0x30}, {0x401, 0x4, [@l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x81, 0x8, 0x7f, 0x49c, 0x6}}, @l2cap_conf_mtu={0x1, 0x2, 0x7}, @l2cap_conf_efs={0x6, 0x10, {0x81, 0x0, 0x8439, 0x1, 0x4, 0x7fff}}, @l2cap_conf_ews={0x7, 0x2, 0x8}, @l2cap_conf_fcs={0x5, 0x1}]}}, @l2cap_move_chan_rsp={{0xf, 0x80, 0x4}, {0x5, 0x6}}]}}, 0xcf) r0 = syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='wchan\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x10, r1, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$FIONREAD(r2, 0x541b, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = syz_open_dev$media(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x2, 0xffffffffffffffff}, 0x0, &(0x7f0000000080)={0x3ff, 0x0, 0x7fffffffffffffff, 0x0, 0x3}, 0x0, 0x0) ioctl$MEDIA_REQUEST_IOC_REINIT(r4, 0x7c81, 0x0) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000000)) fchdir(0xffffffffffffffff) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000400)=ANY=[@ANYBLOB="68000000000000000000000000000000000000005100008008000000e00000012d00daef8c50255300008b3aa15b4c0b7f6c0a33ca71611b3a3cdaeea9ac742b33a2feeb8ae65780966931197738b42fc2548a000000c22d06aa76fb04769234a2e944a2a68b677be814380000005e7cc81bb676d98fe8cb187d19926966cf85c7c35f227e9f7d4123a0c37367e9dc3760b4a211d3885f9169b3032ef9e6097658cd74fc71d8186dbae1d1a21218a91036b358a9852798f3bb38e7d35577655e6b42c1af17ea74c5948807233f4cad884507c31db7ca07adb4254951bbf2269601eaf79275d9638d53d546ae54dc6ce6aec12de87ddc038b37"], 0x68}, 0x1, 0x0, 0x0, 0x2400c8c1}, 0x20008001) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x44000) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) 9.751290506s ago: executing program 1 (id=671): io_setup(0x0, &(0x7f0000000100)=0x0) io_getevents(r0, 0x8000000000000001, 0x1, &(0x7f0000000000)=[{}], 0x0) io_setup(0x0, &(0x7f0000000000)=0x0) r2 = socket$inet(0x2, 0x2, 0x0) io_setup(0x3, &(0x7f0000000280)=0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') io_submit(r3, 0x1, &(0x7f0000001cc0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}]) sendmsg$inet(r2, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x0) getsockopt$inet6_buf(r5, 0x29, 0x10, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) memfd_create(&(0x7f0000000140)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x04\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[z\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x82\x10n1\xed\xba\xe3\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\xff\xe9\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf1\\i\xff\xc4Y\xc5F\x8bx\xa2(\x93\xf6\x18\xff\x83;\xb8A\t$\xe5\xd0\xb5\xa4\xf9\xaa/\x01Xq\xa2`|\xd7\x8d\xf9\xf3&\x8d\xd6\xf6\xce\xc5\xa8\xef~5r\xce\x10\xc8*\x024\xb8\xd1r\x84\xc4\xe6\xb1\bVT\x06\xe7!\xb8\x9c=', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f00000000c0)) listen(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r7, 0x0, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="200000001100010000000000000000000800fd00", @ANYRES32=r6], 0x20}], 0x1}, 0x0) readv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/229, 0xe5}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x80}], 0x1, 0x0, 0x0, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$binfmt_aout(r9, 0x0, 0xff2e) io_destroy(r1) io_destroy(r0) 9.333613771s ago: executing program 2 (id=673): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x401, 0x0, 0x0, 0xfffffffb, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@dev={0xac, 0x14, 0x14, 0xa}}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x659}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x80003}]}, @end, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x13, 0x0, [@dev, @remote, @multicast1, @private=0xa010102]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f00000003c0), 0xee, 0x467, &(0x7f0000000b40)="$eJzs3M9vFFUcAPDvzLaA/GgrIgKCVtHY+KOlBZWDF40mHjQx0QMea1sIslBDayKEaDUGj4bEu/Fo4l/gSS9GPZl41bshIUpMQE81MztTuku3dGG3W9nPJxl4b+dt3/fbmbfzdt5uA+hZw9k/ScT2iPgtIgZr1foGw7X/rl+9MPXP1QtTSSwuvvlnkre7dvXCVNm0fN62ojKSRqSfJkUn9ebODcRktTpztqiPzZ9+b2zu3PlnTp6ePDFzYubMxNGjRw6PP//cxLNtyTPL69q+D2f373317UuvTx279M5P32Tx7j5Q2788j3YZzhL/azHXuO/xdnfWZTtqp1Au6etuLKxdJSKyw9Wfj//BqMSNgzcYr3zS1eCAjsquTZub715YBO5iSXQ7AqA7ygt99v633NZp6rEhXHmx9gYoy/t6sdX29EVatOnvYP/DEXFs4d8vsy06dB8CAGC577L5z9Mrzf/S2L2s3UCxhjIUEfdGxM6IuC8idkXE/RF52wciYk+L/TcuDd08/0kv31Zia5TN/14o1rbq53/l7C+GKkVtR55/f3L8ZHXmUPE7GYn+zVl9fJU+vn/518+b7Vs+/8u2rP9yLljEcbmv4Qbd9OT8ZLsmpVc+jtjXt1L+ydJKQBIReyNiX2s/eqAsnHzy6/3NGt06/1W0YZ1p8ast8UTt+C9EQ/6lZPX1ybEtUZ05NFaeFTf7+ZeLbzTr/47yb4Ps+G+tP/8bWgz+neTrtedP5eu1c633cfH3z5q+p7nd839T8la+4LipeOyDyfn5s+MRm5LX8nrd4xM3nlvWy/ZZ/iMHVx7/O4vnZPk/GBHZSXwgIh6KiIeL2B+JiEcj4uAq+f/40mPvtpz/lvp2ox1aU83yn17x9W/p/B+qP/6tFyqnfvi25fyXZMf/SF4aKR7JX/9uYa0B3snvDgAAAP4v0ojYHkk6ulRO09HR2mf4d8XWtDo7N//U8dn3z0zXPuA9FP1peadrcNn90PFkofiJtfpEca+43H+4uG/8ReWevD46NVud7nLu0Ou2NRn/mT8q3Y4O6Djf14Le1Tj+0y7FAaw/13/oXcY/9C7jH3rXSuP/o4a6tQC4O7n+Q+9qffyPXOlIIMC6c/2H3nUb43/bQCcCAdbTnXyvX6EthcHNa2lcaeGPGqxLIdINEUanCrFnQ4TRvUK3X5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa478AAAD//0nR6+E=") r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x26e1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$packet(0x11, 0x0, 0x300) fchdir(r7) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) pwrite64(r6, &(0x7f0000000140)='2', 0x1, 0x8000c61) pwritev2(r5, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0x1}], 0x1, 0x800001, 0x0, 0x0) fallocate(r4, 0x3, 0x1000000, 0x8000c62) r8 = dup(r2) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000010800)={0x0, 0x0, &(0x7f00000107c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000", @ANYRES32, @ANYBLOB="0c00990000"], 0x28}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r9, 0xae9a) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast}}, [@mark={0xc}]}, 0x104}}, 0x0) 8.645780897s ago: executing program 1 (id=674): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xc1, 0x2, 0x0, 0x400, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3, 0xa}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000ebffffff9500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000005000080850000007d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r9}, 0x10) setsockopt$sock_attach_bpf(r8, 0x1, 0x21, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000005c04"], 0x0}, 0x90) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0xfe3a) socketpair(0x1d, 0x3, 0x35, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYRESOCT=r3, @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r11}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], 0x0, 0x57, &(0x7f00000004c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x38, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x14, 0xc, &(0x7f0000000400)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r12, @ANYBLOB="0000000000000000b708000000feffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095", @ANYRESOCT=r0], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 8.028768228s ago: executing program 2 (id=677): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000180)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10) semget$private(0x0, 0x2, 0x0) syz_emit_vhci(0x0, 0x7) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_CLASS_OF_DEV={{0x7}, 0x1}}}, 0x7) syz_read_part_table(0x5fd, &(0x7f0000001a40)="$eJzs2z9olGccB/DvxVzOP9B0cHKpcegkFMXRDFWSU7EQTqUQHLS1iJgpQuCkhwc6tBkUM0jHLlK4ReNkzOBQFIXORRxahAwuBV2kdshbrvc2rfaPR8kNxc9n+T338rvn+/zgWZ/wvzaUarkqar+VDz751/5i9I91O8c6E5MHi6IojiaVHE81Y9++s5hkOK/umh1JRv60z/WvNy9/+fxAtfP4yIv3T9ybH1rbs5Z3k2wZeePRa/1PyaDcGL8/evHSbP1y90e9tbL6cXLz2URj6fD8wuKh6v5T3e8Xkgdlf+9ibMq5NHM+Z3Ny+L+kVl7Jb3fzm+NnHtVbK191nuxa3Vbv3D699+X25St3dydz3Yip1/6XN9+vvqzNX+bPjV2dXmjt23lr67U9zTsPG083/Fz0lJHV9ckFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAwbozfH714abZ+uTl+5lG9tfLF9999dPPZRGPp8PzC4qGR/afKvgdlHS7ruTRzPmdzMjOZyWeZ7T9yuvKP+b9sTp7sWt1W79w+vffl5PKVu7vLvqn1GPZvvD7/3NjV6YXWvp23tl7b07zzsPF0Q69vppZPU+2tawM6CwAAAAAAAAAAAAAAAAAAAG+vicmD26c+bBxNKjm+MclPnw91vxflI/ff3+rvKOsPtWRTkusbk/bzA9XO4yMvRk7cm/+x7G+nlnaSLd8sHUveW8u58JfkyqBHow+/BgAA//8hVpWc") creat(&(0x7f0000000140)='./file1\x00', 0x0) syz_emit_vhci(0x0, 0xf) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000580)="ea41fdf41451514ea181eeae2ec22c225cd5402272b9b414b08f0719a48af2247a64345c5b8ca209dbb24493c24bc0971484e88e954f41cfa8f63e1e491105de10a51a6b2cc6b0430073761878d3f26aef6f220d91eb2e85dd17102ff8fbddb9bc924b08d99f2c574c54caee9c947c61efaf7ed18d0c7f6c326288f1761885ab8c5208961186085a267756cf2e6f4e2fc3b7795f735da01858b0d9fff28b7a703351901cf50a777413c9415ab78b2010e13db027", 0xb4) readahead(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x800, &(0x7f0000000040)=ANY=[@ANYBLOB='iocharset=cp936,dm00000000000230,\x00'/47], 0x1, 0x14d3, &(0x7f00000015c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000180)='./bus\x00', 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x1, 0x2}, {0x2}}}}, 0xf) renameat2(r4, &(0x7f00000004c0)='./bus/file0\x00', 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) io_setup(0x7fb, &(0x7f0000000440)=0x0) io_submit(r5, 0x1, &(0x7f00000014c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}]) 6.917836849s ago: executing program 4 (id=678): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000080)={[{@noacl}, {@abort}, {@nouid32}, {@noacl}, {@nomblk_io_submit}, {@noquota}, {@mblk_io_submit}]}, 0x10, 0x4f0, &(0x7f0000000c00)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_CONTROL(r1, 0x80045519, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f00000003c0)=ANY=[@ANYBLOB="0fd4dd8db0845ba2eab42289f907a274b48f9f9f18221ee7e280b6e922562eaabe1ac3b982e13ff3f18c0a0154bf31d4f53d27472bf9b190d2314c119ca426f2f4592465655a83c945c0695d8d3521ac0a161b36fb42f8241a57eab49a2cb5f7c156413ae759f46518"]) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x9, 0x4, 0x2}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r4, &(0x7f0000000240), 0x20000000}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r4}, &(0x7f0000000440), &(0x7f0000000480)=r3}, 0x20) close(r3) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newnexthop={0x24, 0x68, 0xf6db9ba89c8f766f, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6}, @NHA_GROUP={0x4}]}, 0x24}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 5.381795006s ago: executing program 2 (id=679): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800700, &(0x7f0000000940)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nomblk_io_submit}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200}}, {@usrjquota}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) preadv(r0, &(0x7f0000000040), 0x0, 0x0, 0xfff) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x4, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000000900)=[{{0x0, 0xd00, 0x0}}], 0x40000cf, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) r7 = syz_io_uring_setup(0x82e, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x346}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x8, 0x0, 0x1) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000200)='./file0\x00', 0x6c842, 0x0) socket$rxrpc(0x21, 0x2, 0xa) 4.129968119s ago: executing program 4 (id=680): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x281200c, &(0x7f0000000c40)=ANY=[@ANYRESHEX=r3, @ANYBLOB="3d583ddc53f1a66e58baa70eb274128d248b4e9378f5937571fc1f6c413ced4e431c5b5b84607c1e735110497d07", @ANYRESOCT, @ANYRES64=0x0, @ANYRES16, @ANYRES8, @ANYBLOB="2c6e03d465636f6d706f73652c6769643d29ab72f4a2f73b811c7fd9bae7ecd520839bd791f81b6637f549a77ac6cb621635f9c08b2615964a3c43b727df50d049dc760465dea7349206240e6fb4756f276c72f20bab7d507fe4853b18ebe583cbf9009044b021249834326e80399ca072639251325e38177eef4f05093acfe76553919ecca99460ea4ebdbcef9c4e0ed3f10f86889116979b7aa52b38442546b806d6b8964f99a04195ad43adb611", @ANYRES16=r2, @ANYRES16=0x0], 0x4, 0x715, &(0x7f0000000500)="$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") ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000004c0)={0x0, 0x0, 0x20, 0x0, "cbfea29368cc60a1ff856ae471fe261fdfb44a306ea8d6996bbcb8eb45d73158"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r4, 0xae80, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000ac0)={@ifindex, 0xffffffffffffffff, 0xe, 0x28, 0x0, @prog_fd}, 0x20) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x0, 0x0, 0x0) write$binfmt_elf64(r6, 0x0, 0x40) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) setreuid(0x0, 0xee01) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000480)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "4a8d480f65491adf0fbc0b55d9391fec4647e0a1c2934c637607750100000066ee00"}, 0x48, 0xfffffffffffffffd) pread64(r8, &(0x7f00000001c0)=""/136, 0x88, 0x29) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) 3.88162465s ago: executing program 2 (id=681): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xca}, @l2cap_cid_signaling={{0xc6}, [@l2cap_conf_req={{0x4, 0x35, 0x1e}, {0x5, 0x0, [@l2cap_conf_mtu={0x1, 0x2, 0x40}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x0, 0x4, 0x0, 0x3f, 0x800}}, @l2cap_conf_mtu={0x1, 0x2, 0x19e8}, @l2cap_conf_mtu={0x1, 0x2}]}}, @l2cap_conf_req={{0x4, 0x20, 0x30}, {0x9, 0x7, [@l2cap_conf_rfc={0x4, 0x9, {0x2, 0x6, 0xb5, 0x8, 0x5, 0xfffa}}, @l2cap_conf_efs={0x6, 0x10, {0xfc, 0x2, 0x8d7, 0x81, 0x3, 0xe348}}, @l2cap_conf_flushto={0x2, 0x2, 0xff}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x3, 0x0, 0x6, 0x1, 0x800}}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x4, 0x2}, {0x7}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x3, 0x2}, {0x2}}, @l2cap_disconn_req={{0x6, 0x40, 0x4}, {0x1ff, 0x4}}, @l2cap_create_chan_rsp={{0xd, 0x7, 0x8}, {0x6, 0x7, 0x3, 0x7ff}}, @l2cap_create_chan_rsp={{0xd, 0x0, 0x8}, {0x8, 0x9, 0x8000, 0xfff9}}, @l2cap_conn_req={{0x2, 0x80, 0x4}, {0x3, 0x5}}, @l2cap_conf_req={{0x4, 0x39, 0x30}, {0x401, 0x4, [@l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x81, 0x8, 0x7f, 0x49c, 0x6}}, @l2cap_conf_mtu={0x1, 0x2, 0x7}, @l2cap_conf_efs={0x6, 0x10, {0x81, 0x0, 0x8439, 0x1, 0x4, 0x7fff}}, @l2cap_conf_ews={0x7, 0x2, 0x8}, @l2cap_conf_fcs={0x5, 0x1}]}}, @l2cap_move_chan_rsp={{0xf, 0x80, 0x4}, {0x5, 0x6}}]}}, 0xcf) r0 = syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='wchan\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x10, r1, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$FIONREAD(r2, 0x541b, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = syz_open_dev$media(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x2, 0xffffffffffffffff}, 0x0, &(0x7f0000000080)={0x3ff, 0x0, 0x7fffffffffffffff, 0x0, 0x3}, 0x0, 0x0) ioctl$MEDIA_REQUEST_IOC_REINIT(r4, 0x7c81, 0x0) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000000)) fchdir(0xffffffffffffffff) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000400)=ANY=[@ANYBLOB="68000000000000000000000000000000000000005100008008000000e00000012d00daef8c50255300008b3aa15b4c0b7f6c0a33ca71611b3a3cdaeea9ac742b33a2feeb8ae65780966931197738b42fc2548a000000c22d06aa76fb04769234a2e944a2a68b677be814380000005e7cc81bb676d98fe8cb187d19926966cf85c7c35f227e9f7d4123a0c37367e9dc3760b4a211d3885f9169b3032ef9e6097658cd74fc71d8186dbae1d1a21218a91036b358a9852798f3bb38e7d35577655e6b42c1af17ea74c5948807233f4cad884507c31db7ca07adb4254951bbf2269601eaf79275d9638d53d546ae54dc6ce6aec12de87ddc038b37"], 0x68}, 0x1, 0x0, 0x0, 0x2400c8c1}, 0x20008001) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x44000) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) 2.948606357s ago: executing program 4 (id=682): socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000180)=0xc) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f000086fff4)) r6 = getpid() r7 = getpid() kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r2, &(0x7f00000000c0)={r5, r4, 0x7}) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001e00050300000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="3fea9f83d6ef67d072c8d28d65953ef408004900", @ANYRES32=r1, @ANYBLOB], 0x24}}, 0x0) setuid(0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r8, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0xa4, 0x0, &(0x7f00000016c0)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000004c0)={@flat=@binder={0x73622a85, 0x1000}, @fd={0x66642a85, 0x0, r9}, @ptr={0x70742a85, 0x1, &(0x7f00000006c0)=""/4096, 0x1000, 0x2, 0x4}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000540)={@flat=@weak_binder={0x77622a85, 0x1000, 0x1}, @fda={0x66646185, 0xa, 0x0, 0x9}, @ptr={0x70742a85, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x33}}, &(0x7f0000000380)={0x0, 0x18, 0x38}}}, @request_death={0x400c630e, 0x1}, @acquire={0x40046305, 0x1}, @enter_looper], 0xa8, 0x0, &(0x7f0000001780)="f1c309066053e09ad09279598a30a28d3f349f6f0854ce6200ce6b74914a1415d8824a58b84011f3f353378ba0d6b036098a88cf69c0fd5ee3bc823ccc43c8f28aab86bd682c72f26cc78c3132ed913f8dd004899d654f1c36010a71de66484a8f23623802382cb8e18461dea54f332e8c770c50588d895d63878bd77282d232eb1cd2a8cf1a95dd233ae8b5c707662a834280ec54920ecdd1d45a3d0a28cc04a9e7edc3ee707688"}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x1c, 0xff}, {0x50, 0x0, 0x0, 0x10000}, {0x6}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f0000000040)=[{0x25, 