last executing test programs: 48.946326419s ago: executing program 4 (id=3741): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_ID={0x8}]}], {0x14}}, 0x74}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r3) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_SF_ORD={0x5}]}, 0x3c}}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r5, 0xc4728cda14e1f7dd, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x20, r8, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newlink={0x328, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r12, 0x50483}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e21}, @IFLA_IPTUN_TOS={0x5}]}}}, @IFLA_PORT_SELF={0x3c, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "e00b9814fa000065697bd1878937c494"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "810f813930bdcae5415f1d6bb298f1c7"}]}, @IFLA_VFINFO_LIST={0x29c, 0x16, 0x0, 0x1, [{0xcc, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfe52, 0x400}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xeb, 0x2}}, @IFLA_VF_VLAN_LIST={0x54, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x80, 0x4f1, 0x4, 0x88a8}}, {0x14, 0x1, {0x20, 0xe3c, 0x8, 0x8100}}, {0x14, 0x1, {0xc97, 0xd87, 0x7, 0x88a8}}, {0x14, 0x1, {0x4, 0x9b8, 0x0, 0x88a8}}]}, @IFLA_VF_TRUST={0xc, 0x9, {0x59, 0x400}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8, 0x7}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x3f, 0x2bd2bfd}}, @IFLA_VF_MAC={0x28, 0x1, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}}]}, {0x90, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x2, @remote}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0x35500000}}, @IFLA_VF_VLAN={0x10, 0x2, {0x2, 0x5e8, 0x8001}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xd00000, 0x9}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0x101}}, @IFLA_VF_VLAN={0x10, 0x2, {0x3, 0x7b6, 0x4}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7ff, 0x3}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x9, 0x200}}]}, {0x90, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x5}}, @IFLA_VF_MAC={0x28, 0x1, {0x7fff, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x4000, 0xdae, 0x1000, 0x88a8}}, {0x14, 0x1, {0xfff, 0xc56, 0x0, 0x8100}}, {0x14, 0x1, {0x56a7fac9, 0x90b, 0x7, 0x8100}}]}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x2, 0x1}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x2, 0x8}}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x0, @local}}]}, {0x80, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x3f, 0x7}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x8001, 0x7}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3f, 0x100}}, @IFLA_VF_MAC={0x28, 0x1, {0x5, @broadcast}}, @IFLA_VF_MAC={0x28, 0x1, {0x0, @remote}}]}]}]}, 0x328}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$inet(r9, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @empty}}}], 0x20}}], 0x1, 0x80) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), r13) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140), 0x5c}, 0x1, 0x0, 0x0, 0x20040881}, 0x4) sendmsg$NLBL_MGMT_C_VERSION(r13, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4004840) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000000340)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000000580)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd7000fddbdf251600000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="c2610300", @ANYRES32=r14, @ANYBLOB="0c0006000200000000000000"], 0x38}}, 0x4000000) sendmsg$IEEE802154_LLSEC_GETPARAMS(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800008}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x3c, r4, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r14}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xd4, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x28, 0x2e, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x132094deeae346e5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}]}]}, @NL802154_ATTR_SEC_KEY={0x90, 0x2e, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "86dee97b165c8a88faaa4773b5dbef81c3a937379ffe4220fddc934732cf12f2"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "49b5007c32aacf2dbcb0fbeb0287012a"}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xb3}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c039b084b401f866449736277f23fb75"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "16baf2ff393083d26c38c4e9a32372c7c072ad520cd97052500bd1ceb268a008"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0xd4}, 0x1, 0x0, 0x0, 0x810}, 0x40010) 48.04507543s ago: executing program 4 (id=3745): openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000140)="480000001500190d09004beafd0d8c560a84476080ffe00600802f000000590000a2bc56060000000f7f89000000200000000101ff00"/72, 0x48}], 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000100)=""/96, &(0x7f0000000040)=0x60) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x7f}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x3c, r7, 0x29800f6803d6a469, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x3c}}, 0x0) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x13, &(0x7f0000000280)=ANY=[], 0x8) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffffff28, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x48) r11 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@generic={&(0x7f0000000480)='./file1\x00', 0x0, 0xb490558f185847cf}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r10}, &(0x7f0000000240), &(0x7f0000000340)=r11}, 0x20) r12 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, &(0x7f0000000040)='veth0\x00', 0x10) sendmsg$inet(r12, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x0, @private}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="080027226da03f00", 0x8}], 0x1}, 0x24048000) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000000c0)='H', 0x34000, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 45.904490436s ago: executing program 4 (id=3760): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000040)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') read$FUSE(r7, &(0x7f0000001c00)={0x2020}, 0x2020) preadv(r7, &(0x7f0000000280)=[{&(0x7f0000000000)=""/142, 0x8e}], 0x1, 0x0, 0x0) r8 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x0, 0x0, 'lblcr\x00'}, 0x2c) read(r7, &(0x7f0000001b00)=""/194, 0xc2) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r10 = syz_open_procfs(r9, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r10, 0x4004662b, &(0x7f0000000180)={@id={0x2, 0x0, @d}}) 13.898151734s ago: executing program 2 (id=3831): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x29632}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002140)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007ed10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000889049938edebcd600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x18, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r2, 0x0, 0xffffffffffffffe2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@cgroup=r3, 0xffffffffffffffff, 0x33, 0x4, 0x0, @void, @value}, 0x20) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000940)={0x60, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x200}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, &(0x7f0000000000)) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r4, 0xf50f, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$alg(r5, &(0x7f0000000d40)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000200)=[@assoc={0x18, 0x29, 0x34}], 0x18}], 0x1, 0x0) r6 = openat$proc_mixer(0xffffff9c, &(0x7f0000000040)='/proc/asound/card1/oss_mixer\x00', 0x302, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a00000000000000000000048014000180090001006d6173710000000004000280141000001100010000200000000000000000000a"], 0x54}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="0c00990000000200000000000800a00094090000080026009409000008002700000000000800a1"], 0x48}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000080)={0x20002000}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) poll(&(0x7f00000000c0)=[{r3, 0x50}], 0x1, 0x100) ioctl$FICLONERANGE(r11, 0x4020940d, &(0x7f0000000000)={{r11}}) ioctl$UI_SET_SNDBIT(r11, 0x4004556a, 0x7) 12.565834455s ago: executing program 1 (id=3833): r0 = socket$kcm(0x2, 0x3, 0x84) unshare(0x20000400) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0x2}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r1, 0x0, 0x0}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="7a00330080000000ffffffffffff08021100000050505050505000000000000000000000000001000301"], 0x98}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="b40800000000000073119a00000000008510000002000000b7000000000000009500c200000000009500001200000000978397f6f8d449eca162e33d3cc50e3ea2bda29b6c5c0dd4ae4a5723d7bb1782d799214e20806df14107bbb18383f65bfa943f096ffd3f1a5195665bd897b554a4229f80258ac79116086d8764612511b5fbf0562c4034196f45d920ce764e50311836d630a55bd079ffb7c7bfd4d9e226"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000000)=0x8000015, 0x4) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x7, 0x3f, 0x2, 0x3, 0x0, 0x70bd29, 0x25dfdbfb, [@sadb_x_nat_t_type={0x1, 0x14, 0x1}]}, 0x18}}, 0x4008000) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'vlan1\x00', 0x0}) sendto$packet(r9, &(0x7f0000000040)="363c8f1fca5d66d08e583e7c88a8", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r10}, 0x14) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, 0x0}, 0x4008804) sendmsg$inet(r0, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e000000000000000000200003800800040000000000080002002000000004000500080005"], 0x4c}}, 0x0) r12 = socket$kcm(0x10, 0x3, 0x10) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r13, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x30, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r15}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x30}], 0x1}, 0x0) sendmsg$kcm(r12, &(0x7f0000000040)={0x0, 0xfffffffffffffcdf, &(0x7f00000000c0)=[{&(0x7f0000000080)="1400384449002208007463c6ae6fc994f903f6766000"/33, 0x21}], 0x1}, 0x4800) socket$kcm(0x11, 0x3, 0x0) 10.28802212s ago: executing program 2 (id=3836): socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) socket$netlink(0x10, 0x3, 0x0) getpgrp(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_inet_SIOCSARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x0, @remote}, {0x0, @link_local}, 0x0, {0x2, 0x0, @broadcast}}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000026c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000000000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c061c6207005d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf02f46c7953ab1abdaf9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9ba5d80efd7da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe5682159fbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a9384f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d94462d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef82948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a22888a5c3941b7a765b92bcb37f302487bcbd93ccf3a104021ff34ddf7ffcc963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e889468cf13dd92aa0d7744db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534b00d0fea62f0a61535dfc4da06e7e8695be614c557caed7eb0120516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2f58a30e0844f1ad00bbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e01000000fc5eb55ecf9e6e363ea2ac40a14a6f00f0ffffa0fdb6487c51ef12c27b30255bc4f8813be88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c6ab5acbba2ce5099a9387c7acb9bbd1da497611ceda25049e48ddacccbb58dddaf9a3510d65383829a51e0f41e661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d33599a40283c5addc191b4aa023079ed0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607649bae75bd68c3e2b770c324a0ab26b6065d7e95a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459500f024f9b75885cd79ba32776e4a511c8a4ad922b00000000000000a9241220dfbf7d02ef507ec6fc7f5d37d835f7bed71283c431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362cdff99c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477e268326af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d13d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8ea5c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae6793e1f54814a8ee2779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5fe535ead8857acf0166dbd9f30a9b9c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8adef4de2076dc538bb97502b4b4350e633dc0a53c2fc9a01bc5cfae0245f1fab843c6737ba8b1672ae9677bb5970cf3e84be433446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c005da21073c6d9680d4e547cb727addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cf4eba7ceda6ff8a0c8b18c5e9e2f505e8332116dfcdd6071b976de8c473a7585436730db75da167481ab8921fe051b250106e7b09a8fff8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a117cb948247c33abc765a6ba695c3cea5e32a4d1ae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3f744ff1973431000000000100000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000ff267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfe3f31a34e3e12c58cf172a4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9745b3cabc908e623403c013907523c77f8acc20b9e2fd224ca8f21fab2b10991881e2112f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a805e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d06c790000087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec6d8a68356cef8646f3815eb4daf46c5c76b29839d9feff688dfbe25c73f936338e7b057980da58a6303d95f17712d667d5a1066ae457ae32925ce518b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303dff449c0513b552a75ed48215cc31264a6ff648a95daa0d8e5c599dbce303b3b5307572df30429a3b4b115cab0a018f2501272048dd9e69877535e20078e7c28a98f26ace2fa90c68166396a2398d7a266bdc15ce904f25ec7fb2434ee7b5b69bed702ba1e7ed72942f452f1a98a2d949450091075efa823b11f5f5eccd921c04c7c15a5a05750cd85b1300fc00ce275de7559e117f87cb6c3c9a4b9f96149e3fcffa44d7258e9fc818ab3d76ab660a254d998592c31017f816e01a21c08a17acdb8ada5bc901934e40608563f14698feafac57b2b48cb89e10c85463a386be0f7fb1d1cfd621f8e2b51d50622b7c15be3999ffa42bd57408fe168d840c45a15317b21cf4c2278a04000000000000000033e2ad66fd156dcbf12d9e0e85dc9705d0ce24a4694c8ecd2493e1ed561a425d6045eb68c80d1dc57defb4abe86c9f2c37652d98b0c415bf246642062bd3b58a1ec57acdc2b6be53eaffaafd100002000057fe38ef705b4b9c0342a9b267db42fdda35e41afd619fb6bb14b910346544d83f462635f0738fe4a8db56364fd28540ac55be7fff8aa77009f12e2c1e7098a27b0bc549f3a6f68c11d786e498bffc37c297185efdb868a16ae1323c7d19da92531b33023e82cdeb8be27f82ca830f409a21d1aec436b0230e4b1b376005bcf6e55fceffce6d184de1b89dc5ed8bdfa37e8f86ada4158a7713db2c6789e6ba90df2bc48944775e45134f2187359f74c9dff3c78fb36fe5f672a8ce6e5c404ed8d734b905c5a12a996d8836b4522dbc73e595c14db9523200000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x200}}) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r7, 0x0) ioctl$KVM_GET_CPUID2(r6, 0xc008ae91, 0x0) fanotify_mark(r3, 0x1, 0x2, r3, &(0x7f00000002c0)='./file0\x00') r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x30}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) 10.272435731s ago: executing program 1 (id=3837): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0xa00010, &(0x7f0000000700)=ANY=[@ANYBLOB='nodecompose,decompose\x00nobfrrier,gid=', @ANYRESHEX, @ANYBLOB="2c6e6c733d69736f383835392d310000000072726965722c00bcd0f0b5c4e2957974ff5d7ea3c3dcee087e4983684e8a4c4e4e87b134e30ce77162b12885b964b3506ff3eae0f3599447b17861d19be78079e5dd7bdc7f1eb36e31ac14de48349767164f5f6431bbdeaef96a4f2bce64b5cfa76ce3a2c4302374bc5535d7e2eb8dfb2e5d58a37b7e37836597c21f51bcdf6df4cad825cfd9ef5ee9e89e04b15cd3cea9e152d67b9a7eedc5dfe6d85a3ce7c342da8cc969b552197cb8bcc4a1009f38f4a85b7c742101ba5bc03115feca2b994c699812"], 0x6, 0x635, &(0x7f0000000c80)="$eJzs3c1rHOcdB/DvrFZryQVHSezELYGKGNJSUVsvKK16iVtK0SGUkB56FrYcC6+VIClFCaWo79BTD/kD0oNuPRV6N6Tn9parjoFCLznppjKzs9LaWil6s1ZqPx/z7PM888w888xvZ2Zndi0mwP+t+Yk0n6TI/MTb62V9a3OmvbU5c6Vubicpy42k2clSLCfFZ8nddFK+Xk6s5y8OWs8nS3Pvfv7l1hedWrNO1fyNw5Y7mo06ZTzJUJ0/o/Wn4/Q33CmU/dzr398xFLtbWAbsVjdwMGg7+2wcZ/FTHrfARVB0Pjf3GUuuJhmprwNSnx0a5zu6s3essxwAAABcUi9sZzvruTbocQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBlUj//v6hTo1seT9F9/n+rnpa6fKk9GfQAAAAAAAAAAOAMfHM721nPtW59p6h+83+9qlyvXr+WD7OaxazkdtazkLWsZSVTScZ6OmqtL6ytrUwdYcnpvktOn8/2AgAAAAAAAMD/qN9kfu/3fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGKShOi86xaJO17vlsTSaSUaStMr5NpJ/dcuXRNFv4pPzHwcAAACcysgJlnlhO9tZz7Vufaeo7vlfqe6XR/JhlrOWpaylncXcr++hy7v+xtbmTHtrc+Zxmfb3+8P/HGsYVY+7X0P0W/PNao7RPMhSNeV27lWDuZ9GtWTpZnc8/cf163JMxVu1I47sfp2XK/vzQd8iDMRYFZHh3YhM1mMro/Hi4ZH4yneneeiaptLY/ebn+nOI+dU6L7fnDxcz5o1UkZju2fteOTwSybf+/tefP2wvP3r4YHXi4mzSCT27T8z0ROLVSx2J5jHnn6wicWO3Pp+f5GeZyHjeyUqW8ossZC2L2anbF+r9uXwdOzxSd5+qvfNVI2nV70vnLHqUMY3nx1VpIa9Xy17LUoq8n/tZzJvVv+lM5XuZzWzmet7hGweOu9q26qhvHO+ov/XtujCa5I91Pmidj9Qyri/2xLX3nDtWtfVO2YvSS2d/bmx+oy6U6/htnV8Mz0ZiqicSLx8eib9Ux8Zqe/nRysOFDw7of+OZ+ht1Xu5xv79QnxLl/vJSRuozydN7R9n28u5Z5ul4tepfXDptjX1tN6q2ougeqT898Eht1ddw+3uartpe7ds2U7Xd7Gl76nor76e9ez0EwAV29TtXW6P/Hv3n6Kejvxt9OPr2yI+ufP/Ka60M/2P4B83JoTcarxV/y6f51d79PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHKrH338aKHdXlzpX2gc3HS2haJ+kM95rEth0IXuQwRP3eHdC7E5l7owlKRfU/0WneThosClcGft8Qd3Vj/6+LtLjxfeW3xvcXl4dnZucm72zZk7D5bai5Od10GPEnge9j70+7cXF+oBmwAAAAAAAAAAAECO9vc2O/X//zvxXxoMehsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAy21+Is0nKTI1eXuyrG9tzrTL1C3vzdlM0mgkxS+T4rPkbjopYz3dFW8dsJ5Plube/fzLrS/2+mpW85ed1vkpbNQp40mG6vys+rt36v6K3S0sA3arGzgYtP8GAAD//+IHAOM=") socket$inet6(0xa, 