last executing test programs: 23.644926211s ago: executing program 4 (id=2054): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030"]) chdir(&(0x7f0000000100)='./file0\x00') r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffb, 0x0) write$vhost_msg(r2, &(0x7f0000000680)={0x1, {0x0, 0x0, 0x0, 0x3}}, 0x48) truncate(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x800443d2, 0x20000002) r4 = accept4(r3, &(0x7f0000000000)=@ieee802154={0x24, @long}, &(0x7f0000000080)=0x80, 0x80000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=@newqdisc={0x24, 0x24, 0x100, 0x0, 0x25dfdbfa, {0x60, 0x0, 0x0, r7, {0xffff, 0x4}, {0x5, 0xffff}}}, 0x24}}, 0x0) socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r4, 0x110, 0x5, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f0000000300), 0x2, 0x3) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r10) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRESHEX=r7, @ANYRES64=r7, @ANYRES32=r4], 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x0) getsockname$packet(r9, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7f0000000000000000000000000000009b8a9135", @ANYRES64=r7, @ANYRES64=r11, @ANYRES32=r13, @ANYRES16=r12, @ANYRESHEX=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x0, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c790"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 23.088436568s ago: executing program 4 (id=2056): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000380)={&(0x7f0000000080)=@in={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000340)=[{&(0x7f00000000c0)="27470ced3d2b92a9bec30dccf995583846e56b4deb1d6209bf006c2bdcb3e4efa81040", 0x23}, {&(0x7f0000000200)="bec5d6888b54de7575a98bed496a83c66fa6424a", 0x14}], 0x2, 0x0, 0x0, 0x20000000}, 0xc000401) fsopen(0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setuid(0xee01) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) statx(r2, &(0x7f0000000440)='./file0\x00', 0x4000, 0x200, &(0x7f0000000480)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r7, &(0x7f0000001580)=""/4096, 0x1000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f00000003c0)={0x94, r3, 0x1}) r8 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@dev, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r8, &(0x7f0000000400)={0xa, 0x0, 0x380003, @private1}, 0x1c) sendmmsg$alg(r6, &(0x7f0000003540)=[{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000180)="31ab732abda0ad89281b2f0df75394f09d985dd88bd336d236badceecf9ebad6deec5e01719baf69fd8bc43b57e2f5b16ade367cb54ffcc32e05471802c7950ae6379e85ef52b5ad39fa52ec8baa546d0463d6f353c0df6af4d3adb451aa8e20b3885fc7e5bc06ddb24132ab4db0e7b25ccd34a2a29a400d2c9a7510", 0x7c}, {&(0x7f0000000280)="4abb1d8fb9ec59d06d02cc053ce6ac1168d484bfc91789aaedda7f345881d8e3299cca7bf6eb1730423b84df251adc5a6a3df5fbcdaba7541a96a745211d458ecbd25f7adabff10c56381424f96521b18ab8e2a5f92b0fc2997ff7102298726aff76f6f46139d32dadd2bf29ffa86c4902dc74bb62d15481c333ccb19d37853c99140df835", 0x85}], 0x2}], 0x1, 0x0) recvmmsg(r6, &(0x7f00000038c0)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000840)=""/245, 0xf5}], 0x1}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r9, 0xffffffffffffffff, 0x0) 21.913412886s ago: executing program 4 (id=2060): syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000780), 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x5) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = io_uring_setup(0x1892, &(0x7f0000000140)={0x0, 0x4323, 0x80, 0x0, 0x153}) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x1, 0x3, 0x0, [0x0, 0x8000000], [0x8200, 0x1]}}}) ioctl$VIDIOC_QBUF(r7, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x58603}) close_range(r6, 0xffffffffffffffff, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x2, 0x0, 0x0) 20.830997557s ago: executing program 3 (id=2061): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, &(0x7f0000000140)={0x0, 0x6}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}, {@workdir={'workdir', 0x3d, './bus'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '&(+'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@fowner_gt}]}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000640)={@val, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev}}}}}}, 0x26) 17.646553673s ago: executing program 4 (id=2064): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f000001a000/0x3000)=nil, 0x3000, 0xf, 0x11012, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x3, &(0x7f0000000000)=0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x2, 0xd, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x3, 0x8, 0x80, 0x0, "3472afb0c02ff2a7702eed03cd67562e"}]}, 0x68}, 0x1, 0x7}, 0x0) r2 = timerfd_create(0x0, 0x0) r3 = socket$inet6(0x10, 0x0, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0xa, &(0x7f00000000c0)=[{&(0x7f0000000000)="5500000018007f05c0fe15b282a380930a50000248a8430b916d0200390009002300ff6c0200000004000500fc01ffdd070b566881b38432009b1100b1df13000000fb100000000400000000e2e9b3000000070901", 0x55}], 0x1}, 0x0) io_submit(r0, 0x1, &(0x7f00000009c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) timerfd_settime(r2, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x54, 0x46, 0x10, 0x23a7, 0xfedc, 0xe00b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x42}}]}}]}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000180)={[], 0x0, 0x20002}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000000)) ioctl$KVM_RUN(r7, 0xae80, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}) clock_adjtime(0x5, &(0x7f0000000440)={0x101, 0x226599c8, 0x1, 0x7f, 0x69, 0x8, 0x5, 0x6b2e, 0x8, 0x2, 0x2, 0x4, 0x10c, 0x8000, 0x4, 0x3, 0x5, 0x6, 0x5, 0x1, 0x22a4, 0x400, 0x6, 0xb, 0x3, 0x7}) clock_adjtime(0x3, &(0x7f0000000100)={0x2, 0x8, 0xa957, 0xff, 0x5, 0xfa2, 0x9, 0x2, 0x80, 0x1, 0xfffffffffffffff8, 0xf, 0xffffffffffff7fff, 0x1, 0xfff, 0x6, 0x7, 0x5, 0x8, 0x1, 0x484d, 0x1000, 0x4, 0x17, 0x3, 0xffffffffffffff80}) prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 17.592631067s ago: executing program 3 (id=2065): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x338, 0xffffffff, 0x0, 0x1a8, 0xb0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @dev, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6bc128419cfb67daad5b4809088400ed0000006c00000000000100040500"}}}, {{@uncond, 0x287, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@statistic={{0x38}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) socket$nl_xfrm(0x10, 0x3, 0x6) socket$can_j1939(0x1d, 0x2, 0x7) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = socket$inet(0x2, 0x6, 0xad1) r5 = socket$netlink(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, 0x0, 0x20004015) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x24}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x60000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) accept4(r7, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r8], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000500), &(0x7f0000000540)=0x4) ioctl$SIOCX25GSUBSCRIP(r3, 0x89e5, &(0x7f0000000080)={'macvtap0\x00'}) sendto$inet6(r2, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020200000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x1a, &(0x7f0000001300)=@raw=[@ldst={0x2, 0x2, 0x1, 0x9, 0xa, 0x30, 0xfffffffffffffffc}, @alu={0x4, 0x0, 0xd, 0x0, 0x4, 0x4, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000001}}, @map_fd={0x18, 0x7, 0x1, 0x0, r1}], &(0x7f00000012c0)='syzkaller\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 17.318357101s ago: executing program 3 (id=2068): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000740)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x100000, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r6 = openat$dir(0xffffff9c, &(0x7f0000000180)='./file0\x00', 0x4000, 0x100) mkdirat(r6, &(0x7f00000001c0)='./file0\x00', 0x21) getdents(r5, &(0x7f0000001fc0)=""/184, 0x20002078) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) socket$inet_icmp(0x2, 0x2, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000600000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}]}, 0x3c}}, 0x0) 16.103827462s ago: executing program 3 (id=2070): syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0x42, &(0x7f0000000540)=ANY=[], 0xd, 0x1a4, &(0x7f0000000640)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001e00)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @dev}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001e0001000000000000000000fc000000000000000000000000000001000000000000e8ffffffffffffff00000000ffff7f00000100000000000000002400090003000000000000000000000000123500000000ac13fb2970791b780000000000"], 0x64}}, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, &(0x7f0000000080)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r5, 0x4b4a, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') creat(&(0x7f0000001040)='./file0\x00', 0x0) socket$alg(0x26, 0x5, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000180)={r7, 0xf86}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000080)={r8, 0x3, r6, 0x5}) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) 14.687643591s ago: executing program 0 (id=2076): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, &(0x7f0000000140)={0x0, 0x6}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}, {@workdir={'workdir', 0x3d, './bus'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '&(+'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@fowner_gt}]}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000640)={@val, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev}}}}}}, 0x26) 14.493368997s ago: executing program 3 (id=2078): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000000)=@random={'user.', 'security.capability\x00'}) r1 = syz_io_uring_setup(0x140, &(0x7f0000000200)={0x0, 0x0, 0x2000}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x60e6, &(0x7f0000000280), &(0x7f0000000300)=0x0, &(0x7f0000000180)) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d0327408ca0768a8d4c4000000010902120001000000000904005b"], 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x20, 0x2004, @fd_index=0x9, 0x1ff, &(0x7f0000000340)=""/65, 0x41, 0x19, 0x1}) io_uring_enter(r1, 0x3701, 0x0, 0x0, 0x0, 0x0) io_setup(0x5, &(0x7f0000000740)=0x0) fsopen(&(0x7f00000000c0)='gfs2meta\x00', 0x0) io_submit(r4, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r5, 0x5501) write(0xffffffffffffffff, &(0x7f0000000080)="06", 0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r9, 0x0) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xbd, 0xf7, 0x13, 0x8, 0x2770, 0x930c, 0x8d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xc5, 0x98}}]}}]}}, 0x0) syz_usb_control_io$hid(r10, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r10, 0x0, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) 9.036581124s ago: executing program 2 (id=2080): socket$packet(0x11, 0x0, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r5 = dup(r4) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r5, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x1000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000500)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c8426803000000005c000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd9701404", @ANYRES16], 0x1, 0x553b, &(0x7f000000ac00)="$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") creat(&(0x7f00000008c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) rename(&(0x7f0000000400)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$fuse(0x0, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpu.stat\x00', 0x275a, 0x0) 8.941381072s ago: executing program 4 (id=2081): r0 = socket$kcm(0x2, 0x3, 0x84) unshare(0x20000400) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0x2}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r1, 0x0, 0x0}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="7a00330080000000ffffffffffff08021100000050505050505000000000000000000000000001000301"], 0x98}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="b40800000000000073119a00000000008510000002000000b7000000000000009500c200000000009500001200000000978397f6f8d449eca162e33d3cc50e3ea2bda29b6c5c0dd4ae4a5723d7bb1782d799214e20806df14107bbb18383f65bfa943f096ffd3f1a5195665bd897b554a4229f80258ac79116086d8764612511b5fbf0562c4034196f45d920ce764e50311836d630a55bd079ffb7c7bfd4d9e226"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000000)=0x8000015, 0x4) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x7, 0x3f, 0x2, 0x3, 0x0, 0x70bd29, 0x25dfdbfb, [@sadb_x_nat_t_type={0x1, 0x14, 0x1}]}, 0x18}}, 0x4008000) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'vlan1\x00', 0x0}) sendto$packet(r9, &(0x7f0000000040)="363c8f1fca5d66d08e583e7c88a8", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r10}, 0x14) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, 0x0}, 0x4008804) sendmsg$inet(r0, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e000000000000000000200003800800040000000000080002002000000004000500080005"], 0x4c}}, 0x0) socket$kcm(0x10, 0x3, 0x10) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r12, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x30, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r14}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x30}], 0x1}, 0x0) socket$kcm(0x11, 0x3, 0x0) 8.923100923s ago: executing program 0 (id=2082): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x8, 0x8, 0xae6f, 0x8, {{0xe, 0x4, 0x0, 0x19, 0x38, 0x65, 0x0, 0x80, 0x29, 0x0, @private=0xa010100, @empty, {[@end, @end, @lsrr={0x83, 0xb, 0xf0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @ssrr={0x89, 0x17, 0x10, [@local, @rand_addr=0x64010101, @rand_addr=0x64010100, @multicast1, @dev={0xac, 0x14, 0x14, 0x3a}]}]}}}}}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x22, &(0x7f00000012c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6d}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x2, 0x0, 0x0, 0x6, 0x4, 0x2, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x1ff}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xd}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x2, 0x2, 0x2, 0x2, 0x3, 0xfffffffffffffff8, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], &(0x7f0000000000)='GPL\x00', 0xfffffffd, 0x93, &(0x7f0000000500)=""/147, 0x41000, 0x14, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x9}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xffffffff}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000640)=[{0x0, 0x4, 0x10, 0x7fb6eded84677fd0}], 0x10, 0x1000000, @void, @value}, 0x90) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xd, &(0x7f0000000180)=@raw=[@exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5a46}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0xa, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xffffffffffffffff}], &(0x7f0000000340)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x1a, &(0x7f0000abaff9), 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000740)={@remote, @rand_addr=0x64010101, @remote}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000011c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x18, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0xa0}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0xfffff000, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x42}, 0x28) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'geneve0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b031000f4ff020002004788aa96a13bb1000000000086ddffff", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001c00020029ebf622fd6cbd7080fedbdf2502000000", @ANYRES32=r9, @ANYBLOB="80000009"], 0x1c}}, 0x8004) accept4$bt_l2cap(r6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) r10 = socket(0x10, 0x2, 0x0) write(r10, &(0x7f0000000000)="240000001e005f80004000000000000002000000010000000000080008000100000000ff", 0x24) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r11, 0x11b, 0x2, &(0x7f00000000c0)=0x100000, 0x4) getsockopt$XDP_STATISTICS(r11, 0x11b, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x30) 5.716518072s ago: executing program 1 (id=2083): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open(0x0, 0x804, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x0, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x7, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000001900)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty, 0x400}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x2, {0x6, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, @in6=@empty, @in6=@mcast1}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x2, 0xffffffff, @mcast2}}, @sadb_x_sec_ctx={0x1}]}, 0xa8}}, 0x400c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/124) timer_create(0x0, &(0x7f0000000100)={0x0, 0x1e, 0x0, @thr={&(0x7f0000000380), &(0x7f00000004c0)="b55bc3d37c1e33c63fe5f2f7e2b5e3a8952d04962652e391d1bab8a61ca208a76e569f4eab6f69b218c583ca28746fbf7cb35383f6c6b0abd60d16cce022fd7e99"}}, &(0x7f00000002c0)=0x0) timer_gettime(r4, &(0x7f0000000400)) poll(0x0, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r5, &(0x7f0000000040)="c2", 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 5.716042752s ago: executing program 3 (id=2084): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x32, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$uid(0x0, 0xffffffffffffffff) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @adiantum, 0x0, @desc3}) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x175, &(0x7f0000000240)="$eJzsVb1OMkEUPZddFr6vMNbGxEKiUAjLosZOK8MD+AASWJG4+MOSKIRirXgPG17Dwnew0NhgYUwssDdrZubuOjyAJiRzkt1z75m5c2emOHMaXoU5AF+zURMHkLCwhCci2ADWSGmHOcXvjuIy52+24hLrd8zPzOFgeNYIAr/3i8Ff9DCBCUywaMFPun+bwYf0ssfZqCmCYwBxHMdCa6mP9DkWgAdtzootP7IQp3OE+YlkE0Cl372shIPhVqfbaPtt/9zzarvutuvueJWTTuC76k9ai4zySAguARCe+k8bzwJ4YYP9j3mQtjUeJ73W0cy5uD5fm9FqEybcp7Xs7RBXcIQN5AFcR6SpBbmKDXmkOggWJ1Vb25/qlZcD5eZF0BqDQEnZBHa6RnWKbJp4elLbi5Jtj5kLzHXmCfOUOXmzkrfIliu8claMAAc3jX6/VxWSilLNSzVvOdIvTHT9dOYPt5qDgYGBgYGBgcGC4TsAAP//NFFiLQ==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = open(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_WKALM_SET(r4, 