last executing test programs: 16.24339251s ago: executing program 3 (id=145): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x22, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="666c7573682c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c00a56dc300a96c9b20f3fabdcb10cad696323259cc0500e5f91620d7b9aed9e1fa74020a4f00b8ff"], 0x1, 0x246, &(0x7f00000002c0)="$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") r2 = open(&(0x7f0000000340)='./file1\x00', 0x185102, 0x3c) write$P9_RRENAME(r2, &(0x7f0000000180)={0x7, 0x15, 0x1}, 0x7) 16.056224825s ago: executing program 0 (id=147): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@private1, @in6=@mcast1, 0x0, 0xfff7, 0x1, 0x0, 0xa, 0x80, 0x0, 0x2c}, {0x0, 0x0, 0x4001ffffc, 0x2000000000000800, 0x200000000, 0xf, 0x7, 0xffffffff}, {0x0, 0x2000000000000, 0x1}, 0x0, 0x6e6bb6, 0x2, 0x0, 0x2}, {{@in6=@mcast2, 0xffffffff, 0xff}, 0x0, @in6=@remote, 0x3507, 0x5, 0x3, 0x1, 0xfffffffe, 0x4000000, 0xfffffff7}}, 0xe8) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x57e, 0x2009, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xd, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) fsync(0xffffffffffffffff) 15.963554913s ago: executing program 3 (id=148): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r5, 0x111, 0x3, 0x0, &(0x7f0000000080)) 12.335091006s ago: executing program 3 (id=154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004200000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r1}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) connect$unix(0xffffffffffffffff, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x2, r1}, 0x38) 11.870861763s ago: executing program 3 (id=156): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x400000, 0x80000000}, 0x8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0003050000001408b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_usb_control_io$printer(r2, &(0x7f0000000780)={0x14, &(0x7f00000006c0)={0x20, 0x31, 0x74, {0x74, 0x30, "f6158f312ac44689f57ca62da59cd27b6e16193138570b9777235c9c235327d8627964f0165d207de9b2764fd5e98f34e2dc1e23f32a1c586180970fcf610266df83e0385ae530019faedcb9903e9841056b88f2cad3335c6adfb245bfbf1dc6400ea65cc4bccc6cdf5fd7bffe2e4e3d523d"}}, &(0x7f0000000740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x404}}}, &(0x7f0000000980)={0x34, &(0x7f00000007c0)={0x0, 0x15, 0x2e, "ea6be5428c0658da5c91fad6cbb4f0b4351621e1d542f484f7124fa1878682b90a48c7e00cfd383d6114d3e7e1ac"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x97}, &(0x7f0000000880)={0x20, 0x0, 0x4a, {0x48, "a23d0ab1f7f04533f3088a834313326b3fe8834b5211abfeeae732f68a9c3b47a196a18ef3d78611734020f41870f9cf7eb3ba5e8faeb5c32fa2447fc485f912fcf51ccd9a32e309"}}, &(0x7f0000000900)={0x20, 0x1, 0x1}, &(0x7f0000000940)={0x20, 0x0, 0x1, 0x9f}}) 10.751377763s ago: executing program 0 (id=158): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004900)='./file1\x00', 0x4042, 0xf8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) 9.341750227s ago: executing program 0 (id=159): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x1, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) r2 = accept4$tipc(r0, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x40, 0x2, 0x3}, 0x10) 8.340812418s ago: executing program 2 (id=161): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e"], 0x15) r2 = dup(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000007c5e0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7"], 0x0, 0x5}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 8.127155624s ago: executing program 2 (id=162): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r5, 0x111, 0x3, 0x0, &(0x7f0000000080)) 7.948253829s ago: executing program 0 (id=163): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0) r0 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/97, 0x1000000, 0x1000, 0x2, 0x1}, 0x20) 7.821827949s ago: executing program 0 (id=164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004200000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r1}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x2, r1}, 0x38) 7.06344431s ago: executing program 0 (id=165): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1a, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0xc3200, 0x24, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1}) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x8, 0xc, 0xffffff97, 0x11, @local, @loopback={0x12, 0x460c6}, 0x8, 0x0, 0x1, 0xfffffffc}}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc806, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000020000100000000000000000002000000000000000000000014"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x2000c194) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000020000000e00000001800000008002", @ANYRES32=0x1, @ANYBLOB="0200"/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000030000007fffffffff5c00ff00000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r2, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$key(0xf, 0x3, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r8}, 0x10) getuid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r7}, 0x10) 6.08014069s ago: executing program 3 (id=166): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0xa0179e08}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000140)) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) 4.435968432s ago: executing program 3 (id=167): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2e2c43, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000100)='tracefs\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x6, &(0x7f00000009c0)=ANY=[@ANYRESOCT=r1], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640), 0x224000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r0) pipe2$9p(&(0x7f0000000240), 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x6, @mcast2, 0x6}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYRESDEC=r3], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000007c0)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x501000, 0x1be) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000580)='./file0\x00', 0x3956400, 0x0, 0x0, 0x0, 0x0) 4.388056516s ago: executing program 2 (id=168): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SREG_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) 4.199177701s ago: executing program 1 (id=171): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c250000000000202020630af8ff00000000bda108000000000026010000f8ffffffb702000008000000b703000000000000850000007b00000018010000202070250000000000202020dd1af5ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.09692048s