0x3, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f00000003c0)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2008003) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x4000000010001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f0000000040)=r4, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = dup2(r4, r6) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f00000000c0)=r7, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 8.626016853s ago: executing program 1 (id=3840): write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='b '], 0x8) syz_emit_ethernet(0xfc0, &(0x7f0000000100)=ANY=[@ANYRES8=r0], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x60}}, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x83, &(0x7f0000000380)={r7}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000010180)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @private2, 0x20000000}]}, &(0x7f0000000280)=0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r4, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x204000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r8}, 0x0, 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r9, 0x10f, 0x7f, &(0x7f0000000100)=0xfffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000005e0001"], 0x20}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b80)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x0, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}}, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f00000011c0)=0x4, 0x0) 8.495154972s ago: executing program 0 (id=3841): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@user_xattr}, {@nombcache}, {@noblock_validity}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f00000003c0)='./bus\x00', 0x0) renameat2(r2, &(0x7f0000000300)='./bus\x00', r2, &(0x7f00000001c0)='./file0\x00', 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000007680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000a9de51", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)}, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r8, 0x1, 0xd, 0x0, 0x0) 8.22793851s ago: executing program 2 (id=3843): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r1, &(0x7f0000000000)="240000001a005f3814f9f407000904018000000000000000000000000800070040000000", 0x24) splice(r0, &(0x7f0000000000)=0x101, r1, &(0x7f0000000040)=0x8000000000000000, 0x9, 0x1) r2 = socket(0xa, 0x2, 0x3a) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x124, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x9}, @void}}, [@NL80211_ATTR_FTM_RESPONDER={0x108, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x104, 0xe, "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"}]}]}, 0x124}}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="00042bbd7000fcdbdf252b0000000c00990008000000340000000400bf00"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x851) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r5, &(0x7f0000000940), 0x0, 0x4040) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x150, 0x14000000, 0x148, 0x0, 0x148, 0x220, 0x20f, 0x240, 0x220, 0x240, 0x3, 0x0, {[{{@ip={@empty, @broadcast, 0x0, 0x0, 'veth1_to_bridge\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x41}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'xfrm0\x00', {0x28, 0x66010000, 0x0, 0x0, 0x0, 0xed, 0x20}}}, @common=@socket0={{0x20}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0xc0000000, 'snmp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000940)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @dev}, {0x2, 0x4e24, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x400000000000, 0x1, 0x3}) getpeername(r5, &(0x7f00000003c0)=@l2tp={0x2, 0x0, @private}, &(0x7f0000000340)=0x80) dup3(r3, r3, 0x80000) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f00000009c0)={0xfffffb47, {{0x2, 0x4e24, @remote}}}, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYRESHEX=r5, @ANYRESOCT=r5, @ANYBLOB="5f0208000300", @ANYRES32=r6, @ANYBLOB="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"], 0x43c}, 0x1, 0x0, 0x0, 0x20064804}, 0x4004000) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001040)=ANY=[@ANYBLOB="6fe08ae8ad6919a830b0284c64a758fb3f82f3125c6e8b77b42c4e201710b4eac6c129041d058aabf8306fe49d11331c4773c40b943d258a2245c8799d831538d08e0bc4556f950c50b433380700ee7bbbd86793829452cf4d5408c78e1948739c0905964e9b5a5310e097417222ff87290fe612875fa53696683f925d2a4414b114808c3f9bee0df5a2fc9600f518221e509e578ac56ad08db81b47dde2b29b8633be4873129be478e16b9f96eb30194418b262bea3341ea7a7b0bcc3", @ANYRES16=r4, @ANYBLOB="02002cbd7000fbdbdf250c00000008000300", @ANYRES32=r6, @ANYBLOB="0c009900ae5500003700000004000b001100070024678120b0795e28d6091730080000000800090001ac0f0004000b00040050800a00060008021100000100000800090001ac0f00000000000000000082c12fb2e154ac00f7828a0ff961145347e9467cc87201000000c90bddfb76951faaf982b1ba2dbb05baad"], 0x6c}, 0x1, 0x0, 0x0, 0xcdae2fb6ee9e6644}, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000001440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000013c0)={0x70, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x6, 0x70}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffc}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x91c}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfab}]}, 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r7 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000380)={@private0}, 0x14) socket(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) preadv(r7, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/183, 0xb7}, {&(0x7f0000000280)=""/16, 0x10}], 0x4, 0x3, 0xe7) 8.054472102s ago: executing program 1 (id=3844): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x1064, &(0x7f0000001700)="$eJzsz7FNxEAUBNBZ29hLRk7iiI5IERKFYJGQ0Ag0Qgc0QAlERHvas64GX/BesiONdqQfDna35DlLSl7exyQlrWzDpRzSWms9LUnNmtpDbpOb37enh8xJxjLnO9P+Yd6fMfevrfT0V/vYlP99p+azrOdmy8fP49cxNwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAdTkFAAD//6eSFUs=") open(&(0x7f0000000240)='./file0\x00', 0x145142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0xae, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x30}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x7f, 0x2}, {0x7}}}}, 0xf) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20}, {0x6}]}, 0x10) r5 = fcntl$dupfd(r3, 0x0, r4) sendmsg$ETHTOOL_MSG_EEE_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) ioperm(0x0, 0x2534, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x7fffffff}, 0x8) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r6, 0x4008af04, &(0x7f0000000740)=0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000600)) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x1) 7.290524504s ago: executing program 2 (id=3845): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000480)={0x0, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000600)=ANY=[@ANYRESDEC=r1], &(0x7f0000000640)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0x8001) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000380)={'veth0_to_bridge\x00', {0x2, 0x0, @private}}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000700)={'dummy0\x00'}) r5 = memfd_create(&(0x7f0000000040)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xdd\x00\x00\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\t\xff~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8a\xc5at\x94=F\xc7\xea\x84\xea0\xf4\x0f\"C\xeb\x17\xe9V\x92o\xa7\xe3/H~\x81\xebnG5\xe3O\x9a\xd9\t_\x88e\xa9x\xd2\xa0\x1e\"\xb3\xbb\x8e\x961\xf5N\xdbj\x1f\xcf>1y\xe8\xb4\xbd{\x9a\x95\xcd\xaf\"^\x86\xd2\xed`\x84\xb6\xb1\xf8\xb5\x99\xce|\x12\xad\xac\xe17\x15\x19!\xae\x03J\xd5\xabnS\x81\xe0\xfa\aP\f', 0x0) fcntl$setlease(r5, 0x400, 0x0) r6 = fanotify_init(0x200, 0x0) r7 = dup(0xffffffffffffffff) fanotify_mark(r6, 0x1, 0x0, r7, 0x0) r8 = dup(0xffffffffffffffff) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r9 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) sendmmsg(r9, &(0x7f0000007fc0), 0x800007f, 0x1c) r10 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2b}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in6=@private2}}, 0xe8) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) syz_read_part_table(0x5d4, &(0x7f0000000000)="$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") 7.218846359s ago: executing program 0 (id=3846): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x0, 0x23, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xae, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x10, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0xca, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x8, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r7}, {0x7, 0x0, 0x8}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)='%ps \x00'}, 0x20) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xef93, '\x00', 0x0, r3, 0x4, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x48) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$unix(r12, &(0x7f0000000380), &(0x7f0000000180)=0x6e, 0x80800) bind$inet6(r13, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x19, 0x10, &(0x7f0000000900)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}, @alu={0x4, 0x1, 0x7, 0x9, 0x5, 0x6, 0xfffffffffffffffc}], &(0x7f0000000780)='GPL\x00', 0xde, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @cgroup_sockopt, r5, 0x8, &(0x7f00000009c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000a00)={0x4, 0xa, 0x80000001, 0x8000}, 0x10, r2, r9, 0x7, 0x0, &(0x7f0000000a40)=[{0x0, 0x4, 0xe, 0x2}, {0x3, 0x4, 0xd}, {0x1, 0x1, 0x0, 0x7}, {0x3, 0x4, 0x0, 0x2}, {0x2, 0x4, 0x6, 0x2}, {0x3, 0x1, 0x4, 0x4}, {0x2, 0x1, 0xf, 0x1}], 0x10, 0x4, @void, @value}, 0x90) fallocate(r12, 0x0, 0x41, 0x80000004) sendto$inet6(r13, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r13, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d111", 0x3e, 0x4014, 0x0, 0x0) shutdown(r13, 0x1) splice(r13, 0x0, r12, 0x0, 0x406f413, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x1}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0x6}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0xdd, &(0x7f0000000240)=""/221, 0x41100, 0x6d, '\x00', 0x0, @fallback, r4, 0x8, &(0x7f0000000140)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0xd, 0x6, 0x20000000}, 0x10, 0xffffffffffffffff, r5, 0x0, &(0x7f0000000580)=[0x1, r6, r7, r10, r11, r12], 0x0, 0x10, 0x3, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x6, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xb}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x40, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x1, 0x6, 0x7}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000005c0)=[r0, r0, r0, r0], &(0x7f0000000600)=[{0x4, 0x2, 0xb, 0xd}, {0x3, 0x1, 0x6, 0x4}, {0x5, 0x2, 0x4, 0x6}, {0x5, 0x3, 0x5, 0x6}, {0x3, 0x5, 0x3, 0x1}, {0x3, 0x4, 0x4, 0x5}, {0x4, 0x3, 0xf, 0xa}, {0x3, 0x2, 0x8, 0x1}, {0x0, 0x5, 0xd, 0x6}, {0x1, 0x2, 0xa, 0x5}], 0x10, 0xd6780666, @void, @value}, 0x90) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000fc0500008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r14}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fstatfs(r15, &(0x7f0000002b00)=""/4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}]}, 0x44}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000ec0)={r15, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f80)=@bpf_tracing={0x1a, 0x23, &(0x7f0000000b80)=@raw=[@generic={0x3, 0x9, 0x2, 0x3e7f, 0x81}, @generic={0xff, 0x0, 0x9, 0x9a, 0x1f}, @alu={0x7, 0x1, 0x4, 0x2, 0x8, 0x80, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r16}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r15}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @map_val={0x18, 0xb, 0x2, 0x0, r15, 0x0, 0x0, 0x0, 0x5}, @tail_call, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000000}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xd}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}], &(0x7f0000000cc0)='syzkaller\x00', 0x9, 0x64, &(0x7f0000000d00)=""/100, 0x41000, 0x52, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e80)={0x3, 0x4, 0x4, 0x4}, 0x10, 0x2e76, r12, 0x4, &(0x7f0000000f00)=[r8, r7, r5, r17, r11], &(0x7f0000000f40)=[{0x2, 0x2, 0x9, 0x4}, {0x2, 0x1, 0x9}, {0x2, 0x2, 0x7, 0x6}, {0x2, 0x4, 0xe}], 0x10, 0xabc1, @void, @value}, 0x90) 6.242600145s ago: executing program 2 (id=3847): r0 = socket$kcm(0x2, 0x3, 0x84) unshare(0x20000400) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0x2}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r1, 0x0, 0x0}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="7a00330080000000ffffffffffff08021100000050505050505000000000000000000000000001000301"], 0x98}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="b40800000000000073119a00000000008510000002000000b7000000000000009500c200000000009500001200000000978397f6f8d449eca162e33d3cc50e3ea2bda29b6c5c0dd4ae4a5723d7bb1782d799214e20806df14107bbb18383f65bfa943f096ffd3f1a5195665bd897b554a4229f80258ac79116086d8764612511b5fbf0562c4034196f45d920ce764e50311836d630a55bd079ffb7c7bfd4d9e226"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000000)=0x8000015, 0x4) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x7, 0x3f, 0x2, 0x3, 0x0, 0x70bd29, 0x25dfdbfb, [@sadb_x_nat_t_type={0x1, 0x14, 0x1}]}, 0x18}}, 0x4008000) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'vlan1\x00', 0x0}) sendto$packet(r9, &(0x7f0000000040)="363c8f1fca5d66d08e583e7c88a8", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r10}, 0x14) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, 0x0}, 0x4008804) sendmsg$inet(r0, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e000000000000000000200003800800040000000000080002002000000004000500080005"], 0x4c}}, 0x0) r12 = socket$kcm(0x10, 0x3, 0x10) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r13, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x30, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r15}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x30}], 0x1}, 0x0) sendmsg$kcm(r12, &(0x7f0000000040)={0x0, 0xfffffffffffffcdf, &(0x7f00000000c0)=[{&(0x7f0000000080)="1400384449002208007463c6ae6fc994f903f6766000"/33, 0x21}], 0x1}, 0x4800) socket$kcm(0x11, 0x3, 0x0) 6.242127395s ago: executing program 3 (id=3848): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000700000000000019078ac1e0001ac1414aa030000450000000000000000890000ffffffff00000000443400030000000000000000ac1414aa00000000e000000100000000ac1414bb00000000ac1e000100000000ffffffff00000000860900000000000334000000"], 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000020801010000000000000009000000f25225c1934320c1ec649e0005000005240004800800084000002a65080007400000013808"], 0x38}, 0x1, 0x0, 0x0, 0x20004080}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000280)="875b8029d93ec7c63d0c270fefb4126e6da83d2222a9264bac365d40809b097b1fe487920de009812e44e96b5edad8fa96fa76591c92bd6c0d1d90e7f43ccaf74c3022a3eab00563565c68ab982bcc95ad725237dd22a819a73d004d086cbebf13367737e52deb68743797f0fb0f1ae2f2b2", 0x72}, {&(0x7f0000000200)="3ab73627306174fde1d618384c48b72f42263c1cc8f95be816fc89504a742b5304ebf6e7973738bc79a5377112a1eb9efd006a109e73b7691358d0e32486556daa9e80f1f5599e1bfbaf4841726f", 0x4e}], 0x2) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/192, 0xc0}], 0x1}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$fou(&(0x7f0000000180), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x400, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xfff1, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000007700000077000000070000000600000000000009000000000000000000000003000000000300000005000000060000000a00000001000006040000000a000000010000000700000000000002020000000e0000000200000f030000000203000000000800fffffff24a7ee459b3d969d3d4ff2c7f0200000006000000000022375cf661f5493d000000000a"], &(0x7f0000000580)=""/152, 0x97, 0x98, 0x1, 0x2ac, 0x0, @void, @value}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8000000010000104000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="0847040000000000580012800b00010065727370616e00004800028004001200060010004e20000008001500c736070008001400", @ANYRES32, @ANYBLOB="06001800ff7f000005001600de"], 0x80}}, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r10, @ANYBLOB], 0x50}, 0x1, 0xba01}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}}, 0x0) 6.060451578s ago: executing program 4 (id=3778): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRES32=r2], &(0x7f00000002c0)='syzkaller\x00', 0x21, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x5) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000048000), 0x0) setpgid(r5, r5) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000240)=@newtaction={0x14, 0x31, 0x12f}, 0x14}, 0x1, 0x0, 0x0, 0x20040060}, 0x0) r7 = eventfd(0x0) r8 = eventfd(0x0) r9 = eventfd(0x0) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000100)={r9, 0x0, 0x2, r8}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1e8, 0x20a, 0x278, 0x1e8, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x40}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x80000000}}}, {{@ipv6={@remote, @private0, [0xff000000, 0xffffff00, 0xffffffff], [0xff000000, 0xffffff00, 0xff, 0xffffffff], 'tunl0\x00', 'team_slave_1\x00', {0xff}, {}, 0xff, 0x8c, 0x4, 0x1}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8000, 0x3, 0x5, 'syz0\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x33e) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x35c, 