0x40247007, &(0x7f0000000040)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000540)="844841badc1299f6ec9e7aa979a5c202f53167a5b68178fe1e86c84617132129120cdef86f2cc4dbc2e087e1bbb3c74ba432de89f84628fea5395160a8b0c5eef26ac07e4d6f92e97266c8d1d5ec497dbeec1a90222242cecb0533c06d555666e7ab087b0b034e86fe20ba4fa81fabb36606cff2907875cfdff702a2eae55d9047c50c5db4ebd3510d70a6ed5cf020c9f19e0a0e95734b1c361f6ca64350661db9024e734d427b547ed50dc5b80669865e4133c80af1eb3f1592379cc775d64795f03f7b81cd334c354429f029cb5017077c279e9137bf197b7b317596a0a96071d4639f4d0096d91146d068376c2d9f783d2ccc4ac0d97e0752f92aeb632057ec8be33e0ac05ca05bd8a2ac70f3061220193f60a9b0c2e0821014761e6488de266bc72b21a659d3e12de94546d7099c6fa9af5eb0a7c2081da3c845b988011d8b4a67a6bf2eca0faddd81b9ef0fbe4ec43709a8f72e351bc699e804902d3ee28fc0f617c4ed8f88bd4db2b3a654355506a0646a275108b5e971181639a8d9065919b57fad595f6690b873e91f7c05b805b1290797ccc12aa37e9ccb15b6c8be4abad180aa4c11119346a9ad3261099ea457d808d6b4d95029f8724cb301d071ddafbd8678aeb5d7fec53ce6a75950649d902b12f1150354204457fac7f93e5be5f80001e1e345480e1add89b0832094cbcf4df1ac3295d794d2ed281a519883f47d3dcc4928c2bf6fecf31477adcb60e24c6f452424e0661c6fdf381408c13981500cfaf12d92d1cee97e08ba79280d4c30f86ff6d4d377256e43e10af095a38f869fdbef06cf71b57fe3989402e5fda3d79aec6ab8e0a3791d6f66762aab429606f2e6bb912521ba414361a9532f3414f765ac993decae0f8593c9c7c87d4762e499d496ec2dcb967053d3ca01f47d3938a2adc6d557059fe1191c9ae56bf722c53077772ab634906b5072b85f3486aa644bf4a3ec1bdc16c707170388c7f04aacd2e30c253bd870e3471b6c5fb43777ada24effed7d95ce016826cc05ea982aa9eddffec46710c5c632b4eae7c330faf00796752dff7c677ac021da17a0d99619429b34288714aca298a52f83d8f6c5274547bd3468d852a689bb8a4df5605022c7f113577015ab456008036520c9b6a9ef9e31b1470e4d005e14a964d999e2afcf46708cade5bef5d67b4e388f0de0bb53e99bc985d6c3afaacffcb45ad1888715a4acc7593b7c1bcae05a7c3ccb5cd6669b977d72a732ceb761c63231569fdb228653f210cedbf8cbdaa1d064ecf11243497b59f54a6f5eb50d5ccc1e7fc8a0df61dc91e405e2209a092b58332f2f2c6e27a5ac467dcd786fe09ff642c346a07b0fe23275d82ac97aae6b38dece90af16fa3415da244a88fa81c446650e502c2d4fa75f530d4e42ea88a3d1bdef4a54b185acbfef0a8f6292476ab3a50debcb71b2e2863e93c31128f382e3b645316e22194f0d78b00c1fef4ba600f4b6a682aebdf5730b669d8e8c3014dab292f07c35b80617ab915a0240270242c006c1b6abd08177fa55292a890f98c9f8a5692fa17c79066342b8ac1ef0cce6bb848a1d879c125d88f4c3b7c3217cc7143d1df8cc39c88d2e75ab5b54dee91bb6be1b68d058c92a4f4091b0d672daee3f7e87984b185a266a353c1fdad5cb3773f37390ed32504bcaaaca52f7491041c9c256628c4a1abc345e2252871133d69bca36221229b8cbce00be10da1934ce2b56bbab4d144dcee0855ebe934176e98040b32983ade661e071949d5cc582b8c39e47f3daf325ff64f3ef675e856d0ec9dfb57acb28b063f37f76dfd44aa79e3a507136c0149ffe63555acb292b7c4ad400f103522e3f8be6e894543a5baa5b376c6348d1aeab7308da6805b55936ff73dc3cde5c337d6e2771588cb62a0ec572baf6c94c20fd81f362cfea4b632738a38fbeaccad5a4001a10e450514d73a5dd81acd06445d07a35db9a4d724d6f72276560e5e9df9139a3d9bb0b64574409e46c680b06010a10389c40f0c57fd7b488222d56debca5080c292a129a280d5b4454afc67988fbd5228e5a7422f3fe6a1352496c07391174f8b07aed32e18e70a1f7a09dbeaaa72b7200ce7672a04b6625ca32dd32a0075d9dbc7e29983512dad57153f673fe06dcac50cf49aab891a0378c3e2655b7840904471389708adda13ef90c24a271d5f6e0c0f7e5c07341e96281f1ed46a24615d68d1ed57995645a1865b008fe87431ab030708fd5fea2106a88989097780efe81561d528d582af3efbd30ed6409f26c78b6d3ead320deb4d25d86677b2fa73c15b773f7ddce47dd7ed4fee1c51ae31cb1272fd49bf84e675b83045b8e59b9dce1d36a277d8728210518e2959eeff73ccafddbfb336699040fa62313db8878046662c7caff5d48d059f152cfd358c2094ac4d54802660fc9dfcf7137638be684c9e5451d969fbb13a8314a15a6d0c63fe9a40bcecc1bfd442fbd6071f688d4f66b04b1a4e94c8e8be4ac627ef68dc77193d9db58ff646c86ce49014028c44ad18676a2c793baf95b628eefcb706f73b96827999b9aa461796b751b1f4d5b3ca4f69fd1d1fff442", 0x72d}], 0x1, &(0x7f0000000c80)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES64=r4, @ANYRES64=r4, @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESOCT=r3], 0x10c, 0x4000000}, 0xc20c0) open_by_handle_at(r2, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}]}}) mount(&(0x7f0000000480)=@filename='./file0\x00', &(0x7f00000004c0)='./file0/file0\x00', &(0x7f00000001c0)='adfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f00000002c0)={0x0, "615a091a55a8c9a640115d99d981b3886420589c6695d4982a83b71b906769e737201ac6b7a7804454ebc957b5831b89b59d703e74497c00"}, 0x48, 0xfffffffffffffffd) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 5.706359353s ago: executing program 0 (id=2085): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = fsopen(&(0x7f0000000040)='sockfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0xffffffffffffffff, r5) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r7 = syz_clone(0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000840)='./bus\x00', 0x1200840, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x3, 0x377, &(0x7f00000002c0)="$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") r8 = syz_open_procfs(r7, &(0x7f0000000140)='mountstats\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0}, &(0x7f0000000780)=0xc) stat(&(0x7f0000000640)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r8, &(0x7f00000001c0)='./bus\x00', r10, r11, 0x100) r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) poll(&(0x7f00000000c0)=[{r13, 0x1552}, {r13}], 0x2, 0x0) ptrace(0x10, r12) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]}) mount$cgroup(0x20000000, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r12) ptrace(0x420e, r12) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x0, 0xb}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x2000000, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x12c4}, 0x28) 5.632230939s ago: executing program 2 (id=2086): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000000)={r3, 0x9, 0xffffffffffff1634, 0x8}) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001880)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x98, 0x130, 0x0, 0x98, 0x280, 0x348, 0x348, 0x348, 0x348, 0x348, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'netpci0\x00', 'netpci0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@local, @local, 0x0, 0x0, 'vcan0\x00', 'netpci0\x00', {}, {}, 0x11, 0x0, 0x4c}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'team_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @TTL={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x30048000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f2, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000800)}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x2f, 0x2b, 0xa1, 0x80000000, 0x7a, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x80, 0x7, 0x7}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000640)={0x60, 0x0, 0x4f3ec79b6c2060a7, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x4}, @HEADER={0x4}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x60}}, 0x4000011) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv6_getaddrlabel={0x58, 0x4a, 0x2, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x40, 0x0, 0x0, 0x5}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFAL_ADDRESS={0x14, 0x1, @remote}]}, 0x58}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r7) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x0, 0x0, 0xfffff062}}]}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x70}}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x8100, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.468169336s ago: executing program 4 (id=2087): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x22, &(0x7f00000000c0)="17000000020001000003be8c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e289000002", 0x41) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0xa8, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x0}]}, @NL80211_ATTR_TID_CONFIG={0x40, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xe169}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd2}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd0}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8d}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0xa8}}, 0x4008010) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x80) write$binfmt_script(r3, &(0x7f0000000540)={'#! ', './file0', [{0x20, 'cgroup.subtree_control\x00'}, {0x20, '([&-'}, {0x20, '#]/'}, {0x20, 'cgroup2\x00'}, {0x20, '/&:#'}, {0x20, '#!'}, {0x20, ')'}, {0x20, '(8/+[))'}, {}, {0x20, 'nl80211\x00'}], 0xa, "edcc6e07cabe092de11d102225ff7798252ef72e509d9ea64896784d1e1468f468a4b309aa1e43f5438fabbdc1c057c05f46e7a3a7bc884353379590aaa9761bc33be3c6f5ef88927a9fe8dd2cd5a0d3012068db92d633109519570075ebde9da25a2b1fefa28d8d36f814ce9338636c0d24326cb884631668446a4f8f936ceb0cd7c669b13c557dbd0aa0c77850ed0be6e7d3d22a24d22cc306f098782e7b1d73b2472dbbaa252bd38dbde4dbddba751d930f1c"}, 0x105) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fstat(r7, &(0x7f00000004c0)) r8 = openat$cgroup_subtree(r7, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)={[{0x2d, 'pids'}]}, 0x6) 4.465829026s ago: executing program 1 (id=2088): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x2c, 0x17, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @dev, 'bond_slave_1\x00'}}, 0x1e) wait4(0xffffffffffffffff, &(0x7f0000000440), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x7, 0x10001, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000040)=0x18, &(0x7f0000000140)}, 0x20) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newtaction={0x7c, 0x30, 0x1, 0x20, 0x0, {0x0, 0x0, 0x1300}, [{0x68, 0x1, [@m_csum={0x64, 0xf, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x1, 0x2, 0x4fa, 0x40}, 0x2f}}]}, {0x1c, 0x6, "4cd8c88d3604e08063fc75c634e561bfabfcd88924592a8e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x7c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) syz_open_procfs$pagemap(0x0, &(0x7f00000005c0)) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x54}}, 0x0) setsockopt$packet_fanout_data(r10, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x50}, {0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000d80)={0x3d0, r13, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_FRAME={0x3b3, 0x33, @beacon={{{}, {}, @device_b, @device_a, @random="b58b5e263717"}, 0x0, @random, 0x0, @val, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @void, @void, @void, [{0xdd, 0x64, "8aa886a4a88b61418ef437076c182468ef7658178361e2a3c8c51ebc8bc082fd5e89fc0882660b4a0d82263f205d52b65d91e9ff4a3a41116280d74b11b4905f7267ba2b7c5ecd7574ba5aaf56137bbeedec51c44b54ecea6d565a515de1e73f45767f85"}, {0xdd, 0x2c, "ee1e56116310701474ef4a1b29b226517cf2a6e34de69ac54ccde44574cb86dc7dbe2feabaff18e95c0f6b3e"}, {0xdd, 0xd, "8284c4284720b21eee5135a405"}, {0xdd, 0xa4, "aa7f57eae931f772507e5c62316a79a8fbf5c80508de9513cfa2a5d5a717337c6e9c0e87229d621261cde0780776919bd0e4c03e613b5468de36c97c41d34cdb3abd901e3e737bdcd2266e8e6fd46d57e1cb87e74747b2e5d31fac82af26d46954cfb88233c367a8fd320f88293d04db452818f64a3420d6e7641fc00301c0396e434e9b4a8a154f21b938116426ee46b796306a2fa1455b888c07a5c75af34dd5e86837"}, {0xdd, 0x8d, "7f2353f6c05b07f729d226108f041dabee8b197524c603f225ad5b55bf5b88354bc24ecaf9fc20eff4af361e40f392b1b2a29d49c3856c5189bef249193b23af2ea110306e87e41c273f388c0cee6704d7436d0abbb1e6298b45dcbb0a3a43fb4be81d777f6b22a4dcb2442fef43c68722e691e5216d7ef7356c945bd4dfb6f8acd066c1ec031532632fd34928"}, {0xdd, 0x54, "1b395ca4764254b963a8bb9cd251fa8a3352a5520c11c74d142559b1a5f69be7f63660ffae91e9c535a241c0873603eaf07cc2b11237bf02a66a447ccb0dde0bc83470f7b66f2121716c96a7bed835968388a874"}, {0xdd, 0x6, "fd59cb84faea"}, {0xdd, 0x91, "1ca5ef6e83fe41a700292908cfe9e9bd10284561380b29577522c7af8e748608fb43f820f374fc6799858df2f2f80b7de8a868779dafe3cf5f1f996346f54c7a84bd0b4f1cbcd9d396400623fc55008ec0bb73e5548ca2470b02e69f8ec18b9a6751b78a088727c059b3fe2e5aa277b80792ec8ad0c81af0f526a1191e2b40624839292178df43b585a0e15519b25a7995"}, {0xdd, 0xaa, "345a398ce624ff1097e1506a9d74cb623a88035bb3f4e3fef41bc3edfd40a2d4580df1ed9cba1f6f67b612efb18f5bf6eb350c6166590cb3eb17aed689a19d7ae6dad1a3d3d933378f38f922478e66b110aa19d5bda75c212e648fbf659fb93a75acd7a5223658deec7d2b5d223ab4793feac4082810c48fff2eec83db836c9c39e1f17b1457c83c27e6457c5172cdaaa556320c8b88cef37d998abf0b5e0727ab2af894570172d763f0"}]}}]}, 0x3d0}}, 0xc000) 3.895893984s ago: executing program 2 (id=2089): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_MM(0x41555856, 0xf7354000, &(0x7f0000ffa000/0x3000)=nil) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x0) chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000005a00010000000000fffa00a20900000000000080"], 0x18}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000000), 0x4) connect$bt_l2cap(r5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08001e0000a38000"], 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x5}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a00000000000002000200"/28, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getpid() 3.843647608s ago: executing program 1 (id=2090): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) creat(0x0, 0xd931d3864d39dcca) statx(0xffffffffffffffff, 0x0, 0x800, 0x400, 0x0) sched_setaffinity(0x0, 0x0, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xe, 0x1, @thr={&(0x7f0000000540)="3b0fa92e2ccc6a547ad0586fb8592c985c9ec017f679fcf247102f4378ecf40785220aa24a6ce3000f35126e4d2611b3bd6d9772d3f9df355914b3913f211eb0d3eadb5392878851fd1f1bae9c238ca93f23fe816a17b55062b69897409aac7548dc2252b889ffa25206e32fc1d75e7139e963f9e619dde85aec85c2b8d63e325b081fb8c9e2f8209336560548a4d28d630a726e08399f77381287388a8768a376342a359a94b8b9d82abd0a8695e0a7d0a6951aa515d4b3cfbd9f7e2471632cea7bb9cb22cf7d2653ce279eba353a054dd22939d98dd167523a24860d093d6482a464f3750efb47ed914e128d362046a0616962464107e12f0344", 0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') fchdir(r2) open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000180)=0x400, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=@gettaction={0x34, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x34}}, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') 3.838542319s ago: executing program 0 (id=2091): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.289375365s ago: executing program 2 (id=2092): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x20000000000002bc, &(0x7f0000000340)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @ldst={0x2, 0x3, 0x4, 0x1f, 0x4, 0xfffffffffffffffc, 0x10}, @jmp={0x5, 0x1, 0xc, 0x2, 0x3, 0xfffffffffffffffc, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xc}], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001c000100"/20, @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(r4, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x80, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010100}}}]}, @CTA_SEQ_ADJ_REPLY={0x4}]}, 0x80}}, 0x0) flock(0xffffffffffffffff, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) keyctl$session_to_parent(0x12) 3.276607766s ago: executing program 1 (id=2093): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x25, &(0x7f00000000c0)=0xffff, 0x4) r5 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0xa00000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]}, 0x9c0) fallocate(r3, 0x0, 0x0, 0x8000001) fallocate(0xffffffffffffffff, 0x20, 0x2000, 0x140000) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fcntl$getflags(r2, 0x0) dup(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') read$FUSE(r7, &(0x7f0000001c00)={0x2020}, 0x2020) r8 = socket(0xa, 0x1, 0x0) read$FUSE(r7, &(0x7f0000004000)={0x2020}, 0x2020) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000000)={0xff, @dev={0xac, 0x14, 0x14, 0x14}, 0x4e22, 0x0, 'lblcr\x00', 0x10, 0x0, 0x7c}, 0x2c) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000002c0)={r5, 0x32, 0x1000}, 0x0, &(0x7f0000000300)="92f7c104379f522c2287b40311fb5e369a902da6da2839bf726f9329e5e5089d58d0f42a0e6b4185ad3707f5fb013d4e2433", &(0x7f0000006040)=""/4096) read(r7, &(0x7f0000001b00)=""/194, 0xc2) 3.168632225s ago: executing program 0 (id=2094): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x363, &(0x7f00000003c0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x280000c, &(0x7f0000000500)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6c733d69736f383835392d312c73657373696f6e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dddf2bd6c2c6465636f6d706f73652c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030332c63726561746f723d85f194712c626172726965722c63726561746f723d65fe04c22c756d61736b3d30303030303030303030303030303030303030303231372c6465636f6d706f73652c666f7263652c7569643d", @ANYRES16, @ANYBLOB="2c756d61736b3d30302c666b7263652c6e60497962cb13d6ef2c00e41f00000000000000000400000000"], 0x1, 0x6ee, &(0x7f00000012c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x1e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x7) syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0xa00010, &(0x7f0000000700)=ANY=[@ANYBLOB='nodecompose,decompose,nobfrrier,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6c733d69736f383835392d310000000072726965722c00bcd0f0b5c4e2957974ff5d7ea3c3dcee087e4983684e8a4c4e4e87b134e30ce77162b12885b964b3506ff3eae0f3599447b17861d19be78079e5dd7bdc7f1eb36e31ac14de48349767164f5f6431bbdeaef96a4f2bce64b5cfa76ce3a2c4302374bc5535d7e2eb8dfb2e5d58a37b7e37836597c21f51bcdf6df4cad825cfd9ef5ee9e89e04b15cd3cea9e152d67b9a7eedc5dfe6d85a3ce7c342da8cc969b552197cb8bcc4a1009f38f4a85b7c742101ba5bc03115feca2b994c699812"], 0x6, 0x635, &(0x7f0000000c80)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x6a02, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1000a, &(0x7f00000003c0)=ANY=[], 0x21, 0x1507, &(0x7f0000001b00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r3, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) socket(0x40000000015, 0x5, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, 0x0, 0x4080) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000007c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') gettid() r4 = socket(0x2, 0x3, 0x49) sendmmsg$unix(r4, &(0x7f0000000980)=[{{&(0x7f0000000540), 0x6e, 0x0, 0x0, &(0x7f0000000880)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.488065006s ago: executing program 1 (id=2095): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d2, &(0x7f0000000000)) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[], 0x33fe0}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000080)=0x8, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000600)={0x58, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000680)={0x0}) socket$inet6_icmp(0xa, 0x2, 0x3a) fremovexattr(r5, &(0x7f00000002c0)=@known='user.incfs.metadata\x00') ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000200)={r6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000240)={r7, 0x0, r4, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000280)={r7}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) 1.487366865s ago: executing program 2 (id=2096): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000cc0)={0x2c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4, 0xa}, @NL80211_KEY_IDX={0x5}]}]}, 0x2c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x1412, 0x10, 0x70bd2a, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4040}, 0x20000001) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="0149000000009500"/24], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x4c}}, 0x0) r6 = socket$kcm(0x29, 0x0, 0x0) syz_emit_ethernet(0xf30, &(0x7f0000000040)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "5678c1", 0xefa, 0x84, 0x0, @empty, @local, {[@fragment, @srh={0x0, 0xa, 0x4, 0x5, 0x0, 0x0, 0x0, [@private2, @rand_addr=' \x01\x00', @private0, @loopback, @mcast2]}, @dstopts={0x0, 0xa, '\x00', [@hao={0xc9, 0x10, @private1}, @enc_lim, @jumbo, @jumbo, @calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @dstopts={0x0, 0x1, '\x00', [@enc_lim, @generic={0x0, 0x5, "a4513c2f01"}, @pad1]}, @dstopts={0x0, 0x17, '\x00', [@calipso={0x7, 0x48, {0x0, 0x10, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @enc_lim, @generic={0x0, 0x5a, "1d99d9f61952c5ddbc4489b4977fe8ce8c93c943f09be5f65228890c45e1a561fafa7c9e2385e87c65e48de1e1bd3596d308a1295d704475458f04d8522e24b9505a419713e8254222f3d1064e0fa73ca4a9c6c81c4d94d772fe"}, @hao={0xc9, 0x10, @empty}]}, @dstopts={0x0, 0x1aa, '\x00', [@generic={0x0, 0xd4f, "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"}]}], "bd1a"}}}}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000003c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$devlink(&(0x7f0000000b80), r7) socket$packet(0x11, 