ago: executing program 2 (id=172): creat(&(0x7f0000000540)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x553, &(0x7f0000001080)="$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") 2.72013504s ago: executing program 1 (id=173): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a0000000500040000000000090002"], 0x50}}, 0x20040000) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket(0x21, 0x0, 0x9) socket$key(0xf, 0x3, 0x2) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19}, 0x94) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "000000e9000000000000004000000800"}}}]}, 0x48}}, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r10, r9, 0x0, 0x7ffff000) openat$cgroup_subtree(r9, 0x0, 0x2, 0x0) 2.511309527s ago: executing program 2 (id=174): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 1.420597395s ago: executing program 1 (id=175): mkdir(0x0, 0x0) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000240)={{}, {}, [], {0x4, 0x1}, [{0x8, 0x3}], {0x10, 0x1}}, 0x2c, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000008000000020000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 1.22825635s ago: executing program 2 (id=176): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r5, 0x111, 0x3, 0x0, &(0x7f0000000080)) 1.209959472s ago: executing program 1 (id=177): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x100) 959.181322ms ago: executing program 1 (id=178): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x2a, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) r2 = timerfd_create(0x7, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 0s ago: executing program 1 (id=179): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x7, 0xc8c, 0x5, @dev={0xfe, 0x80, '\x00', 0x1a}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x7800, 0xa14c, 0x7fffffff}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='mm_page_alloc\x00', r4}, 0x63) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r6 = dup3(r0, r0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000980)={'syztnl2\x00', r1, 0x2f, 0x8, 0x8, 0x3d3, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}, @private2, 0x7800, 0xff1f, 0x2}}) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x10, 0x0, r0, 0x3, '\x00', r7, 0x0, 0x0, 0x2}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='kfree\x00', r9}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r10 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) recvmsg$inet_nvme(r10, &(0x7f00000007c0)={&(0x7f0000000140)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000380)=""/142, 0x8e}, {&(0x7f0000000200)=""/2, 0x2}, {&(0x7f0000000440)=""/149, 0x95}, {&(0x7f0000000bc0)=""/4080, 0x1000}, {&(0x7f0000000800)=""/133, 0x85}, {&(0x7f00000005c0)=""/186, 0xba}, {&(0x7f0000000680)=""/148, 0x94}], 0x7, &(0x7f0000000300)=""/5, 0x37}, 0x25) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000a40)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000400)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x56f, &(0x7f00000004c0)="$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") r11 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x142) fsetxattr$system_posix_acl(r11, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x1, 0x5}, [], {0x4, 0x3}, [], {0x10, 0x7}, {0x20, 0x4}}, 0x24, 0x3) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000480)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.34' (ED25519) to the list of known hosts. [ 74.709401][ T5773] cgroup: Unknown subsys name 'net' [ 74.813435][ T5773] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.527322][ T5773] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.288998][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.298360][ T5798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.306516][ T5798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.315117][ T5798] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.322923][ T5798] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.329941][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.339630][ T5798] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.345753][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.347636][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.361040][ T5799] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.369089][ T5799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.369122][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.385195][ T5798] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.394382][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.402292][ T5799] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.406167][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.410003][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.424913][ T5798] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.427809][ T5101] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.439330][ T5101] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.447264][ T5796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.455053][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.462891][ T5796] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.470460][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.041844][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 79.062714][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 79.084236][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 79.190767][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 79.303894][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.311281][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.319676][ T5784] bridge_slave_0: entered allmulticast mode [ 79.327904][ T5784] bridge_slave_0: entered promiscuous mode [ 79.371589][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.378843][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.386914][ T5784] bridge_slave_1: entered allmulticast mode [ 79.393880][ T5784] bridge_slave_1: entered promiscuous mode [ 79.401437][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.408817][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.416816][ T5783] bridge_slave_0: entered allmulticast mode [ 79.423829][ T5783] bridge_slave_0: entered promiscuous mode [ 79.431325][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.438947][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.446268][ T5786] bridge_slave_0: entered allmulticast mode [ 79.453280][ T5786] bridge_slave_0: entered promiscuous mode [ 79.462733][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.470121][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.477461][ T5786] bridge_slave_1: entered allmulticast mode [ 79.484431][ T5786] bridge_slave_1: entered promiscuous mode [ 79.521026][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.528332][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.535581][ T5783] bridge_slave_1: entered allmulticast mode [ 79.542580][ T5783] bridge_slave_1: entered promiscuous mode [ 79.580368][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.631158][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.668431][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.679052][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.687486][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.695825][ T5782] bridge_slave_0: entered allmulticast mode [ 79.702842][ T5782] bridge_slave_0: entered promiscuous mode [ 79.724420][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.736705][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.758499][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.765773][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.772923][ T5782] bridge_slave_1: entered allmulticast mode [ 79.780717][ T5782] bridge_slave_1: entered promiscuous mode [ 79.803208][ T5784] team0: Port device team_slave_0 added [ 79.812872][ T5784] team0: Port device team_slave_1 added [ 79.821307][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.892834][ T5786] team0: Port device team_slave_0 added [ 79.901942][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.916094][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.941048][ T5783] team0: Port device team_slave_0 added [ 79.949277][ T5786] team0: Port device team_slave_1 added [ 79.989719][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.997115][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.023179][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.036944][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.043957][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.071387][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.084780][ T5783] team0: Port device team_slave_1 added [ 80.104080][ T5782] team0: Port device team_slave_0 added [ 80.113224][ T5782] team0: Port device team_slave_1 added [ 80.206935][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.213934][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.240260][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.268659][ T5784] hsr_slave_0: entered promiscuous mode [ 80.276347][ T5784] hsr_slave_1: entered promiscuous mode [ 80.284155][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.291272][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.318235][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.330224][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.337503][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.363612][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.381358][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.388466][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.414700][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.427733][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.434805][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.460805][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.475606][ T50] Bluetooth: hci3: command tx timeout [ 80.479258][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.488193][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.514386][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.554803][ T5791] Bluetooth: hci2: command tx timeout [ 80.554825][ T5796] Bluetooth: hci1: command tx timeout [ 80.566068][ T5786] hsr_slave_0: entered promiscuous mode [ 80.566269][ T50] Bluetooth: hci0: command tx timeout [ 80.578527][ T5786] hsr_slave_1: entered promiscuous mode [ 80.585412][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.593259][ T5786] Cannot create hsr debugfs directory [ 80.739373][ T5782] hsr_slave_0: entered promiscuous mode [ 80.747076][ T5782] hsr_slave_1: entered promiscuous mode [ 80.753411][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.761815][ T5782] Cannot create hsr debugfs directory [ 80.792726][ T5783] hsr_slave_0: entered promiscuous mode [ 80.799662][ T5783] hsr_slave_1: entered promiscuous mode [ 80.806416][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.814013][ T5783] Cannot create hsr debugfs directory [ 81.159808][ T5784] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.178379][ T5784] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.189402][ T5784] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.209330][ T5784] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.278213][ T5783] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.289258][ T5783] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.308579][ T5783] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.320493][ T5783] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.400465][ T5786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.413062][ T5786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.449379][ T5786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.460499][ T5786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.542594][ T5782] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.562909][ T5782] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.576854][ T5782] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.590481][ T5782] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.663427][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.722205][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.775456][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.788619][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.809923][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.817302][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.840877][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.848244][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.878127][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.885326][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.896815][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.903947][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.928478][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.983860][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.000627][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.028843][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.036035][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.068575][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.075807][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.094228][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.124313][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.131479][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.172034][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.179227][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.381226][ T5786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.564733][ T50] Bluetooth: hci3: command tx timeout [ 82.638083][ T50] Bluetooth: hci0: command tx timeout [ 82.638109][ T5796] Bluetooth: hci1: command tx timeout [ 82.649770][ T5791] Bluetooth: hci2: command tx timeout [ 82.733368][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.758923][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.826009][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.862570][ T5782] veth0_vlan: entered promiscuous mode [ 82.882335][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.905330][ T5782] veth1_vlan: entered promiscuous mode [ 82.973576][ T5783] veth0_vlan: entered promiscuous mode [ 83.006206][ T5784] veth0_vlan: entered promiscuous mode [ 83.015538][ T5782] veth0_macvtap: entered promiscuous mode [ 83.031247][ T5782] veth1_macvtap: entered promiscuous mode [ 83.042821][ T5783] veth1_vlan: entered promiscuous mode [ 83.068415][ T5786] veth0_vlan: entered promiscuous mode [ 83.081798][ T5784] veth1_vlan: entered promiscuous mode [ 83.106628][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.148221][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.160330][ T5786] veth1_vlan: entered promiscuous mode [ 83.187472][ T5783] veth0_macvtap: entered promiscuous mode [ 83.199801][ T5782] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.209025][ T5782] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.218146][ T5782] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.227200][ T5782] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.239830][ T5784] veth0_macvtap: entered promiscuous mode [ 83.250939][ T5784] veth1_macvtap: entered promiscuous mode [ 83.276349][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.287898][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.302880][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.313401][ T5783] veth1_macvtap: entered promiscuous mode [ 83.353227][ T5786] veth0_macvtap: entered promiscuous mode [ 83.379294][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.390416][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.403759][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.418504][ T5784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.427361][ T5784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.436863][ T5784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.445799][ T5784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.461845][ T5786] veth1_macvtap: entered promiscuous mode [ 83.497590][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.508843][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.519604][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.530619][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.543237][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.592706][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.601970][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.626156][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.637823][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.649503][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.660218][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.670521][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.681752][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.693710][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.708434][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.720043][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.730454][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.741196][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.752669][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.762949][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.773594][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.784196][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.795134][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.805210][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.815797][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.827201][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.856389][ T5783] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.865939][ T5783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.875066][ T5783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.883786][ T5783] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.913286][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.917646][ T5786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.931119][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.938831][ T5786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.938865][ T5786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.938893][ T5786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.023805][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.036103][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.165292][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.173185][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.184428][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.193420][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.275398][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.290396][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.343825][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.359496][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.481700][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.498326][ T5874] binfmt_misc: register: failed to install interpreter file ./file0 [ 84.501025][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.635498][ T5796] Bluetooth: hci3: command tx timeout [ 84.714995][ T5796] Bluetooth: hci1: command tx timeout [ 84.720506][ T5791] Bluetooth: hci2: command tx timeout [ 84.720957][ T50] Bluetooth: hci0: command tx timeout [ 84.794999][ T5878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5'. [ 84.980940][ T5884] syz.1.7[5884]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 85.152155][ T5890] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.197758][ T5890] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.280206][ T5884] loop1: detected capacity change from 