0x6, 0x0, 0x2010, r10, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4, 0xc, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f00000006c0), 0x5, r11}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40047451, 0x2000000c) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000040)={r9, 0x0, 0x2, r7}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x2, 0x0, 0x401, 0x100, r11, 0x4b, '\x00', 0x0, r2, 0x0, 0x4, 0x1, 0x80000000009, @void, @value, @void, @value}, 0x48) 5.932861266s ago: executing program 3 (id=3849): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2c}}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e24, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @in={0x2, 0x4e23, @private=0xa010100}], 0x4c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040), 0x0, 0x0) r1 = accept4(r0, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f00000002c0)=0x80, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000300)={0x0, 0x3}, &(0x7f0000000340)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0xc71, 0xfff, 0x569, 0x20b9, r2, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x48) r8 = syz_io_uring_setup(0x1f83, &(0x7f0000000080)={0x0, 0x0, 0x3d}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r11) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r11, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000000600000914000200fe8800000000000000000000000000010f000700756e636f6e66696e656400001400030000000000000200000000ffff00000300b2a1289a996885e05a7eb0a1970c8b99f76556c826b36cd894e7d167bda94e77729179e39467689995541a4dc43c1cfb52ca095fe8e6ca44a82b55ee345535e9aeb831293ffbef9d0d2562d019a98745ebca1eba9ea6187e853b3b1a6f59659dbd34f51ee8ff6a"], 0x4c}, 0x2, 0x34005}, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0}) r13 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000480)={@desc={0x1, 0x0, @auto="905302741f5df141"}}) fsconfig$FSCONFIG_SET_BINARY(r13, 0x2, &(0x7f0000000080)='discard', &(0x7f0000000200)='\t', 0x1) io_uring_enter(r8, 0x50, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000380)={r3, 0x7}, 0x8) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) 5.885056189s ago: executing program 0 (id=3850): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action_no_ack={{{}, {}, @broadcast}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6}}}}}]}, 0x48}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x2000400) r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0x10, 0x0, 0x0, @private2}}, 0x24) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x9, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0xa40, 0x0, 0x1, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x100, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x1ffffffffffffcb2, &(0x7f0000000700)=ANY=[@ANYBLOB="18a35c644c405f3ec3b20000000000d8d5016700000300000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018570000010000000000000000000000bf91000000000000b7020000020000008500000009010000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x38, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x90) socket$tipc(0x1e, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x10b}], {0x14}}, 0xb0}}, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r8, 0x1, 0x12, &(0x7f0000000100)=0xfffffffd, 0x4) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x240000, 0x5, 0x4, 0x105, 0xffffffffffffffff, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0x4, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r12, &(0x7f00000001c0), &(0x7f0000000280)=@udp6=r11, 0x11}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r10}, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r9, 0x10e, 0x5, &(0x7f0000000540)=0x4d20, 0x4) sendto$inet(r8, &(0x7f0000000680)="84dcace4cef44b2ed165a96051e9fac50213794c0771debbb95c1791e8fa41b84b029a82917f4c00eed2017fae36f1ed915f168a8e1b148919dbeb0d95ee4ada0500000035f878727653ed0a64d78cbf5c21f28869ff18406a0e3035459a44512353f8241fad24c8ee345f064b642a942074c9000000000000", 0x79, 0x4800, &(0x7f0000000480)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) connect$inet(r8, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r13, &(0x7f0000000300), 0x208e24b) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x2010, r13, 0x909f8000) 4.915786166s ago: executing program 3 (id=3851): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) r7 = socket(0x2, 0x3, 0x6) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) r9 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r9}}) 4.474567255s ago: executing program 1 (id=3852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$loop(0x0, 0xfffffffffffffffe, 0x4b44c0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x48) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0xa, 0x2, 0x0, "5748d20a4f0dcb623d994e00d1b9fe678683c0fffa4bb255c991e76739e199d8cdd2183b76c78176568e7f86ef95553afdbab1b0d5c60911194649d33d81094a", "e5d755ed8dc712c710eaf7a158e7425902d092eae9849a21a601141d546c89ae9edc3443d78840023f6b31e677978f71d1408c73027bf3a182f6d8b48ea2d940", "02f19ebd0f58e3bf691bd5476d1ac7ae9997e063067d19d99652c4a5a777405e", [0x0, 0x1]}) gettid() timer_create(0x0, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x4242, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x1, @local, 'bridge_slave_1\x00'}}, 0x1e) r4 = socket$packet(0x11, 0x2, 0x300) r5 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) ioctl$VIDIOC_ENUMINPUT(r5, 0xc050561a, &(0x7f0000000200)={0x0, "94a246be445c947bccfb632ec629e361f43a16d680ec57dcceaa2e5ad4b41542", 0x0, 0x0, 0x4, 0x80008, 0x4060000, 0x2}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000140)={r6, 0x1, 0x6, @remote}, 0x10) r7 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000000300)=ANY=[@ANYRES32=r0], 0x0) connect$pppoe(r3, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280), 0x0) sync() r8 = signalfd4(r0, &(0x7f0000000480)={[0x7]}, 0x8, 0xc0800) io_setup(0x9, &(0x7f0000000000)=0x0) io_submit(r9, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) r10 = gettid() syz_emit_ethernet(0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000280)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private1, [@hopopts={0x3a}], "933824b19bc9ebc3"}}}}}}}, 0x0) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x248400) read(r11, &(0x7f0000000200)=""/209, 0xd1) tkill(r10, 0x7) 4.442126997s ago: executing program 2 (id=3853): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x149480, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) syz_mount_image$exfat(&(0x7f00000002c0), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f00000002c0)=ANY=[], 0x81, 0x151d, &(0x7f0000002100)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000140)='./bus\x00', 0x0) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0x0, 0x0, 0x0) ioctl$CEC_G_MODE(0xffffffffffffffff, 0x80046108, &(0x7f0000000300)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f0000000100)={{@host}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f0000000200)={{@local}, 0x0, 0x1}) chdir(&(0x7f0000000000)='./file0\x00') r7 = openat$mixer(0xffffffffffffff9c, &(0x7f00000012c0), 0x0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r7, 0x80304d65, &(0x7f0000001300)) mknodat$null(r5, &(0x7f0000000280)='./cgroup/../file0/file0\x00', 0x8000, 0x103) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r6, 0x7b1, &(0x7f0000000240)={&(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x6, 0x400}) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) 3.346901872s ago: executing program 0 (id=3854): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000041c0)={0x4}, 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f0000000700)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1100}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000580)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) futex(&(0x7f0000000700), 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$sock(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000085002c53e8fa00002a000000a581e4cf77e6307a"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe5ae3e3c069ff680, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x1}, 0x6, 0x0, 0x4, 0x0, 0x0, 0xffffffff, 'syz1\x00', 0x0}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}) add_key$fscrypt_provisioning(&(0x7f00000000c0), 0x0, 0x0, 0x48, 0xffffffffffffffff) syz_mount_image$udf(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x800048, &(0x7f00000001c0)=ANY=[], 0x1, 0x4b1, &(0x7f0000000740)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==") open(&(0x7f0000000180)='./bus\x00', 0x4a37e, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) 3.160837275s ago: executing program 3 (id=3855): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x800000001ff, 0x2) dup(r1) r2 = syz_open_dev$loop(&(0x7f0000000080), 0xc0000000, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x80041284, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001bc0), 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x16, 0xfffffffffffffe8e, 0xfa00, {0x0, 0x0, r7, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"6d38832db43c8a5cde96a485f99758cf"}}}}, 0xa0) r8 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "e5c7f20eae1fae974c170f6484d0a76b00489afd264e961114174dd08e6a34da6c9cb5dcb0fcccd12f9b47b8ea086c1c1c593c15de9400"}, 0x48, 0xffffffffffffffff) r9 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r8, r8, r9, 0x0) writev(r6, &(0x7f00000000c0), 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000180)={0x0, "340b7832ceffffffffffffffff36764a9987babd27000000000800", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r10, 0xffffffffffffffff}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x300}, {r11}], 0x2, 0x0, 0x0, 0x0) r12 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x20000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r12, 0xc0045540, &(0x7f0000000100)) close_range(r3, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x1a, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018200000", @ANYRES32, @ANYBLOB="00000000000000001801000020696c5a06fcdf00002020207b1af8ff00400000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006dadff8468f1c0010000000bf91"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$UHID_CREATE2(r0, &(0x7f00000002c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) 3.126331308s ago: executing program 4 (id=3856): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000380), 0x1, 0x42f, &(0x7f0000000d80)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x6, 0x2a4, &(0x7f0000002680)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r5}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setrlimit(0x6, &(0x7f0000000500)={0x4, 0x7fffffffffffffff}) r7 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r7, 0x0, 0xfffffff, 0x1000f1) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r8, 0x2000009) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) write$binfmt_script(r8, &(0x7f0000000140), 0xfcb8) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) request_key(&(0x7f00000001c0)='logon\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)='vfat\x00', 0xfffffffffffffff9) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x6000, 0x400, &(0x7f0000000400)) 2.971382528s ago: executing program 3 (id=3857): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f00000001c0), 0x45, 0x76a, &(0x7f0000000fc0)="$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") getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000000), &(0x7f0000000180)=0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x2, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x884, '\x00', 0x0, r0, 0x2, 0x2, 0x2, 0x5, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000180), &(0x7f0000000100)=r4}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r5, &(0x7f0000000300), 0x0}, 0x20) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x0) pwritev2(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x10, &(0x7f00000005c0), 0x1, 0x53f, &(0x7f0000000bc0)="$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") ptrace$poke(0xffffffffffffffff, r1, &(0x7f0000000300), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x24}, 0x24}}, 0x0) r6 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0) sendto(r6, 0x0, 0x0, 0x0, 0x0, 0x0) 2.416604055s ago: executing program 0 (id=3858): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000480)={0x0, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000600)=ANY=[@ANYRESDEC=r1], &(0x7f0000000640)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0x8001) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000380)={'veth0_to_bridge\x00', {0x2, 0x0, @private}}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000700)={'dummy0\x00'}) r5 = memfd_create(&(0x7f0000000040)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xdd\x00\x00\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\t\xff~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8a\xc5at\x94=F\xc7\xea\x84\xea0\xf4\x0f\"C\xeb\x17\xe9V\x92o\xa7\xe3/H~\x81\xebnG5\xe3O\x9a\xd9\t_\x88e\xa9x\xd2\xa0\x1e\"\xb3\xbb\x8e\x961\xf5N\xdbj\x1f\xcf>1y\xe8\xb4\xbd{\x9a\x95\xcd\xaf\"^\x86\xd2\xed`\x84\xb6\xb1\xf8\xb5\x99\xce|\x12\xad\xac\xe17\x15\x19!\xae\x03J\xd5\xabnS\x81\xe0\xfa\aP\f', 0x0) fcntl$setlease(r5, 0x400, 0x0) r6 = fanotify_init(0x200, 0x0) r7 = dup(0xffffffffffffffff) fanotify_mark(r6, 0x1, 0x0, r7, 0x0) r8 = dup(0xffffffffffffffff) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r9 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) sendmmsg(r9, &(0x7f0000007fc0), 0x800007f, 0x1c) r10 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2b}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in6=@private2}}, 0xe8) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) syz_read_part_table(0x5d4, &(0x7f0000000000)="$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") 1.663855417s ago: executing program 3 (id=3859): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000700000000000019078ac1e0001ac1414aa030000450000000000000000890000ffffffff00000000443400030000000000000000ac1414aa00000000e000000100000000ac1414bb00000000ac1e000100000000ffffffff00000000860900000000000334000000"], 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000020801010000000000000009000000f25225c1934320c1ec649e0005000005240004800800084000002a65080007400000013808"], 0x38}, 0x1, 0x0, 0x0, 0x20004080}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000280)="875b8029d93ec7c63d0c270fefb4126e6da83d2222a9264bac365d40809b097b1fe487920de009812e44e96b5edad8fa96fa76591c92bd6c0d1d90e7f43ccaf74c3022a3eab00563565c68ab982bcc95ad725237dd22a819a73d004d086cbebf13367737e52deb68743797f0fb0f1ae2f2b2", 0x72}, {&(0x7f0000000200)="3ab73627306174fde1d618384c48b72f42263c1cc8f95be816fc89504a742b5304ebf6e7973738bc79a5377112a1eb9efd006a109e73b7691358d0e32486556daa9e80f1f5599e1bfbaf4841726f", 0x4e}], 0x2) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/192, 0xc0}], 0x1}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$fou(&(0x7f0000000180), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x400, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xfff1, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000007700000077000000070000000600000000000009000000000000000000000003000000000300000005000000060000000a00000001000006040000000a000000010000000700000000000002020000000e0000000200000f030000000203000000000800fffffff24a7ee459b3d969d3d4ff2c7f0200000006000000000022375cf661f5493d000000000a"], &(0x7f0000000580)=""/152, 0x97, 0x98, 0x1, 0x2ac, 0x0, @void, @value}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8000000010000104000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="0847040000000000580012800b00010065727370616e00004800028004001200060010004e20000008001500c736070008001400", @ANYRES32, @ANYBLOB="06001800ff7f000005001600de"], 0x80}}, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r10, @ANYBLOB], 0x50}, 0x1, 0xba01}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}}, 0x0) 760.547668ms ago: executing program 0 (id=3860): io_cancel(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)="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", 0x144, 0x6, 0x0, 0x3}, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x14, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}}, 0x14}}, 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000300)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {&(0x7f0000000540)=""/137, 0x89}], 0x2, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x7) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x2, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1001, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) quotactl$Q_GETQUOTA(0x0, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) write$cgroup_int(r4, &(0x7f0000000040), 0x12) syz_emit_ethernet(0x46, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500043800000000000190780a010101ac1414aa05009078e00000000000000004000000000600000000000000000000631d23b5c6c5"], 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) r7 = gettid() process_vm_writev(r7, &(0x7f00000006c0), 0x0, &(0x7f0000000640)=[{&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000217f28)=""/217, 0xd9}], 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f0000000000)=0x1) 669.562834ms ago: executing program 1 (id=3861): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x0, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000280)={0x18}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001ec0)={0x0, 