0x2, 0x300) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r8, 0x6, 0x4, 0x0, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x0, 0x0, 'wrr\x00'}, 0x2c) r10 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r10, &(0x7f0000001680)=[{&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="9e", 0x1}], 0x1}], 0x1, 0xfc) socket$nl_xfrm(0x10, 0x3, 0x6) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r11, &(0x7f0000000fc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24045010}, 0x200048c0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)=ANY=[@ANYBLOB="5800000013000100"/20, @ANYRES32=0x0, @ANYBLOB="00400000000000001400030064756d6d79300000000000000000000005002100010000f21a002200e8c8798bd839d6a2889819625508e12c8529add654f3db00"], 0x58}}, 0x0) 1.300976681s ago: executing program 2 (id=2097): r0 = socket$kcm(0x2, 0x3, 0x84) unshare(0x20000400) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0x2}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r1, 0x0, 0x0}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="7a00330080000000ffffffffffff08021100000050505050505000000000000000000000000001000301"], 0x98}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="b40800000000000073119a00000000008510000002000000b7000000000000009500c200000000009500001200000000978397f6f8d449eca162e33d3cc50e3ea2bda29b6c5c0dd4ae4a5723d7bb1782d799214e20806df14107bbb18383f65bfa943f096ffd3f1a5195665bd897b554a4229f80258ac79116086d8764612511b5fbf0562c4034196f45d920ce764e50311836d630a55bd079ffb7c7bfd4d9e226"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000000)=0x8000015, 0x4) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x7, 0x3f, 0x2, 0x3, 0x0, 0x70bd29, 0x25dfdbfb, [@sadb_x_nat_t_type={0x1, 0x14, 0x1}]}, 0x18}}, 0x4008000) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'vlan1\x00', 0x0}) sendto$packet(r9, &(0x7f0000000040)="363c8f1fca5d66d08e583e7c88a8", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r10}, 0x14) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, 0x0}, 0x4008804) sendmsg$inet(r0, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e000000000000000000200003800800040000000000080002002000000004000500080005"], 0x4c}}, 0x0) socket$kcm(0x10, 0x3, 0x10) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r12, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x30, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r14}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x30}], 0x1}, 0x0) socket$kcm(0x11, 0x3, 0x0) 8.48447ms ago: executing program 1 (id=2098): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000900)='./binderfs/binder0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x3a, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0x7, &(0x7f00000006c0), 0x0) socket$isdn_base(0x22, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x5, [@enum={0x7, 0x1, 0x0, 0x6, 0x4, [{0xffffffff}]}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000240)=""/172, 0x31, 0xac, 0x1, 0xfffffffd, 0x0, @void, @value}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'wg0\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000080), r4) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r6 = socket$netlink(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x4810) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}}, 0x0) 0s ago: executing program 0 (id=2099): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000000)={r3, 0x9, 0xffffffffffff1634, 0x8}) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001880)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x98, 0x130, 0x0, 0x98, 0x280, 0x348, 0x348, 0x348, 0x348, 0x348, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'netpci0\x00', 'netpci0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@local, @local, 0x0, 0x0, 'vcan0\x00', 'netpci0\x00', {}, {}, 0x11, 0x0, 0x4c}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'team_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @TTL={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x30048000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f2, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000800)}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x2f, 0x2b, 0xa1, 0x80000000, 0x7a, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x80, 0x7, 0x7}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000640)={0x60, 0x0, 0x4f3ec79b6c2060a7, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x4}, @HEADER={0x4}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x60}}, 0x4000011) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv6_getaddrlabel={0x58, 0x4a, 0x2, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x40, 0x0, 0x0, 0x5}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFAL_ADDRESS={0x14, 0x1, @remote}]}, 0x58}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r7) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x0, 0x0, 0xfffff062}}]}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x70}}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x8100, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): 94967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1688" name="/newroot/104/file0/bus" dev="loop1" ino=19 res=1 errno=0 [ 779.479626][T10634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 779.525872][T10634] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.533083][T10634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 779.564000][T10634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 779.705442][T10634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 779.898116][T10634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 779.917255][T10634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 780.006222][T10634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 780.039306][T10634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 780.104314][T10634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 780.167158][T10634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 780.199356][T11320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 780.238574][T11320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 780.266668][T10634] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 780.582997][T10634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 780.769693][T10634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 781.397880][T11501] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1693'. [ 781.738454][T11506] loop0: detected capacity change from 0 to 256 [ 781.758927][ T6825] device hsr_slave_0 left promiscuous mode [ 781.791291][ T6825] device hsr_slave_1 left promiscuous mode [ 781.803964][T11507] loop2: detected capacity change from 0 to 1024 [ 781.841517][ T6825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 781.871383][ T6825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 781.893632][T11506] FAT-fs (loop0): bogus sectors per cluster 0 [ 781.931787][T11506] FAT-fs (loop0): Can't find a valid FAT filesystem [ 781.950862][T11507] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 781.973380][ T6825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 782.012024][T11507] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 782.022390][ T6825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 782.060302][ T6825] device bridge_slave_1 left promiscuous mode [ 782.067177][ T6825] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.076233][ T6825] device bridge_slave_0 left promiscuous mode [ 782.083260][ T6825] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.095306][T11513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1696'. [ 782.150928][ T26] audit: type=1804 audit(1729015135.388:372): pid=11507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1695" name="/newroot/12/file0/bus" dev="loop2" ino=19 res=1 errno=0 [ 782.222794][ T6825] device veth1_macvtap left promiscuous mode [ 782.228890][ T6825] device veth0_macvtap left promiscuous mode [ 782.248905][ T6825] device veth1_vlan left promiscuous mode [ 782.267802][ T6825] device veth0_vlan left promiscuous mode [ 782.925325][ T6825] team0 (unregistering): Port device team_slave_1 removed [ 782.990860][ T6825] team0 (unregistering): Port device team_slave_0 removed [ 783.052644][ T6825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 783.108507][ T6825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 783.307065][T11524] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1699'. [ 783.319520][ T6825] bond0 (unregistering): Released all slaves [ 783.389677][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 783.397813][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 783.451087][T11527] loop0: detected capacity change from 0 to 1024 [ 783.508901][T11320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 783.520842][T11527] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 783.568615][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 783.598717][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 783.612422][T11527] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 783.794477][T11320] device veth0_vlan entered promiscuous mode [ 784.164740][ T7] vhci_hcd: vhci_device speed not set [ 784.299401][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 784.307954][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 784.318840][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 784.385749][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 784.663743][ T26] audit: type=1326 audit(1729015137.848:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11535 comm="syz.1.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3608d9ff9 code=0x7ffc0000 [ 785.802136][T11540] netlink: 'syz.1.1702': attribute type 1 has an invalid length. [ 785.811923][T11540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1702'. [ 785.867144][ T26] audit: type=1326 audit(1729015137.848:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11535 comm="syz.1.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3608d9ff9 code=0x7ffc0000 [ 785.990348][T11320] device veth1_vlan entered promiscuous mode [ 786.313352][ T26] audit: type=1326 audit(1729015139.028:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11535 comm="syz.1.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff3608d9ff9 code=0x7ffc0000 [ 786.317278][T11320] device veth0_macvtap entered promiscuous mode [ 786.376186][T11545] bad cache= option: none [ 786.376186][T11545] [ 786.395183][T11545] CIFS: VFS: bad cache= option: none [ 786.422735][ T26] audit: type=1326 audit(1729015139.028:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11535 comm="syz.1.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3608d9ff9 code=0x7ffc0000 [ 786.445854][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 786.461478][T11547] loop4: detected capacity change from 0 to 1024 [ 786.476885][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 786.625046][ T26] audit: type=1326 audit(1729015139.028:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11535 comm="syz.1.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3608d9ff9 code=0x7ffc0000 [ 786.648743][ T26] audit: type=1326 audit(1729015139.028:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11535 comm="syz.1.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff3608d9ff9 code=0x7ffc0000 [ 786.654974][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 786.731135][T11547] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 786.849035][T11547] EXT4-fs (loop4): INFO: recovery required on readonly filesystem [ 787.476458][T11547] EXT4-fs (loop4): write access will be enabled during recovery [ 787.512375][ T26] audit: type=1326 audit(1729015139.028:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11535 comm="syz.1.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3608d9ff9 code=0x7ffc0000 [ 787.545022][T11320] device veth1_macvtap entered promiscuous mode [ 787.583772][T11547] JBD2: no valid journal superblock found [ 787.589565][T11547] EXT4-fs (loop4): error loading journal [ 787.607060][ T26] audit: type=1326 audit(1729015139.028:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11535 comm="syz.1.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3608d9ff9 code=0x7ffc0000 [ 787.607349][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 787.631274][ T26] audit: type=1326 audit(1729015139.028:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11535 comm="syz.1.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff3608d9ff9 code=0x7ffc0000 [ 787.662403][ T26] audit: type=1326 audit(1729015139.028:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11535 comm="syz.1.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3608d9ff9 code=0x7ffc0000 [ 787.690952][T11554] device ipip0 entered promiscuous mode [ 787.714375][T11556] device ip6tnl1 entered promiscuous mode [ 787.806429][T11320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.827428][T11320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.849523][T11320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.896879][T11320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.929154][T11320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.949132][T11320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.968924][T11320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.996521][T11320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.018344][T11320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 788.039435][T11320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.069859][T11320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.092500][T11320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.117420][T11320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.132192][T11320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.252170][T11567] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1709'. [ 788.422766][T11320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.629099][T11320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.919199][T11320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.015789][T11320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 789.025664][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 789.057136][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 789.066557][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 789.078053][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 789.219001][T11320] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.309388][T11320] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.352376][T11320] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.361136][T11320] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.378460][T11571] loop2: detected capacity change from 0 to 1024 [ 789.418487][T11571] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 789.525782][T11571] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 790.222188][ T26] kauditd_printk_skb: 38 callbacks suppressed [ 790.222205][ T26] audit: type=1804 audit(1729015143.458:421): pid=11571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1712" name="/newroot/16/file0/bus" dev="loop2" ino=19 res=1 errno=0 [ 790.808244][ T3627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.836188][T11588] loop0: detected capacity change from 0 to 512 [ 790.850879][ T3627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.739996][T11595] loop4: detected capacity change from 0 to 1024 [ 791.758599][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 791.781295][ T3715] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.796589][ T3715] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.817324][T10634] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 791.827650][T11588] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #16: comm syz.0.1716: casefold flag without casefold feature [ 791.866432][T11588] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1716: couldn't read orphan inode 16 (err -117) [ 791.882824][T11595] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 791.966847][T11588] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 791.994806][T10634] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 792.035871][T11588] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038 (0x7fffffff) [ 792.548417][T11595] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 792.908779][T11611] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1720'. [ 793.553099][ T26] audit: type=1326 audit(1729015146.198:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11586 comm="syz.0.1716" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb72544eff9 code=0x0 [ 793.741658][ T26] audit: type=1804 audit(1729015146.928:423): pid=11592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1717" name="/newroot/94/file0/bus" dev="loop4" ino=19 res=1 errno=0 [ 793.746441][T11614] netlink: 'syz.1.1722': attribute type 1 has an invalid length. [ 793.968093][T11619] loop1: detected capacity change from 0 to 16 [ 794.290718][T11619] erofs: (device loop1): mounted with root inode @ nid 36. [ 794.492614][T11616] loop3: detected capacity change from 0 to 4096 [ 794.953212][T11616] NILFS (loop3): invalid segment: Checksum error in segment payload [ 794.994611][T11616] NILFS (loop3): trying rollback from an earlier position [ 795.184868][T11614] mac80211_hwsim hwsim34 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 795.265664][T11616] NILFS (loop3): recovery complete [ 795.435189][T11630] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 797.050779][T11644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1730'. [ 797.161566][T11642] loop1: detected capacity change from 0 to 256 [ 797.353673][T11653] netlink: 131088 bytes leftover after parsing attributes in process `syz.3.1729'. [ 797.675909][T11642] exfat: Bad value for 'gid' [ 797.712414][ T3660] wlan0: Trigger new scan to find an IBSS to join [ 798.121194][T11642] loop1: detected capacity change from 0 to 764 [ 798.308336][T11655] loop4: detected capacity change from 0 to 2048 [ 798.463815][T11663] dccp_close: ABORT with 4947 bytes unread [ 798.504860][T11655] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 799.967048][T11685] input: syz0 as /devices/virtual/input/input70 [ 800.689856][ T9600] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 800.773874][T11686] loop3: detected capacity change from 0 to 1024 [ 800.842487][T11686] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 800.926137][T11686] EXT4-fs (loop3): INFO: recovery required on readonly filesystem [ 800.974955][T11686] EXT4-fs (loop3): write access will be enabled during recovery [ 801.082635][T11686] JBD2: no valid journal superblock found [ 801.093393][T11686] EXT4-fs (loop3): error loading journal [ 801.145730][ T9600] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 801.183798][ T9600] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 801.235222][ T9600] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 801.255776][T11697] device ip6tnl1 entered promiscuous mode [ 801.263028][ T9600] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.342978][ T9600] usb 2-1: config 0 descriptor?? [ 801.817017][T11706] loop2: detected capacity change from 0 to 256 [ 801.854352][ T9600] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 801.866654][T11700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1744'. [ 801.875641][ T9600] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 801.876452][ T9600] plantronics 0003:047F:FFFF.002C: No inputs registered, leaving [ 801.941439][ T9600] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 801.954616][T11706] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 802.014876][T11700] loop0: detected capacity change from 0 to 2048 [ 802.292118][ T7] usb 2-1: USB disconnect, device number 36 [ 802.675658][ T3627] wlan0: Trigger new scan to find an IBSS to join [ 802.750541][T11711] tipc: Enabling of bearer rejected, failed to enable media [ 802.761582][T11700] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 804.784641][T11729] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 804.957383][ T9] wlan0: Creating new IBSS network, BSSID 5a:d2:87:df:e6:77 [ 805.033367][T11734] loop1: detected capacity change from 0 to 4096 [ 805.157654][T11741] loop2: detected capacity change from 0 to 8192 [ 805.181005][T11734] NILFS (loop1): invalid segment: Checksum error in segment payload [ 805.212476][T11734] NILFS (loop1): trying rollback from an earlier position [ 805.273343][T11734] NILFS (loop1): recovery complete [ 805.407170][T11741] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 805.450638][T11741] REISERFS (device loop2): using ordered data mode [ 805.457966][T11741] reiserfs: using flush barriers [ 805.463607][T11753] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 805.477864][T11741] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 805.552204][T11741] REISERFS (device loop2): checking transaction log (loop2) [ 805.592516][ T1292] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 806.675156][ T1292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 806.881218][ T1292] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 806.912588][ T1292] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 806.922138][ T1292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.941152][T11761] loop4: detected capacity change from 0 to 512 [ 807.174879][ T1292] usb 4-1: config 0 descriptor?? [ 807.279179][T11761] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 807.522532][T11761] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038 (0x7fffffff) [ 807.669943][T11741] REISERFS (device loop2): Using tea hash to sort names [ 807.689117][T11741] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 807.704193][ T26] audit: type=1326 audit(1729015160.948:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11760 comm="syz.4.