0 to 8192 [ 85.580622][ T5898] loop2: detected capacity change from 0 to 512 [ 85.804268][ T5898] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.817111][ T5898] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.249006][ T5904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12'. [ 86.439829][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.714541][ T50] Bluetooth: hci3: command tx timeout [ 86.747254][ T5906] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14'. [ 86.795513][ T50] Bluetooth: hci2: command tx timeout [ 86.801817][ T50] Bluetooth: hci1: command tx timeout [ 86.807667][ T50] Bluetooth: hci0: command tx timeout [ 87.224461][ C1] sched: RT throttling activated [ 87.549532][ T5892] loop3: detected capacity change from 0 to 40427 [ 87.565933][ T5892] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 87.574055][ T5892] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 87.590117][ T5915] loop2: detected capacity change from 0 to 512 [ 87.661176][ T5892] F2FS-fs (loop3): Found nat_bits in checkpoint [ 87.681992][ T5915] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 87.762755][ T5915] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 87.831909][ T5915] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.13: Corrupt directory, running e2fsck is recommended [ 87.901726][ T5915] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 87.941677][ T5915] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.13: corrupted in-inode xattr: bad e_name length [ 87.985027][ T5892] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 87.996707][ T5892] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 88.000441][ T5915] EXT4-fs (loop2): Remounting filesystem read-only [ 88.043040][ T5915] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.099184][ T5915] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.142359][ T5929] loop1: detected capacity change from 0 to 256 [ 88.875552][ T5853] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.098967][ T5853] usb 3-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.113414][ T5853] usb 3-1: config 0 interface 0 has no altsetting 0 [ 89.136046][ T5853] usb 3-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 89.145517][ T5853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.166165][ T5853] usb 3-1: config 0 descriptor?? [ 89.394668][ T27] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 89.604429][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.643783][ T5853] logitech-djreceiver 0003:046D:C52F.0001: hidraw0: USB HID v8.00 Device [HID 046d:c52f] on usb-dummy_hcd.2-1/input0 [ 89.656740][ T27] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 89.677663][ T27] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 89.697140][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 89.732351][ T27] usb 4-1: SerialNumber: syz [ 89.794001][ T5853] usb 3-1: USB disconnect, device number 2 [ 89.804107][ T27] usb 4-1: skipping empty audio interface (v1) [ 89.823602][ T28] audit: type=1326 audit(1754785668.572:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5947 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1e18ebe9 code=0x7ffc0000 [ 89.902950][ T5944] fido_id[5944]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 89.926715][ T28] audit: type=1326 audit(1754785668.572:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5947 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1e18ebe9 code=0x7ffc0000 [ 90.030506][ T5943] loop3: detected capacity change from 0 to 256 [ 90.038075][ T28] audit: type=1326 audit(1754785668.572:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5947 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fdb1e18ebe9 code=0x7ffc0000 [ 90.092765][ T5943] exfat: Deprecated parameter 'utf8' [ 90.098260][ T5943] exfat: Deprecated parameter 'namecase' [ 90.104037][ T5943] exfat: Deprecated parameter 'namecase' [ 90.109896][ T5943] exfat: Deprecated parameter 'utf8' [ 90.126888][ T28] audit: type=1326 audit(1754785668.572:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5947 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1e18ebe9 code=0x7ffc0000 [ 90.155749][ T28] audit: type=1326 audit(1754785668.572:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5947 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fdb1e18ebe9 code=0x7ffc0000 [ 90.216913][ T5952] process 'syz.0.25' launched './file0' with NULL argv: empty string added [ 90.359531][ T28] audit: type=1326 audit(1754785668.572:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5947 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1e18ebe9 code=0x7ffc0000 [ 90.526861][ T5943] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x9119abd2) [ 90.706616][ T27] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 90.735200][ T5943] exFAT-fs (loop3): invalid boot region [ 90.740927][ T5943] exFAT-fs (loop3): failed to recognize exfat type [ 90.774669][ T28] audit: type=1326 audit(1754785668.572:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5947 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdb1e18ebe9 code=0x7ffc0000 [ 90.883517][ T28] audit: type=1326 audit(1754785668.572:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5947 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1e18ebe9 code=0x7ffc0000 [ 90.944564][ T28] audit: type=1326 audit(1754785668.572:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5947 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fdb1e18ebe9 code=0x7ffc0000 [ 90.957661][ T5801] udevd[5801]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 91.033545][ T28] audit: type=1326 audit(1754785668.612:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5947 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1e18ebe9 code=0x7ffc0000 [ 91.111453][ T786] usb 4-1: USB disconnect, device number 2 [ 92.083402][ T5974] netlink: 32 bytes leftover after parsing attributes in process `syz.1.35'. [ 92.095140][ T5974] netlink: 24 bytes leftover after parsing attributes in process `syz.1.35'. [ 92.325046][ T23] cfg80211: failed to load regulatory.db [ 93.071588][ T5969] loop0: detected capacity change from 0 to 40427 [ 93.099603][ T5969] F2FS-fs (loop0): Unrecognized mount option "18446744073709551615" or missing value [ 93.178648][ T5981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36'. [ 93.187515][ T5981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36'. [ 94.760197][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.770319][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 94.779782][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.831131][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 