0x1, &(0x7f0000000280)=@raw=[@call], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xa, 0x7, 0x209, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000e80), &(0x7f0000000300), 0x4f, r6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r6, &(0x7f0000000280), &(0x7f00000000c0)=""/186}, 0x20) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001040)={0xa, {"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", 0x1025}}, 0x1006) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{}, {0x24}, {0x6}]}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 0s ago: executing program 4 (id=3862): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x163902, 0x0) syz_io_uring_setup(0x3afd, &(0x7f0000000280)={0x0, 0x100, 0x0, 0x0, 0x17}, &(0x7f0000000300), &(0x7f0000000240)) r1 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000001c0)={0x2, 0x1, 0xc, 0x5, 0x8001}) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000500)={"1a990500", 0x0, 0x0, 0x8, 0x2, 0x0, "33793e77c734c4df7787ba315ab8da", "000100", 'i\x00', "0300", ["0000f4001a00f7ff00", "040000000000003f8000", "2ce50f8a285d9500c522afe1", "00000000fb000001cdcd9a67"]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$xdp(0x2c, 0x3, 0x0) getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setreuid(0x0, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000040)={'pimreg\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, 0xee01}}, './cgroup\x00'}) lstat(&(0x7f0000000d40)='./cgroup\x00', &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r4, &(0x7f0000000080)='./cgroup\x00', 0x800, 0x0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000001340)=ANY=[@ANYBLOB="c0050000", @ANYRES64=0x0, @ANYBLOB="0500000000000000000000000000000095f76f1800000000070000000000000008000000020000000600000000000000ff7f000000000000040000000000000005000000000000000500000000000000010000000000000040000000050000003d0300000040000004000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0600000001000100000000000200000000000000090000000000000001000000000000002a0000000000000000000000000000000000000000000000020000000000000005000000000000000000800109000000ff0100000000000069a3000000000000000000000000000005000000000000000100000000000000000000000000000068a5902308000000050000000010000003000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0c00000007000000000000000200000000000000060000000000000002000000080000002b2600000000000000000000000000000300000000000000080000000000000040000000", @ANYBLOB, @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYBLOB="090000007f000000000000000200000000000000070000000000000001000000000000000000000000000000010000000000000001000000000000000000010000000000000000000000000032d4000001000100050000000000000001000000000000000700000000000000ffffffffffffffff080000000000000004000000000000000101000007000000010000000010000005000000", @ANYRES32, @ANYRES32=r5, @ANYBLOB="01010000feffffff0000000005000000000000000b0000000000000008000000090000006e6c383032313100000000000000000002000000000000000800000000000000090000000000000010000000060000000100000000000000c900000000000000ffffffffffffffff06000000000000000c0000000000000040000000000000000500000006000000050000000020000000000000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="f5830000fa07000000"], 0x5c0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000380)={&(0x7f0000000340)=""/16, 0xa000, 0x1800, 0x2, 0x3}, 0x1c) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$apparmor_current(r9, 0x0, 0x0) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r10, 0xc0106412, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000003c0)=[{{0x2, 0x1}, {0x3, 0x0, 0x0, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x2, 0x1, 0x0, 0x1}}], 0x10) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000580)={{{@in=@multicast1, @in=@initdev}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe4) kernel console output (not intermixed with test programs): nterface: batadv_slave_1 [ 1536.545874][T12869] device bridge_slave_1 left promiscuous mode [ 1536.578810][T19285] binder: 19282:19285 ioctl c06864b8 20000280 returned -22 [ 1536.581952][T12869] bridge0: port 2(bridge_slave_1) entered disabled state [ 1536.621885][T19270] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1536.680634][T19270] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1536.696179][T12869] device bridge_slave_0 left promiscuous mode [ 1536.712850][T14386] Bluetooth: hci4: command 0x040f tx timeout [ 1536.733041][T12869] bridge0: port 1(bridge_slave_0) entered disabled state [ 1536.760400][ T26] audit: type=1326 audit(1726527665.490:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19288 comm="syz.0.3407" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9effd9cef9 code=0x0 [ 1536.791433][T12869] device veth1_macvtap left promiscuous mode [ 1536.829351][T12869] device veth0_macvtap left promiscuous mode [ 1536.861981][T12869] device veth1_vlan left promiscuous mode [ 1536.904713][T12869] device veth0_vlan left promiscuous mode [ 1536.926864][T19281] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1537.649594][T19315] ALSA: seq fatal error: cannot create timer (-22) [ 1537.921861][T14386] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1538.024335][T12869] team0 (unregistering): Port device team_slave_1 removed [ 1538.060009][T12869] team0 (unregistering): Port device team_slave_0 removed [ 1538.083423][T12869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1538.108249][T12869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1538.161886][T14386] usb 4-1: Using ep0 maxpacket: 8 [ 1538.281806][T14386] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1538.304375][T14386] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1538.337522][T12869] bond0 (unregistering): (slave team0): Releasing backup interface [ 1538.346919][T14386] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1538.357536][T14386] usb 4-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice=cf.dc [ 1538.367024][T14386] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1538.392291][T14386] usb 4-1: config 0 descriptor?? [ 1538.408453][T12869] bond0 (unregistering): Released all slaves [ 1538.435077][T14386] appletouch 4-1:0.0: Could not find int-in endpoint [ 1538.451387][T14386] appletouch: probe of 4-1:0.0 failed with error -5 [ 1538.465512][T14386] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1538.507183][T19297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3405'. [ 1538.517180][T19297] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3405'. [ 1538.745166][T19325] ALSA: seq fatal error: cannot create timer (-22) [ 1538.771782][T14386] Bluetooth: hci4: command 0x0419 tx timeout [ 1539.093429][T19330] loop1: detected capacity change from 0 to 512 [ 1539.531829][ T5469] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1539.971592][ T5469] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1540.012767][ T5469] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.202999][ T5469] usb 5-1: config 0 descriptor?? [ 1540.377209][ T5469] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1541.091887][ T5469] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 1541.161209][T19179] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1541.208133][T19179] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1541.252691][T19179] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1541.287894][T19179] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1541.508325][T19324] udc-core: couldn't find an available UDC or it's busy [ 1541.535889][T19324] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1541.701812][ T5469] gspca_cpia1: usb_control_msg 02, error -71 [ 1541.708294][ T5469] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 1541.733479][ T5469] usb 5-1: USB disconnect, device number 35 [ 1541.824665][T19362] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 1541.824665][T19362] program syz.1.3418 not setting count and/or reply_len properly [ 1542.578459][T19179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1542.641564][T19179] 8021q: adding VLAN 0 to HW filter on device team0 [ 1542.758755][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1542.779532][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1542.814907][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1542.869807][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1542.908370][T19367] loop1: detected capacity change from 0 to 2048 [ 1542.942482][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1542.949745][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1542.989790][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1543.017423][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1543.092190][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1543.099277][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1543.429760][T19367] loop1: detected capacity change from 0 to 4096 [ 1543.493621][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1543.513108][T19367] ntfs3: Unknown parameter 's' [ 1543.522448][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1543.542848][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1543.563828][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1543.596154][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1543.682408][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1543.732009][ T3610] Bluetooth: hci2: command 0x0406 tx timeout [ 1543.792865][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1543.818745][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1543.865832][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1543.913762][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1543.923256][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1543.942476][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1543.966443][T19179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1544.024714][T11669] usb 4-1: USB disconnect, device number 54 [ 1544.189684][T19379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3421'. [ 1544.228421][T19379] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3421'. [ 1544.300951][T19379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3421'. [ 1544.336122][T19379] device bridge_slave_1 left promiscuous mode [ 1544.352910][T19379] bridge0: port 2(bridge_slave_1) entered disabled state [ 1544.408078][T19379] device bridge_slave_0 left promiscuous mode [ 1544.430022][T19379] bridge0: port 1(bridge_slave_0) entered disabled state [ 1544.462479][T19392] loop4: detected capacity change from 0 to 256 [ 1544.597218][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1544.616414][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1544.669604][T19179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1544.679843][T19392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3423'. [ 1544.811245][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1544.850303][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1544.903460][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1544.932419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1544.995023][T19179] device veth0_vlan entered promiscuous mode [ 1545.797733][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1545.820931][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1545.960307][T19179] device veth1_vlan entered promiscuous mode [ 1546.098365][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1546.122771][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1546.172435][T19179] device veth0_macvtap entered promiscuous mode [ 1546.340415][T19179] device veth1_macvtap entered promiscuous mode [ 1547.246114][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1547.276043][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1547.845325][T19179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1547.900546][T19179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1547.951785][T19179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1547.974089][T19179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1547.974117][T19179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1547.974132][T19179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1547.974155][T19179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1547.974168][T19179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1547.974188][T19179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1547.974201][T19179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1547.975761][T19179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1547.978170][T19179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1547.978188][T19179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1547.978201][T19179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1547.978214][T19179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1547.978226][T19179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1547.978239][T19179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1547.978251][T19179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1547.978263][T19179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1547.978282][T19179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1547.978295][T19179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1547.979256][T19179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1548.009856][T19179] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.009894][T19179] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.009926][T19179] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.009957][T19179] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.013869][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1548.014495][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1548.015096][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1548.015652][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1548.226663][T19428] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3431'. [ 1548.901744][T19426] tipc: Started in network mode [ 1548.906628][T19426] tipc: Node identity , cluster identity 4711 [ 1548.951280][T19426] tipc: Failed to set node id, please configure manually [ 1548.965363][T19426] tipc: Enabling of bearer rejected, failed to enable media [ 1549.135807][ T3735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1549.151719][ T8240] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1549.160667][ T3735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1549.189389][T19454] loop3: detected capacity change from 0 to 512 [ 1549.249990][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1549.294146][ T3735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1549.316000][T19454] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.3434: casefold flag without casefold feature [ 1549.361878][ T3735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1549.378495][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1549.379208][T19454] EXT4-fs (loop3): Remounting filesystem read-only [ 1549.393710][T19454] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.3434: couldn't read orphan inode 15 (err -117) [ 1549.405728][ T8240] usb 2-1: Using ep0 maxpacket: 8 [ 1549.448299][T19454] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 1549.521832][ T8240] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1549.550319][ T8240] usb 2-1: config 0 has no interface number 0 [ 1549.573071][T19464] device team0 entered promiscuous mode [ 1549.578760][T19464] device team_slave_0 entered promiscuous mode [ 1549.590161][ T8240] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1549.615638][ T8240] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1549.626583][T19464] device team_slave_1 entered promiscuous mode [ 1549.633268][ T8240] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.633351][T19454] ext4 filesystem being mounted at /37/bus supports timestamps until 2038 (0x7fffffff) [ 1549.653658][ T8240] usb 2-1: config 0 descriptor?? [ 1549.703937][ T8240] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 1549.745977][T19476] loop2: detected capacity change from 0 to 256 [ 1549.751037][T19473] team0: Port device team_slave_0 removed [ 1549.802580][T19464] device team0 left promiscuous mode [ 1549.807886][T19464] device team_slave_1 left promiscuous mode [ 1549.844390][T19476] exfat: Unknown parameter '‹' [ 1549.933006][ T26] audit: type=1326 audit(1726527678.670:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19471 comm="syz.2.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535a920ef9 code=0x7ffc0000 [ 1550.047716][T19487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3437'. [ 1550.056756][ T26] audit: type=1326 audit(1726527678.670:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19471 comm="syz.2.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535a920ef9 code=0x7ffc0000 [ 1550.056794][ T26] audit: type=1326 audit(1726527678.700:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19471 comm="syz.2.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f535a920ef9 code=0x7ffc0000 [ 1550.056826][ T26] audit: type=1326 audit(1726527678.700:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19471 comm="syz.2.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535a920ef9 code=0x7ffc0000 [ 1550.056858][ T26] audit: type=1326 audit(1726527678.700:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19471 comm="syz.2.