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26f4adcff9 code=0x7ffc0000 [ 807.758159][ T26] audit: type=1326 audit(1729015160.948:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11760 comm="syz.4.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26f4adcff9 code=0x7ffc0000 [ 807.791920][T11741] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 807.803611][ T1292] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 807.811036][ T1292] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 807.841257][ T1292] plantronics 0003:047F:FFFF.002D: No inputs registered, leaving [ 807.868766][ T1292] plantronics 0003:047F:FFFF.002D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 807.891770][ T26] audit: type=1326 audit(1729015160.968:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11760 comm="syz.4.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26f4adcff9 code=0x7ffc0000 [ 807.923597][ T26] audit: type=1326 audit(1729015160.968:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11760 comm="syz.4.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26f4adcff9 code=0x7ffc0000 [ 807.962843][ T26] audit: type=1326 audit(1729015160.968:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11760 comm="syz.4.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26f4adcff9 code=0x7ffc0000 [ 808.007950][ T26] audit: type=1326 audit(1729015160.968:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11760 comm="syz.4.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26f4adcff9 code=0x7ffc0000 [ 808.074234][ T26] audit: type=1326 audit(1729015160.978:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11760 comm="syz.4.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26f4adcff9 code=0x7ffc0000 [ 808.099147][ T26] audit: type=1326 audit(1729015160.978:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11760 comm="syz.4.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26f4adcff9 code=0x7ffc0000 [ 808.123873][ T1292] usb 4-1: USB disconnect, device number 35 [ 808.131234][ T26] audit: type=1326 audit(1729015160.978:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11760 comm="syz.4.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26f4adcff9 code=0x7ffc0000 [ 808.161147][ T26] audit: type=1326 audit(1729015160.978:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11760 comm="syz.4.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26f4adcff9 code=0x7ffc0000 [ 808.540316][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.568129][T11777] ip6t_rpfilter: unknown options [ 808.688680][T11780] loop4: detected capacity change from 0 to 764 [ 809.073633][T11793] loop0: detected capacity change from 0 to 512 [ 809.546763][T11793] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.1770: casefold flag without casefold feature [ 809.559921][T11793] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1770: couldn't read orphan inode 15 (err -117) [ 809.572113][T11793] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 810.660721][T11802] loop4: detected capacity change from 0 to 2048 [ 811.011703][T11802] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 811.448946][T11802] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 811.612896][T11802] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 226 with error 28 [ 811.637585][T11802] EXT4-fs (loop4): This should not happen!! Data will be lost [ 811.637585][T11802] [ 811.662073][T11802] EXT4-fs (loop4): Total free blocks count 0 [ 811.678353][T11828] loop3: detected capacity change from 0 to 256 [ 811.692376][T11802] EXT4-fs (loop4): Free/Dirty block details [ 811.705770][T11802] EXT4-fs (loop4): free_blocks=2415919104 [ 811.727003][T11828] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 811.739662][T11802] EXT4-fs (loop4): dirty_blocks=240 [ 811.755568][T11802] EXT4-fs (loop4): Block reservation details [ 811.761688][T11802] EXT4-fs (loop4): i_reserved_data_blocks=15 [ 811.794164][T11828] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 812.051592][ T3627] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 812.052075][T11832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1780'. [ 812.502592][ T3627] EXT4-fs (loop4): This should not happen!! Data will be lost [ 812.502592][ T3627] [ 812.723313][ T13] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 812.774331][T11839] loop3: detected capacity change from 0 to 64 [ 813.771156][ T26] kauditd_printk_skb: 61 callbacks suppressed [ 813.771173][ T26] audit: type=1326 audit(1729015167.008:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11836 comm="syz.2.1782" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d9e930ff9 code=0x0 [ 813.800084][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.812404][ T13] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 813.836168][ T13] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 813.845660][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.862451][ T13] usb 1-1: config 0 descriptor?? [ 813.904318][ T1292] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 814.273051][ T1292] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 814.297966][ T1292] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 814.328026][ T1292] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 814.347444][ T13] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 814.356337][ T13] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 814.373017][ T13] plantronics 0003:047F:FFFF.002E: No inputs registered, leaving [ 814.421675][ T13] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 814.512887][ T1292] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 814.541045][ T1292] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.569015][ T1292] usb 5-1: Product: syz [ 814.588720][ T1292] usb 5-1: Manufacturer: syz [ 814.609010][ T1292] usb 5-1: SerialNumber: syz [ 814.635905][ T13] usb 1-1: USB disconnect, device number 20 [ 814.673251][ T1292] usb 5-1: selecting invalid altsetting 1 [ 815.071245][T11854] loop2: detected capacity change from 0 to 4096 [ 815.114785][ T1292] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 815.121462][ T1292] cdc_ncm 5-1:1.0: bind() failure [ 815.166983][T11854] NILFS (loop2): invalid segment: Checksum error in segment payload [ 815.222396][T11854] NILFS (loop2): trying rollback from an earlier position [ 815.238673][ T1292] cdc_ncm 5-1:1.1: skipping garbage [ 815.246100][T11854] NILFS (loop2): recovery complete [ 815.256556][T11857] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 816.172790][ T1292] cdc_ncm 5-1:1.1: skipping garbage [ 816.178049][ T1292] cdc_ncm 5-1:1.1: invalid descriptor buffer length [ 816.185241][ T1292] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 816.192050][ T1292] cdc_ncm 5-1:1.1: bind() failure [ 816.279090][T11863] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1786'. [ 816.374631][T11866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1787'. [ 816.842996][T11877] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 817.817128][T11727] usb 5-1: USB disconnect, device number 33 [ 818.046626][T11894] loop4: detected capacity change from 0 to 512 [ 818.109089][ T26] audit: type=1326 audit(1729015171.348:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11888 comm="syz.3.1793" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa43c12aff9 code=0x0 [ 818.208352][T11901] netlink: 131088 bytes leftover after parsing attributes in process `syz.0.1792'. [ 818.235964][T11901] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 818.309401][T11894] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 818.309401][T11894] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 818.309401][T11894] [ 818.419870][T11894] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 818.462061][T11894] EXT4-fs (loop4): 1 truncate cleaned up [ 818.482157][T11894] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 818.775315][T11910] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 818.938096][T11914] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 819.216751][T11909] xt_CT: You must specify a L4 protocol and not use inversions on it [ 819.263083][T11913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1800'. [ 819.602850][T11909] device syzkaller1 entered promiscuous mode [ 819.797816][T11916] loop0: detected capacity change from 0 to 164 [ 819.895846][T11921] loop4: detected capacity change from 0 to 1024 [ 819.958594][T11921] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 820.009110][T11924] netlink: 'syz.1.1804': attribute type 16 has an invalid length. [ 820.022846][T11921] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 820.050727][ T26] audit: type=1326 audit(1729015173.298:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11915 comm="syz.0.1801" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb72544eff9 code=0x0 [ 820.156970][T11926] loop0: detected capacity change from 0 to 164 [ 820.175149][T11924] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1804'. [ 820.232544][T11926] ISOFS: Unable to identify CD-ROM format. [ 820.277181][ T26] audit: type=1804 audit(1729015173.518:498): pid=11921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1802" name="/newroot/109/file0/bus" dev="loop4" ino=19 res=1 errno=0 [ 820.446347][T11932] kvm [11930]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010006 data 0x0 [ 821.367649][T11939] sd 0:0:1:0: device reset [ 821.486622][T11946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1809'. [ 821.510024][T11948] loop0: detected capacity change from 0 to 1024 [ 821.570349][T11954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1813'. [ 823.572451][ T13] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 823.619649][T11963] IPv6: addrconf: prefix option has invalid lifetime [ 823.675960][T11976] overlayfs: './file0' not a directory [ 823.698561][T11973] fuse: Unknown parameter './file0' [ 823.811519][T11979] loop2: detected capacity change from 0 to 1024 [ 824.040775][T11979] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 824.172574][ T13] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 824.263234][ T13] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 824.606288][T11979] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 824.732463][ T13] usb 2-1: string descriptor 0 read error: -71 [ 824.739122][ T13] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 824.753640][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 824.837481][ T13] usb 2-1: can't set config #1, error -71 [ 824.852737][ T26] audit: type=1804 audit(1729015178.098:499): pid=11979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1818" name="/newroot/37/file0/bus" dev="loop2" ino=19 res=1 errno=0 [ 824.874667][ T13] usb 2-1: USB disconnect, device number 37 [ 824.942600][T11991] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 824.953481][T11985] loop1: detected capacity change from 0 to 64 [ 825.560438][T11998] Invalid ELF header type: 0 != 1 [ 826.837152][T12005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1825'. [ 826.922941][T12011] syz.4.1825[12011] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 826.923039][T12011] syz.4.1825[12011] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 827.021204][T12014] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 827.043127][T12014] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 827.051849][T12014] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 827.060706][T12014] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 827.143076][T12016] netlink: 'syz.1.1828': attribute type 1 has an invalid length. [ 827.242310][ T7] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 827.376944][T12023] loop1: detected capacity change from 0 to 512 [ 827.568507][T12023] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 827.616712][T12023] EXT4-fs (loop1): 1 truncate cleaned up [ 827.645117][T12023] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 827.912777][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.032754][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 828.672027][ T7] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 828.683912][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.273709][ T7] usb 1-1: config 0 descriptor?? [ 829.460188][T12040] loop2: detected capacity change from 0 to 1024 [ 829.499418][T12040] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 829.550948][T12040] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 829.569720][T12042] loop4: detected capacity change from 0 to 512 [ 829.771779][T12047] netlink: 131088 bytes leftover after parsing attributes in process `syz.1.1837'. [ 829.792364][T12047] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 829.837930][T12042] kernel read not supported for file /file0 (pid: 12042 comm: syz.4.1836) [ 829.919003][ T26] audit: type=1804 audit(1729015183.158:500): pid=12040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1835" name="/newroot/42/file0/bus" dev="loop2" ino=19 res=1 errno=0 [ 830.027554][T12042] loop4: detected capacity change from 0 to 256 [ 830.068666][ T26] audit: type=1800 audit(1729015183.258:501): pid=12042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1836" name="file0" dev="mqueue" ino=69846 res=0 errno=0 [ 830.187561][ T7] plantronics 0003:047F:FFFF.002F: unknown main item tag 0x0 [ 830.195170][ T7] plantronics 0003:047F:FFFF.002F: unknown main item tag 0x0 [ 830.203014][ T7] plantronics 0003:047F:FFFF.002F: No inputs registered, leaving [ 830.214121][ T7] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 830.229084][ T7] usb 1-1: USB disconnect, device number 21 [ 830.287813][T12042] kernel read not supported for file /bus (pid: 12042 comm: syz.4.1836) [ 830.318430][ T26] audit: type=1800 audit(1729015183.558:502): pid=12042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1836" name="bus" dev="mqueue" ino=69849 res=0 errno=0 [ 830.469684][ T26] audit: type=1326 audit(1729015183.708:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12053 comm="syz.1.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3608d9ff9 code=0x7ffc0000 [ 830.589059][ T26] audit: type=1326 audit(1729015183.778:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12053 comm="syz.1.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7ff3608d9ff9 code=0x7ffc0000 [ 830.697580][ T26] audit: type=1326 audit(1729015183.778:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12053 comm="syz.1.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3608d9ff9 code=0x7ffc0000 [ 831.044041][T12070] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 831.833079][ T26] audit: type=1326 audit(1729015183.778:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12053 comm="syz.1.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3608d9ff9 code=0x7ffc0000 [ 831.862297][ T26] audit: type=1326 audit(1729015183.778:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12053 comm="syz.1.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7ff3608d9ff9 code=0x7ffc0000 [ 831.933501][T12072] loop4: detected capacity change from 0 to 1024 [ 831.962328][ T26] audit: type=1326 audit(1729015183.778:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12053 comm="syz.1.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3608d9ff9 code=0x7ffc0000 [ 832.007265][T12074] loop0: detected capacity change from 0 to 1024 [ 832.015776][ T26] audit: type=1326 audit(1729015183.778:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12053 comm="syz.1.