94.831146][ T28] audit: type=1326 audit(1754785673.576:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5993 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c7f8ebe9 code=0x7ffc0000 [ 94.944313][ T28] audit: type=1326 audit(1754785673.616:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5993 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5c7f8ebe9 code=0x7ffc0000 [ 94.994538][ T28] audit: type=1326 audit(1754785673.616:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5993 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c7f8ebe9 code=0x7ffc0000 [ 95.062592][ T28] audit: type=1326 audit(1754785673.616:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5993 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c7f8ebe9 code=0x7ffc0000 [ 95.132309][ T28] audit: type=1326 audit(1754785673.616:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5993 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5c7f8ebe9 code=0x7ffc0000 [ 96.008133][ T6004] tipc: Started in network mode [ 96.019237][ T6004] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 96.077167][ T6004] tipc: Enabled bearer , priority 10 [ 97.093536][ T28] audit: type=1326 audit(1754785673.616:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5993 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c7f8ebe9 code=0x7ffc0000 [ 97.185529][ T27] tipc: Node number set to 4269801488 [ 97.225095][ T28] audit: type=1326 audit(1754785673.616:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5993 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5c7f8ebe9 code=0x7ffc0000 [ 97.247454][ T28] audit: type=1326 audit(1754785673.616:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5993 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c7f8ebe9 code=0x7ffc0000 [ 97.269821][ T28] audit: type=1326 audit(1754785673.626:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5993 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5c7f8ebe9 code=0x7ffc0000 [ 97.315021][ T28] audit: type=1326 audit(1754785673.626:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5993 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c7f8ebe9 code=0x7ffc0000 [ 97.383396][ T6008] loop3: detected capacity change from 0 to 512 [ 97.396128][ T6008] ======================================================= [ 97.396128][ T6008] WARNING: The mand mount option has been deprecated and [ 97.396128][ T6008] and is ignored by this kernel. Remove the mand [ 97.396128][ T6008] option from the mount to silence this warning. [ 97.396128][ T6008] ======================================================= [ 97.528327][ T6008] EXT4-fs: Ignoring removed mblk_io_submit option [ 97.575184][ T6008] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 97.616669][ T6008] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e028, mo2=0002] [ 97.632551][ T6008] EXT4-fs (loop3): orphan cleanup on readonly fs [ 97.664053][ T6008] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.45: bg 0: block 361: padding at end of block bitmap is not set [ 97.702336][ T6008] EXT4-fs (loop3): Remounting filesystem read-only [ 97.716104][ T6008] EXT4-fs (loop3): 1 truncate cleaned up [ 97.723250][ T6008] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 97.898417][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 99.260286][ T6023] loop2: detected capacity change from 0 to 512 [ 99.437642][ T6023] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.50: casefold flag without casefold feature [ 99.452298][ T6023] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.50: couldn't read orphan inode 15 (err -117) [ 99.471817][ T6023] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.562361][ T6033] loop0: detected capacity change from 0 to 256 [ 105.126329][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 105.126344][ T28] audit: type=1326 audit(1754785683.166:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6040 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966298ebe9 code=0x7ffc0000 [ 105.339384][ T28] audit: type=1326 audit(1754785683.166:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6040 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966298ebe9 code=0x7ffc0000 [ 105.361631][ T28] audit: type=1326 audit(1754785683.166:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6040 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f966298ebe9 code=0x7ffc0000 [ 105.383943][ T28] audit: type=1326 audit(1754785683.176:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6040 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966298ebe9 code=0x7ffc0000 [ 105.406098][ T28] audit: type=1326 audit(1754785683.176:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6040 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966298ebe9 code=0x7ffc0000 [ 105.428222][ T28] audit: type=1326 audit(1754785683.176:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6040 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f966298ebe9 code=0x7ffc0000 [ 105.451858][ T28] audit: type=1326 audit(1754785683.176:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6040 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966298ebe9 code=0x7ffc0000 [ 105.503112][ T28] audit: type=1326 audit(1754785683.176:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6040 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966298ebe9 code=0x7ffc0000 [ 105.549609][ T28] audit: type=1326 audit(1754785683.186:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6040 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f966298ebe9 code=0x7ffc0000 [ 105.606151][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.639204][ T28] audit: type=1326 audit(1754785683.186:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6040 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966298ebe9 code=0x7ffc0000 [ 105.672922][ T6047] syz.0.58 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 105.813123][ T6051] netlink: 'syz.1.60': attribute type 27 has an invalid length. [ 108.818557][ T6069] loop3: detected capacity change from 0 to 256 [ 108.857530][ T6069] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 108.900798][ T6069] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 108.982923][ T6051] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.991508][ T6051] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.350074][ T6051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.368198][ T6051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.529300][ T6051] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.539444][ T6051] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.548943][ T6051] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.558866][ T6051] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.693464][ T6052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.707987][ T6052] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.727063][ T6052] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 109.844913][ T6073] pim6reg1: entered promiscuous mode [ 109.854856][ T6073] pim6reg1: entered allmulticast mode [ 110.301257][ T6105] xt_CT: No such helper "netbios-ns" [ 112.236514][ T6126] vlan2: entered allmulticast mode [ 114.170677][ T6151] loop3: detected capacity change from 0 to 1024 [ 114.190233][ T6151] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.270776][ T6151] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.395547][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.415386][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 114.613379][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 114.629111][ T23] usb 3-1: config 0 has an invalid interface number: 32 but max is 0 [ 114.642263][ T23] usb 3-1: config 0 has no interface number 0 [ 114.654781][ T23] usb 3-1: config 0 interface 32 has no altsetting 0 [ 114.672529][ T23] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 114.691950][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.714556][ T23] usb 3-1: Product: syz [ 114.718775][ T23] usb 3-1: Manufacturer: syz [ 114.743788][ T23] usb 3-1: SerialNumber: syz [ 114.754741][ T23] usb 3-1: config 0 descriptor?? [ 114.779671][ T23] ftdi_sio 3-1:0.32: FTDI USB Serial Device converter detected [ 114.808756][ T23] usb 3-1: Detected SIO [ 114.831390][ T23] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 114.972164][ T6082] usb 3-1: USB disconnect, device number 3 [ 115.007278][ T6082] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 115.049073][ T6082] ftdi_sio 3-1:0.32: device disconnected [ 115.172086][ T6174] loop3: detected capacity change from 0 to 256 [ 115.252795][ T6174] FAT-fs (loop3): Directory bread(block 64) failed [ 115.275491][ T6174] FAT-fs (loop3): Directory bread(block 65) failed [ 115.288660][ T6174] FAT-fs (loop3): Directory bread(block 66) failed [ 115.303189][ T6174] FAT-fs (loop3): Directory bread(block 67) failed [ 115.316978][ T6174] FAT-fs (loop3): Directory bread(block 68) failed [ 115.327275][ T6174] FAT-fs (loop3): Directory bread(block 69) failed [ 115.334717][ T6174] FAT-fs (loop3): Directory bread(block 70) failed [ 115.341363][ T6174] FAT-fs (loop3): Directory bread(block 71) failed [ 115.348952][ T6174] FAT-fs (loop3): Directory bread(block 72) failed [ 115.355743][ T6174] FAT-fs (loop3): Directory bread(block 73) failed [ 116.594342][ T6199] loop2: detected capacity change from 0 to 512 [ 116.663419][ T6199] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 116.750303][ T6187] loop0: detected capacity change from 0 to 40427 [ 116.806027][ T6199] EXT4-fs (loop2): 1 orphan inode deleted [ 116.830496][ T2936] __quota_error: 16 callbacks suppressed [ 116.830513][ T2936] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 116.866976][ T6199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.884606][ T6187] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 116.892394][ T6187] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 116.931023][ T2936] EXT4-fs error (device loop2): ext4_release_dquot:6974: comm kworker/u4:7: Failed to release dquot type 1 [ 116.951195][ T6206] netlink: 16 bytes leftover after parsing attributes in process `syz.3.94'. [ 116.962255][ T6199] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.981136][ T6187] F2FS-fs (loop0): invalid crc value [ 117.005117][ T6199] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.060635][ T6187] F2FS-fs (loop0): Found nat_bits in checkpoint [ 117.285707][ T6187] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 117.303426][ T6187] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 118.977544][ T6225] syz.0.92: attempt to access beyond end of device [ 118.977544][ T6225] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 120.487941][ T5786] syz-executor: attempt to access beyond end of device [ 120.487941][ T5786] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 120.537738][ T6243] óÿ: renamed from bond_slave_0 (while UP) [ 120.558789][ T5786] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 123.075820][ T6276] netlink: 16 bytes leftover after parsing attributes in process `syz.3.115'. [ 124.486221][ T6296] fuse: Bad value for 'fd' [ 124.526037][ T6298] Zero length message leads to an empty skb [ 124.655657][ T6301] input: syz0 as /devices/virtual/input/input5 [ 126.232613][ T6309] loop3: detected capacity change from 0 to 128 [ 126.565785][ T6309] syz.3.131: attempt to access beyond end of device [ 126.565785][ T6309] loop3: rw=2049, sector=145, nr_sectors = 152 limit=128 [ 127.311582][ T6328] netlink: 16 bytes leftover after parsing attributes in process `syz.0.132'. [ 130.343855][ T6350] netlink: 'syz.0.144': attribute type 1 has an invalid length. [ 130.351722][ T6350] netlink: 24 bytes leftover after parsing attributes in process `syz.0.144'. [ 130.365903][ T6353] loop3: detected capacity change from 0 to 128 [ 130.404386][ T28] audit: type=1800 audit(1754785709.146:60): pid=6353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.145" name="file1" dev="loop3" ino=1048599 res=0 errno=0 [ 131.362382][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 132.301592][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 132.340902][ T23] usb 1-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 132.713473][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.726309][ T23] usb 1-1: config 0 descriptor?? [ 133.120067][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.130845][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.231588][ T23] nintendo 0003:057E:2009.0002: unknown main item tag 0x0 [ 134.254690][ T23] nintendo 0003:057E:2009.0002: unknown main item tag 0x0 [ 134.265640][ T23] nintendo 0003:057E:2009.0002: item fetching failed at offset 2/7 [ 134.274830][ T23] nintendo 0003:057E:2009.0002: HID parse failed [ 134.286565][ T23] nintendo 0003:057E:2009.0002: probe - fail = -22 [ 134.293223][ T23] nintendo: probe of 0003:057E:2009.0002 failed with error -22 [ 134.315342][ T23] usb 1-1: USB disconnect, device number 3 [ 134.347790][ T6379] fuse: Bad value for 'fd' [ 134.634695][ T6092] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 136.005142][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 