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535a920ef9 code=0x7ffc0000 [ 1550.056890][ T26] audit: type=1326 audit(1726527678.700:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19483 comm="syz.2.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f535a952fe5 code=0x7ffc0000 [ 1550.056923][ T26] audit: type=1326 audit(1726527678.720:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19471 comm="syz.2.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f535a920ef9 code=0x7ffc0000 [ 1550.056954][ T26] audit: type=1326 audit(1726527678.720:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19471 comm="syz.2.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535a920ef9 code=0x7ffc0000 [ 1550.056985][ T26] audit: type=1326 audit(1726527678.720:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19471 comm="syz.2.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535a920ef9 code=0x7ffc0000 [ 1550.057015][ T26] audit: type=1326 audit(1726527678.720:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19471 comm="syz.2.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f535a920ef9 code=0x7ffc0000 [ 1550.498194][ T8240] usb 2-1: USB disconnect, device number 38 [ 1550.561719][ T3570] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1550.625209][T19504] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3439'. [ 1550.804329][ T3570] usb 3-1: Using ep0 maxpacket: 16 [ 1550.830572][T19497] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1550.922027][ T3570] usb 3-1: config 183 has too many interfaces: 145, using maximum allowed: 32 [ 1550.942524][ T3570] usb 3-1: config 183 has an invalid interface association descriptor of length 5, skipping [ 1551.008869][ T3570] usb 3-1: config 183 has an invalid descriptor of length 0, skipping remainder of the config [ 1551.098302][T19521] loop3: detected capacity change from 0 to 1024 [ 1551.128096][ T3570] usb 3-1: config 183 has 0 interfaces, different from the descriptor's value: 145 [ 1551.173589][T19528] loop1: detected capacity change from 0 to 512 [ 1551.210361][T19521] EXT4-fs (loop3): Mount option "commit=0x0000000000000003" incompatible with ext2 [ 1551.341930][ T3570] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= f.88 [ 1551.363739][ T3570] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.398166][ T3570] usb 3-1: Product: syz [ 1551.415798][ T3570] usb 3-1: Manufacturer: syz [ 1551.448041][ T3570] usb 3-1: SerialNumber: syz [ 1551.479302][T19528] loop1: detected capacity change from 0 to 4096 [ 1551.529558][T19528] NILFS (loop1): unrecognized mount option "ÿÿ" [ 1551.873263][ T3570] usb 3-1: USB disconnect, device number 55 [ 1552.290424][ T1395] ieee802154 phy0 wpan0: encryption failed: -22 [ 1552.312648][T19536] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3443'. [ 1552.765295][T19545] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.026022][T19564] loop4: detected capacity change from 0 to 16 [ 1553.078834][T19545] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.142269][T19564] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1553.410979][T19545] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1555.035323][T19545] batman_adv: batadv1: Removing interface: netdevsim0 [ 1555.059125][T19545] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1555.253552][T19545] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.275460][T19545] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.287659][T19545] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.300674][T19545] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.431790][T19586] loop1: detected capacity change from 0 to 512 [ 1556.025260][T19589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3451'. [ 1556.063881][T19593] batadv0: mtu less than device minimum [ 1556.153474][T19591] input: syz0 as /devices/virtual/input/input55 [ 1556.363843][ T26] kauditd_printk_skb: 31 callbacks suppressed [ 1556.363863][ T26] audit: type=1326 audit(1726527685.100:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19594 comm="syz.0.3454" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9effd9cef9 code=0x0 [ 1556.379966][T19599] bond0: ARP validating cannot be used with MII monitoring [ 1556.682460][ T5469] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1556.717244][T19606] loop4: detected capacity change from 0 to 1024 [ 1556.751782][ T8240] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 1556.834695][T19606] EXT4-fs (loop4): Mount option "commit=0x0000000000000003" incompatible with ext2 [ 1557.051917][ T5469] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1557.089232][ T5469] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1557.122138][ T8240] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 200, setting to 8 [ 1557.140431][ T5469] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 1557.166610][ T8240] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 1557.196697][ T5469] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1557.255291][ T8240] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1557.322561][ T5469] usb 4-1: config 0 descriptor?? [ 1557.338179][ T8240] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1557.364518][ T8240] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1557.461082][ T8240] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1557.509629][ T8240] usb 2-1: config 0 descriptor?? [ 1557.693406][T19611] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1557.871863][ T5469] usbhid 4-1:0.0: can't add hid device: -71 [ 1557.882548][ T5469] usbhid: probe of 4-1:0.0 failed with error -71 [ 1557.923765][ T5469] usb 4-1: USB disconnect, device number 55 [ 1558.819173][T19620] binder: 19619:19620 ioctl c06864b8 20000280 returned -22 [ 1558.924865][ T5981] usb 2-1: USB disconnect, device number 39 [ 1559.002095][T19625] binder: 19623:19625 ioctl c0306201 200003c0 returned -14 [ 1559.063256][T19627] loop1: detected capacity change from 0 to 1024 [ 1559.087510][T19629] loop2: detected capacity change from 0 to 2048 [ 1559.145471][T19629] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1559.188083][T19634] 9pnet_rdma: rdma_create_trans (19634): problem binding to privport: 13 [ 1559.238063][T19636] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1559.275167][T19638] fuse: Invalid rootmode [ 1559.691954][ T5981] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1560.296133][T19652] loop1: detected capacity change from 0 to 1024 [ 1560.359998][T19646] loop2: detected capacity change from 0 to 512 [ 1560.371704][ T5981] usb 4-1: Using ep0 maxpacket: 32 [ 1560.443748][T19646] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002] [ 1560.460248][T19646] System zones: 1-12 [ 1560.498872][T19646] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.3469: Directory hole found for htree index block 0 [ 1560.539388][T19646] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 1560.551953][ T5981] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1560.570723][T19646] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.3469: Directory hole found for htree index block 0 [ 1560.587490][ T5981] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1560.608045][T19646] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 1560.621685][T19646] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota=",,errors=continue. Quota mode: writeback. [ 1560.663124][ T5981] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1560.761327][ T5981] usb 4-1: config 1 has no interface number 0 [ 1560.769629][ T5981] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1560.791714][ T5981] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1560.808572][ T5981] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1560.821840][ T5981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.934638][ T5981] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1560.999831][T19664] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3473'. [ 1561.023404][T19664] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3473'. [ 1562.043305][T19662] netlink: 'syz.4.3474': attribute type 2 has an invalid length. [ 1562.075419][ T5981] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 1562.153673][T19672] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1562.256687][T19679] tipc: Started in network mode [ 1562.256705][T19679] tipc: Node identity , cluster identity 2 [ 1562.256718][T19679] tipc: Failed to set node id, please configure manually [ 1562.256742][T19679] tipc: Enabling of bearer rejected, failed to enable media [ 1562.309453][ T5469] usb 4-1: USB disconnect, device number 56 [ 1562.313050][ T5469] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1564.211916][ T8240] Bluetooth: hci3: command 0x0406 tx timeout [ 1564.329635][T19702] loop4: detected capacity change from 0 to 2048 [ 1564.713749][T19702] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1566.267823][T19720] xt_TCPMSS: Only works on TCP SYN packets [ 1566.631976][ T1073] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1567.381899][ T1073] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 1568.052081][ T1073] usb 4-1: unable to read config index 5 descriptor/start: -71 [ 1568.059801][ T1073] usb 4-1: can't read configurations, error -71 [ 1568.395297][T19745] netlink: zone id is out of range [ 1568.400429][T19745] netlink: get zone limit has 4 unknown bytes [ 1568.436534][T19747] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3495'. [ 1568.567202][T19753] loop2: detected capacity change from 0 to 512 [ 1568.607787][T19755] loop3: detected capacity change from 0 to 16 [ 1568.717827][T19755] erofs: (device loop3): mounted with root inode @ nid 36. [ 1569.130747][T19747] Invalid option length (398) for dns_resolver key [ 1569.135289][T19760] loop4: detected capacity change from 0 to 256 [ 1569.297095][T19764] loop1: detected capacity change from 0 to 16 [ 1569.307573][T19747] could not allocate digest TFM handle sha256-arm64-neon [ 1569.383305][T19755] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 46 [ 1569.682604][T19764] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1569.709296][T19769] loop2: detected capacity change from 0 to 128 [ 1569.733346][T19764] /dev/loop1: Can't open blockdev [ 1569.904309][T19769] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 1570.788407][T18134] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 46 [ 1570.818129][T18134] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 1570.828553][T18134] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 1571.728550][ T5469] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1571.747100][T19775] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1571.774893][ T5469] Bluetooth: hci2: Injecting HCI hardware error event [ 1571.816445][ T3573] Bluetooth: hci2: hardware error 0x00 [ 1571.864540][ T3736] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 1572.160873][T19785] Cannot find add_set index 0 as target [ 1573.081770][ T5469] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1573.235254][T19792] kvm [19791]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010006 data 0x0 [ 1573.782954][ T5469] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1574.150741][ T5469] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1574.171948][ T5469] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1574.269466][T19810] tmpfs: Unknown parameter 'usrquota' [ 1574.357003][ T5469] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1574.441933][ T1073] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1574.445498][ T5469] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.766968][ T5469] usb 4-1: config 0 descriptor?? [ 1574.841929][ T1073] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 1574.852015][ T5469] usb 4-1: can't set config #0, error -71 [ 1574.868522][ T5469] usb 4-1: USB disconnect, device number 59 [ 1575.967039][T19818] trusted_key: encrypted_key: master key parameter is missing [ 1576.044625][T19818] Invalid option length (1048127) for dns_resolver key [ 1576.161767][ T1073] usb 3-1: unable to read config index 3 descriptor/all [ 1576.168722][ T1073] usb 3-1: can't read configurations, error -71 [ 1576.565538][T19833] binder: 19829:19833 ioctl c0306201 0 returned -14 [ 1578.884793][T19860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3524'. [ 1579.865944][T19870] rdma_op ffff8880642669f0 conn xmit_rdma 0000000000000000 [ 1579.873236][T19866] loop4: detected capacity change from 0 to 2048 [ 1579.970114][T19876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3529'. [ 1580.043536][T19878] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3528'. [ 1580.095858][T19878] device ip6gretap0 entered promiscuous mode [ 1580.127482][T19878] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3528'. [ 1580.139547][T19866] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1581.190554][T19892] binder: 19890:19892 ioctl c00c620f 20000180 returned -22 [ 1582.025409][T19899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3533'. [ 1582.053626][T19901] loop3: detected capacity change from 0 to 8192 [ 1582.090556][T19899] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3533'. [ 1582.134586][T19902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3533'. [ 1582.191309][T19904] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1582.535152][T19911] loop2: detected capacity change from 0 to 512 [ 1582.562514][T19903] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3532'. [ 1582.590105][T19903] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3532'. [ 1582.851986][ T7] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1582.891580][T19911] EXT4-fs (loop2): 1 orphan inode deleted [ 1582.897744][T19911] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 1582.948137][T19911] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038 (0x7fffffff) [ 1583.337651][T19949] syz.2.3536[19949] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1583.338723][T19949] syz.2.3536[19949] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1583.374775][ T26] audit: type=1804 audit(1726527712.100:961): pid=19949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3536" name="/newroot/21/file1/bus" dev="loop2" ino=19 res=1 errno=0 [ 1584.111729][ T7] usb 2-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 1584.128238][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1584.161572][ T7] usb 2-1: Product: syz [ 1584.168801][ T7] usb 2-1: Manufacturer: syz [ 1584.178934][ T7] usb 2-1: SerialNumber: syz [ 1584.200921][ T7] usb 2-1: config 0 descriptor?? [ 1584.254189][ T7] go7007 2-1:0.0: Sensoray 2250 found [ 1584.259713][ T7] go7007: probe of 2-1:0.0 failed with error -12 [ 1584.690763][T19976] loop2: detected capacity change from 0 to 512 [ 1584.768036][T19981] loop3: detected capacity change from 0 to 512 [ 1584.774241][T19976] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 1584.838121][T19980] loop4: detected capacity change from 0 to 64 [ 1584.882688][T19976] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:163: inode #12: comm syz.2.3541: inline data xattr refers to an external xattr inode [ 1584.901337][T19981] EXT4-fs (loop3): 1 orphan inode deleted [ 1584.926483][T19981] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback. [ 1584.982338][T19981] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038 (0x7fffffff) [ 1585.018469][T19976] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.3541: couldn't read orphan inode 12 (err -117) [ 1585.032340][T19976] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,mblk_io_submit,journal_dev=0x0000000000000007,resuid=0x0000000000000000,prjquota,usrjquota=,usrjquota=,min_batch_time=0x000000000100409e,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 1585.075027][T19976] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.3541: Directory hole found for htree leaf block 0 [ 1585.881448][T14386] usb 2-1: USB disconnect, device number 40 [ 1586.341941][T11670] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1586.621828][T11670] usb 4-1: Using ep0 maxpacket: 32 [ 1586.932603][T11670] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1586.953161][T11670] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.961244][T11670] usb 4-1: Product: syz [ 1586.973520][T11670] usb 4-1: Manufacturer: syz [ 1586.989378][T11670] usb 4-1: SerialNumber: syz [ 1586.994698][T20019] 9pnet: p9_errstr2errno: server reported unknown error  [ 1587.026244][T11670] usb 4-1: config 0 descriptor?? [ 1587.081047][T20017] loop2: detected capacity change from 0 to 512 [ 1587.279738][T20017] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 1587.338310][T20017] EXT4-fs (loop2): 1 truncate cleaned up [ 1587.344685][T20017] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 1587.627614][T20028] loop1: detected capacity change from 0 to 512 [ 1587.665215][T20015] chnl_net:caif_netlink_parms(): no params data found [ 1587.761967][T11670] (unnamed net_device) (uninitialized): Assigned a random MAC address: 26:3d:ce:db:e9:da [ 1588.590327][T11670] rtl8150 4-1:0.0: eth1: rtl8150 is detected [ 1588.711294][T11670] usb 4-1: USB disconnect, device number 60 [ 1588.955638][ T5981] Bluetooth: hci5: command 0x0409 tx timeout [ 1589.023444][T20042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3556'. [ 1589.123454][ T26] audit: type=1326 audit(1726527717.860:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20037 comm="syz.1.3554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7411171ef9 