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3608d9ff9 code=0x7ffc0000 [ 832.088086][T12074] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 832.108910][T12072] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 832.152942][T12072] EXT4-fs (loop4): INFO: recovery required on readonly filesystem [ 832.209459][T12072] EXT4-fs (loop4): write access will be enabled during recovery [ 832.231433][T12074] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 832.237807][T12072] JBD2: no valid journal superblock found [ 832.263089][T12072] EXT4-fs (loop4): error loading journal [ 833.016213][T12082] loop3: detected capacity change from 0 to 256 [ 833.270937][T12085] loop0: detected capacity change from 0 to 4096 [ 833.463493][T12085] NILFS (loop0): invalid segment: Checksum error in segment payload [ 833.471548][T12085] NILFS (loop0): trying rollback from an earlier position [ 833.546122][T12091] device team_slave_0 entered promiscuous mode [ 833.629496][T12085] NILFS (loop0): recovery complete [ 833.703571][T12093] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 833.839132][T12095] loop4: detected capacity change from 0 to 1024 [ 833.971023][T12095] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 834.027886][T12095] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 834.052611][ C0] vkms_vblank_simulate: vblank timer overrun [ 834.996215][T12104] loop1: detected capacity change from 0 to 512 [ 835.100019][T12109] loop2: detected capacity change from 0 to 512 [ 835.149410][T12104] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 835.178554][T12104] EXT4-fs (loop1): 1 truncate cleaned up [ 835.188433][T12104] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000009,noblock_validity,usrquota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000008,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000a9f,nodiscard,,errors=continue. Quota mode: writeback. [ 835.216325][ C0] vkms_vblank_simulate: vblank timer overrun [ 835.335225][ T7] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 835.354531][T12109] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 835.380563][T12109] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 836.411027][T12122] netlink: 'syz.4.1857': attribute type 1 has an invalid length. [ 836.420375][T12104] kernel read not supported for file /file0 (pid: 12104 comm: syz.1.1851) [ 836.444363][T12109] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 836.592525][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 836.592540][ T26] audit: type=1800 audit(1729015189.838:532): pid=12104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1851" name="file0" dev="mqueue" ino=57933 res=0 errno=0 [ 836.732496][T12109] System zones: 0-2, 18-18, 34-34 [ 836.768741][T12104] loop1: detected capacity change from 0 to 256 [ 836.777691][T12109] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 836.862641][T12109] EXT4-fs (loop2): 1 truncate cleaned up [ 836.869183][T12109] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 836.946351][ T26] audit: type=1326 audit(1729015190.188:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12108 comm="syz.2.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9e930ff9 code=0x7ffc0000 [ 836.996115][ T26] audit: type=1326 audit(1729015190.218:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12108 comm="syz.2.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9e930ff9 code=0x7ffc0000 [ 837.026523][ T26] audit: type=1326 audit(1729015190.218:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12108 comm="syz.2.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8d9e930ff9 code=0x7ffc0000 [ 837.055546][ T26] audit: type=1326 audit(1729015190.218:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12108 comm="syz.2.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9e930ff9 code=0x7ffc0000 [ 837.095954][ T26] audit: type=1326 audit(1729015190.218:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12108 comm="syz.2.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9e930ff9 code=0x7ffc0000 [ 837.118330][ C0] vkms_vblank_simulate: vblank timer overrun [ 837.129663][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 837.140798][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 837.154965][ T7] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 837.165145][ T26] audit: type=1326 audit(1729015190.218:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12108 comm="syz.2.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8d9e930ff9 code=0x7ffc0000 [ 837.198737][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.212902][ T7] usb 4-1: config 0 descriptor?? [ 837.221104][ T26] audit: type=1326 audit(1729015190.218:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12108 comm="syz.2.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9e930ff9 code=0x7ffc0000 [ 837.268932][ T26] audit: type=1326 audit(1729015190.218:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12108 comm="syz.2.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9e930ff9 code=0x7ffc0000 [ 837.298919][ T26] audit: type=1326 audit(1729015190.218:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12108 comm="syz.2.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8d9e930ff9 code=0x7ffc0000 [ 837.389308][T12132] loop4: detected capacity change from 0 to 1024 [ 837.485875][T12132] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 837.499443][T12137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1860'. [ 837.547280][T12132] EXT4-fs (loop4): INFO: recovery required on readonly filesystem [ 837.574650][T12132] EXT4-fs (loop4): write access will be enabled during recovery [ 837.620882][T12132] JBD2: no valid journal superblock found [ 837.652025][T12132] EXT4-fs (loop4): error loading journal [ 837.715699][ T7] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 837.729846][ T7] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 837.739536][ T7] plantronics 0003:047F:FFFF.0030: No inputs registered, leaving [ 837.982816][T12141] loop0: detected capacity change from 0 to 40427 [ 838.035680][ T3734] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 838.173745][T12141] F2FS-fs (loop0): invalid crc value [ 838.441242][T12141] F2FS-fs (loop0): Found nat_bits in checkpoint [ 838.545228][ T7] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 838.560808][ T7] usb 4-1: USB disconnect, device number 36 [ 838.569803][T12141] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 840.597494][ T8346] attempt to access beyond end of device [ 840.597494][ T8346] loop0: rw=524288, want=45072, limit=40427 [ 840.633671][ T8346] attempt to access beyond end of device [ 840.633671][ T8346] loop0: rw=0, want=45072, limit=40427 [ 840.811618][ T3734] attempt to access beyond end of device [ 840.811618][ T3734] loop0: rw=2049, want=40992, limit=40427 [ 840.885794][ T8346] bridge0: port 3(syz_tun) entered disabled state [ 840.900850][ T8346] device syz_tun left promiscuous mode [ 840.910828][ T8346] bridge0: port 3(syz_tun) entered disabled state [ 841.151186][T12165] tap0: tun_chr_ioctl cmd 1074025677 [ 841.181039][T12165] tap0: linktype set to 270 [ 841.313358][T12168] loop4: detected capacity change from 0 to 4096 [ 842.236738][T12170] 9pnet: Insufficient options for proto=fd [ 842.266692][T12168] NILFS (loop4): invalid segment: Checksum error in segment payload [ 842.402466][T12168] NILFS (loop4): trying rollback from an earlier position [ 842.433761][T12168] NILFS (loop4): recovery complete [ 842.529967][T12177] netlink: 703 bytes leftover after parsing attributes in process `syz.1.1868'. [ 842.946364][ T26] kauditd_printk_skb: 36 callbacks suppressed [ 842.946386][ T26] audit: type=1326 audit(1729015195.788:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12172 comm="syz.1.1868" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3608d9ff9 code=0x0 [ 843.035369][T12176] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 843.250211][T12181] netlink: 'syz.1.1870': attribute type 1 has an invalid length. [ 844.698505][T12191] loop4: detected capacity change from 0 to 512 [ 844.968856][T12192] loop1: detected capacity change from 0 to 4096 [ 845.573442][T12191] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 845.582896][T12194] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 845.595390][T12191] EXT4-fs (loop4): 1 truncate cleaned up [ 845.622537][T12191] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000000009,noblock_validity,usrquota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000008,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000a9f,nodiscard,,errors=continue. Quota mode: writeback. [ 845.947670][T12203] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 846.028731][T12198] loop2: detected capacity change from 0 to 40427 [ 846.126030][T12191] kernel read not supported for file /file0 (pid: 12191 comm: syz.4.1871) [ 846.135274][ T26] audit: type=1800 audit(1729015199.378:579): pid=12191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1871" name="file0" dev="mqueue" ino=69846 res=0 errno=0 [ 846.141271][T12191] loop4: detected capacity change from 0 to 256 [ 846.193013][T12198] F2FS-fs (loop2): invalid crc value [ 846.231767][T12198] F2FS-fs (loop2): Found nat_bits in checkpoint [ 846.322420][T12198] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 846.495219][T12209] xt_CT: You must specify a L4 protocol and not use inversions on it [ 846.626732][ T26] audit: type=1800 audit(1729015199.848:580): pid=12216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1877" name="file2" dev="overlay" ino=25 res=0 errno=0 [ 847.016759][T11061] attempt to access beyond end of device [ 847.016759][T11061] loop2: rw=524288, want=45072, limit=40427 [ 847.033850][T12215] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 847.091504][T11061] attempt to access beyond end of device [ 847.091504][T11061] loop2: rw=0, want=45072, limit=40427 [ 847.366051][T12223] loop3: detected capacity change from 0 to 256 [ 847.505583][T12225] loop4: detected capacity change from 0 to 512 [ 847.818273][ T154] attempt to access beyond end of device [ 847.818273][ T154] loop2: rw=2049, want=40992, limit=40427 [ 848.043216][ T9600] Bluetooth: hci1: command 0x0409 tx timeout [ 848.164523][T12225] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 848.173388][T12225] EXT4-fs (loop4): failed to open journal device unknown-block(7,75) -6 [ 848.193920][T12223] FAT-fs (loop3): Directory bread(block 64) failed [ 848.200738][T12223] FAT-fs (loop3): Directory bread(block 65) failed [ 848.212727][T12223] FAT-fs (loop3): Directory bread(block 66) failed [ 848.219380][T12223] FAT-fs (loop3): Directory bread(block 67) failed [ 848.239886][T12223] FAT-fs (loop3): Directory bread(block 68) failed [ 848.246552][T12223] FAT-fs (loop3): Directory bread(block 69) failed [ 848.253378][T12223] FAT-fs (loop3): Directory bread(block 70) failed [ 848.260423][T12223] FAT-fs (loop3): Directory bread(block 71) failed [ 848.268764][T12223] FAT-fs (loop3): Directory bread(block 72) failed [ 848.275700][T12223] FAT-fs (loop3): Directory bread(block 73) failed [ 848.295102][T12224] xt_hashlimit: max too large, truncated to 1048576 [ 848.589879][T12230] loop1: detected capacity change from 0 to 4096 [ 848.615568][T12202] chnl_net:caif_netlink_parms(): no params data found [ 849.103331][ T3648] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 849.164690][T12230] NILFS (loop1): invalid segment: Checksum error in segment payload [ 849.192416][T12230] NILFS (loop1): trying rollback from an earlier position [ 849.270846][T12230] NILFS (loop1): recovery complete [ 849.313710][T12237] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 849.352287][ T3648] usb 5-1: Using ep0 maxpacket: 32 [ 849.376233][T12202] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.385916][T12202] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.449189][T12202] device bridge_slave_0 entered promiscuous mode [ 849.478333][T12202] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.486151][ T3648] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 849.509260][ T3648] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 849.579775][T12202] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.588222][T12202] device bridge_slave_1 entered promiscuous mode [ 849.698162][ T3648] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 849.941714][ T3648] usb 5-1: config 1 interface 1 has no altsetting 0 [ 850.602795][ T9600] Bluetooth: hci1: command 0x041b tx timeout [ 850.872517][ T3648] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 850.881737][ T3648] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.890021][ T3648] usb 5-1: Product: syz [ 850.913001][ T3648] usb 5-1: Manufacturer: syz [ 850.917658][ T3648] usb 5-1: SerialNumber: syz [ 850.956522][T12202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 851.030852][T12202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 851.149416][T12202] team0: Port device team_slave_0 added [ 851.170979][T12202] team0: Port device team_slave_1 added [ 851.346843][T12253] 9pnet: Insufficient options for proto=fd [ 852.261866][T12202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 852.269129][T12202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 852.296545][T12202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 852.318135][T12259] fuse: Unknown parameter '' [ 852.333940][ T3648] usb 5-1: USB disconnect, device number 34 [ 852.390433][T12202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 852.403513][T12202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 852.407208][T12259] loop3: detected capacity change from 0 to 512 [ 852.522276][T12202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 852.724525][T12262] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1889'. [ 852.764292][T12262] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 853.217218][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 853.432964][T10634] bond0: (slave bond_slave_1): interface is now down [ 853.495998][ T154] bond0: (slave bond_slave_1): interface is now down [ 853.543650][T10634] bond0: (slave bond_slave_1): interface is now down [ 853.572317][ T154] bond0: (slave bond_slave_1): interface is now down [ 853.582055][T12270] trusted_key: encrypted_key: master key parameter is missing [ 853.597506][T12270] Invalid option length (1048127) for dns_resolver key [ 853.609957][T12202] device hsr_slave_0 entered promiscuous mode [ 853.624592][T12202] device hsr_slave_1 entered promiscuous mode [ 853.634616][ T3627] bond0: (slave bond_slave_1): interface is now down [ 853.648205][T12202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 853.674004][T10634] bond0: (slave bond_slave_1): interface is now down [ 853.702900][T10634] bond0: (slave bond_slave_1): interface is now down [ 853.708614][T12202] Cannot create hsr debugfs directory [ 853.778580][T10634] bond0: (slave bond_slave_1): interface is now down [ 853.837376][ T154] bond0: (slave bond_slave_1): interface is now down [ 853.913713][ T9] bond0: (slave bond_slave_1): interface is now down [ 853.975146][ T3627] bond0: (slave bond_slave_1): interface is now down [ 854.002387][ T3627] bond0: (slave bond_slave_1): interface is now down [ 854.026177][T12274] sch_tbf: burst 0 is lower than device team0 mtu (1514) ! [ 854.033664][ T3734] bond0: (slave bond_slave_1): interface is now down [ 854.151231][T12283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1896'. [ 854.303658][ T9] bond0: (slave bond_slave_1): interface is now down [ 854.355385][T12280] device vlan0 entered promiscuous mode [ 854.445396][ T9] bond0: (slave bond_slave_1): interface is now down [ 854.562459][ T3734] bond0: (slave bond_slave_1): interface is now down [ 854.623434][ T3734] bond0: (slave bond_slave_1): interface is now down [ 854.887161][ T154] bond0: (slave bond_slave_1): interface is now down [ 854.977717][T12280] device vlan0 left promiscuous mode [ 855.002555][ T3660] bond0: (slave bond_slave_1): interface is now down [ 855.069473][ T154] bond0: (slave bond_slave_1): interface is now down [ 855.112302][ T9] bond0: (slave bond_slave_1): interface is now down [ 855.152409][ T9] bond0: (slave bond_slave_1): interface is now down [ 855.174284][T12202] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.228699][ T9] bond0: (slave bond_slave_1): interface is now down [ 855.302966][ T9] bond0: (slave bond_slave_1): interface is now down [ 855.402895][ T9600] Bluetooth: hci1: command 0x0419 tx timeout [ 855.536028][ T9] bond0: now running without any active interface! [ 855.851501][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 855.883073][T12202] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.911568][T12292] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1900'. [ 855.946539][T12292] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 856.024371][T12202] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.143425][T12202] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.183079][T12271] chnl_net:caif_netlink_parms(): no params data found [ 856.209715][T12295] ALSA: mixer_oss: invalid OSS volume 'ÿÿÿÿÿÿÿÿ' [ 856.310835][T12301] xt_HMARK: spi-set and port-set can't be combined [ 856.351438][T12301] netlink: 1528 bytes leftover after parsing attributes in process `syz.4.1902'. [ 856.599827][T12310] loop4: detected capacity change from 0 to 512 [ 856.614355][T12271] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.621611][T12271] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.641850][T12271] device bridge_slave_0 entered promiscuous mode [ 856.666576][T12271] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.675362][T12271] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.683888][T12271] device bridge_slave_1 entered promiscuous mode [ 856.690986][T12202] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 856.778876][T12202] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 856.798887][T12202] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 856.923865][T12303] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1903'. [ 856.934178][T12303] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1903'. [ 857.641216][T12271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 857.692999][T12271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 857.882443][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 858.316216][T12202] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 858.351370][ T26] audit: type=1326 audit(1729015211.588:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12317 comm="syz.4.1906" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f26f4adcff9 code=0x0 [ 858.399312][T12271] team0: Port device team_slave_0 added [ 858.440898][T12271] team0: Port device team_slave_1 added [ 858.462283][T12321] netlink: 'syz.4.1906': attribute type 1 has an invalid length. [ 858.505601][ T26] audit: type=1326 audit(1729015211.748:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12317 comm="syz.4.1906" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f26f4adcff9 code=0x0 [ 858.554484][T12271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 858.589885][T12271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 858.615847][ C1] vkms_vblank_simulate: vblank timer overrun [ 858.629243][T12271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 858.655249][T12271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 858.662721][T12271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 858.671971][T12327] loop1: detected capacity change from 0 to 512 [ 858.688659][ C1] vkms_vblank_simulate: vblank timer overrun [ 858.690250][T12271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 858.724924][T12202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 858.755931][T12271] device hsr_slave_0 entered promiscuous mode [ 858.771453][T12271] device hsr_slave_1 entered promiscuous mode [ 858.779372][T12271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 858.787464][T12271] Cannot create hsr debugfs directory [ 858.813888][T12202] 8021q: adding VLAN 0 to HW filter on device team0 [ 858.843720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 858.852902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 858.879061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 858.890727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 858.900362][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.907514][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 