136.179834][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 136.188976][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 136.224537][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 136.234659][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 136.244299][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 136.335150][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 137.174507][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.226727][ T23] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 137.244740][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.284074][ T23] usb 4-1: config 0 descriptor?? [ 137.789427][ T23] hid-multitouch 0003:0EEF:72C4.0003: unknown main item tag 0x0 [ 137.940843][ T23] hid-multitouch 0003:0EEF:72C4.0003: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.3-1/input0 [ 138.058500][ T6092] usb 3-1: device descriptor read/all, error -71 [ 140.343032][ T23] usb 4-1: USB disconnect, device number 3 [ 142.735039][ T6434] netlink: 16 bytes leftover after parsing attributes in process `syz.0.165'. [ 143.500347][ T6439] loop2: detected capacity change from 0 to 1024 [ 143.533764][ T6443] loop3: detected capacity change from 0 to 128 [ 143.566178][ T6443] EXT4-fs (loop3): Test dummy encryption mode enabled [ 143.581419][ T6439] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.601661][ T6443] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 143.623067][ T6443] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 143.716535][ T6439] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.294708][ T6453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.173'. [ 144.303665][ T6453] netlink: 5 bytes leftover after parsing attributes in process `syz.1.173'. [ 145.163472][ T6443] fscrypt (loop3): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 146.599586][ T6472] [ 146.601972][ T6472] ============================================ [ 146.608130][ T6472] WARNING: possible recursive locking detected [ 146.614317][ T6472] 6.6.101-syzkaller #0 Not tainted [ 146.619494][ T6472] -------------------------------------------- [ 146.625655][ T6472] syz.1.179/6472 is trying to acquire lock: [ 146.631558][ T6472] ffff88801c7d2a38 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0x96/0x6a0 [ 146.640593][ T6472] [ 146.640593][ T6472] but task is already holding lock: [ 146.647968][ T6472] ffff88801c7d3238 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xca/0xea0 [ 146.656985][ T6472] [ 146.656985][ T6472] other info that might help us debug this: [ 146.665056][ T6472] Possible unsafe locking scenario: [ 146.665056][ T6472] [ 146.672517][ T6472] CPU0 [ 146.675813][ T6472] ---- [ 146.679106][ T6472] lock(&trie->lock); [ 146.683213][ T6472] lock(&trie->lock); [ 146.687311][ T6472] [ 146.687311][ T6472] *** DEADLOCK *** [ 146.687311][ T6472] [ 146.695471][ T6472] May be due to missing lock nesting notation [ 146.695471][ T6472] [ 146.703817][ T6472] 3 locks held by syz.1.179/6472: [ 146.708862][ T6472] #0: ffffffff8cd2fba0 (rcu_read_lock){....}-{1:2}, at: bpf_map_update_value+0x41d/0x720 [ 146.718841][ T6472] #1: ffff88801c7d3238 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xca/0xea0 [ 146.728211][ T6472] #2: ffffffff8cd2fba0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0xfd/0x420 [ 146.737572][ T6472] [ 146.737572][ T6472] stack backtrace: [ 146.743501][ T6472] CPU: 1 PID: 6472 Comm: syz.1.179 Not tainted 6.6.101-syzkaller #0 [ 146.751506][ T6472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 146.761607][ T6472] Call Trace: [ 146.764915][ T6472] [ 146.767882][ T6472] dump_stack_lvl+0x16c/0x230 [ 146.772594][ T6472] ? show_regs_print_info+0x20/0x20 [ 146.777825][ T6472] ? print_deadlock_bug+0x435/0x5d0 [ 146.783057][ T6472] __lock_acquire+0x5d40/0x7c80 [ 146.787946][ T6472] ? mark_lock+0x94/0x320 [ 146.792305][ T6472] ? verify_lock_unused+0x140/0x140 [ 146.797529][ T6472] ? __lock_acquire+0x1260/0x7c80 [ 146.802600][ T6472] lock_acquire+0x197/0x410 [ 146.807131][ T6472] ? trie_delete_elem+0x96/0x6a0 [ 146.812126][ T6472] ? verify_lock_unused+0x140/0x140 [ 146.817364][ T6472] ? read_lock_is_recursive+0x20/0x20 [ 146.822772][ T6472] _raw_spin_lock_irqsave+0xa8/0xf0 [ 146.828004][ T6472] ? trie_delete_elem+0x96/0x6a0 [ 146.832976][ T6472] ? _raw_spin_lock+0x40/0x40 [ 146.837692][ T6472] trie_delete_elem+0x96/0x6a0 [ 146.842490][ T6472] ? __cant_sleep+0x210/0x210 [ 146.847200][ T6472] bpf_prog_8c8ab8634bca3061+0x42/0x4c [ 146.852707][ T6472] bpf_trace_run4+0x1f9/0x420 [ 146.857412][ T6472] ? bpf_trace_run4+0xfd/0x420 [ 146.862277][ T6472] ? bpf_trace_run3+0x400/0x400 [ 146.867344][ T6472] ? percpu_ref_put+0xef/0x180 [ 146.872138][ T6472] ? __memcg_kmem_charge_page+0x264/0x380 [ 146.877899][ T6472] __alloc_pages+0x429/0x460 [ 146.882525][ T6472] ? zone_statistics+0x170/0x170 [ 146.887499][ T6472] ? bpf_map_get_memcg+0x4e/0x4e0 [ 146.892553][ T6472] ? __lock_acquire+0x7c80/0x7c80 [ 146.897606][ T6472] ? __rwlock_init+0x150/0x150 [ 146.902402][ T6472] __kmalloc_large_node+0x8c/0x1e0 [ 146.907549][ T6472] ? bpf_map_kmalloc_node+0xbc/0x1b0 [ 146.912867][ T6472] __kmalloc_node+0x10f/0x230 [ 146.917576][ T6472] ? _raw_spin_lock+0x40/0x40 [ 146.922290][ T6472] bpf_map_kmalloc_node+0xbc/0x1b0 [ 146.927445][ T6472] trie_update_elem+0x166/0xea0 [ 146.932345][ T6472] ? asm_exc_page_fault+0x26/0x30 [ 146.937438][ T6472] bpf_map_update_value+0x660/0x720 [ 146.942690][ T6472] map_update_elem+0x57b/0x700 [ 146.947494][ T6472] __sys_bpf+0x652/0x800 [ 146.951771][ T6472] ? bpf_link_show_fdinfo+0x350/0x350 [ 146.957199][ T6472] ? lock_chain_count+0x20/0x20 [ 146.962092][ T6472] __x64_sys_bpf+0x7c/0x90 [ 146.966537][ T6472] do_syscall_64+0x55/0xb0 [ 146.970984][ T6472] ? clear_bhb_loop+0x40/0x90 [ 146.975686][ T6472] ? clear_bhb_loop+0x40/0x90 [ 146.980394][ T6472] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.986342][ T6472] RIP: 0033:0x7fdb1e18ebe9 [ 146.990787][ T6472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.010426][ T6472] RSP: 002b:00007fdb1f08c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 147.018870][ T6472] RAX: ffffffffffffffda RBX: 00007fdb1e3b5fa0 RCX: 00007fdb1e18ebe9 [ 147.026867][ T6472] RDX: 0000000000000020 RSI: 0000200000000000 RDI: 0000000000000002 [ 147.034865][ T6472] RBP: 00007fdb1e211e19 R08: 0000000000000000 R09: 0000000000000000 [ 147.042857][ T6472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.050851][ T6472] R13: 00007fdb1e3b6038 R14: 00007fdb1e3b5fa0 R15: 00007ffe5bec4c08 [ 147.058858][ T6472] [ 147.327317][ T6473] overlayfs: failed to clone upperpath [ 147.876348][ T5783] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.