code=0x7ffc0000 [ 1589.153729][T20015] bridge0: port 1(bridge_slave_0) entered blocking state [ 1589.163422][T20015] bridge0: port 1(bridge_slave_0) entered disabled state [ 1589.209591][T20015] device bridge_slave_0 entered promiscuous mode [ 1589.233135][ T26] audit: type=1326 audit(1726527717.860:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20037 comm="syz.1.3554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7411171ef9 code=0x7ffc0000 [ 1589.257166][T20015] bridge0: port 2(bridge_slave_1) entered blocking state [ 1589.275681][ T26] audit: type=1326 audit(1726527717.880:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20037 comm="syz.1.3554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7411171ef9 code=0x7ffc0000 [ 1589.293249][T20015] bridge0: port 2(bridge_slave_1) entered disabled state [ 1589.446542][T20015] device bridge_slave_1 entered promiscuous mode [ 1589.505389][ T26] audit: type=1326 audit(1726527717.880:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20037 comm="syz.1.3554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7411171ef9 code=0x7ffc0000 [ 1589.528520][ T26] audit: type=1326 audit(1726527717.880:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20037 comm="syz.1.3554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7411171ef9 code=0x7ffc0000 [ 1589.552700][ T26] audit: type=1326 audit(1726527717.880:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20037 comm="syz.1.3554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7411171ef9 code=0x7ffc0000 [ 1589.577043][ T26] audit: type=1326 audit(1726527717.880:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20037 comm="syz.1.3554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7411171ef9 code=0x7ffc0000 [ 1589.607613][ T26] audit: type=1326 audit(1726527717.880:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20037 comm="syz.1.3554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7411171ef9 code=0x7ffc0000 [ 1589.639359][ T26] audit: type=1326 audit(1726527717.880:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20037 comm="syz.1.3554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f7411171ef9 code=0x7ffc0000 [ 1589.667455][T20015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1589.669221][ T26] audit: type=1326 audit(1726527717.880:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20037 comm="syz.1.3554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7411171ef9 code=0x7ffc0000 [ 1589.709389][T20015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1589.895814][T20015] team0: Port device team_slave_0 added [ 1589.916064][T20015] team0: Port device team_slave_1 added [ 1590.026408][T20061] loop2: detected capacity change from 0 to 16 [ 1590.126606][T20061] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1590.201864][T20015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1590.208833][T20015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1591.130212][ T7] Bluetooth: hci5: command 0x041b tx timeout [ 1591.157313][T20071] loop3: detected capacity change from 0 to 64 [ 1591.164265][T20069] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1591.182256][T20015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1591.245837][T20015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1591.305826][T20015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1591.441737][T20015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1591.876703][T20015] device hsr_slave_0 entered promiscuous mode [ 1591.891560][T20015] device hsr_slave_1 entered promiscuous mode [ 1591.903324][T20015] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1591.912590][T20015] Cannot create hsr debugfs directory [ 1591.949124][T20082] loop1: detected capacity change from 0 to 2048 [ 1592.388263][T20086] loop1: detected capacity change from 0 to 64 [ 1592.562249][T20015] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1592.577786][T20086] loop1: detected capacity change from 0 to 256 [ 1592.803732][T20015] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.059759][T20015] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.181768][ T5469] Bluetooth: hci5: command 0x040f tx timeout [ 1593.227218][T20015] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.262409][T20093] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1593.389979][T20101] device syzkaller0 entered promiscuous mode [ 1593.588673][T20015] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1593.661116][T20015] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1593.743216][T20104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3569'. [ 1593.756028][T20015] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1593.777968][T20107] fuse: Unknown parameter '' [ 1593.807904][T20015] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1594.604738][T20107] loop2: detected capacity change from 0 to 512 [ 1594.752029][T20110] loop1: detected capacity change from 0 to 256 [ 1594.772497][T20110] /dev/loop1: Can't open blockdev [ 1594.784792][T20015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1594.872595][T20113] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3570'. [ 1594.921440][T20113] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1595.174670][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1595.192647][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1595.251950][T20015] 8021q: adding VLAN 0 to HW filter on device team0 [ 1595.261862][ T3610] Bluetooth: hci5: command 0x0419 tx timeout [ 1595.300110][T20114] tipc: Invalid UDP bearer configuration [ 1595.300151][T20114] tipc: Enabling of bearer rejected, failed to enable media [ 1595.317793][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1595.336576][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1595.376309][ T1321] bridge0: port 1(bridge_slave_0) entered blocking state [ 1595.383482][ T1321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1595.498388][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1595.543189][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1595.548919][T20120] Cannot find add_set index 0 as target [ 1595.647034][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1595.685104][ T1321] bridge0: port 2(bridge_slave_1) entered blocking state [ 1595.692209][ T1321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1595.764585][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1595.804158][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1595.829348][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1595.894305][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1595.943311][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1595.984972][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1596.004726][T20129] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3576'. [ 1596.051589][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1596.080268][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1596.089689][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1596.123372][T20015] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1596.142644][T20015] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1596.184182][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1596.215677][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1596.261732][T20129] device batadv_slave_1 entered promiscuous mode [ 1596.467137][T20137] loop2: detected capacity change from 0 to 512 [ 1596.591292][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1596.599474][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1596.613647][T20015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1596.657113][T20137] EXT4-fs (loop2): 1 orphan inode deleted [ 1596.671582][T20137] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 1596.733040][T20137] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038 (0x7fffffff) [ 1597.512951][ T26] kauditd_printk_skb: 32 callbacks suppressed [ 1597.512988][ T26] audit: type=1804 audit(1726527726.210:1004): pid=20157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3577" name="/newroot/29/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 1598.817408][T20172] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3584'. [ 1599.755958][T20178] loop2: detected capacity change from 0 to 64 [ 1599.825641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1599.862666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1599.940823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1600.073572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1600.084855][T20015] device veth0_vlan entered promiscuous mode [ 1600.097926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1600.746730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1600.771375][T20181] netlink: 'syz.0.3586': attribute type 4 has an invalid length. [ 1600.823858][T20015] device veth1_vlan entered promiscuous mode [ 1600.914003][T12869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1600.942132][T12869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1600.969260][T20015] device veth0_macvtap entered promiscuous mode [ 1600.998180][T12869] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1601.017383][T20015] device veth1_macvtap entered promiscuous mode [ 1601.080258][T20015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1601.124686][T20189] loop2: detected capacity change from 0 to 1024 [ 1601.171654][T20015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1601.223866][T20015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1601.246447][T20015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1601.265513][T20015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1601.313109][T20015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1601.352437][T20015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1601.371722][T20015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1601.777134][T20015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1601.841125][T20015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1601.856673][T20015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1601.891860][T20015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1601.911516][T20015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1601.949997][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1601.973166][T20189] EXT4-fs (loop2): Mount option "commit=0x0000000000000003" incompatible with ext2 [ 1601.993230][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1602.033051][T20015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1602.062862][T20015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.093124][T20015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1602.108210][T20015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.247869][T20205] loop1: detected capacity change from 0 to 1024 [ 1602.260937][T20015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1602.918897][T20015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.993526][T20015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1603.024937][T20015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.046713][T20015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1603.084593][T20015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.128106][T20208] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3593'. [ 1603.136065][T20015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1603.158914][T20015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.218779][T20015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1603.245293][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1603.255903][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1603.277867][T20015] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.301048][T20015] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.312505][T20015] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.344862][T20015] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.391175][T20128] device batadv_slave_1 left promiscuous mode [ 1603.607092][T20219] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1604.305513][T20221] loop1: detected capacity change from 0 to 16 [ 1604.350731][ T3735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1604.376829][ T3735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1604.428047][T12869] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1604.451362][ T3735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1604.467571][ T3735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1604.502627][T20221] /dev/loop1: Can't open blockdev [ 1604.557187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1605.436060][T20229] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 1605.797075][T20233] loop2: detected capacity change from 0 to 256 [ 1605.854333][T20237] tipc: Started in network mode [ 1605.859561][T20237] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 1605.862559][T20233] exfat: Deprecated parameter 'namecase' [ 1605.867922][T20237] tipc: Enabled bearer , priority 10 [ 1605.882113][T20237] tipc: Resetting bearer [ 1605.943642][T20233] exfat: Deprecated parameter 'utf8' [ 1605.986972][T20237] tipc: Disabling bearer [ 1606.025348][ T26] audit: type=1326 audit(1726527734.760:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20234 comm="syz.4.3549" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d76495ef9 code=0x0 [ 1606.075675][T20233] exfat: Deprecated parameter 'namecase' [ 1606.102955][T20233] exfat: Deprecated parameter 'utf8' [ 1606.122707][T20233] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 1606.131496][T20243] loop4: detected capacity change from 0 to 256 [ 1606.215336][T20243] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 1606.249713][T20245] loop3: detected capacity change from 0 to 1024 [ 1606.283344][T20243] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 0) [ 1606.291357][T20243] exFAT-fs (loop4): failed to load alloc-bitmap [ 1606.318365][T20243] exFAT-fs (loop4): failed to recognize exfat type [ 1606.433883][ T3610] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 1606.442004][T20245] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1606.552782][T20259] device batadv_slave_0 entered promiscuous mode [ 1606.670429][T20259] loop1: detected capacity change from 0 to 512 [ 1606.862552][T20254] device batadv_slave_0 left promiscuous mode [ 1606.912043][ T3610] usb 3-1: not running at top speed; connect to a high speed hub [ 1607.017544][ T3610] usb 3-1: config index 0 descriptor too short (expected 51325, got 125) [ 1607.032188][ T3610] usb 3-1: config 204 has too many interfaces: 180, using maximum allowed: 32 [ 1607.054516][ T3610] usb 3-1: config 204 contains an unexpected descriptor of type 0x1, skipping [ 1607.068551][ T3610] usb 3-1: config 204 has an invalid descriptor of length 0, skipping remainder of the config [ 1607.080057][ T3610] usb 3-1: config 204 has 0 interfaces, different from the descriptor's value: 180 [ 1607.856370][T20275] netlink: 'syz.1.3611': attribute type 3 has an invalid length. [ 1607.899074][T20275] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3611'. [ 1607.963575][T20275] netlink: 'syz.1.3611': attribute type 3 has an invalid length. [ 1608.018246][ T26] audit: type=1326 audit(1726527736.750:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20276 comm="syz.4.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d76495ef9 code=0x7ffc0000 [ 1608.066956][ T26] audit: type=1326 audit(1726527736.750:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20276 comm="syz.4.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d76495ef9 code=0x7ffc0000 [ 1608.099994][ T26] audit: type=1326 audit(1726527736.750:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20276 comm="syz.4.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f0d76495ef9 code=0x7ffc0000 [ 1608.131208][ T26] audit: type=1326 audit(1726527736.750:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20276 comm="syz.4.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d76495ef9 code=0x7ffc0000 [ 1608.181902][ T3610] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1608.196533][ T3610] usb 3-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 1608.205166][ T26] audit: type=1326 audit(1726527736.750:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20276 comm="syz.4.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f0d76495ef9 code=0x7ffc0000 [ 1608.231820][ T3610] usb 3-1: Product: syz [ 1608.236083][ T3610] usb 3-1: Manufacturer: ㅽꑋᡕá涮缗壼烷녠ç¡á›å”—鬼å¿à®­í„᥅옧2괲貤⊘붑Ñå¡‘á„ꤶ밹缬䯟拫ç˜ë¥´ë§‚ꦔ䡮㛰⣔ë°ç¼šï³•ï¢å¶¤çƒ–ጔ嶽ì°â¶—뷀ㄌ㄰綜ê‹äµ„æ«îš“犼⸻ᅲ뱨訤뷆ૃ低ç«à¡¯ë¼Œá„Œä’¬â†¨îŠ‹å°›è•ã¤¾â¢¶ç¾°à¹§æ·é” ë¢ˆâ­ºæ‚³ã·„㿵蓥렗橎枨ä¥ë¥³â‹†éª²å‡˜ï¨¥ [ 1608.267465][ T26] audit: type=1326 audit(1726527736.750:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20276 comm="syz.4.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d76495ef9 code=0x7ffc0000 [ 1608.281057][T20286] loop1: detected capacity change from 0 to 736 [ 1608.296782][ T26] audit: type=1326 audit(1726527736.750:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20276 comm="syz.4.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d76495ef9 code=0x7ffc0000 [ 1608.329762][ T26] audit: type=1326 audit(1726527736.750:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20276 comm="syz.4.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d76495ef9 code=0x7ffc0000 [ 1608.358343][ T26] audit: type=1326 audit(1726527736.750:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20276 comm="syz.4.