858.927288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 858.936242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 858.949914][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.957067][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 858.966307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 858.977314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 858.986742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 859.022711][T10634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 859.039326][T10634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 859.050386][T10634] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 859.077708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 859.092026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 859.121401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 859.130598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 859.139239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 859.148104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 859.157796][T12202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 859.219204][T12330] loop4: detected capacity change from 0 to 764 [ 859.234349][T12271] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 859.245936][T12271] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.399864][T12271] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 859.419603][T12271] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.897281][T12338] nfs4: Unknown parameter 'd' [ 859.973984][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 860.312803][T12271] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 860.325301][T12271] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.439798][T12271] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 860.474821][T12271] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.513350][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 860.515004][T12347] loop3: detected capacity change from 0 to 512 [ 860.523170][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 860.550309][T12202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 860.596373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 860.616002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 860.637867][T12347] kernel read not supported for file /file0 (pid: 12347 comm: syz.3.1913) [ 860.652541][ T26] audit: type=1800 audit(1729015213.898:583): pid=12347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1913" name="file0" dev="mqueue" ino=71295 res=0 errno=0 [ 860.661782][T12347] loop3: detected capacity change from 0 to 256 [ 860.734502][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 860.773323][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 860.781102][T12347] kernel read not supported for file /bus (pid: 12347 comm: syz.3.1913) [ 860.782143][T12202] device veth0_vlan entered promiscuous mode [ 860.817704][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 860.826697][ T26] audit: type=1800 audit(1729015214.078:584): pid=12347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1913" name="bus" dev="mqueue" ino=71296 res=0 errno=0 [ 860.827905][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 860.873158][T12271] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 860.948969][T12345] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1912'. [ 860.993719][T12202] device veth1_vlan entered promiscuous mode [ 861.010273][T12271] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 861.031450][T12271] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 861.055560][T12271] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 861.065844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 861.080874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 861.091819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 861.106752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 861.122142][T12202] device veth0_macvtap entered promiscuous mode [ 861.147836][T12202] device veth1_macvtap entered promiscuous mode [ 861.195621][T12202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 861.207958][T12202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 861.218328][T12202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 861.229363][T12202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 861.240741][T12202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 861.260194][T12202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 861.280342][T12202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 861.312165][T12202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 861.316019][T12357] loop1: detected capacity change from 0 to 2048 [ 861.324446][T12202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 861.343092][T12202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 861.356823][T12202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 861.413090][T12202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 861.516062][T12202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 861.529239][T12202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 861.540642][T12357] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 861.561546][T12202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 861.599480][T12202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 861.618056][T12202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 861.631295][T12202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 861.652518][T12202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 861.671533][T12202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 861.691868][T12202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 861.717477][T12202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 861.802856][T12357] EXT4-fs (loop1): mounted filesystem without journal. Opts: mblk_io_submit,usrjquota=,,errors=continue. Quota mode: none. [ 861.882899][T10634] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 861.903782][T10634] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 861.950825][T10634] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 861.984140][T12368] ptrace attach of "./syz-executor exec"[11320] was attempted by "./syz-executor exec"[12368] [ 861.994844][T10634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 862.049435][T10634] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 862.114375][T10634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 862.165775][T12368] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 862.184385][T12202] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.209188][T12202] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.241597][T12202] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.265935][ T8854] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /158/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=117440527, rec_len=0, size=2048 fake=0 [ 862.282435][T12202] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.315841][ T8854] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 862.357745][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 862.554696][T12271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 862.592587][ T9600] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 862.607669][ T9600] Bluetooth: hci0: Injecting HCI hardware error event [ 862.631414][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 862.645854][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 862.663316][T12271] 8021q: adding VLAN 0 to HW filter on device team0 [ 862.684998][ T3583] Bluetooth: hci0: hardware error 0x00 [ 862.738077][ T3660] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 862.771486][ T3660] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.800520][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 862.814321][T12369] delete_channel: no stack [ 862.853413][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 862.867828][T12387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1921'. [ 862.879932][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 862.888759][ T3734] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.895913][ T3734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 862.921109][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 862.951743][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 862.961861][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 862.986115][ T3734] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.993350][ T3734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 863.010712][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 863.162541][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 863.181663][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 863.193048][ T3643] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 863.216857][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 863.742607][ T3643] usb 4-1: Using ep0 maxpacket: 32 [ 864.091855][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 864.128844][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 864.162692][ T3643] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 864.187979][ T3643] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 864.188662][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 864.211556][ T3643] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 864.221754][ T3643] usb 4-1: config 1 interface 1 has no altsetting 0 [ 864.241833][T12271] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 864.253566][ T3734] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.263526][ T3734] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.292452][T12271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 864.372474][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 864.390605][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 864.402001][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 864.411481][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 864.420538][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 864.429795][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 864.464031][T12398] loop4: detected capacity change from 0 to 64 [ 864.578175][ T3643] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 864.588934][ T3643] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.597561][ T3643] usb 4-1: Product: syz [ 864.601754][ T3643] usb 4-1: Manufacturer: syz [ 864.606516][ T3643] usb 4-1: SerialNumber: syz [ 866.318351][T12413] loop0: detected capacity change from 0 to 1024 [ 866.395274][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 866.414356][ T3643] usb 4-1: USB disconnect, device number 37 [ 866.420250][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 866.476153][T12413] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 866.481443][T12271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 866.514874][ T3754] udevd[3754]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 866.526972][T12413] EXT4-fs (loop0): INFO: recovery required on readonly filesystem [ 866.587003][T12416] netlink: 'syz.1.1927': attribute type 3 has an invalid length. [ 866.595308][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 866.612488][T12413] EXT4-fs (loop0): write access will be enabled during recovery [ 866.623670][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 866.662316][T12413] JBD2: no valid journal superblock found [ 866.743140][T12413] EXT4-fs (loop0): error loading journal [ 866.751090][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 866.766082][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 866.790783][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 866.810660][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 866.825577][T12271] device veth0_vlan entered promiscuous mode [ 867.026189][T12271] device veth1_vlan entered promiscuous mode [ 867.088207][T12420] overlayfs: './bus' not a directory [ 867.161297][T12420] 9pnet: Insufficient options for proto=fd [ 867.190309][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 867.293265][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 867.316177][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 867.331305][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 867.346701][T12271] device veth0_macvtap entered promiscuous mode [ 867.397999][T12420] sch_fq: defrate 0 ignored. [ 867.416618][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 867.437375][T12271] device veth1_macvtap entered promiscuous mode [ 867.540891][T12271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.575777][T12271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.602404][T12271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.622608][T12271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.654438][T12271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.678251][T12271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.702402][T12271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.728730][T12271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.763919][T12271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.804420][T12271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.837692][T12271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.870219][T12271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.903332][T12271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 867.964311][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 868.004302][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 868.048767][T12271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.083847][T12271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.141120][T12271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.151858][T12271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.163428][T12271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.174133][T12271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.184573][T12271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.195540][T12271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.237532][T12271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.256579][T12271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.270737][T12271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.292578][T12271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.352105][T12271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 868.385382][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 868.416710][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 868.431908][T12437] loop3: detected capacity change from 0 to 8 [ 868.436463][T12271] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.474813][T12271] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.673697][T12271] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.709162][T12271] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.113026][ T3660] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.143274][ T3660] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.149692][T12445] SQUASHFS error: Failed to read block 0x63a: -5 [ 869.158034][T12444] device veth0_vlan left promiscuous mode [ 869.179111][T12445] SQUASHFS error: Unable to read metadata cache entry [638] [ 869.187355][T12445] SQUASHFS error: Unable to read directory block [26067d:0] [ 869.276159][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 869.301833][T12450] loop0: detected capacity change from 0 to 512 [ 869.315581][T12450] EXT4-fs (loop0): Unrecognized mount option "fsmagic=0x0000000000000006" or missing value [ 869.550514][ T3660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.828123][T12452] loop0: detected capacity change from 0 to 4096 [ 869.973705][ T3660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.983173][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.426256][T12453] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 870.495425][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 870.874119][T12457] loop2: detected capacity change from 0 to 2048 [ 870.997558][T12457] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 871.112369][ T3643] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 871.392914][ T3643] usb 2-1: Using ep0 maxpacket: 32 [ 871.526307][T12469] loop0: detected capacity change from 0 to 128 [ 872.168019][ T3643] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 872.178645][ T3643] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 872.189613][ T3643] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 872.200103][ T3643] usb 2-1: config 1 interface 1 has no altsetting 0 [ 872.482551][ T3643] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 872.491682][ T3643] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.501700][ T3643] usb 2-1: Product: syz [ 872.512333][ T3643] usb 2-1: Manufacturer: syz [ 872.523672][ T3643] usb 2-1: SerialNumber: syz [ 872.672482][ T1292] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 872.932349][ T1292] usb 3-1: Using ep0 maxpacket: 32 [ 873.796031][ T1292] usb 3-1: config index 0 descriptor too short (expected 65535, got 9) [ 873.804454][ T1292] usb 3-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 873.813421][ T1292] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 873.868078][ T3643] usb 2-1: USB disconnect, device number 38 [ 874.010085][T12484] loop4: detected capacity change from 0 to 1024 [ 874.040378][T12486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 874.130307][T12484] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 874.152968][T12484] EXT4-fs (loop4): INFO: recovery required on readonly filesystem [ 874.153118][ T1292] usb 3-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 874.160954][T12484] EXT4-fs (loop4): write access will be enabled during recovery [ 874.179279][T12484] JBD2: no valid journal superblock found [ 874.185821][T12484] EXT4-fs (loop4): error loading journal [ 874.191078][ T1292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.241163][ T1292] usb 3-1: Product: syz [ 874.246539][ T1292] usb 3-1: Manufacturer: syz [ 874.251165][ T1292] usb 3-1: SerialNumber: syz [ 874.814218][T12495] loop0: detected capacity change from 0 to 1024 [ 874.889611][T12495] EXT4-fs (loop0): Test dummy encryption mode enabled [ 874.900367][T12495] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 874.960421][T12495] EXT4-fs (loop0): unsupported descriptor size 0 [ 875.122848][T12495] overlayfs: empty lowerdir [ 875.421363][T12510] loop4: detected capacity change from 0 to 128 [ 875.577550][T12510] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 875.620348][ T3615] usb 3-1: USB disconnect, device number 36 [ 875.734730][T12510] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 875.807606][ T26] audit: type=1326 audit(1729015229.048:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12531 comm="syz.2.1951" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27113efff9 code=0x0 [ 875.897458][T12536] netlink: 'syz.2.1951': attribute type 1 has an invalid length. [ 875.904380][ T26] audit: type=1326 audit(1729015229.088:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12533 comm="syz.3.1952" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa43c12aff9 code=0x0 [ 876.013085][ T26] audit: type=1326 audit(1729015229.148:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12531 