0x0, 0x1, 0xc}, {}, {0x16, 0x0, 0x3f}]}) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYRES16=r6, @ANYRES16=r0], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) timer_delete(r8) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x16}}, &(0x7f0000000480)='GPL\x00'}, 0x80) 2.879713152s ago: executing program 2 (id=683): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x80, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) unshare(0x6a040000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = add_key$keyring(0x0, &(0x7f0000001700)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000000)=@chain) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0xd0}}, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x18) listen(0xffffffffffffffff, 0x5) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2800}, 0x8000) 2.018432494s ago: executing program 4 (id=684): syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) gettid() r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='ext4_free_inode\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f00000005c0)=0x80000001, 0x4) sendto$inet(r5, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r5, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x12eed8485ad) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0505350, &(0x7f0000000200)={{}, 'port1\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003800000038000000030000000000000000000003000000000300000002"], 0x0, 0x53}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f0000000540), 0x0, 0x52e, &(0x7f0000000f00)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ////8+wKHhUtID7hAOjFcXV2f8+nMsBIBLl3r/n+/A3mcLMBIKfY1AhAYZf/3/f9zpelDJQQAAAzcdGtKCqXs673pKBRKpYibrZ8FKCZrG9XKfEQ8ERG/nSlea9YXWlsm514zAAAAAAAAAAAAAAAAAAAAAAAAAABtaZpECgAAAIy0iMKfkl+2n+U/N/P8dPf3AxPJv1o/CTwREW/98I3v311uNHYXmsv/drS88YNs+YvD+AYDAAAA6Na5Tm/N/znsbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNe89eHulM/Xx8qlBxf3LFyJiNi/+eEy25pNRjIjrf09i/MR2SUSMDSD+4b2I+Ghe/KSZ1lHIvPiDeBPOiR+z2buQF//GAOLDVXa/efx5La//FeLZ1jy//41H/E/9g+p9/Iuj499Yj/5/s88YT73zs3LP+PcinhrPP/504ic94j/XZ/yvf+3goNe69EcRc53Pn9YR72SE41K5sbVTru8f3N7YWl6vrFe2FxcXXl56Zemlpfny2ka1kv2bG+M7T//8/bPafz338y/Jsund/udz9pf3mfSfd+4++HCncng6/q3ncuL/6sfZK07HL2RxPpWVm+vnOuXDdvmkZ376m2fOav/qcfuLD/P/f6vXTrud6ihP9/unAwBcgPr+weZytVrZHdlC8yr9EUhD4REsfGugO0zTNG32qZxV9yOin/0kMeCWFvLzOS70PAIM+8gEAAAM2vFJ/7AzAQAAAAAAAAAAAAAAAAAAgKvrMp6y1h3z+BHIySAeoQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBD/DQAA///dpdP7") sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}], 0x1, &(0x7f0000000040)}, 0x0) 457.873112ms ago: executing program 4 (id=685): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x78}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000140)="9cb5f7f7ad65dcb13e1151aa713829b3b2683830e7a1b6f9bdbf2e28d1f140e12796c24ab62d9ca5d52fb365d65576680a6a60c6064989caa909bf287fb6a326dfec8e88d2f734a1460163d71adbf26ce13f31ecc7cb08d808daffc1ff80deab95fe9896e37bd107a176b46b54", &(0x7f0000000380)=@buf="1f9ac6e0774d65e3b8ff48591e6f148f4df7c1963b6fc673a0ab984eb64d65629d202346f169a6df73d5960f36f3a0915f53686f026adfa31caa8dcec3844fad9c546a7cdfbbe623fd402407c421be6e70256a74564c9fc53b2717ac84c83888c4b458c0c00f4e87275f08ba7bf4dc83eacb08ad8b32ee1fe455f3eb8a70582c20537ea875dc15fd24108e38fc97a0265ad7a91e723844911208342ec620fc45a803dc585947db4dc5d229b509d966e3f509d7150c6598464b0f2d8ff64b8a9fc03232508272a9a51bf0e5b2c0e2c9aff6776d0c8da1f6f82892d189556aede48842c9722d"}, 0x20) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8902, &(0x7f0000000040)={@rand_addr=' \x01\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000500)=@generic={0x0, 0x6, 0xd4}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040014) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0), 0x30}}, 0x24048040) syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), r3) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8902, &(0x7f0000000040)={@rand_addr=' \x01\x00'}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000040)=0x3d29, 0x4) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x30, 0x2, 0x6, 0x101, 0x0, 0x0, {0xd, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x10}]}, 0x30}}, 0x810) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000700)={0x0, @initdev, @dev}, &(0x7f0000000740)=0xc) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffff9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x400d0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x350, 0x1a0, 0xffffffff, 0xffffffff, 0x1a0, 0xffffffff, 0x280, 0xffffffff, 0xffffffff, 0x280, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'ip6tnl0\x00', 'veth1_to_hsr\x00'}, 0x0, 0x138, 0x1a0, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x2}}, @common=@unspec=@physdev={{0x68}, {'wg0\x00', {}, 'ip6tnl0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000680)) sendmmsg$inet6(r5, &(0x7f0000000240)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x5, @private0, 0x9}, 0x1c, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x1, 0x0) 0s ago: executing program 4 (id=686): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0, @ANYRES8=r0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x23, '\x00', r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES32=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="01", 0x1) kernel console output (not intermixed with test programs): 3648] Bluetooth: hci4: unexpected event for opcode 0x203c [ 269.372560][ T152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.399452][ T152] usb 3-1: config 0 descriptor?? [ 270.154783][ T3648] Bluetooth: hci1: command tx timeout [ 270.801390][ T3943] team0 (unregistering): Port device team_slave_1 removed [ 270.861599][ T3943] team0 (unregistering): Port device team_slave_0 removed [ 270.908857][ T3943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.960953][ T3943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.013113][ T5649] loop0: detected capacity change from 0 to 1024 [ 271.107171][ T5649] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 271.737254][ T3943] bond0 (unregistering): Released all slaves [ 271.850629][ T5365] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.869255][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 271.881722][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 271.912341][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 271.925106][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.935237][ T3963] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.942350][ T3963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.950519][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 271.964183][ T5625] tipc: Started in network mode [ 271.969239][ T5625] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 271.978878][ T5625] tipc: Enabling of bearer rejected, failed to enable media [ 272.028241][ T22] usb 3-1: USB disconnect, device number 3 [ 272.120018][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 272.192658][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 272.213678][ T3963] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.220854][ T3963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.234765][ T3648] Bluetooth: hci1: command tx timeout [ 272.279037][ T4145] EXT4-fs (loop0): unmounting filesystem. [ 272.293940][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 272.314040][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 272.336208][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 272.373930][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 272.403444][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 272.490529][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 272.595795][ T5665] loop1: detected capacity change from 0 to 256 [ 272.605429][ T5665] exfat: Deprecated parameter 'utf8' [ 272.611146][ T5665] exfat: Deprecated parameter 'utf8' [ 272.702656][ T5665] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 272.876420][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 273.233846][ T5365] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 273.323264][ T5365] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 273.419557][ T5669] "syz.0.374" (5669) uses obsolete ecb(arc4) skcipher [ 273.793550][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 273.813730][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 273.905162][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 274.000564][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 274.073783][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 274.238400][ T5590] chnl_net:caif_netlink_parms(): no params data found [ 274.289570][ T5679] netlink: 'syz.0.376': attribute type 2 has an invalid length. [ 274.408744][ T5679] loop0: detected capacity change from 0 to 256 [ 274.591251][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.654462][ T5590] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.675305][ T5590] device bridge_slave_0 entered promiscuous mode [ 274.715500][ T5682] netlink: 80 bytes leftover after parsing attributes in process `syz.1.377'. [ 274.754843][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.762006][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.791517][ T5590] device bridge_slave_1 entered promiscuous mode [ 274.864827][ T3648] Bluetooth: hci5: unexpected event for opcode 0x2041 [ 274.878037][ T3648] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 275.007967][ T5590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.170140][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 275.188623][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 275.264956][ T5590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.346815][ T3648] Bluetooth: hci4: unexpected event for opcode 0x2040 [ 275.478777][ T5590] team0: Port device team_slave_0 added [ 275.481789][ T5590] team0: Port device team_slave_1 added [ 275.687645][ T5365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.737801][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.737820][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.737845][ T5590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.739615][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.739629][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.739653][ T5590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.456096][ T5590] device hsr_slave_0 entered promiscuous mode [ 276.486040][ T5590] device hsr_slave_1 entered promiscuous mode [ 277.027411][ T5590] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.619047][ T5590] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.961900][ T5701] tty tty24: ldisc open failed (-12), clearing slot 23 [ 278.071423][ T5716] loop0: detected capacity change from 0 to 256 [ 278.128551][ T5590] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.186697][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 278.236235][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 278.308123][ T5590] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.366342][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 278.381793][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 278.427398][ T5365] device veth0_vlan entered promiscuous mode [ 278.447595][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 278.477824][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 278.516191][ T5365] device veth1_vlan entered promiscuous mode [ 278.686734][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 278.723105][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 278.856789][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 279.616632][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 279.647454][ T5365] device veth0_macvtap entered promiscuous mode [ 279.728857][ T5590] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 279.817097][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 279.837424][ T5365] device veth1_macvtap entered promiscuous mode [ 279.862986][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.883819][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.914975][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.944579][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.977786][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.031129][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.165898][ T5736] "syz.0.384" (5736) uses obsolete ecb(arc4) skcipher [ 281.441422][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.523454][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.636249][ T5365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.665160][ T5590] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 281.776502][ T5590] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 281.805669][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.854645][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.874575][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.904594][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.924747][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.964582][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.994615][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.021959][ T5757] netlink: 'syz.1.388': attribute type 2 has an invalid length. [ 282.029937][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.056086][ T5365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.068603][ T5757] loop1: detected capacity change from 0 to 256 [ 282.075318][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 282.083807][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 282.135100][ T3802] Bluetooth: (null): Invalid header checksum [ 282.142238][ T3802] Bluetooth: (null): Invalid header checksum [ 282.195425][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 282.219288][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 282.239572][ T5590] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 282.247288][ T3802] Bluetooth: (null): Invalid header checksum [ 282.266260][ T5365] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.291181][ T5365] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.334086][ T5365] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.355058][ T3802] Bluetooth: (null): Invalid header checksum [ 282.370351][ T5365] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.465259][ T3802] Bluetooth: (null): Invalid header checksum [ 282.574994][ T56] Bluetooth: (null): Invalid header checksum [ 282.685182][ T56] Bluetooth: (null): Invalid header checksum [ 282.738333][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.785020][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.851380][ T5590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.883909][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 282.932323][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.966306][ T5590] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.973308][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.997610][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 283.011991][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 283.105973][ C0] eth0: bad gso: type: 1, size: 1408 [ 283.140864][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 283.204867][ T5762] "syz.0.390" (5762) uses obsolete ecb(arc4) skcipher [ 283.897862][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 283.969315][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 283.988103][ T5765] netlink: 36 bytes leftover after parsing attributes in process `syz.4.313'. [ 284.015050][ T3802] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.022170][ T3802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.049290][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 284.058493][ T5770] dns_resolver: Unsupported content type (98) [ 284.062205][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 284.079082][ T3802] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.086329][ T3802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.132322][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 284.143111][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 284.170156][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 284.223152][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 284.272378][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 284.356643][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 284.457572][ T5775] netlink: 44 bytes leftover after parsing attributes in process `syz.0.392'. [ 284.518177][ T5775] loop0: detected capacity change from 0 to 512 [ 285.326036][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 285.348910][ T5775] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 285.359158][ T5775] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038 (0x7fffffff) [ 286.229565][ T4145] EXT4-fs (loop0): unmounting filesystem. [ 286.240169][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 286.302008][ T5590] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 286.359181][ T5590] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 286.552419][ T5785] loop4: detected capacity change from 0 to 8192 [ 286.597772][ T5785] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 286.614607][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 286.743507][ T5785] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 286.768453][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 286.855411][ T5796] "syz.1.396" (5796) uses obsolete ecb(arc4) skcipher [ 287.507825][ T5785] FAT-fs (loop4): Filesystem has been set read-only [ 287.548541][ T5785] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 287.572851][ T5794] fuse: Bad value for 'fd' [ 287.582789][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 287.616134][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 287.625252][ T5785] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 287.690844][ T5785] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 287.702847][ T5792] netlink: 'syz.0.395': attribute type 10 has an invalid length. [ 287.737522][ T5792] device macvlan0 entered promiscuous mode [ 287.779938][ T5792] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 287.780958][ T5785] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 287.803302][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 287.880628][ T5804] tap0: tun_chr_ioctl cmd 1074025675 [ 287.911925][ T5804] tap0: persist enabled [ 287.920125][ T5785] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 287.952964][ T5785] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 287.978210][ T5804] tap0: tun_chr_ioctl cmd 1074025675 [ 287.983922][ T5804] tap0: persist disabled [ 288.036736][ T5785] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 288.140921][ T5785] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 288.180978][ T5785] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 288.307942][ T27] audit: type=1800 audit(1723885297.302:10): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.394" name="file2" dev="loop4" ino=1048640 res=0 errno=0 [ 288.348454][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 288.572383][ T5818] loop1: detected capacity change from 0 to 2048 [ 288.635227][ T3648] Bluetooth: hci4: unexpected event 0x3b length: 31 > 10 [ 289.444195][ T5820] "syz.0.400" (5820) uses obsolete ecb(arc4) skcipher [ 289.498361][ T5818] loop1: p1 < > p4 [ 289.506395][ T5818] loop1: p4 size 8388608 extends beyond EOD, truncated [ 289.671837][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 289.693288][ T4831] udevd[4831]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 289.748219][ T4825] udevd[4825]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 289.776140][ T5590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.143795][ T5829] loop1: detected capacity change from 0 to 256 [ 290.202838][ T5590] device veth0_vlan entered promiscuous mode [ 290.259811][ T5829] FAT-fs (loop1): Unrecognized mount option "nnonumtail=1" or missing value [ 290.275124][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 290.354692][ T5832] "syz.0.402" (5832) uses obsolete ecb(arc4) skcipher [ 291.044928][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 291.120624][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 291.253588][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 291.500836][ T5836] loop0: detected capacity change from 0 to 128 [ 291.763929][ T5829] loop1: detected capacity change from 0 to 2048 [ 291.924729][ T5590] device veth1_vlan entered promiscuous mode [ 291.995158][ T5829] ext4: Unknown parameter 'measure' [ 292.165031][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 292.179066][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 292.306245][ T3834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 292.363219][ T3834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 292.408051][ T5839] netlink: 'syz.0.405': attribute type 2 has an invalid length. [ 292.541811][ T5590] device veth0_macvtap entered promiscuous mode [ 292.618403][ T5590] device veth1_macvtap entered promiscuous mode [ 292.831174][ T5590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.997397][ T5844] "syz.2.403" (5844) uses obsolete ecb(arc4) skcipher [ 293.381922][ T5590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.511292][ T5847] netlink: 'syz.1.406': attribute type 2 has an invalid length. [ 293.541514][ T5590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.580937][ T5590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.588164][ T5848] loop1: detected capacity change from 0 to 256 [ 293.702669][ T5590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.723495][ T5590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.744690][ T5590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.936638][ T5590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.974538][ T5590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.990752][ T5590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.023817][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.108579][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 294.140796][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 294.204411][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 294.356323][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 294.392848][ T5590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.478858][ T5858] "syz.4.407" (5858) uses obsolete ecb(arc4) skcipher [ 295.142121][ T5590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.178021][ T5590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.219840][ T5590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.261100][ T5590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.309313][ T5590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.338841][ T5590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.359605][ T5590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.377547][ T5590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.398296][ T5590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.448700][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.068117][ T3834] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 296.086971][ T3834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 296.173010][ T5590] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.204708][ T5590] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.233849][ T5590] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.284864][ T5876] "syz.0.412" (5876) uses obsolete ecb(arc4) skcipher [ 297.004005][ T5590] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.039254][ T3943] device hsr_slave_0 left promiscuous mode [ 297.088601][ T3943] device hsr_slave_1 left promiscuous mode [ 297.227182][ T3943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.259581][ T3943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.980040][ T3943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.047034][ T3943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.111518][ T3943] device bridge_slave_1 left promiscuous mode [ 298.142232][ T3943] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.233927][ T3943] device bridge_slave_0 left promiscuous mode [ 298.250238][ T3943] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.657849][ T5899] "syz.0.417" (5899) uses obsolete ecb(arc4) skcipher [ 298.993018][ T5903] "syz.1.418" (5903) uses obsolete ecb(arc4) skcipher [ 299.695049][ T3943] device veth1_macvtap left promiscuous mode [ 299.701128][ T3943] device veth0_macvtap left promiscuous mode [ 299.719188][ T3943] device veth1_vlan left promiscuous mode [ 299.725679][ T3943] device veth0_vlan left promiscuous mode [ 299.782284][ T5911] "syz.4.420" (5911) uses obsolete ecb(arc4) skcipher [ 300.042127][ T5915] "syz.1.421" (5915) uses obsolete ecb(arc4) skcipher [ 300.649025][ T27] audit: type=1326 audit(1723885309.682:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5907 comm="syz.0.422" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9053379e79 code=0x0 [ 300.783515][ T3943] bond3 (unregistering): Released all slaves [ 300.802382][ T3943] bond2 (unregistering): Released all slaves [ 300.841401][ T3943] bond1 (unregistering): Released all slaves [ 301.215297][ T27] audit: type=1326 audit(1723885310.272:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5924 comm="syz.1.424" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13bf979e79 code=0x0 [ 302.317567][ T5938] netlink: 56 bytes leftover after parsing attributes in process `syz.1.427'. [ 302.750934][ T5944] netlink: 'syz.4.428': attribute type 2 has an invalid length. [ 302.829355][ T3943] team0 (unregistering): Port device team_slave_1 removed [ 302.885954][ T5944] loop4: detected capacity change from 0 to 256 [ 303.009921][ T3943] team0 (unregistering): Port device team_slave_0 removed [ 303.118318][ T3943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.258200][ T3943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.056649][ T3943] bond0 (unregistering): Released all slaves [ 304.220180][ T5947] loop4: detected capacity change from 0 to 512 [ 304.384176][ T5947] 9pnet_fd: Insufficient options for proto=fd [ 304.526960][ T3816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.544402][ T3816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.611850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 304.623044][ T27] audit: type=1326 audit(1723885313.682:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5950 comm="syz.1.432" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13bf979e79 code=0x0 [ 304.664216][ T3816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.674673][ T22] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 304.695491][ T3816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.715485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 304.726822][ T5952] nullb0: [POWERTEC] p1 p2 p3 [ 304.803695][ T5952] nullb0: p1 start 1986356271 is beyond EOD, truncated [ 304.851650][ T5952] nullb0: p2 size 536871424 extends beyond EOD, truncated [ 304.860702][ T5952] nullb0: p3 start 1819635247 is beyond EOD, truncated [ 305.115461][ T5964] "syz.2.431" (5964) uses obsolete ecb(arc4) skcipher [ 305.305166][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 306.003003][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 306.065493][ T22] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 306.277760][ T22] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 306.293892][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.304090][ T22] usb 5-1: config 0 descriptor?? [ 306.324836][ T5947] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 306.407052][ T5981] "syz.2.433" (5981) uses obsolete ecb(arc4) skcipher [ 306.466711][ T5975] loop3: detected capacity change from 0 to 128 [ 306.839804][ T22] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 307.030046][ T22] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 307.059015][ T5975] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 307.104972][ C0] eth0: bad gso: type: 1, size: 1408 [ 307.145984][ T5975] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038 (0x7fffffff) [ 307.158762][ T27] audit: type=1326 audit(1723885316.222:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5984 comm="syz.1.437" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13bf979e79 code=0x0 [ 307.209145][ T22] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 307.247594][ T5989] loop1: detected capacity change from 0 to 256 [ 307.282677][ T27] audit: type=1326 audit(1723885316.342:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5972 comm="syz.3.435" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81c1979e79 code=0x0 [ 307.318478][ T22] usb 5-1: USB disconnect, device number 3 [ 307.370627][ T5989] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 307.446093][ T5991] netlink: 'syz.0.439': attribute type 2 has an invalid length. [ 307.984311][ T3899] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000953a) [ 308.052976][ T3899] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000953a) [ 308.382949][ T5996] loop4: detected capacity change from 0 to 2048 [ 308.513441][ T5996] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 309.322842][ T6007] "syz.0.444" (6007) uses obsolete ecb(arc4) skcipher [ 310.355523][ T3639] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 310.367033][ T3639] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 310.383055][ T3639] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 310.391229][ T3639] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 310.401491][ T3639] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 310.414846][ T3639] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 310.706427][ T6020] netlink: 'syz.0.446': attribute type 2 has an invalid length. [ 310.845781][ T5365] EXT4-fs (loop4): unmounting filesystem. [ 311.186815][ T6015] chnl_net:caif_netlink_parms(): no params data found [ 311.200023][ T6028] "syz.4.448" (6028) uses obsolete ecb(arc4) skcipher [ 311.395402][ T6015] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.424098][ T6015] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.433798][ T6015] device bridge_slave_0 entered promiscuous mode [ 311.443056][ T6015] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.452973][ T6015] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.467057][ T6015] device bridge_slave_1 entered promiscuous mode [ 311.591984][ T6015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.637504][ T6015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.697726][ T6015] team0: Port device team_slave_0 added [ 311.725050][ T6015] team0: Port device team_slave_1 added [ 311.779005][ T6015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.786360][ T6015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.814834][ T6015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.836924][ T6015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.844434][ T6015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.872832][ T6015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.946510][ T6033] netlink: 24 bytes leftover after parsing attributes in process `syz.2.449'. [ 312.039822][ T6033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.449'. [ 312.066857][ T6015] device hsr_slave_0 entered promiscuous mode [ 312.093431][ T6015] device hsr_slave_1 entered promiscuous mode [ 312.115298][ T6015] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.133207][ T6015] Cannot create hsr debugfs directory [ 312.153975][ T6033] netlink: 164 bytes leftover after parsing attributes in process `syz.2.449'. [ 312.474785][ T3639] Bluetooth: hci4: command tx timeout [ 312.743177][ T6048] netlink: 25 bytes leftover after parsing attributes in process `syz.2.452'. [ 313.041816][ T6052] "syz.0.454" (6052) uses obsolete ecb(arc4) skcipher [ 313.532955][ T6051] tty tty20: ldisc open failed (-12), clearing slot 19 [ 314.638030][ T3639] Bluetooth: hci4: command tx timeout [ 315.266721][ T6089] "syz.4.459" (6089) uses obsolete ecb(arc4) skcipher [ 315.529246][ T6015] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 315.571420][ T6015] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 315.652415][ T6015] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 315.680727][ T6015] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 316.715961][ T3639] Bluetooth: hci4: command tx timeout [ 316.722989][ T3943] device hsr_slave_0 left promiscuous mode [ 316.735933][ T3943] device hsr_slave_1 left promiscuous mode [ 316.774838][ T3943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.794810][ T3639] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 316.803526][ T3639] Bluetooth: hci5: Injecting HCI hardware error event [ 316.813789][ T3943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.823368][ T3648] Bluetooth: hci5: hardware error 0x00 [ 316.843377][ T3943] device bridge_slave_1 left promiscuous mode [ 316.850589][ T3943] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.860499][ T3943] device bridge_slave_0 left promiscuous mode [ 316.867230][ T3943] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.881968][ T3943] bond4 (unregistering): Released all slaves [ 316.897167][ T3943] bond3 (unregistering): Released all slaves [ 316.910846][ T3943] bond2 (unregistering): Released all slaves [ 316.926995][ T3943] bond1 (unregistering): Released all slaves [ 317.040131][ T6110] netlink: 'syz.4.462': attribute type 2 has an invalid length. [ 317.117069][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.123384][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.354418][ T6110] loop4: detected capacity change from 0 to 256 [ 317.559706][ T3642] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 317.571490][ T3642] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 317.580553][ T3642] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 317.592398][ T3642] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 317.600109][ T3642] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 317.609164][ T3642] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 318.331817][ T6132] "syz.2.465" (6132) uses obsolete ecb(arc4) skcipher [ 318.796560][ T3639] Bluetooth: hci4: command tx timeout [ 