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f0d76495ef9 code=0x7ffc0000 [ 1608.455725][ T3610] usb 3-1: USB disconnect, device number 58 [ 1610.737989][T20306] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1612.105410][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 1612.105424][ T26] audit: type=1326 audit(1726527740.840:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20326 comm="syz.3.3626" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7702bc7ef9 code=0x0 [ 1612.542325][T20339] xt_TCPMSS: Only works on TCP SYN packets [ 1612.589969][T20343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3631'. [ 1612.629895][T20341] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1612.630019][T20341] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1612.630071][T20341] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1612.630109][T20341] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1613.018041][T20347] ieee802154 phy0 wpan0: encryption failed: -22 [ 1613.289608][T20335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1613.333206][ T1395] ieee802154 phy0 wpan0: encryption failed: -22 [ 1614.101718][ T3557] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1614.491938][ T3557] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1614.532250][ T3557] usb 4-1: New USB device found, idVendor=046d, idProduct=1017, bcdDevice= 0.00 [ 1614.582693][ T3557] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.599068][T20359] loop1: detected capacity change from 0 to 1024 [ 1614.619525][ T3557] usb 4-1: config 0 descriptor?? [ 1614.647581][ T154] bond0: (slave bond_slave_0): interface is now down [ 1614.664096][ T3557] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1614.674587][ T154] bond0: (slave bond_slave_1): interface is now down [ 1614.751718][T12869] bond0: (slave bond_slave_0): interface is now down [ 1614.770905][T12869] bond0: (slave bond_slave_1): interface is now down [ 1614.854665][ T154] bond0: (slave bond_slave_0): interface is now down [ 1614.872966][ T154] bond0: (slave bond_slave_1): interface is now down [ 1614.921850][ T154] bond0: (slave bond_slave_0): interface is now down [ 1614.936954][ T154] bond0: (slave bond_slave_1): interface is now down [ 1614.939675][T20367] program syz.4.3639 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1614.985107][ T3557] usb 4-1: USB disconnect, device number 61 [ 1615.059205][ T154] bond0: now running without any active interface! [ 1615.759620][T20383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3643'. [ 1615.851832][T20383] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3643'. [ 1616.017121][T20393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3643'. [ 1616.140486][T20391] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1616.452797][T20401] loop4: detected capacity change from 0 to 128 [ 1618.877553][T20404] loop3: detected capacity change from 0 to 512 [ 1619.076976][T20404] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1619.090917][T20404] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.3647: bg 0: block 248: padding at end of block bitmap is not set [ 1619.139800][T20404] Quota error (device loop3): write_blk: dquota write failed [ 1619.149658][T20404] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1619.160806][T20404] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz.3.3647: Failed to acquire dquot type 1 [ 1619.174143][T20404] EXT4-fs (loop3): 1 truncate cleaned up [ 1619.180411][T20404] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1619.183286][T11667] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1619.209439][T20404] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 1619.266966][T20407] netlink: 'syz.0.3657': attribute type 16 has an invalid length. [ 1619.364674][T20421] loop2: detected capacity change from 0 to 128 [ 1619.439369][T20407] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.3657'. [ 1619.801804][T20404] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 1619.860830][ T146] Bluetooth: hci5: ACL packet for unknown connection handle 0 [ 1620.057058][T20437] loop1: detected capacity change from 0 to 512 [ 1620.187468][T20438] loop2: detected capacity change from 0 to 4096 [ 1620.337552][T20447] loop3: detected capacity change from 0 to 1024 [ 1620.405090][T20438] ntfs: (device loop2): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 1620.442238][T20438] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 1620.489067][T20447] EXT4-fs (loop3): Mount option "commit=0x0000000000000003" incompatible with ext2 [ 1620.498594][T20438] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1620.499127][T20438] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1620.608523][T20438] ntfs: (device loop2): load_system_files(): Failed to load $Volume. [ 1620.670567][T20438] ntfs: (device loop2): ntfs_fill_super(): Failed to load system files. [ 1620.890537][T20463] sock: sock_timestamping_bind_phc: sock not bind to device [ 1620.909224][T20463] IPVS: set_ctl: invalid protocol: 255 172.20.20.20:20002 [ 1622.387542][T20475] fuse: Unknown parameter '' [ 1622.749684][T20476] netlink: 'syz.2.3661': attribute type 3 has an invalid length. [ 1623.449340][T20475] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3662'. [ 1623.570026][T20475] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1623.857292][T20491] loop4: detected capacity change from 0 to 512 [ 1624.510004][T20491] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 1624.510004][T20491] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1624.510004][T20491] [ 1624.527896][T20491] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1625.837353][T20502] loop1: detected capacity change from 0 to 256 [ 1626.619004][T20491] EXT4-fs: error -4 creating inode table initialization thread [ 1626.627632][T20491] EXT4-fs (loop4): mount failed [ 1626.942317][T20508] loop3: detected capacity change from 0 to 1024 [ 1627.055318][T20516] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1627.370479][T20523] Invalid ELF header magic: != ELF [ 1628.021807][T20508] EXT4-fs (loop3): Mount option "commit=0x0000000000000003" incompatible with ext2 [ 1628.067482][ T7899] kernel write not supported for file /dsp (pid: 7899 comm: kworker/1:11) [ 1628.147803][T20520] 9pnet: Insufficient options for proto=fd [ 1628.258290][T20527] loop4: detected capacity change from 0 to 16 [ 1628.314778][T20527] erofs: (device loop4): mounted with root inode @ nid 36. [ 1628.340524][T20529] kvm [20528]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010006 data 0x0 [ 1629.208951][ T26] audit: type=1800 audit(1726527757.810:1031): pid=20538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3675" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 1629.228463][T20540] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3680'. [ 1629.241756][T20540] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3680'. [ 1629.251040][T20540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3680'. [ 1629.254724][ T3573] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -41 in[4096, 0] out[9000] [ 1629.809919][T20553] input: syz0 as /devices/virtual/input/input58 [ 1631.327666][T14386] Bluetooth: hci4: command 0x0406 tx timeout [ 1631.511568][T20550] netlink: 'syz.0.3681': attribute type 29 has an invalid length. [ 1631.522463][T20550] netlink: 'syz.0.3681': attribute type 29 has an invalid length. [ 1631.566355][T20560] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3684'. [ 1632.627605][T20560] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3684'. [ 1632.788906][T20560] netlink: 'syz.4.3684': attribute type 5 has an invalid length. [ 1632.835298][T20560] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3684'. [ 1632.863467][ T26] audit: type=1326 audit(1726527761.600:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20570 comm="syz.3.3687" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7702bc7ef9 code=0x0 [ 1633.302069][T20586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3688'. [ 1633.428926][T20587] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 1633.442077][ T26] audit: type=1326 audit(1726527762.130:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20583 comm="syz.1.3689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7411171ef9 code=0x7ffc0000 [ 1634.097989][ T26] audit: type=1326 audit(1726527762.130:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20583 comm="syz.1.3689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7411171ef9 code=0x7ffc0000 [ 1634.126354][ T26] audit: type=1326 audit(1726527762.130:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20583 comm="syz.1.3689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7411171ef9 code=0x7ffc0000 [ 1634.155951][ T26] audit: type=1326 audit(1726527762.130:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20583 comm="syz.1.3689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7411171ef9 code=0x7ffc0000 [ 1634.179532][ T26] audit: type=1326 audit(1726527762.130:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20583 comm="syz.1.3689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7411171ef9 code=0x7ffc0000 [ 1634.217296][T20594] loop4: detected capacity change from 0 to 512 [ 1634.218652][ T26] audit: type=1326 audit(1726527762.140:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20583 comm="syz.1.3689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7411170890 code=0x7ffc0000 [ 1634.247671][ T26] audit: type=1326 audit(1726527762.140:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20583 comm="syz.1.3689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7411170890 code=0x7ffc0000 [ 1634.267056][T20589] loop2: detected capacity change from 0 to 8192 [ 1634.291945][ T26] audit: type=1326 audit(1726527762.140:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20583 comm="syz.1.3689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7411171ef9 code=0x7ffc0000 [ 1634.299088][T20589] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 1634.352363][T20589] REISERFS (device loop2): using ordered data mode [ 1634.388604][T20594] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 1634.402239][ T26] audit: type=1326 audit(1726527762.140:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20583 comm="syz.1.3689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7411171ef9 code=0x7ffc0000 [ 1634.425706][ T26] audit: type=1326 audit(1726527762.140:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20583 comm="syz.1.3689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7411171ef9 code=0x7ffc0000 [ 1634.431890][T20589] reiserfs: using flush barriers [ 1634.459018][ T26] audit: type=1326 audit(1726527762.140:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20583 comm="syz.1.3689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f7411171ef9 code=0x7ffc0000 [ 1634.490327][T20589] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1634.538960][ T26] audit: type=1326 audit(1726527762.150:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20583 comm="syz.1.3689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7411171ef9 code=0x7ffc0000 [ 1634.573346][T20589] REISERFS (device loop2): checking transaction log (loop2) [ 1634.708784][ T26] audit: type=1326 audit(1726527762.150:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20583 comm="syz.1.3689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7411171ef9 code=0x7ffc0000 [ 1635.473177][T20612] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1635.588696][T20589] REISERFS (device loop2): Using tea hash to sort names [ 1635.602019][T20589] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 1635.623203][T20594] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,errors=remount-ro,nombcache,sysvgroups,. Quota mode: writeback. [ 1635.637380][T20589] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1635.646799][ T26] audit: type=1326 audit(1726527762.150:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20583 comm="syz.1.3689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7411171ef9 code=0x7ffc0000 [ 1635.695049][T20594] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038 (0x7fffffff) [ 1635.838816][ T26] audit: type=1326 audit(1726527762.150:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20583 comm="syz.1.3689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7411171ef9 code=0x7ffc0000 [ 1635.868707][T20589] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2) [ 1636.852368][T20589] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.3690'. [ 1636.937921][T20624] loop3: detected capacity change from 0 to 1024 [ 1637.030507][T20624] EXT4-fs (loop3): Mount option "commit=0x0000000000000003" incompatible with ext2 [ 1637.312298][T20632] device xfrm0 entered promiscuous mode [ 1637.320544][T20632] bond0: (slave vlan3): Enslaving as an active interface with an up link [ 1637.330140][ T1321] bond0: (slave vlan3): interface is now down [ 1637.343908][ T1321] bond0: now running without any active interface! [ 1638.749048][T20648] loop2: detected capacity change from 0 to 256 [ 1640.099574][T20648] FAT-fs (loop2): Directory bread(block 64) failed [ 1640.107593][T20648] FAT-fs (loop2): Directory bread(block 65) failed [ 1640.114811][T20648] FAT-fs (loop2): Directory bread(block 66) failed [ 1640.159579][T20648] FAT-fs (loop2): Directory bread(block 67) failed [ 1640.192342][T20648] FAT-fs (loop2): Directory bread(block 68) failed [ 1640.199109][T20648] FAT-fs (loop2): Directory bread(block 69) failed [ 1640.212111][T20648] FAT-fs (loop2): Directory bread(block 70) failed [ 1640.229215][T20648] FAT-fs (loop2): Directory bread(block 71) failed [ 1640.261980][T20648] FAT-fs (loop2): Directory bread(block 72) failed [ 1640.268527][T20648] FAT-fs (loop2): Directory bread(block 73) failed [ 1640.315288][T20655] loop3: detected capacity change from 0 to 4096 [ 1640.912690][T20655] __ntfs_error: 12 callbacks suppressed [ 1640.912707][T20655] ntfs: (device loop3): map_mft_record_page(): Mft record 0x1 is corrupt. Run chkdsk. [ 1641.033869][T20648] device wireguard0 entered promiscuous mode [ 1641.042220][ T26] audit: type=1804 audit(1726527769.780:1060): pid=20667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3705" name="/newroot/53/file0/file0" dev="loop2" ino=1048991 res=1 errno=0 [ 1641.110914][T20655] ntfs: (device loop3): map_mft_record(): Failed with error code 5. [ 1641.121829][T20655] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 1641.160093][T20666] netlink: 'syz.4.3709': attribute type 39 has an invalid length. [ 1641.210036][T20655] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1641.297099][T20655] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1641.341769][T20655] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1641.365092][T20655] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1641.413580][T20655] ntfs: volume version 3.1. [ 1641.418145][T20655] ntfs: (device loop3): map_mft_record_page(): Mft record 0x2 is corrupt. Run chkdsk. [ 1641.481968][T20655] ntfs: (device loop3): map_mft_record(): Failed with error code 5. [ 1641.672360][T20678] sock: sock_timestamping_bind_phc: sock not bind to device [ 1641.693402][T20678] IPVS: set_ctl: invalid protocol: 255 172.20.20.20:20002 [ 1643.187276][T20690] loop4: detected capacity change from 0 to 512 [ 1643.306776][T20694] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1643.371878][T20690] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 1643.687640][T20690] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a024e01c, mo2=0002] [ 1643.726946][T20690] System zones: 1-12 [ 1643.808913][T20690] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.3714: casefold flag without casefold feature [ 1643.811864][T20703] netlink: 'syz.3.3717': attribute type 29 has an invalid length. [ 1643.876869][T20703] netlink: 'syz.3.3717': attribute type 29 has an invalid length. [ 1643.886470][T20690] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.3714: couldn't read orphan inode 15 (err -117) [ 1643.990874][T20708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3718'. [ 1644.011938][T20690] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,user_xattr,debug_want_extra_isize=0x000000000000005c,debug,mblk_io_submit,errors=continue,usrjquota=,prjquota,nodiscard,,errors=continue. Quota mode: writeback. [ 1644.145205][T20698] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3716'. [ 1644.156064][T20690] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.3714: Directory hole found for htree leaf block 0 [ 1644.423319][T20711] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.3714: Directory hole found for htree leaf block 0 [ 1645.143170][T20720] loop4: detected capacity change from 0 to 128 [ 1645.215874][T20720] ufs: You didn't specify the type of your ufs filesystem [ 1645.215874][T20720] [ 1645.215874][T20720] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1645.215874][T20720] [ 1645.215874][T20720] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1645.246638][ C0] vkms_vblank_simulate: vblank timer overrun [ 1645.382048][T20724] loop2: detected capacity change from 0 to 128 [ 1646.028720][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 1646.028736][ T26] audit: type=1326 audit(1726527774.760:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20713 comm="syz.1.