comm="syz.2.1951" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f27113efff9 code=0x0 [ 876.265117][T12545] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1954'. [ 876.292783][T12546] loop1: detected capacity change from 0 to 2048 [ 876.316886][T12543] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 876.401752][T12546] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,errors=remount-ro,bsdgroups,. Quota mode: writeback. [ 876.509073][T12546] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 876.702460][T12546] EXT4-fs (loop1): Remounting filesystem read-only [ 877.012389][ T3615] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 877.302416][ T3615] usb 4-1: Using ep0 maxpacket: 32 [ 877.453301][ T3615] usb 4-1: config index 0 descriptor too short (expected 65535, got 9) [ 877.530853][ T3615] usb 4-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 877.560194][ T3643] Bluetooth: hci3: command 0x0411 tx timeout [ 877.598335][ T3615] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 877.631383][T12566] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 877.931597][ T9600] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 878.302880][ T9600] usb 3-1: Using ep0 maxpacket: 32 [ 878.453877][ T9600] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 878.736625][ T9600] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 878.752453][ T3615] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 878.761624][ T3615] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.762329][ T9600] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 878.779650][ T9600] usb 3-1: config 1 interface 1 has no altsetting 0 [ 878.795128][T12572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1964'. [ 878.802057][ T3615] usb 4-1: Product: syz [ 878.809072][ T3615] usb 4-1: Manufacturer: syz [ 878.838213][T12572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1964'. [ 878.901953][ T3615] usb 4-1: SerialNumber: syz [ 878.961056][ T9600] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 878.977848][ T9600] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.987440][ T9600] usb 3-1: Product: syz [ 878.991637][ T9600] usb 3-1: Manufacturer: syz [ 878.997145][ T9600] usb 3-1: SerialNumber: syz [ 879.176215][ T21] usb 4-1: USB disconnect, device number 38 [ 879.230789][ T3643] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 880.355830][T12595] loop3: detected capacity change from 0 to 16 [ 880.412887][T12595] erofs: Unknown parameter 'user_pattr' [ 880.610440][ T3643] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 880.620862][ T9600] usb 3-1: USB disconnect, device number 37 [ 880.626999][ T3643] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 880.686292][T10967] udevd[10967]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 880.843214][ T3643] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice=cd.0d [ 880.857625][ T3643] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.874514][ T3643] usb 2-1: Product: syz [ 880.878819][ T3643] usb 2-1: Manufacturer: syz [ 880.899978][ T3643] usb 2-1: SerialNumber: syz [ 881.006302][ T3643] usb 2-1: config 0 descriptor?? [ 881.066785][ T3643] option 2-1:0.0: GSM modem (1-port) converter detected [ 881.173167][T12608] xt_TCPMSS: Only works on TCP SYN packets [ 881.307500][ T3615] usb 2-1: USB disconnect, device number 39 [ 881.327233][ T3615] option 2-1:0.0: device disconnected [ 881.351641][T12616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1975'. [ 881.404309][T12617] loop2: detected capacity change from 0 to 1024 [ 881.471553][T12617] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 881.515812][T12617] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 881.735531][T12617] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,errors=remount-ro,dioread_nolock,max_dir_size_kb=0x0000000000000009,nomblk_io_submit,data_err=abort,. Quota mode: writeback. [ 882.278915][T12632] loop1: detected capacity change from 0 to 8 [ 882.469193][T12632] squashfs image failed sanity check [ 883.356077][T12647] loop2: detected capacity change from 0 to 256 [ 883.539934][T12651] loop3: detected capacity change from 0 to 1024 [ 883.552493][ T3648] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 883.677369][T12647] loop2: detected capacity change from 0 to 1024 [ 883.688462][T12651] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,nombcache,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 883.749560][ T26] audit: type=1804 audit(1729015236.988:588): pid=12651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1983" name="/newroot/57/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 883.775966][ T26] audit: type=1800 audit(1729015237.008:589): pid=12651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1983" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 883.802269][ T3648] usb 5-1: Using ep0 maxpacket: 32 [ 883.932617][ T3648] usb 5-1: config index 0 descriptor too short (expected 65535, got 9) [ 883.952320][ T3648] usb 5-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 883.972314][ T3648] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 884.313290][ T3648] usb 5-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 884.331348][ T3648] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.340586][ T3648] usb 5-1: Product: syz [ 884.345786][ T3648] usb 5-1: Manufacturer: syz [ 884.354868][ T3648] usb 5-1: SerialNumber: syz [ 884.645732][ T9600] usb 5-1: USB disconnect, device number 35 [ 884.821877][ T26] audit: type=1326 audit(1729015238.058:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12660 comm="syz.1.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3608d9ff9 code=0x7ffc0000 [ 884.843737][T12664] netlink: 'syz.2.1987': attribute type 7 has an invalid length. [ 884.860138][T12664] netlink: 'syz.2.1987': attribute type 8 has an invalid length. [ 884.890430][T12664] loop2: detected capacity change from 0 to 256 [ 884.892974][T12663] 9pnet: Insufficient options for proto=fd [ 884.897616][ T26] audit: type=1326 audit(1729015238.068:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12660 comm="syz.1.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7ff3608d9ff9 code=0x7ffc0000 [ 884.943865][ T26] audit: type=1326 audit(1729015238.068:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12660 comm="syz.1.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3608d9ff9 code=0x7ffc0000 [ 884.967029][ T26] audit: type=1326 audit(1729015238.068:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12660 comm="syz.1.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3608d9ff9 code=0x7ffc0000 [ 884.989381][ C0] vkms_vblank_simulate: vblank timer overrun [ 884.997851][ T26] audit: type=1326 audit(1729015238.068:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12660 comm="syz.1.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7ff3608d9ff9 code=0x7ffc0000 [ 885.020129][ C0] vkms_vblank_simulate: vblank timer overrun [ 885.035443][ T26] audit: type=1326 audit(1729015238.068:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12660 comm="syz.1.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3608d9ff9 code=0x7ffc0000 [ 885.086775][ C0] vkms_vblank_simulate: vblank timer overrun [ 885.108435][ T26] audit: type=1326 audit(1729015238.068:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12660 comm="syz.1.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff3608d9ff9 code=0x7ffc0000 [ 885.134902][T12664] loop2: detected capacity change from 0 to 16 [ 885.141839][ T26] audit: type=1326 audit(1729015238.068:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12660 comm="syz.1.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3608d9ff9 code=0x7ffc0000 [ 885.192376][ T3648] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 885.195392][T12674] syz.1.1990 uses old SIOCAX25GETINFO [ 885.215508][T12664] erofs: (device loop2): mounted with root inode @ nid 36. [ 885.452911][ T3648] usb 1-1: Using ep0 maxpacket: 32 [ 885.572841][ T3648] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 885.703684][ T3648] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 885.964343][ T3648] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 886.069915][T12683] loop1: detected capacity change from 0 to 256 [ 886.082254][ T3648] usb 1-1: config 1 interface 1 has no altsetting 0 [ 886.262870][ T3648] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 886.271984][ T3648] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.318543][ T3648] usb 1-1: Product: syz [ 886.341335][ T3648] usb 1-1: Manufacturer: syz [ 886.347119][ T3648] usb 1-1: SerialNumber: syz [ 887.303043][T12690] ipt_CLUSTERIP: Please specify destination IP [ 887.712778][ T8854] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 887.767716][T12703] tipc: Started in network mode [ 887.782420][T12703] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 887.786348][ T8854] FAT-fs (loop1): Filesystem has been set read-only [ 887.802882][T12703] tipc: Enabled bearer , priority 10 [ 887.834066][T12702] IPVS: Unknown mcast interface: syzkaller1 [ 887.850634][ T8854] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 887.865573][T12703] tipc: Resetting bearer [ 887.904875][ T3648] usb 1-1: USB disconnect, device number 22 [ 887.953048][ T3754] udevd[3754]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 887.988246][T12703] tipc: Disabling bearer [ 888.407480][T12709] loop2: detected capacity change from 0 to 128 [ 888.573799][T12709] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 888.602405][T12709] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 888.651354][ T154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.714115][ T154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.791944][ T154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.868339][ T154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.265147][T12721] tmpfs: Unknown parameter 'usrquota' [ 890.212733][T12732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 890.651750][T12716] chnl_net:caif_netlink_parms(): no params data found [ 891.285945][T12716] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.324248][T12716] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.365534][T12716] device bridge_slave_0 entered promiscuous mode [ 891.402059][T12716] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.435754][T12716] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.489838][T12716] device bridge_slave_1 entered promiscuous mode [ 891.572139][ T3615] Bluetooth: hci4: command 0x0409 tx timeout [ 891.697508][T12716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 891.736163][ T3648] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 891.760143][T12716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 891.876069][T12716] team0: Port device team_slave_0 added [ 891.925608][T12716] team0: Port device team_slave_1 added [ 892.022750][T12781] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2013'. [ 892.034977][T12716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 892.056818][T12716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 892.108164][ T3648] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 892.110739][T12716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 892.138185][ T3648] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 892.154332][T12716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 892.170943][ T3648] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 892.178336][T12716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 892.207378][ T3648] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.235088][T12716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 892.281721][ T3648] usb 1-1: config 0 descriptor?? [ 892.294154][ T154] device hsr_slave_0 left promiscuous mode [ 892.319982][ T154] device hsr_slave_1 left promiscuous mode [ 892.343732][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 892.369379][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 892.394811][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 892.409832][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 892.418363][ T154] device bridge_slave_1 left promiscuous mode [ 892.424866][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.436047][ T154] device bridge_slave_0 left promiscuous mode [ 892.449034][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.466858][ T154] device veth1_macvtap left promiscuous mode [ 892.473314][ T154] device veth0_macvtap left promiscuous mode [ 892.479464][ T154] device veth1_vlan left promiscuous mode [ 892.776805][ T3648] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 892.794588][ T3648] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 892.810904][ T3648] plantronics 0003:047F:FFFF.0031: No inputs registered, leaving [ 892.841562][ T3648] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 892.862594][ T154] team0 (unregistering): Port device team_slave_1 removed [ 892.892046][ T154] team0 (unregistering): Port device team_slave_0 removed [ 892.905232][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 892.920926][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 893.235240][ T154] bond0 (unregistering): Released all slaves [ 893.480969][ T3643] usb 1-1: USB disconnect, device number 23 [ 893.553365][T12807] loop3: detected capacity change from 0 to 764 [ 893.606981][T12716] device hsr_slave_0 entered promiscuous mode [ 893.780776][T12716] device hsr_slave_1 entered promiscuous mode [ 893.792299][T11727] Bluetooth: hci4: command 0x041b tx timeout [ 893.801394][T12716] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 893.814856][T12716] Cannot create hsr debugfs directory [ 893.824455][T12809] lo speed is unknown, defaulting to 1000 [ 893.843787][T12809] lo speed is unknown, defaulting to 1000 [ 894.072630][T12809] lo speed is unknown, defaulting to 1000 [ 894.683254][T12809] infiniband syz0: set active [ 894.707134][T12809] infiniband syz0: added lo [ 894.717208][ T3648] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 894.818506][T12809] RDS/IB: syz0: added [ 894.822593][T12809] smc: adding ib device syz0 with port count 1 [ 894.838196][T12809] smc: ib device syz0 port 1 has pnetid SYZ1 (user defined) [ 894.838514][ T13] lo speed is unknown, defaulting to 1000 [ 895.784707][ T3648] usb 5-1: Using ep0 maxpacket: 32 [ 895.845110][ T9600] Bluetooth: hci4: command 0x040f tx timeout [ 895.905764][ T3648] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 895.926370][ T3648] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 895.987571][T12844] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2022'. [ 895.997176][ T3648] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 896.026320][ T3648] usb 5-1: config 1 interface 1 has no altsetting 0 [ 896.051814][T12850] netlink: 'syz.0.2022': attribute type 1 has an invalid length. [ 896.081636][T11727] lo speed is unknown, defaulting to 1000 [ 896.143215][T12809] lo speed is unknown, defaulting to 1000 [ 896.207922][ T3648] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 896.241868][ T3648] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.263556][ T3648] usb 5-1: Product: syz [ 896.267764][ T3648] usb 5-1: Manufacturer: syz [ 896.333296][ T3648] usb 5-1: SerialNumber: syz [ 896.451882][T12851] loop3: detected capacity change from 0 to 8192 [ 896.771741][T12851] REISERFS warning (device loop3): super-6515 reiserfs_parse_options: journaled quota format not specified. [ 897.296425][ T3648] usb 5-1: USB disconnect, device number 36 [ 897.477799][ T3754] udevd[3754]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 897.587817][T12874] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 897.605427][T12874] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 897.644095][T12809] lo speed is unknown, defaulting to 1000 [ 897.679366][T12851] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 897.939707][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 897.982781][T12887] loop3: detected capacity change from 0 to 128 [ 898.119144][T12809] lo speed is unknown, defaulting to 1000 [ 898.126072][T12891] loop4: detected capacity change from 0 to 1024 [ 898.703733][ T26] kauditd_printk_skb: 56 callbacks suppressed [ 898.704122][ T26] audit: type=1800 audit(1729015251.776:654): pid=12894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2028" name="bus" dev="loop3" ino=1048755 res=0 errno=0 [ 899.151886][T12809] lo speed is unknown, defaulting to 1000 [ 899.277087][T12716] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 899.313678][T12891] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 899.435865][T12716] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 899.530938][T12891] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 899.630463][T12716] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 899.746899][T12809] lo speed is unknown, defaulting to 1000 [ 899.749285][T12716] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 899.782149][T12904] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2031'. [ 899.918543][T12909] 9pnet: Insufficient options for proto=fd [ 900.034065][ T26] audit: type=1804 audit(1729015253.207:655): pid=12891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2029" name="/newroot/167/file0/000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfs" dev="loop4" ino=21 res=1 errno=0 [ 900.163243][T12716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 900.192077][T12809] lo speed is unknown, defaulting to 1000 [ 900.238545][ T3976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 900.257273][ T3976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 900.324331][T12716] 8021q: adding VLAN 0 to HW filter on device team0 [ 900.376495][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 900.399895][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 900.426914][ T3662] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.434062][ T3662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 900.473297][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 900.486610][T11727] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 900.542429][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 900.558003][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 900.583592][ T3627] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.590776][ T3627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 900.620528][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 900.629914][T12929] RDS: rds_bind could not find a transport for ::ffff:172.30.253.5, load rds_tcp or rds_rdma? [ 900.641094][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 900.672575][T12809] lo speed is unknown, defaulting to 1000 [ 900.702808][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 900.712181][T11727] usb 4-1: device descriptor read/64, error -71 [ 900.733433][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 900.806558][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 900.830730][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 900.857545][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 900.907692][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 900.964895][T12716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 901.005893][T12716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 