318.884947][ T3648] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 319.302785][ T3943] team0 (unregistering): Port device team_slave_1 removed [ 319.686382][ T3648] Bluetooth: hci6: command tx timeout [ 320.236108][ T3943] team0 (unregistering): Port device team_slave_0 removed [ 320.326998][ T3943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.808704][ T3943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.761969][ T3648] Bluetooth: hci6: command tx timeout [ 322.188190][ T3943] bond0 (unregistering): Released all slaves [ 322.270808][ T6104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.461'. [ 322.347111][ T6015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.450614][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 322.585529][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 322.637032][ T6015] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.686818][ T6154] "syz.4.471" (6154) uses obsolete ecb(arc4) skcipher [ 322.703781][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 322.713880][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 322.723965][ T3802] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.731144][ T3802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.758989][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 322.768838][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 322.778595][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 322.787950][ T3802] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.795150][ T3802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.805418][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 322.851884][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 322.891977][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 322.906247][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 322.933738][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 322.942059][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 322.954086][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 322.970837][ T6015] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 322.994961][ T6015] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 323.024761][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 323.043581][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 323.053458][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 323.062789][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 323.071948][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 323.149927][ T6124] chnl_net:caif_netlink_parms(): no params data found [ 323.518864][ T6124] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.574764][ T6124] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.637878][ T6124] device bridge_slave_0 entered promiscuous mode [ 323.672322][ T6124] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.699852][ T6124] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.716169][ T6124] device bridge_slave_1 entered promiscuous mode [ 323.778292][ T6124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.802023][ T6124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.835185][ T3648] Bluetooth: hci6: command tx timeout [ 323.868825][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 323.884443][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 323.935075][ T6015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.004247][ T6124] team0: Port device team_slave_0 added [ 324.010253][ T6181] xt_CT: You must specify a L4 protocol and not use inversions on it [ 324.097879][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 324.124815][ T6177] xt_CT: No such helper "pptp" [ 324.126843][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 324.186522][ T6124] team0: Port device team_slave_1 added [ 324.199955][ T6181] netlink: 'syz.4.476': attribute type 27 has an invalid length. [ 324.222399][ T6181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.476'. [ 324.487644][ T6186] netlink: 'syz.0.479': attribute type 2 has an invalid length. [ 325.082750][ T6181] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.090320][ T6181] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.930566][ T3648] Bluetooth: hci6: command tx timeout [ 325.932535][ T6181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.994202][ T6181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.444404][ T6181] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.453671][ T6181] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.463034][ T6181] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.472999][ T6181] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.678163][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 326.725286][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 326.792739][ T6015] device veth0_vlan entered promiscuous mode [ 326.801660][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 326.812450][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 326.842850][ T6124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.851492][ T6124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.029837][ T6124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.106127][ T6207] "syz.4.483" (6207) uses obsolete ecb(arc4) skcipher [ 327.810724][ T6015] device veth1_vlan entered promiscuous mode [ 327.838299][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 327.852524][ T27] audit: type=1326 audit(1723885336.912:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz.0.484" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9053379e79 code=0x0 [ 327.880663][ T6124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.902399][ T6124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.993376][ T6124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.105114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 328.121358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 328.419538][ T6221] overlayfs: workdir and upperdir must reside under the same mount [ 329.689339][ T6124] device hsr_slave_0 entered promiscuous mode [ 329.725691][ T6124] device hsr_slave_1 entered promiscuous mode [ 329.740227][ T6124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 329.758910][ T6124] Cannot create hsr debugfs directory [ 329.804985][ T6015] device veth0_macvtap entered promiscuous mode [ 329.825846][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 329.925499][ T6015] device veth1_macvtap entered promiscuous mode [ 330.104058][ T6015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.126117][ T6015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.142031][ T6015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.152764][ T6015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.170892][ T6015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.182638][ T6015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.201443][ T6015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.271313][ T6015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.296880][ T6015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.375017][ T6236] "syz.4.491" (6236) uses obsolete ecb(arc4) skcipher [ 331.075535][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 331.085773][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 331.138143][ T6015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.160756][ T6015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.292287][ T6015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.312556][ T6015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.322706][ T6015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.214053][ T6015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.232361][ T6015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.236889][ T6243] netlink: 'syz.0.492': attribute type 2 has an invalid length. [ 332.409349][ T6249] "syz.4.494" (6249) uses obsolete ecb(arc4) skcipher [ 332.575249][ T6015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.605246][ T6015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.636522][ T3943] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 332.650604][ T3943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 332.672310][ T6015] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.684072][ T6015] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.693063][ T6015] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.715120][ T6015] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.921403][ T6124] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.165636][ T6124] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.253301][ T3943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.285027][ T3943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.333973][ T6124] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.427438][ T3943] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 333.501221][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'. [ 333.514258][ T6124] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.608798][ T3943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.618170][ T3943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.642658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 334.048026][ T6264] binder: Bad value for 'max' [ 335.022216][ T6269] loop1: detected capacity change from 0 to 256 [ 335.030923][ T27] audit: type=1326 audit(1723885344.092:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.4.498" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7facc1179e79 code=0x0 [ 335.101062][ T6124] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 335.115945][ T4825] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 335.178706][ T6124] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 335.231455][ T6124] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 335.674098][ T6124] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 336.233348][ T6283] "syz.4.501" (6283) uses obsolete ecb(arc4) skcipher [ 336.422364][ T6124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.969339][ T6124] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.041183][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 337.616767][ T6294] "syz.4.505" (6294) uses obsolete ecb(arc4) skcipher [ 337.911808][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 338.006092][ T6288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.503'. [ 338.197241][ C0] eth0: bad gso: type: 1, size: 1408 [ 338.210391][ T3834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 338.275502][ T3834] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 338.295314][ T3834] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.302495][ T3834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.399333][ T6305] loop4: detected capacity change from 0 to 512 [ 338.577126][ T3834] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 338.604100][ T3834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 338.617591][ T6305] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 338.626811][ T6305] ext4 filesystem being mounted at /30/bus supports timestamps until 2038 (0x7fffffff) [ 338.927723][ T6313] syz.4.508 uses obsolete (PF_INET,SOCK_PACKET) [ 339.397962][ T3834] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 339.442369][ T3834] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.449561][ T3834] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.612175][ T3834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 339.621661][ T3834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 339.651865][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 339.681698][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 339.751636][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 339.775644][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 339.832460][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 339.864129][ T5365] EXT4-fs (loop4): unmounting filesystem. [ 339.945670][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 340.007461][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 340.071780][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 340.135710][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 340.189705][ T6124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 340.506029][ T5155] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 340.914748][ T5155] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 341.009293][ T5155] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 341.062444][ T5155] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 341.105381][ T5155] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.105736][ T6338] netlink: 'syz.1.512': attribute type 2 has an invalid length. [ 341.214922][ T6329] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 341.240784][ T6345] netlink: 'syz.0.513': attribute type 2 has an invalid length. [ 341.247804][ T6341] loop1: detected capacity change from 0 to 256 [ 341.324024][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 341.338445][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 341.388130][ T6124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.515641][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 341.536821][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 341.659389][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 341.678945][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 341.706708][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 341.718029][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 341.731941][ T6124] device veth0_vlan entered promiscuous mode [ 342.058557][ T6124] device veth1_vlan entered promiscuous mode [ 342.210552][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 342.228916][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 342.275899][ T6124] device veth0_macvtap entered promiscuous mode [ 342.340364][ T6124] device veth1_macvtap entered promiscuous mode [ 342.405137][ T6124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.425055][ T5155] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 342.433406][ T5155] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input8 [ 342.455281][ T6124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.515334][ T6124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.530442][ T5155] usb 5-1: USB disconnect, device number 4 [ 342.536373][ C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 342.569349][ T6124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.624670][ T6124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.639427][ T6124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.653694][ T6124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.669275][ T6124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.694781][ T6124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.709656][ T6124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.736798][ T6124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.973379][ T6357] loop1: detected capacity change from 0 to 256 [ 343.000980][ T6357] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 344.584404][ T6360] "syz.0.517" (6360) uses obsolete ecb(arc4) skcipher [ 344.628329][ T6363] syz.1.516: attempt to access beyond end of device [ 344.628329][ T6363] loop1: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 344.778574][ T6363] syz.1.516: attempt to access beyond end of device [ 344.778574][ T6363] loop1: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 344.792745][ T6363] syz.1.516: attempt to access beyond end of device [ 344.792745][ T6363] loop1: rw=0, sector=280, nr_sectors = 8 limit=256 [ 344.932329][ T27] audit: type=1800 audit(1723885353.872:18): pid=6363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.516" name="file1" dev="loop1" ino=1048653 res=0 errno=0 [ 345.042547][ T27] audit: type=1800 audit(1723885353.872:19): pid=6365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.516" name="file1" dev="loop1" ino=1048653 res=0 errno=0 [ 347.527202][ C0] eth0: bad gso: type: 1, size: 1408 [ 347.693292][ T6384] loop1: detected capacity change from 0 to 512 [ 347.724823][ T6384] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 347.771962][ T6384] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 347.803181][ T6384] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.522: invalid indirect mapped block 1 (level 1) [ 347.847116][ T6384] EXT4-fs (loop1): 1 truncate cleaned up [ 347.852840][ T6384] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 347.862315][ T27] audit: type=1326 audit(1723885356.922:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6381 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc1179e79 code=0x7fc00000 [ 347.885198][ T27] audit: type=1326 audit(1723885356.922:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6381 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7facc1179e79 code=0x7fc00000 [ 347.938968][ T6382] loop4: detected capacity change from 0 to 128 [ 347.999643][ T6382] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 348.016533][ T6382] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 348.310049][ T6393] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.522: corrupted in-inode xattr [ 348.342552][ T6394] EXT4-fs error (device loop1): ext4_lookup:1848: inode #2: comm syz.1.522: bad inode number: 1 [ 348.367053][ T6393] EXT4-fs error (device loop1): ext4_lookup:1848: inode #2: comm syz.1.522: bad inode number: 1 [ 348.443347][ T6394] EXT4-fs error (device loop1): ext4_lookup:1848: inode #2: comm syz.1.522: bad inode number: 1 [ 348.462012][ T6394] overlayfs: failed to resolve './file2': -117 [ 348.515866][ T27] audit: type=1326 audit(1723885357.542:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6381 comm="syz.4.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc1179e79 code=0x7fc00000 [ 349.928302][ T6404] "syz.0.526" (6404) uses obsolete ecb(arc4) skcipher [ 350.962966][ T6410] "syz.0.527" (6410) uses obsolete ecb(arc4) skcipher [ 352.014283][ T6418] "syz.0.528" (6418) uses obsolete ecb(arc4) skcipher [ 352.659695][ T3639] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 352.669914][ T3639] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 352.678558][ T3639] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 352.716725][ T3642] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 352.724231][ T3642] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 352.731785][ T3642] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 353.124563][ T3685] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 353.484808][ T3685] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 353.504552][ T3685] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 353.524574][ T3685] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 353.533647][ T3685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.574870][ T6426] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 353.803447][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 353.822810][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 353.839715][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 353.851047][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 353.861655][ T6124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.872756][ T6124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.883414][ T6124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.904262][ T6124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.914884][ T6124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.944486][ T6124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.954415][ T6124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.977930][ T6124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.992477][ T6124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.015554][ T6124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.038310][ T6124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.065348][ T6124] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.074206][ T6124] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.083921][ T6124] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.125828][ T6124] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.158421][ T6015] EXT4-fs (loop1): unmounting filesystem. [ 354.176064][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 354.228050][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 354.825677][ T3685] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 354.885346][ T3642] Bluetooth: hci7: command tx timeout [ 354.924661][ T3685] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input9 [ 355.705581][ T3685] usb 1-1: USB disconnect, device number 6 [ 355.714510][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 355.776087][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.824893][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.910902][ T6435] loop1: detected capacity change from 0 to 2048 [ 355.942341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 355.968293][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.992876][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.066725][ T6435] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 356.104135][ T3834] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 356.219688][ T27] audit: type=1800 audit(1723885365.262:23): pid=6439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.534" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 356.342882][ T6015] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh [ 356.367479][ T6421] chnl_net:caif_netlink_parms(): no params data found [ 356.378081][ T6015] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh [ 356.656563][ T6454] netlink: 'syz.4.535': attribute type 2 has an invalid length. [ 356.689084][ T6454] loop4: detected capacity change from 0 to 256 [ 356.999651][ T3642] Bluetooth: hci7: command tx timeout [ 357.857032][ T6421] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.864411][ T6421] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.894841][ T6421] device bridge_slave_0 entered promiscuous mode [ 358.146909][ T6464] "syz.0.538" (6464) uses obsolete ecb(arc4) skcipher [ 358.917849][ T6421] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.926851][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.956317][ T6421] device bridge_slave_1 entered promiscuous mode [ 359.036940][ T3642] Bluetooth: hci7: command tx timeout [ 359.111305][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.176280][ T6421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.099028][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.148724][ T6421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.310182][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.385649][ T6421] team0: Port device team_slave_0 added [ 360.409828][ T6421] team0: Port device team_slave_1 added [ 360.424031][ T3684] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 360.508411][ T3648] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 360.519383][ T3648] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 360.528211][ T3648] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 360.560387][ T3648] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 360.574818][ T3648] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 360.582376][ T3648] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 360.612526][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.725305][ T6421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.764557][ T6421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.828046][ T6421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.844713][ T3684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.884563][ T3684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.911167][ T3684] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 360.943809][ T6421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.954803][ T6421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.974510][ T3684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.989847][ T6421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.043429][ T3684] usb 5-1: config 0 descriptor?? [ 361.114784][ T3642] Bluetooth: hci7: command tx timeout [ 361.291363][ T6421] device hsr_slave_0 entered promiscuous mode [ 361.308312][ T6421] device hsr_slave_1 entered promiscuous mode [ 361.328309][ T6421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 361.347837][ T6421] Cannot create hsr debugfs directory [ 361.615368][ T3684] hid (null): nested delimiters [ 361.656431][ T3684] hid-led 0003:27B8:01ED.0002: nested delimiters [ 361.662821][ T3684] hid-led 0003:27B8:01ED.0002: item 0 1 2 10 parsing failed [ 361.735356][ T3684] hid-led: probe of 0003:27B8:01ED.0002 failed with error -22 [ 361.910534][ T27] audit: type=1326 audit(1723885370.972:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6470 comm="syz.4.542" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7facc1179e79 code=0x0 [ 362.126450][ T6473] chnl_net:caif_netlink_parms(): no params data found [ 362.253196][ T6421] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.415322][ T6421] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.547682][ T6421] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.634625][ T3642] Bluetooth: hci4: command tx timeout [ 362.647020][ T6473] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.657578][ T6473] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.694832][ T6473] device bridge_slave_0 entered promiscuous mode [ 362.747811][ T6421] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.832209][ T6473] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.843322][ T6473] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.860893][ T6473] device bridge_slave_1 entered promiscuous mode [ 362.953782][ T6473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.028056][ T6473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.146398][ T5155] usb 5-1: USB disconnect, device number 5 [ 363.314886][ T6473] team0: Port device team_slave_0 added [ 363.475975][ T6473] team0: Port device team_slave_1 added [ 363.577668][ T6421] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 364.249799][ T6473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.296677][ T6473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.467944][ T6473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.469275][ T6421] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 364.481863][ T6421] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 364.629006][ T6473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.629024][ T6473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.629048][ T6473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.633171][ T6421] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 364.723714][ T6473] device hsr_slave_0 entered promiscuous mode [ 364.725701][ T3648] Bluetooth: hci4: command tx timeout [ 364.728062][ T6473] device hsr_slave_1 entered promiscuous mode [ 364.729946][ T6524] hub 9-0:1.0: USB hub found [ 364.730989][ T6524] hub 9-0:1.0: 8 ports detected [ 364.754751][ T6473] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.754846][ T6473] Cannot create hsr debugfs directory [ 364.758546][ T9] device hsr_slave_0 left promiscuous mode [ 364.759226][ T9] device hsr_slave_1 left promiscuous mode [ 364.812666][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.812708][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.813163][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.813183][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.815696][ T9] device bridge_slave_1 left promiscuous mode [ 364.815796][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.820500][ T9] device bridge_slave_0 left promiscuous mode [ 364.820586][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.891264][ T6522] loop4: detected capacity change from 0 to 2048 [ 364.961332][ T9] device veth1_macvtap left promiscuous mode [ 364.961396][ T9] device veth0_macvtap left promiscuous mode [ 364.961509][ T9] device veth1_vlan left promiscuous mode [ 364.961602][ T9] device veth0_vlan left promiscuous mode [ 365.015107][ T6522] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 365.284765][ T3648] Bluetooth: hci2: command 0x0406 tx timeout [ 365.355336][ T3685] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 365.431797][ T9] bond1 (unregistering): Released all slaves [ 365.509988][ T5365] EXT4-fs (loop4): unmounting filesystem. [ 365.653536][ T6540] loop4: detected capacity change from 0 to 512 [ 365.696985][ T6540] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 365.706924][ T6540] ext4 filesystem being mounted at /39/bus supports timestamps until 2038 (0x7fffffff) [ 365.718155][ T3685] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 365.746287][ T3685] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 365.768067][ T3685] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 365.790740][ T3685] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 365.814554][ T3685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.975154][ T3685] usb 1-1: config 0 descriptor?? [ 365.994999][ T6527] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 366.503839][ T3685] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 366.562015][ T3685] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 366.805827][ T3642] Bluetooth: hci4: command tx timeout [ 367.315736][ T9] team0 (unregistering): Port device team_slave_1 removed [ 367.334685][ T3685] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 367.438846][ C0] eth0: bad gso: type: 1, size: 1408 [ 367.446473][ T5365] EXT4-fs (loop4): unmounting filesystem. [ 367.692908][ T9] team0 (unregistering): Port device team_slave_0 removed [ 367.829411][ T6556] input: syz1 as /devices/virtual/input/input11 [ 368.350329][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.679103][ T3684] usb 1-1: reset high-speed USB device number 7 using dummy_hcd [ 368.809014][ T6560] "syz.4.550" (6560) uses obsolete ecb(arc4) skcipher [ 368.862359][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.943267][ T3639] Bluetooth: hci4: command tx timeout [ 369.516282][ T6563] loop4: detected capacity change from 0 to 512 [ 369.624057][ T6563] EXT4-fs (loop4): 1 orphan inode deleted [ 369.645901][ T6563] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 369.665353][ T6563] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038 (0x7fffffff) [ 370.036069][ T27] audit: type=1804 audit(1723885379.092:25): pid=6568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.552" name="/newroot/42/file1/bus" dev="loop4" ino=18 res=1 errno=0 [ 370.376490][ T6562] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.552: Invalid block bitmap block 0 in block_group 0 [ 370.412425][ T6562] EXT4-fs (loop4): Remounting filesystem read-only [ 370.419321][ T6562] EXT4-fs error (device loop4): ext4_discard_preallocations:5122: comm syz.4.552: Error -117 reading block bitmap for 0 [ 370.514262][ T27] audit: type=1804 audit(1723885379.132:26): pid=6568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.552" name="/newroot/42/file1/bus" dev="loop4" ino=18 res=1 errno=0 [ 370.536516][ T5365] EXT4-fs error (device loop4): ext4_map_blocks:634: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 370.594616][ T27] audit: type=1804 audit(1723885379.142:27): pid=6568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.552" name="/newroot/42/file1/bus" dev="loop4" ino=18 res=1 errno=0 [ 370.668749][ T5885] EXT4-fs (loop4): unmounting filesystem. [ 371.053342][ T9] bond0 (unregistering): Released all slaves [ 371.678127][ T6421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.715055][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 371.749001][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 371.790994][ T6421] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.844148][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 371.885335][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 371.907296][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.914634][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.965589][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 372.034909][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 372.054030][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 372.138660][ T6581] Bluetooth: (null): Invalid header checksum [ 372.141483][ T3816] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.151875][ T3816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.318584][ T3759] Bluetooth: (null): Invalid header checksum [ 372.545724][ T22] usb 1-1: USB disconnect, device number 7 [ 373.634604][ T3759] Bluetooth: (null): Invalid header checksum [ 376.637070][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 376.735530][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 376.868059][ C0] eth0: bad gso: type: 1, size: 1408 [ 376.957689][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 376.977233][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 377.003389][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 377.038555][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 377.176227][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 377.251811][ T3642] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 377.263807][ T3648] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 377.268578][ T6421] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 377.275900][ T3642] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 377.408842][ T4488] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 378.055517][ T6421] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 378.097875][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 378.122156][ T3642] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 378.130044][ T3642] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 378.133173][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 378.150669][ T3642] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 378.165947][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 378.182033][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 378.191850][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 378.434740][ T4488] usb 4-1: Using ep0 maxpacket: 32 [ 378.558273][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.564610][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.564657][ T4488] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 378.764854][ T4488] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 378.774384][ T4488] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.793524][ T4488] usb 4-1: Product: syz [ 378.803609][ T4488] usb 4-1: Manufacturer: syz [ 378.813743][ T4488] usb 4-1: SerialNumber: syz [ 378.875718][ T4488] usb 4-1: config 0 descriptor?? [ 378.894775][ T6587] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 378.955154][ T4488] hub 4-1:0.0: bad descriptor, ignoring hub [ 378.961095][ T4488] hub: probe of 4-1:0.0 failed with error -5 [ 379.034062][ T6609] "syz.0.560" (6609) uses obsolete ecb(arc4) skcipher [ 380.920952][ T3639] Bluetooth: hci2: command tx timeout [ 380.996920][ T4488] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12 [ 382.085973][ T3679] usb 4-1: USB disconnect, device number 6 [ 382.164526][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 382.384802][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 382.444780][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 382.491343][ T6421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.985817][ T3642] Bluetooth: hci2: command tx timeout [ 383.374939][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 383.384000][ T3963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 383.610085][ T6592] chnl_net:caif_netlink_parms(): no params data found [ 383.634206][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 383.686429][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 383.734974][ T6421] device veth0_vlan entered promiscuous mode [ 383.754632][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 383.785434][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 383.826538][ T6421] device veth1_vlan entered promiscuous mode [ 383.943571][ T6421] device veth0_macvtap entered promiscuous mode [ 383.998042][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 384.025428][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 384.073427][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 384.272107][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 384.290906][ T6421] device veth1_macvtap entered promiscuous mode [ 384.324819][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 384.349695][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 385.034914][ T3642] Bluetooth: hci2: command tx timeout [ 385.108799][ T6592] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.157053][ T6592] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.223312][ T6592] device bridge_slave_0 entered promiscuous mode [ 385.234082][ T6473] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 385.314583][ T6656] Bluetooth: (null): Invalid header checksum [ 385.765414][ T3642] Bluetooth: hci1: command 0x0406 tx timeout [ 387.125162][ T3642] Bluetooth: hci2: command tx timeout [ 389.674813][ T6592] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.681958][ T6592] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.725838][ T6592] device bridge_slave_1 entered promiscuous mode [ 389.739998][ T6473] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 389.762119][ T6473] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 389.828400][ T6421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.894625][ T6421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.924609][ T6421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.045908][ T6421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.103754][ T6421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.134795][ T6421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.154174][ T6421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.475194][ T6421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.710468][ T6421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.914587][ T6421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.494639][ T6421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.600040][ T6473] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 391.635352][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 391.665566][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 391.697818][ T6421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.720368][ T6421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.736934][ T6421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.754290][ T6421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.764961][ T6421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.775879][ T6421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.786124][ T6421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.801997][ T6421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.812258][ T6421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.826747][ T6421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.839625][ T6421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.854397][ T6592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.879218][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 391.891468][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 391.913597][ T6421] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.932623][ T6421] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.952847][ T6421] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.967756][ T6421] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.995316][ T6592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.166169][ T6592] team0: Port device team_slave_0 added [ 392.210638][ T6592] team0: Port device team_slave_1 added [ 392.294823][ T3759] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.303203][ T3759] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.361362][ T6473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.386987][ T6592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.404175][ T6592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.461218][ T6592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.491791][ T3834] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 392.534122][ T6592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.541272][ T6592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.572532][ T6592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.604321][ T3834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 392.616378][ T3834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 392.640482][ T6473] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.664387][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.690389][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.782987][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 392.815559][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 392.865504][ T3802] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.873101][ T3802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.914854][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 392.945687][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 392.995171][ T3802] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.002384][ T3802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.037577][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 393.088169][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 393.112934][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 393.124837][ T3642] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 393.132690][ T3639] Bluetooth: hci5: command 0x1003 tx timeout [ 393.819434][ T6592] device hsr_slave_0 entered promiscuous mode [ 393.889237][ T6592] device hsr_slave_1 entered promiscuous mode [ 393.921598][ T6592] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 393.951918][ T6592] Cannot create hsr debugfs directory [ 394.417994][ T6714] MPTCP: kernel_bind error, err=-22 [ 395.032646][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 395.220098][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 395.246900][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 395.339670][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 396.119663][ T6710] device bridge1 entered promiscuous mode [ 396.274618][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 396.283851][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 396.315902][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 396.329589][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 396.366290][ T6473] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 396.513291][ T6740] Bluetooth: (null): Invalid header checksum [ 397.893345][ T6473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 398.973472][ T6733] fuse: Bad value for 'fd' [ 398.992838][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 399.011916][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 399.105159][ T6738] netlink: 'syz.2.575': attribute type 10 has an invalid length. [ 399.216094][ T6738] device macvlan0 entered promiscuous mode [ 399.343219][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 400.424882][ T6757] input: syz0 as /devices/virtual/input/input13 [ 401.328505][ T6738] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 401.614804][ T3717] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 401.835332][ T9] tipc: Left network mode [ 401.864755][ T3717] usb 4-1: Using ep0 maxpacket: 16 [ 401.960156][ T27] audit: type=1326 audit(1723885411.022:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.2.584" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb5a1b79e79 code=0x0 [ 402.158940][ T3717] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 402.182486][ T3717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.207701][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 402.233241][ T3717] usb 4-1: Product: syz [ 402.238222][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 402.266409][ T3717] usb 4-1: Manufacturer: syz [ 402.271056][ T3717] usb 4-1: SerialNumber: syz [ 402.304300][ T3717] r8152-cfgselector 4-1: config 0 descriptor?? [ 402.359093][ T6473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.520412][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 402.557059][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 402.667537][ T3717] r8152-cfgselector 4-1: Unknown version 0x0000 [ 403.230387][ T6473] device veth0_vlan entered promiscuous mode [ 403.296626][ T3717] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 403.308610][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 403.321799][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 403.421924][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 403.439137][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 403.458851][ T6473] device veth1_vlan entered promiscuous mode [ 403.594528][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 403.605591][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 403.629009][ T3625] usb 4-1: USB disconnect, device number 7 [ 403.648621][ T6592] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 403.648930][ T3802] usb 4-1: config 0 descriptor?? [ 404.823517][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 404.845350][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 405.662346][ T6818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.589'. [ 405.704767][ T6592] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 405.779171][ T6592] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 405.976898][ T6473] device veth0_macvtap entered promiscuous mode [ 406.055034][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 406.144288][ T6592] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 406.178367][ T6473] device veth1_macvtap entered promiscuous mode [ 408.231024][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.257101][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.274485][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.314551][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.324403][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.343936][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.356901][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.384486][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.394343][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.414508][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.424370][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.475791][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.506865][ T6473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.686555][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 408.714106][ T6843] fuse: Bad value for 'fd' [ 408.723536][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 408.750707][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.780665][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.821133][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.860409][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.883675][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.897113][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.907413][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.931489][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.950896][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.971542][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.991599][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.013266][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.040194][ T6473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.081152][ T6850] netlink: 'syz.3.593': attribute type 10 has an invalid length. [ 409.096281][ T6850] device macvlan0 entered promiscuous mode [ 409.166820][ T6850] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 409.384679][ T6851] netlink: 16 bytes leftover after parsing attributes in process `syz.2.595'. [ 409.435903][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 409.495448][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 409.515938][ T6473] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.530000][ T6473] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.559730][ T6473] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.591502][ T6473] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.910843][ T6592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.982118][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 410.015409][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 410.056499][ T6592] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.090164][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.111026][ T9] device hsr_slave_0 left promiscuous mode [ 410.118088][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.128199][ T9] device hsr_slave_1 left promiscuous mode [ 410.148063][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.163031][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.173525][ T9] device bridge_slave_1 left promiscuous mode [ 410.181200][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.283834][ T9] device bridge_slave_0 left promiscuous mode [ 410.305840][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.332775][ T9] device hsr_slave_0 left promiscuous mode [ 410.344058][ T3648] Bluetooth: hci6: SCO packet for unknown connection handle 1032 [ 410.373193][ T9] device hsr_slave_1 left promiscuous mode [ 410.552412][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.566200][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.751889][ T3648] Bluetooth: Unexpected continuation frame (len 10) [ 411.195783][ T6884] capability: warning: `syz.0.599' uses 32-bit capabilities (legacy support in use) [ 411.210553][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.250078][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.258664][ T6880] 9pnet_fd: Insufficient options for proto=fd [ 411.270022][ T9] device bridge_slave_1 left promiscuous mode [ 411.287144][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.311053][ T9] device bridge_slave_0 left promiscuous mode [ 411.321630][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.387100][ T9] device veth1_macvtap left promiscuous mode [ 411.396102][ T9] device veth0_macvtap left promiscuous mode [ 411.408584][ T9] device veth1_vlan left promiscuous mode [ 411.425879][ T9] device veth0_vlan left promiscuous mode [ 411.669109][ T9] bond1 (unregistering): Released all slaves [ 412.956343][ T9] team0 (unregistering): Port device team_slave_1 removed [ 413.477148][ T9] team0 (unregistering): Port device team_slave_0 removed [ 413.895645][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.964970][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.831028][ T9] bond0 (unregistering): Released all slaves [ 414.916276][ T51] Bluetooth: (null): Invalid header checksum [ 414.922684][ T51] Bluetooth: (null): Invalid header checksum [ 414.948223][ T9] bond1 (unregistering): Released all slaves [ 415.032153][ T11] Bluetooth: (null): Invalid header checksum [ 415.134885][ T34] Bluetooth: (null): Invalid header checksum [ 415.251322][ T3816] Bluetooth: (null): Invalid header checksum [ 415.355035][ T11] Bluetooth: (null): Invalid header checksum [ 415.688049][ T9] team0 (unregistering): Port device team_slave_1 removed [ 415.786842][ T9] team0 (unregistering): Port device team_slave_0 removed [ 415.897563][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.953211][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.586264][ T9] bond0 (unregistering): Released all slaves [ 416.721364][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 416.733306][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 416.762418][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 416.772848][ T3759] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.780011][ T3759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.789281][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 416.802521][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 416.830093][ T3759] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.837384][ T3759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.854894][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 416.895420][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 416.954504][ T6909] bond_slave_0: mtu less than device minimum [ 416.990650][ T6912] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 417.057425][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 417.075990][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 417.136024][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 417.155436][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 417.164276][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 417.200980][ T6592] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 417.235274][ T6592] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 417.285604][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 417.308326][ T3759] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.312124][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 417.330153][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 417.339694][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 417.344299][ T3759] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.351661][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 417.371648][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 417.390151][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 417.558341][ T6931] loop1: detected capacity change from 0 to 512 [ 417.621925][ T6931] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 417.642012][ T6931] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.541: invalid indirect mapped block 8 (level 2) [ 417.664524][ T6931] EXT4-fs (loop1): Remounting filesystem read-only [ 417.671971][ T6931] EXT4-fs (loop1): 1 truncate cleaned up [ 417.695539][ T6931] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 418.658534][ T6473] EXT4-fs (loop1): unmounting filesystem. [ 418.783405][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 418.805112][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 418.837324][ T6592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.023194][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.614'. [ 419.636152][ T6966] netlink: 'syz.1.616': attribute type 3 has an invalid length. [ 419.655279][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 419.675452][ T6966] netlink: 48 bytes leftover after parsing attributes in process `syz.1.616'. [ 419.685447][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 419.753368][ T6967] netlink: 24 bytes leftover after parsing attributes in process `syz.0.617'. [ 419.775021][ T6966] netlink: 16 bytes leftover after parsing attributes in process `syz.1.616'. [ 419.940502][ T6966] netlink: 16 bytes leftover after parsing attributes in process `syz.1.616'. [ 419.967821][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.616'. [ 420.024229][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 420.040520][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 420.075473][ T6592] device veth0_vlan entered promiscuous mode [ 420.096443][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 420.113187][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 420.129222][ T6592] device veth1_vlan entered promiscuous mode [ 420.182233][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 420.228547][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 420.251018][ T6592] device veth0_macvtap entered promiscuous mode [ 420.274489][ T3625] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 420.316574][ T6592] device veth1_macvtap entered promiscuous mode [ 420.416206][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.445182][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.480637][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.514562][ T3625] usb 4-1: Using ep0 maxpacket: 32 [ 420.521128][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.557821][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.585711][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.632609][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.654644][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.674923][ T3625] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 420.684675][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.755205][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.755462][ T6978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.619'. [ 420.822944][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.863568][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.900086][ T6592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.904721][ T3625] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=cb.c8 [ 420.918114][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 420.931762][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 420.940706][ T3625] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.961571][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 420.977596][ T3625] usb 4-1: Product: syz [ 420.990791][ T3625] usb 4-1: Manufacturer: syz [ 421.000236][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 421.014554][ T3625] usb 4-1: SerialNumber: syz [ 421.028091][ T3625] usb 4-1: config 0 descriptor?? [ 421.045366][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.084655][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.139763][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.170912][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.204667][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.247983][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.301770][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.364277][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.374284][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.854885][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.996748][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.064752][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.179136][ T6592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.305509][ T6592] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.314732][ T3648] Bluetooth: hci4: command 0x0406 tx timeout [ 422.360567][ T6592] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.056672][ T3684] usb 4-1: USB disconnect, device number 8 [ 423.095699][ T6592] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.184754][ T6592] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.279558][ T6995] loop1: detected capacity change from 0 to 164 [ 423.321803][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 423.358488][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 423.786518][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.826819][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.867868][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 423.890562][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.934584][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.993817][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 424.008269][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 424.209098][ T7012] "syz.0.625" (7012) uses obsolete ecb(arc4) skcipher [ 425.136625][ T7020] "syz.3.627" (7020) uses obsolete ecb(arc4) skcipher [ 426.179483][ T27] audit: type=1326 audit(1723885435.242:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.0.630" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9053379e79 code=0x0 [ 426.341055][ T7035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.630'. [ 426.684156][ T7037] loop4: detected capacity change from 0 to 512 [ 428.533672][ T7037] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.632: invalid indirect mapped block 256 (level 2) [ 428.549754][ T7037] EXT4-fs (loop4): 2 truncates cleaned up [ 428.555610][ T7037] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 428.874515][ T3684] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 429.255098][ T3684] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 429.334827][ T7044] binder: BINDER_SET_CONTEXT_MGR already set [ 429.341361][ T7044] binder: 7043:7044 ioctl 4018620d 20000040 returned -16 [ 429.354577][ T3684] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 430.579176][ T7041] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 430.601398][ T3684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.618835][ T3684] usb 5-1: config 0 descriptor?? [ 430.664842][ T3684] usb 5-1: can't set config #0, error -71 [ 430.680967][ T3684] usb 5-1: USB disconnect, device number 6 [ 430.720865][ T6592] EXT4-fs (loop4): unmounting filesystem. [ 432.432624][ T7068] netlink: 16 bytes leftover after parsing attributes in process `syz.0.637'. [ 432.441386][ T7065] loop4: detected capacity change from 0 to 1024 [ 432.499898][ T7073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.637'. [ 432.544613][ T7065] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 432.712973][ T7076] "syz.1.638" (7076) uses obsolete ecb(arc4) skcipher [ 433.253926][ T7083] "syz.0.640" (7083) uses obsolete ecb(arc4) skcipher [ 433.655547][ T3816] Bluetooth: (null): Invalid header checksum [ 439.018847][ T7096] xt_socket: unknown flags 0x50 [ 439.303298][ T7105] "syz.4.647" (7105) uses obsolete ecb(arc4) skcipher [ 439.754149][ T3648] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 439.773044][ T3648] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 439.783672][ T3648] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 439.792306][ T3648] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 439.805552][ T3648] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 439.814919][ T3648] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 439.951068][ T7111] loop1: detected capacity change from 0 to 2048 [ 439.959587][ T7111] EXT4-fs: Ignoring removed nomblk_io_submit option [ 439.988118][ T7111] EXT4-fs: Ignoring removed nobh option [ 439.996555][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.002893][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.077028][ T7120] netlink: 40 bytes leftover after parsing attributes in process `syz.2.651'. [ 440.086533][ T7120] netlink: 40 bytes leftover after parsing attributes in process `syz.2.651'. [ 440.983602][ T7111] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 441.211713][ T3684] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 441.337834][ T3802] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.644822][ T3684] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 441.670928][ T3684] usb 3-1: config 0 has no interface number 0 [ 441.694659][ T3684] usb 3-1: config 0 interface 1 has no altsetting 0 [ 441.701943][ T3684] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 441.715631][ T3684] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.737125][ T3684] usb 3-1: config 0 descriptor?? [ 441.775878][ T3684] cp210x 3-1:0.1: cp210x converter detected [ 441.834648][ T3639] Bluetooth: hci5: command tx timeout [ 442.020489][ T3802] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.224615][ T3684] cp210x 3-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 442.414096][ T6473] EXT4-fs (loop1): unmounting filesystem. [ 442.422733][ T3802] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.566521][ T3684] usb 3-1: cp210x converter now attached to ttyUSB0 [ 442.646180][ T7151] "syz.4.653" (7151) uses obsolete ecb(arc4) skcipher [ 443.212972][ T3802] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.828652][ T7112] chnl_net:caif_netlink_parms(): no params data found [ 444.831838][ T3639] Bluetooth: hci5: command tx timeout [ 444.909228][ T3682] usb 3-1: USB disconnect, device number 4 [ 445.045221][ T3682] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 445.598629][ T3682] cp210x 3-1:0.1: device disconnected [ 446.461029][ T3648] Bluetooth: hci2: unexpected event for opcode 0x0c7d [ 446.686268][ T7112] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.703837][ T7112] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.765985][ T7181] "syz.2.659" (7181) uses obsolete ecb(arc4) skcipher [ 446.901614][ T7112] device bridge_slave_0 entered promiscuous mode [ 446.915050][ T3648] Bluetooth: hci5: command tx timeout [ 446.980096][ T7179] device wg1 entered promiscuous mode [ 447.008618][ T7112] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.024637][ T7112] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.095807][ T7112] device bridge_slave_1 entered promiscuous mode [ 447.170414][ T7112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.594743][ T7190] loop4: detected capacity change from 0 to 1024 [ 448.290297][ T7190] EXT4-fs (loop4): barriers disabled [ 448.296341][ T7190] JBD2: no valid journal superblock found [ 448.303491][ T7190] EXT4-fs (loop4): error loading journal [ 448.350180][ T7122] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 448.400422][ T7112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.810796][ T7112] team0: Port device team_slave_0 added [ 448.878091][ T27] audit: type=1326 audit(2000000238.245:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7196 comm="syz.1.663" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5221579e79 code=0x0 [ 448.907120][ T7112] team0: Port device team_slave_1 added [ 449.074608][ T3639] Bluetooth: hci5: command tx timeout [ 450.277293][ T7112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.286362][ T7112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.340766][ T7217] loop1: detected capacity change from 0 to 512 [ 450.396635][ T7217] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 450.450884][ T7112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.519468][ T7217] EXT4-fs (loop1): 1 truncate cleaned up [ 450.555254][ T7217] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 450.594919][ T7112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.601902][ T7112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.671636][ T7112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.707002][ T3648] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 450.724659][ T3648] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 450.734658][ T3648] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 450.745967][ T3648] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 450.755561][ T3648] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 450.762947][ T3648] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 451.565065][ T7217] team0 (unregistering): Port device team_slave_0 removed [ 451.605948][ T7217] team0 (unregistering): Port device team_slave_1 removed [ 451.760693][ T7232] netlink: 132 bytes leftover after parsing attributes in process `syz.4.667'. [ 451.765358][ C0] eth0: bad gso: type: 1, size: 1408 [ 451.778041][ T7234] netlink: 'syz.4.667': attribute type 21 has an invalid length. [ 451.781814][ T6473] EXT4-fs (loop1): unmounting filesystem. [ 451.794469][ T7234] netlink: 128 bytes leftover after parsing attributes in process `syz.4.667'. [ 451.803986][ T7234] netlink: 'syz.4.667': attribute type 4 has an invalid length. [ 451.892834][ T7234] netlink: 'syz.4.667': attribute type 5 has an invalid length. [ 451.932252][ T7234] netlink: 3 bytes leftover after parsing attributes in process `syz.4.667'. [ 452.108511][ T7112] device hsr_slave_0 entered promiscuous mode [ 452.135284][ T7112] device hsr_slave_1 entered promiscuous mode [ 452.170218][ T7112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 452.195631][ T7112] Cannot create hsr debugfs directory [ 452.405714][ T7239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.668'. [ 452.497731][ T27] audit: type=1326 audit(2000000241.855:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7238 comm="syz.2.668" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb5a1b79e79 code=0x0 [ 452.574049][ T7252] "syz.4.670" (7252) uses obsolete ecb(arc4) skcipher [ 452.874674][ T3648] Bluetooth: hci6: command tx timeout [ 453.520887][ T3802] device hsr_slave_0 left promiscuous mode [ 453.566527][ T3802] device hsr_slave_1 left promiscuous mode [ 453.602218][ T3802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.616727][ T3802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.648198][ T3802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.668652][ T3802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.692121][ T3802] device bridge_slave_1 left promiscuous mode [ 453.712053][ T3802] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.744135][ T3802] device bridge_slave_0 left promiscuous mode [ 453.758938][ T3802] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.791219][ T27] audit: type=1326 audit(2000000243.155:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.2.673" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb5a1b79e79 code=0x0 [ 453.892636][ T3802] device veth1_macvtap left promiscuous mode [ 453.898861][ T3802] device veth0_macvtap left promiscuous mode [ 453.905890][ T3802] device veth1_vlan left promiscuous mode [ 453.911789][ T3802] device veth0_vlan left promiscuous mode [ 454.036989][ T7280] kvm: emulating exchange as write [ 454.567597][ T3802] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 454.575719][ T7290] syz.4.676[7290] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 454.575895][ T7290] syz.4.676[7290] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 454.974681][ T3648] Bluetooth: hci6: command tx timeout [ 455.573563][ T7294] xt_CT: No such helper "netbios-ns" [ 455.787538][ T7299] loop4: detected capacity change from 0 to 512 [ 455.819046][ T7299] ext4: Unknown parameter 'noacl' [ 455.856138][ T7226] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 455.888595][ T7299] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 456.098574][ T3802] team0 (unregistering): Port device team_slave_1 removed [ 456.175969][ T3802] team0 (unregistering): Port device team_slave_0 removed [ 456.262243][ T3802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.344842][ T3802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.102836][ T3802] bond0 (unregistering): Released all slaves [ 457.115347][ T3639] Bluetooth: hci6: command tx timeout [ 457.289280][ T7227] chnl_net:caif_netlink_parms(): no params data found [ 458.807992][ T7311] loop4: detected capacity change from 0 to 1024 [ 458.820130][ T7310] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.828199][ T7310] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.889574][ T7226] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 459.092896][ T7311] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (490519854976 ns) > initial count (268435456 ns). Using initial count to start timer. [ 459.205038][ T3639] Bluetooth: hci6: command tx timeout [ 459.272575][ T7321] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.280627][ T7321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.289616][ T7321] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.296960][ T7321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.374833][ T7321] device bridge0 entered promiscuous mode [ 459.480082][ T7227] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.508780][ T7227] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.527619][ T7227] device bridge_slave_0 entered promiscuous mode [ 459.564686][ T7227] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.585258][ T7227] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.625451][ T7227] device bridge_slave_1 entered promiscuous mode [ 459.758409][ T7227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.786505][ T7227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.822868][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.682'. [ 459.873877][ T7130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 460.013783][ T27] audit: type=1326 audit(2000000249.375:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.4.682" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f650c179e79 code=0x0 [ 460.130591][ T7227] team0: Port device team_slave_0 added [ 460.309946][ T7112] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 460.328831][ T7112] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 460.393267][ T7227] team0: Port device team_slave_1 added [ 460.462349][ T7112] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 460.504917][ T7112] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 460.570486][ T7227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.614633][ T7227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.701657][ T7227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.853065][ T7227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.992838][ T7342] loop4: detected capacity change from 0 to 512 [ 461.071469][ T7227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.636311][ T7342] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 461.647048][ T7342] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 461.657954][ T7342] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz.4.684: Failed to acquire dquot type 1 [ 461.672842][ T7342] EXT4-fs (loop4): 1 truncate cleaned up [ 461.678799][ T7342] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 461.687877][ T7342] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038 (0x7fffffff) [ 461.763524][ T7227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.108480][ T6592] EXT4-fs (loop4): unmounting filesystem. [ 462.371132][ T7227] device hsr_slave_0 entered promiscuous mode [ 462.396226][ T7227] device hsr_slave_1 entered promiscuous mode [ 462.418167][ T7227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 462.444023][ T7227] Cannot create hsr debugfs directory [ 462.987906][ T7361] "syz.4.686" (7361) uses obsolete ecb(arc4) skcipher [ 463.156783][ T28] INFO: task syz.3.435:5974 blocked for more than 143 seconds. [ 463.640745][ T28] Not tainted 6.1.105-syzkaller #0 [ 463.678547][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 463.707600][ T28] task:syz.3.435 state:D stack:28128 pid:5974 ppid:5590 flags:0x00004004 [ 463.738008][ T28] Call Trace: [ 463.748064][ T28] [ 463.784670][ T28] __schedule+0x143f/0x4570 [ 463.789398][ T28] ? __mutex_lock+0x6b4/0xd80 [ 463.794168][ T28] ? release_firmware_map_entry+0x186/0x186 [ 463.824445][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 463.830026][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 463.874474][ T28] schedule+0xbf/0x180 [ 463.878709][ T28] schedule_preempt_disabled+0xf/0x20 [ 463.884222][ T28] __mutex_lock+0x6b9/0xd80 [ 463.909493][ T28] ? __mutex_lock+0x53c/0xd80 [ 463.926804][ T28] ? exfat_sync_fs+0x67/0x100 [ 463.940412][ T28] ? mutex_lock_nested+0x10/0x10 [ 463.957856][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 463.974314][ T28] exfat_sync_fs+0x67/0x100 [ 463.989749][ T28] iterate_supers+0x127/0x1e0 [ 464.005282][ T28] ? sync_inodes_one_sb+0x60/0x60 [ 464.034626][ T28] ksys_sync+0xd7/0x1c0 [ 464.038838][ T28] ? sync_filesystem+0x220/0x220 [ 464.043791][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 464.065489][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 464.079773][ T28] __do_sys_sync+0xa/0x10 [ 464.088623][ T28] do_syscall_64+0x3b/0xb0 [ 464.098643][ T28] ? clear_bhb_loop+0x45/0xa0 [ 464.109391][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 464.122088][ T28] RIP: 0033:0x7f81c1979e79 [ 464.131028][ T28] RSP: 002b:00007f81c284a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 464.149506][ T28] RAX: ffffffffffffffda RBX: 00007f81c1b15f80 RCX: 00007f81c1979e79 [ 464.165426][ T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 464.182323][ T28] RBP: 00007f81c19e7916 R08: 0000000000000000 R09: 0000000000000000 [ 464.200837][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 464.222853][ T28] R13: 0000000000000001 R14: 00007f81c1b15f80 R15: 00007ffe54981e68 [ 464.239854][ T28] [ 464.246350][ T28] [ 464.246350][ T28] Showing all locks held in the system: [ 464.263031][ T28] 1 lock held by rcu_tasks_kthre/12: [ 464.274060][ T28] #0: ffffffff8d32b190 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 464.296051][ T28] 1 lock held by rcu_tasks_trace/13: [ 464.308269][ T28] #0: ffffffff8d32b990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 464.333466][ T28] 1 lock held by khungtaskd/28: [ 464.344129][ T28] #0: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 464.364237][ T28] 1 lock held by dhcpcd/3304: [ 464.374835][ T28] #0: ffffffff8e4f8368 (rtnl_mutex){+.+.}-{3:3}, at: __netlink_dump_start+0x12e/0x6e0 [ 464.395695][ T28] 2 locks held by getty/3395: [ 464.404683][ T28] #0: ffff888028b14098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 464.427810][ T28] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 464.449114][ T28] 3 locks held by kworker/1:3/3625: [ 464.459966][ T28] #0: ffff88814b385538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 464.482254][ T28] #1: ffffc90003b0fd20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 464.507849][ T28] #2: ffffffff8e4f8368 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x16b0 [ 464.529204][ T28] 3 locks held by syz-executor/3634: [ 464.544465][ T28] 2 locks held by kworker/0:4/3682: [ 464.549700][ T28] #0: ffff888012872138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 464.574495][ T28] #1: ffffc9000401fd20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 464.604428][ T28] 4 locks held by kworker/u4:9/3802: [ 464.609842][ T28] #0: ffff888012a1e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 464.634549][ T28] #1: ffffc90004927d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 464.654472][ T28] #2: ffffffff8e4ec010 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 464.663847][ T28] #3: ffffffff8e4f8368 (rtnl_mutex){+.+.}-{3:3}, at: cangw_pernet_exit_batch+0x1c/0x90 [ 464.694449][ T28] 4 locks held by kworker/u4:13/3943: [ 464.699855][ T28] #0: ffff888012879138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 464.734488][ T28] #1: ffffc900040cfd20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 464.744995][ T28] #2: ffffffff8e4f8368 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 464.754186][ T28] #3: ffffffff8d3305b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 [ 464.784474][ T28] 3 locks held by kworker/0:11/4482: [ 464.789803][ T28] #0: ffff88814b385538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 464.824456][ T28] #1: ffffc900054e7d20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 464.850634][ T28] #2: ffffffff8e4f8368 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x16b0 [ 464.876043][ T28] 2 locks held by syz.3.435/5974: [ 464.881115][ T28] #0: ffff88807d3340e0 (&type->s_umount_key#56){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 464.904451][ T28] #1: ffff88807d3320e0 (&sbi->s_lock){+.+.}-{3:3}, at: exfat_sync_fs+0x67/0x100 [ 464.913661][ T28] 1 lock held by syz-executor/7112: [ 464.934456][ T28] #0: ffffffff8e4f8368 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 464.944235][ T28] 1 lock held by syz-executor/7227: [ 464.964449][ T28] #0: ffffffff8e4f8368 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 464.974026][ T28] 2 locks held by syz.1.674/7283: [ 464.992739][ T28] 2 locks held by syz.2.683/7331: [ 465.003453][ T28] #0: ffffffff8e4ec010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x378/0x5d0 [ 465.024467][ T28] #1: ffffffff8e4f8368 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_delete_nets+0xc9/0x330 [ 465.044478][ T28] [ 465.059774][ T7112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.074523][ T28] ============================================= [ 465.074523][ T28] [ 465.082987][ T28] NMI backtrace for cpu 1 [ 465.087517][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.105-syzkaller #0 [ 465.095428][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 465.105506][ T28] Call Trace: [ 465.108809][ T28] [ 465.111754][ T28] dump_stack_lvl+0x1e3/0x2cb [ 465.116468][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 465.121950][ T28] ? panic+0x764/0x764 [ 465.126035][ T28] ? vprintk_emit+0x622/0x740 [ 465.130734][ T28] ? printk_sprint+0x490/0x490 [ 465.135519][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 465.140660][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 465.145621][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 465.151771][ T28] ? _printk+0xd1/0x111 [ 465.155914][ T28] ? panic+0x764/0x764 [ 465.159967][ T28] ? __wake_up_klogd+0xcc/0x100 [ 465.164804][ T28] ? panic+0x764/0x764 [ 465.168858][ T28] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 465.174916][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 465.180976][ T28] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 465.186948][ T28] watchdog+0xf88/0xfd0 [ 465.191102][ T28] ? watchdog+0x1f8/0xfd0 [ 465.195423][ T28] kthread+0x28d/0x320 [ 465.199483][ T28] ? hungtask_pm_notify+0x50/0x50 [ 465.204504][ T28] ? kthread_blkcg+0xd0/0xd0 [ 465.209079][ T28] ret_from_fork+0x1f/0x30 [ 465.213494][ T28] [ 465.217568][ T28] Sending NMI from CPU 1 to CPUs 0: [ 465.222809][ C0] NMI backtrace for cpu 0 [ 465.222821][ C0] CPU: 0 PID: 3802 Comm: kworker/u4:9 Not tainted 6.1.105-syzkaller #0 [ 465.222837][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 465.222845][ C0] Workqueue: netns cleanup_net [ 465.222867][ C0] RIP: 0010:inet_twsk_purge+0x11e/0xa40 [ 465.222890][ C0] Code: e8 77 f5 ff ff 48 89 df be 00 02 00 00 e8 0a e0 31 f8 4c 8b 74 24 60 48 c7 c7 40 f0 0f 8c be 26 01 00 00 31 d2 e8 32 ef 3d f8 <2e> 2e 2e 31 c0 e8 48 e5 51 f8 48 8d 05 00 00 00 00 48 c7 c7 c0 af [ 465.222903][ C0] RSP: 0018:ffffc90004927a00 EFLAGS: 00000246 [ 465.222915][ C0] RAX: 29252f4c98149e00 RBX: 0000000000008ef4 RCX: ffff888015b1d940 [ 465.222926][ C0] RDX: dffffc0000000000 RSI: ffff888015b1d940 RDI: ffffc90004927980 [ 465.222936][ C0] RBP: ffffc90004927b30 R08: dffffc0000000000 R09: fffffbfff1d339ae [ 465.222947][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000924f5a [ 465.222957][ C0] R13: dffffc0000000000 R14: ffffc900013d47a0 R15: ffffffff92371c20 [ 465.222968][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 465.222981][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 465.222991][ C0] CR2: 00007fffa1d57c5c CR3: 0000000077243000 CR4: 00000000003506f0 [ 465.223004][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 465.223013][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 465.223022][ C0] Call Trace: [ 465.223028][ C0] [ 465.223033][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 465.223058][ C0] ? read_lock_is_recursive+0x10/0x10 [ 465.223079][ C0] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 465.223097][ C0] ? nmi_handle+0x25/0x440 [ 465.223124][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 465.223143][ C0] ? nmi_handle+0x12e/0x440 [ 465.223161][ C0] ? nmi_handle+0x25/0x440 [ 465.223179][ C0] ? inet_twsk_purge+0x11e/0xa40 [ 465.223197][ C0] ? default_do_nmi+0x62/0x150 [ 465.223216][ C0] ? exc_nmi+0xa8/0x100 [ 465.223233][ C0] ? end_repeat_nmi+0x16/0x31 [ 465.223256][ C0] ? inet_twsk_purge+0x11e/0xa40 [ 465.223274][ C0] ? inet_twsk_purge+0x11e/0xa40 [ 465.223292][ C0] ? inet_twsk_purge+0x11e/0xa40 [ 465.223310][ C0] [ 465.223314][ C0] [ 465.223320][ C0] ? inet_twsk_purge+0x12f/0xa40 [ 465.223343][ C0] ? __inet_twsk_schedule+0x1c0/0x1c0 [ 465.223361][ C0] ? rcu_force_quiescent_state+0x1c8/0x230 [ 465.223379][ C0] tcp_twsk_purge+0xd6/0x140 [ 465.223394][ C0] ? tcpv6_net_exit+0x70/0x70 [ 465.223410][ C0] cleanup_net+0x763/0xb60 [ 465.223430][ C0] ? ops_free_list+0x3b0/0x3b0 [ 465.223450][ C0] ? process_one_work+0x7a9/0x11d0 [ 465.223465][ C0] process_one_work+0x8a9/0x11d0 [ 465.223488][ C0] ? worker_detach_from_pool+0x260/0x260 [ 465.223505][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 465.223519][ C0] ? kthread_data+0x4e/0xc0 [ 465.223539][ C0] ? wq_worker_running+0x97/0x190 [ 465.223560][ C0] worker_thread+0xa47/0x1200 [ 465.223587][ C0] kthread+0x28d/0x320 [ 465.223599][ C0] ? worker_clr_flags+0x190/0x190 [ 465.223613][ C0] ? kthread_blkcg+0xd0/0xd0 [ 465.223627][ C0] ret_from_fork+0x1f/0x30 [ 465.223651][ C0] [ 465.620115][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 465.627001][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.105-syzkaller #0 [ 465.634916][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 465.644987][ T28] Call Trace: [ 465.648305][ T28] [ 465.651256][ T28] dump_stack_lvl+0x1e3/0x2cb [ 465.655982][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 465.661469][ T28] ? panic+0x764/0x764 [ 465.665556][ T28] ? llist_add_batch+0x160/0x1d0 [ 465.670518][ T28] ? vscnprintf+0x59/0x80 [ 465.674873][ T28] panic+0x318/0x764 [ 465.678787][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 465.685063][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 465.690460][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 465.696724][ T28] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 465.702903][ T28] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 465.709202][ T28] watchdog+0xfc7/0xfd0 [ 465.713417][ T28] ? watchdog+0x1f8/0xfd0 [ 465.717781][ T28] kthread+0x28d/0x320 [ 465.721870][ T28] ? hungtask_pm_notify+0x50/0x50 [ 465.726914][ T28] ? kthread_blkcg+0xd0/0xd0 [ 465.731518][ T28] ret_from_fork+0x1f/0x30 [ 465.735971][ T28] [ 465.739322][ T28] Kernel Offset: disabled [ 465.743666][ T28] Rebooting in 86400 seconds..