901.016728][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 901.032831][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 901.065680][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 901.212308][T11727] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 902.158997][T11727] usb 4-1: device descriptor read/64, error -71 [ 903.230845][T11727] usb usb4-port1: attempt power cycle [ 903.256519][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 903.264020][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 903.379652][T12716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 903.830938][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 903.865640][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 903.948014][T12984] loop2: detected capacity change from 0 to 1024 [ 903.989896][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 904.010498][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 904.065718][T12984] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 904.094509][T12716] device veth0_vlan entered promiscuous mode [ 904.103432][T12984] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 904.112980][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 904.245003][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 904.262631][T12716] device veth1_vlan entered promiscuous mode [ 904.308787][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 904.403004][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 904.521623][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 904.539132][ T26] audit: type=1804 audit(1729015257.668:656): pid=12984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2044" name="/newroot/19/file0/bus" dev="loop2" ino=19 res=1 errno=0 [ 904.587715][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 904.658028][T12716] device veth0_macvtap entered promiscuous mode [ 904.799554][T12716] device veth1_macvtap entered promiscuous mode [ 904.862870][T13007] loop0: detected capacity change from 0 to 8 [ 904.871375][T12716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 904.897834][T13006] loop3: detected capacity change from 0 to 512 [ 904.922965][T12716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 904.951314][T12716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 904.973600][T12716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.004021][T12716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 905.032743][T12716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.054502][T12716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 905.074670][T12716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.084663][T12716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 905.103779][T12716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.125899][T12716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 905.146143][T12716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.175386][T12716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 905.217567][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 905.276221][T13007] SQUASHFS error: zlib decompression failed, data probably corrupt [ 905.285469][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 905.299269][T13007] SQUASHFS error: Failed to read block 0x9b: -5 [ 905.311988][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 905.322538][T13007] SQUASHFS error: Unable to read metadata cache entry [99] [ 905.332093][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 905.341169][T13007] SQUASHFS error: Unable to read inode 0x127 [ 905.350963][T13006] EXT4-fs (loop3): Unrecognized mount option "fsmagic=0x0000000000000006" or missing value [ 905.512588][T12716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 905.527912][T12716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.539116][T12716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 905.868936][T12716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.942969][T12716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 906.356573][T12716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 906.373422][T12716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 906.395797][T12716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 906.448719][T12716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 906.473555][T12716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 906.484363][T12716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 906.495331][T12716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 906.517239][T12716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 906.552835][ T3976] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 906.731918][ T3976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 906.746284][T12716] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.760250][T12716] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.769540][T12716] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.043549][T13042] loop3: detected capacity change from 0 to 4096 [ 907.625887][T12716] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.757041][T13055] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 907.898424][T13066] 9pnet: Unknown protocol version 9p200 [ 908.046248][ T3976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.072796][ T3976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 908.121734][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 908.239783][ T3660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.263285][ T3660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 908.367158][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 908.380029][T13081] loop3: detected capacity change from 0 to 1024 [ 908.453245][T13081] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 908.613379][T13081] EXT4-fs (loop3): INFO: recovery required on readonly filesystem [ 908.795072][T13092] loop0: detected capacity change from 0 to 1024 [ 908.801576][T13081] EXT4-fs (loop3): write access will be enabled during recovery [ 908.812423][T13081] JBD2: no valid journal superblock found [ 908.822512][T13081] EXT4-fs (loop3): error loading journal [ 908.934404][T13092] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 909.101382][T13092] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 909.297778][T13103] loop1: detected capacity change from 0 to 1024 [ 909.338997][ T26] audit: type=1804 audit(1729015262.440:657): pid=13092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2058" name="/newroot/31/file0/bus" dev="loop0" ino=19 res=1 errno=0 [ 909.414610][T13103] hfsplus: failed to load root directory [ 909.649104][T13109] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2059'. [ 910.806624][T13120] loop1: detected capacity change from 0 to 128 [ 910.980023][T13123] tmpfs: Unknown parameter 'usrquota' [ 913.919443][T13129] Cannot find set identified by id 0 to match [ 914.070906][T13137] loop0: detected capacity change from 0 to 128 [ 914.128130][ T3615] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 914.383263][T13137] EXT4-fs (loop0): Test dummy encryption mode enabled [ 914.393701][ T3615] usb 5-1: Using ep0 maxpacket: 16 [ 914.421508][T13137] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 914.534723][T13162] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 914.921046][T13137] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038 (0x7fffffff) [ 914.952366][T13160] loop2: detected capacity change from 0 to 128 [ 915.698524][T13160] EXT4-fs error (device loop2): ext4_fill_super:4840: inode #2: comm syz.2.2069: iget: checksum invalid [ 915.712196][T13170] loop3: detected capacity change from 0 to 47 [ 915.755957][ T3615] usb 5-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 915.777877][T13160] EXT4-fs (loop2): get root inode failed [ 915.785088][ T3615] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.802460][T13160] EXT4-fs (loop2): mount failed [ 915.816051][ T3615] usb 5-1: Product: syz [ 915.827184][ T3615] usb 5-1: Manufacturer: syz [ 915.842227][ T3615] usb 5-1: SerialNumber: syz [ 915.867046][ T3615] usb 5-1: config 0 descriptor?? [ 916.410387][T13170] device bond0 entered promiscuous mode [ 916.430570][T13170] device bond_slave_0 entered promiscuous mode [ 916.436966][T13170] device bond_slave_1 entered promiscuous mode [ 916.519749][T13170] MINIX-fs: deleted inode referenced: 9 [ 916.569565][T13170] MINIX-fs: deleted inode referenced: 9 [ 916.579068][ T3615] usb 5-1: MIDIStreaming interface descriptor not found [ 916.660115][ T3615] usb 5-1: USB disconnect, device number 37 [ 916.719142][T13187] virtio-fs: tag <(null)> not found [ 916.726699][T13169] device bond0 left promiscuous mode [ 916.754756][T13169] device bond_slave_0 left promiscuous mode [ 916.785147][T13169] device bond_slave_1 left promiscuous mode [ 916.966093][ T3976] attempt to access beyond end of device [ 916.966093][ T3976] loop3: rw=1, want=50, limit=47 [ 922.222039][T13195] tmpfs: Unknown parameter 'usrquota' [ 922.271112][ T3976] Buffer I/O error on dev loop3, logical block 24, lost async page write [ 922.280210][ T3976] attempt to access beyond end of device [ 922.280210][ T3976] loop3: rw=1, want=52, limit=47 [ 922.290871][ T3976] Buffer I/O error on dev loop3, logical block 25, lost async page write [ 922.331663][ T3754] udevd[3754]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 922.390905][T13198] loop1: detected capacity change from 0 to 512 [ 922.422419][T13198] EXT4-fs (loop1): Unrecognized mount option """ or missing value [ 924.703949][T13210] loop2: detected capacity change from 0 to 40427 [ 924.798754][T13210] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 924.808858][T13210] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 924.968677][ T3648] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 925.208729][ T3648] usb 4-1: Using ep0 maxpacket: 8 [ 925.329095][ T3648] usb 4-1: config 0 interface 0 has no altsetting 0 [ 925.335928][ T3648] usb 4-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 925.369170][ T3648] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.461116][ T3648] usb 4-1: config 0 descriptor?? [ 925.535248][ T3648] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 925.585621][ T3648] usb 4-1: selecting invalid altsetting 0 [ 925.608914][ T3648] cxusb: set interface failed [ 925.614012][T13210] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-12) [ 925.631239][ T3648] dvb-usb: bulk message failed: -22 (1/0) [ 925.649898][ T3648] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 925.695408][ T3648] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 925.818617][ T3648] usb 4-1: media controller created [ 925.879587][ T3648] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 925.954028][T13230] ieee802154 phy0 wpan0: encryption failed: -22 [ 925.963905][T13230] syz.1.2083[13230] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 925.963999][T13230] syz.1.2083[13230] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 926.727904][T13228] loop3: detected capacity change from 0 to 8 [ 926.853090][ T3648] DVB: Unable to find symbol lgdt330x_attach() [ 926.870618][ T3648] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 926.947743][ T3648] dvb-usb: bulk message failed: -22 (1/0) [ 926.961574][ T3648] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 927.001161][ T3648] usb 4-1: USB disconnect, device number 42 [ 927.164330][T13222] loop0: detected capacity change from 0 to 256 [ 927.176872][ T3648] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 927.234680][T13237] device bond0 entered promiscuous mode [ 927.249164][T13237] device bond_slave_0 entered promiscuous mode [ 927.260739][T13237] device bond_slave_1 entered promiscuous mode [ 927.385333][ T26] audit: type=1326 audit(1729015536.449:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13220 comm="syz.0.2085" exe="/root/syz-executor" sig=31 arch=c000003e syscall=15 compat=0 ip=0x7f73c0449959 code=0x0 [ 928.441853][T13262] loop0: detected capacity change from 0 to 128 [ 928.564662][T13265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2092'. [ 928.576960][T13266] sock: sock_timestamping_bind_phc: sock not bind to device [ 928.589210][T13266] IPVS: set_ctl: invalid protocol: 255 172.20.20.20:20002 [ 929.966863][T13262] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000772 (sector = 1) [ 930.329215][ T26] audit: type=1326 audit(1729015539.389:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13267 comm="syz.1.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0502386ff9 code=0x7fc00000 [ 931.358261][ T9] ------------[ cut here ]------------ [ 931.419467][ T9] WARNING: CPU: 0 PID: 9 at net/wireless/core.h:235 cfg80211_ch_switch_notify+0x2b5/0x470 [ 931.433170][ T26] audit: type=1326 audit(1729015539.399:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13267 comm="syz.1.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0502386ff9 code=0x7fc00000 [ 931.499644][ T3662] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000772 (sector = 1) [ 931.570433][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.026634][ T9] Modules linked in: [ 932.089591][ T9] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted 5.15.167-syzkaller #0 [ 932.138120][ T26] audit: type=1326 audit(1729015539.999:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13267 comm="syz.1.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0502386ff9 code=0x7fc00000 [ 932.164686][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 932.213943][ T9] Workqueue: phy55 ieee80211_csa_finalize_work [ 932.249727][ T9] RIP: 0010:cfg80211_ch_switch_notify+0x2b5/0x470 [ 932.274011][ T26] audit: type=1326 audit(1729015539.999:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13267 comm="syz.1.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0502386ff9 code=0x7fc00000 [ 932.276178][ T9] Code: 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d5 01 00 00 e8 d0 91 d7 f7 0f 0b e9 9e fe ff ff e8 c4 91 d7 f7 0f 0b eb b1 e8 bb 91 d7 f7 <0f> 0b e9 fc fd ff ff e8 af 91 d7 f7 0f 0b e9 db fe ff ff e8 a3 91 [ 932.435001][ T9] RSP: 0018:ffffc90000ce7be8 EFLAGS: 00010293 [ 932.438928][ T26] audit: type=1326 audit(1729015539.999:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13267 comm="syz.1.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0502386ff9 code=0x7fc00000 [ 932.449261][ T9] RAX: ffffffff89a8c8b5 RBX: ffff888077c08c90 RCX: ffff8880172a0000 [ 932.532387][ T9] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 932.542014][ T26] audit: type=1326 audit(1729015539.999:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13267 comm="syz.1.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0502386ff9 code=0x7fc00000 [ 932.550935][ T9] RBP: 0000000000000000 R08: ffffffff89a8c6ab R09: fffffbfff1bd2c16 [ 932.632025][ T9] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880600d85c0 [ 932.638643][ T26] audit: type=1326 audit(1729015539.999:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13267 comm="syz.1.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0502386ff9 code=0x7fc00000 [ 932.651297][ T9] R13: dffffc0000000000 R14: ffff888077c08cd8 R15: ffff888077c096c0 [ 932.670726][ T9] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 932.705969][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 932.743474][ T9] CR2: 00007f73c06352d8 CR3: 0000000020000000 CR4: 00000000003506f0 [ 932.762606][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 932.772015][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 932.784158][ T9] Call Trace: [ 932.792549][ T9] [ 932.798096][ T9] ? __warn+0x15b/0x300 [ 932.802787][ T9] ? cfg80211_ch_switch_notify+0x2b5/0x470 [ 932.814014][ T9] ? report_bug+0x1b7/0x2e0 [ 932.822194][ T9] ? handle_bug+0x3d/0x70 [ 932.835743][ T9] ? exc_invalid_op+0x16/0x40 [ 932.858821][ T9] ? asm_exc_invalid_op+0x16/0x20 [ 932.869639][ T9] ? cfg80211_ch_switch_notify+0xab/0x470 [ 932.884314][ T9] ? cfg80211_ch_switch_notify+0x2b5/0x470 [ 932.898568][ T9] ? cfg80211_ch_switch_notify+0x2b5/0x470 [ 932.904433][ T9] ? cfg80211_ch_switch_notify+0x2b5/0x470 [ 932.931221][ T9] ieee80211_csa_finalize_work+0xf8/0x140 [ 932.937110][ T9] process_one_work+0x8a1/0x10c0 [ 932.953855][ T9] ? worker_detach_from_pool+0x260/0x260 [ 932.969552][ T9] ? _raw_spin_lock_irqsave+0x120/0x120 [ 932.975258][ T9] ? kthread_data+0x4e/0xc0 [ 932.980342][ T9] ? wq_worker_running+0x97/0x170 [ 932.990840][ T9] worker_thread+0xaca/0x1280 [ 932.995680][ T9] kthread+0x3f6/0x4f0 [ 933.000295][ T9] ? rcu_lock_release+0x20/0x20 [ 933.005626][ T9] ? kthread_blkcg+0xd0/0xd0 [ 933.011857][ T9] ret_from_fork+0x1f/0x30 [ 933.016419][ T9] [ 933.020029][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 933.027321][ T9] CPU: 0 PID: 9 Comm: kworker/u4:0 Not tainted 5.15.167-syzkaller #0 [ 933.035663][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 933.045746][ T9] Workqueue: phy55 ieee80211_csa_finalize_work [ 933.052109][ T9] Call Trace: [ 933.055398][ T9] [ 933.058344][ T9] dump_stack_lvl+0x1e3/0x2d0 [ 933.063050][ T9] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 933.068701][ T9] ? panic+0x860/0x860 [ 933.072886][ T9] ? cfg80211_ch_switch_notify+0x200/0x470 [ 933.078712][ T9] ? cfg80211_ch_switch_notify+0x200/0x470 [ 933.084532][ T9] panic+0x318/0x860 [ 933.088449][ T9] ? __warn+0x16a/0x300 [ 933.092631][ T9] ? fb_is_primary_device+0xd0/0xd0 [ 933.097885][ T9] ? ret_from_fork+0x1f/0x30 [ 933.102497][ T9] ? cfg80211_ch_switch_notify+0x2b5/0x470 [ 933.108322][ T9] __warn+0x2b2/0x300 [ 933.112324][ T9] ? cfg80211_ch_switch_notify+0x2b5/0x470 [ 933.118141][ T9] report_bug+0x1b7/0x2e0 [ 933.122492][ T9] handle_bug+0x3d/0x70 [ 933.126754][ T9] exc_invalid_op+0x16/0x40 [ 933.131272][ T9] asm_exc_invalid_op+0x16/0x20 [ 933.136142][ T9] RIP: 0010:cfg80211_ch_switch_notify+0x2b5/0x470 [ 933.142571][ T9] Code: 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d5 01 00 00 e8 d0 91 d7 f7 0f 0b e9 9e fe ff ff e8 c4 91 d7 f7 0f 0b eb b1 e8 bb 91 d7 f7 <0f> 0b e9 fc fd ff ff e8 af 91 d7 f7 0f 0b e9 db fe ff ff e8 a3 91 [ 933.162192][ T9] RSP: 0018:ffffc90000ce7be8 EFLAGS: 00010293 [ 933.168316][ T9] RAX: ffffffff89a8c8b5 RBX: ffff888077c08c90 RCX: ffff8880172a0000 [ 933.176286][ T9] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 933.184259][ T9] RBP: 0000000000000000 R08: ffffffff89a8c6ab R09: fffffbfff1bd2c16 [ 933.192239][ T9] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880600d85c0 [ 933.200206][ T9] R13: dffffc0000000000 R14: ffff888077c08cd8 R15: ffff888077c096c0 [ 933.208190][ T9] ? cfg80211_ch_switch_notify+0xab/0x470 [ 933.213920][ T9] ? cfg80211_ch_switch_notify+0x2b5/0x470 [ 933.219723][ T9] ? cfg80211_ch_switch_notify+0x2b5/0x470 [ 933.225523][ T9] ieee80211_csa_finalize_work+0xf8/0x140 [ 933.231244][ T9] process_one_work+0x8a1/0x10c0 [ 933.236235][ T9] ? worker_detach_from_pool+0x260/0x260 [ 933.241974][ T9] ? _raw_spin_lock_irqsave+0x120/0x120 [ 933.247518][ T9] ? kthread_data+0x4e/0xc0 [ 933.252011][ T9] ? wq_worker_running+0x97/0x170 [ 933.257030][ T9] worker_thread+0xaca/0x1280 [ 933.261720][ T9] kthread+0x3f6/0x4f0 [ 933.265779][ T9] ? rcu_lock_release+0x20/0x20 [ 933.270617][ T9] ? kthread_blkcg+0xd0/0xd0 [ 933.275197][ T9] ret_from_fork+0x1f/0x30 [ 933.279626][ T9] [ 933.282920][ T9] Kernel Offset: disabled [ 933.287881][ T9] Rebooting in 86400 seconds..