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7411171ef9 code=0x7ffc0000 [ 1646.201406][T20720] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 1646.292400][ T26] audit: type=1326 audit(1726527774.800:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20713 comm="syz.1.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7411171ef9 code=0x7ffc0000 [ 1646.325364][ T26] audit: type=1326 audit(1726527774.800:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20713 comm="syz.1.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7411171ef9 code=0x7ffc0000 [ 1646.453468][T20720] 9pnet_virtio: no channels available for device @ [ 1646.484841][ T26] audit: type=1326 audit(1726527774.890:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20713 comm="syz.1.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7411171ef9 code=0x7ffc0000 [ 1647.363102][ T7899] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1647.371393][ T7899] Bluetooth: hci3: Injecting HCI hardware error event [ 1647.388373][ T3573] Bluetooth: hci3: hardware error 0x00 [ 1647.413972][T20739] loop1: detected capacity change from 0 to 128 [ 1647.622633][ T26] audit: type=1326 audit(1726527774.890:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20713 comm="syz.1.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7411171ef9 code=0x7ffc0000 [ 1647.646007][ T26] audit: type=1326 audit(1726527774.890:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20713 comm="syz.1.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7411171ef9 code=0x7ffc0000 [ 1647.714859][ T26] audit: type=1326 audit(1726527774.890:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20713 comm="syz.1.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7411171ef9 code=0x7ffc0000 [ 1647.740929][T20745] Cannot find add_set index 0 as target [ 1648.481023][ T26] audit: type=1326 audit(1726527774.890:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20713 comm="syz.1.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7411171ef9 code=0x7ffc0000 [ 1648.528904][T20739] tmpfs: Bad value for 'nr_inodes' [ 1648.996646][ T26] audit: type=1326 audit(1726527774.890:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20713 comm="syz.1.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7411171ef9 code=0x7ffc0000 [ 1649.037956][ T26] audit: type=1326 audit(1726527774.890:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20713 comm="syz.1.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7411171ef9 code=0x7ffc0000 [ 1649.557737][T20763] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1651.555202][T20775] loop3: detected capacity change from 0 to 2048 [ 1652.232655][T20785] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1652.301363][ T144] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1652.393661][T20790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3742'. [ 1652.395606][T20788] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1652.435087][T20790] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3742'. [ 1652.525852][ T144] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1652.563103][T20790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3742'. [ 1652.930225][ T144] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1652.940665][ T3610] Bluetooth: hci2: command 0x0409 tx timeout [ 1653.000100][T20804] IPVS: length: 96 != 8 [ 1653.006481][T20804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3745'. [ 1653.053719][T20776] chnl_net:caif_netlink_parms(): no params data found [ 1653.276823][ T144] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1654.325013][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 1654.325027][ T26] audit: type=1326 audit(1726527783.060:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20814 comm="syz.2.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535a920ef9 code=0x7ffc0000 [ 1654.353612][ C0] vkms_vblank_simulate: vblank timer overrun [ 1654.361144][ T26] audit: type=1326 audit(1726527783.080:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20814 comm="syz.2.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535a920ef9 code=0x7ffc0000 [ 1654.383577][ C0] vkms_vblank_simulate: vblank timer overrun [ 1654.451777][ T26] audit: type=1326 audit(1726527783.090:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20814 comm="syz.2.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f535a920ef9 code=0x7ffc0000 [ 1654.528475][ T26] audit: type=1326 audit(1726527783.090:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20814 comm="syz.2.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535a920ef9 code=0x7ffc0000 [ 1654.550902][ C0] vkms_vblank_simulate: vblank timer overrun [ 1654.671962][ T26] audit: type=1326 audit(1726527783.090:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20814 comm="syz.2.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535a920ef9 code=0x7ffc0000 [ 1654.770755][ T26] audit: type=1326 audit(1726527783.090:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20814 comm="syz.2.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f535a920ef9 code=0x7ffc0000 [ 1654.860656][ T26] audit: type=1326 audit(1726527783.090:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20814 comm="syz.2.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535a920ef9 code=0x7ffc0000 [ 1654.951645][ T26] audit: type=1326 audit(1726527783.090:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20814 comm="syz.2.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535a920ef9 code=0x7ffc0000 [ 1655.021697][ T5469] Bluetooth: hci2: command 0x041b tx timeout [ 1655.058102][ T26] audit: type=1326 audit(1726527783.140:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20814 comm="syz.2.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f535a920ef9 code=0x7ffc0000 [ 1655.302523][ T26] audit: type=1326 audit(1726527783.140:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20814 comm="syz.2.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535a920ef9 code=0x7ffc0000 [ 1655.303260][T20776] bridge0: port 1(bridge_slave_0) entered blocking state [ 1656.631451][T20836] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 1656.654601][T20776] bridge0: port 1(bridge_slave_0) entered disabled state [ 1656.700524][ C0] vkms_vblank_simulate: vblank timer overrun [ 1656.887631][ T3610] Bluetooth: hci4: command 0x0406 tx timeout [ 1657.016050][T20776] device bridge_slave_0 entered promiscuous mode [ 1657.091803][ T1073] Bluetooth: hci2: command 0x040f tx timeout [ 1657.204808][T20835] netlink: 'syz.0.3752': attribute type 39 has an invalid length. [ 1657.487367][ T144] tipc: Left network mode [ 1657.493037][T20776] bridge0: port 2(bridge_slave_1) entered blocking state [ 1657.503655][T20776] bridge0: port 2(bridge_slave_1) entered disabled state [ 1657.584357][ C0] vkms_vblank_simulate: vblank timer overrun [ 1657.753743][T20776] device bridge_slave_1 entered promiscuous mode [ 1657.908315][T20855] loop3: detected capacity change from 0 to 128 [ 1658.107001][T20776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1658.119359][T20776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1658.162252][T20860] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1658.229953][T20776] team0: Port device team_slave_0 added [ 1658.248711][T20776] team0: Port device team_slave_1 added [ 1658.285288][T20865] loop2: detected capacity change from 0 to 512 [ 1658.357114][T20865] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=680ce01d, mo2=0003] [ 1658.366136][T20865] System zones: 1-12 [ 1658.402404][T20865] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.3757: casefold flag without casefold feature [ 1658.422218][T20865] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.3757: couldn't read orphan inode 15 (err -117) [ 1658.434693][T20867] xt_bpf: check failed: parse error [ 1658.449737][T20776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1658.457113][T20776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1658.482690][T20865] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000007,quota,noinit_itable,errors=continue,errors=continue,errors=remount-ro,delalloc,auto_da_alloc,nombcache,errors=continue,journal_ioprio=0x0000000000000001,. Quota mode: writeback. [ 1658.484208][T20776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1658.539151][T20776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1658.551395][T20776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1658.578269][T20776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1658.615811][T20865] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.3757: Directory hole found for htree leaf block 0 [ 1658.777297][T20776] device hsr_slave_0 entered promiscuous mode [ 1658.793808][T20776] device hsr_slave_1 entered promiscuous mode [ 1658.811135][T20776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1658.826515][T20776] Cannot create hsr debugfs directory [ 1659.476315][T20841] Bluetooth: hci2: command 0x0419 tx timeout [ 1659.732036][T20883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3762'. [ 1659.836637][T20883] netlink: 'syz.0.3762': attribute type 1 has an invalid length. [ 1659.887902][T20887] Unsupported ieee802154 address type: 0 [ 1659.934573][T20883] netlink: 'syz.0.3762': attribute type 2 has an invalid length. [ 1659.948759][T20889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3763'. [ 1660.464851][T20910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3767'. [ 1660.506424][T20910] syz.2.3767[20910] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1660.506508][T20910] syz.2.3767[20910] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1660.535961][T20910] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3767'. [ 1661.321672][ T5469] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1661.479844][T20923] loop3: detected capacity change from 0 to 8 [ 1661.655527][T20776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1662.154325][T20776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1662.211749][T20776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1662.215268][ T5469] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1662.249198][ T5469] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1662.265993][T20776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1662.292095][ T5469] usb 3-1: config 0 descriptor?? [ 1662.342787][ T5469] cp210x 3-1:0.0: cp210x converter detected [ 1662.402982][ T7899] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1662.434966][ T144] device hsr_slave_0 left promiscuous mode [ 1662.489177][ T144] device hsr_slave_1 left promiscuous mode [ 1662.509847][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1662.517616][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1662.529822][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1662.580454][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1662.762173][ T7899] usb 4-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice=3b.c0 [ 1662.771507][ T7899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1662.785550][ T144] device veth0_macvtap left promiscuous mode [ 1662.805016][ T144] device veth1_vlan left promiscuous mode [ 1662.810796][ T144] device veth0_vlan left promiscuous mode [ 1663.139325][ T7899] usb 4-1: config 0 descriptor?? [ 1663.305588][ T144] team0 (unregistering): Port device team_slave_1 removed [ 1663.334900][ T144] team0 (unregistering): Port device team_slave_0 removed [ 1663.370441][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1663.402062][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1663.452752][ T7899] keyspan 4-1:0.0: Keyspan 1 port adapter converter detected [ 1663.460303][ T7899] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 84 [ 1663.558127][ T144] bond0 (unregistering): Released all slaves [ 1663.592413][T20948] netlink: 'syz.2.3769': attribute type 21 has an invalid length. [ 1663.600687][T20948] netlink: 'syz.2.3769': attribute type 1 has an invalid length. [ 1663.652918][ T5469] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1663.660444][ T5469] cp210x 3-1:0.0: querying part number failed [ 1663.737284][ T5469] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1663.762666][ T7899] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 1663.770376][ T7899] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 82 [ 1663.771774][ T5469] usb 3-1: USB disconnect, device number 60 [ 1663.830943][T20965] fuse: Bad value for 'rootmode' [ 1663.856301][ T5469] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1663.868627][T20776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1663.905259][ T5469] cp210x 3-1:0.0: device disconnected [ 1663.949421][T12869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1663.999797][T12869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1664.011700][ T7899] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 1664.019305][ T7899] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 1664.025736][T20776] 8021q: adding VLAN 0 to HW filter on device team0 [ 1664.058928][ T3731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1664.074397][ T3731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1664.089956][ T3731] bridge0: port 1(bridge_slave_0) entered blocking state [ 1664.097083][ T3731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1664.119644][ T3731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1664.128688][ T3731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1664.137787][ T3731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1664.147118][ T3731] bridge0: port 2(bridge_slave_1) entered blocking state [ 1664.154231][ T3731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1664.162648][ T3731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1664.171463][ T3731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1664.195475][ T3731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1664.218236][ T3731] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1664.231814][ T3731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1664.240497][ T3731] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1664.256143][ T3731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1664.268372][ T3731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1664.283559][T20776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1664.302307][T20776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1664.310985][ T3731] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1664.326014][ T3731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1664.338865][ T3731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1664.461728][ T7899] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 1664.469519][ T7899] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 1664.507499][ T3920] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1664.517158][ T3920] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1664.547296][T20776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1664.625641][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1664.636162][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1664.672157][ T3731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1664.681006][ T3731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1664.696746][T20776] device veth0_vlan entered promiscuous mode [ 1664.710952][ T3731] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1664.726400][ T3731] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1664.746019][T20776] device veth1_vlan entered promiscuous mode [ 1664.787288][T20982] loop2: detected capacity change from 0 to 2048 [ 1664.803632][T20776] device veth0_macvtap entered promiscuous mode [ 1664.810873][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1664.867644][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1664.884186][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1664.899039][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1664.909892][T20776] device veth1_macvtap entered promiscuous mode [ 1664.932875][T20982] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1664.949799][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1664.958565][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1664.979624][T20776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1665.033386][ T26] kauditd_printk_skb: 56 callbacks suppressed [ 1665.033395][ T26] audit: type=1800 audit(1726527793.770:1169): pid=20982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3777" name="file2" dev="loop2" ino=1347 res=0 errno=0 [ 1665.068331][T20776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1665.102242][T20776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1665.121769][T20776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1665.180255][T20776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1665.192061][ T7899] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB1 [ 1665.224874][T20776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1665.241014][T20776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1665.267778][T20776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1665.287367][T20776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1665.318233][T20776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1665.341051][T20776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1665.377786][ T7899] usb 4-1: USB disconnect, device number 62 [ 1665.381741][T20776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1665.403380][ T7899] keyspan_1 ttyUSB1: Keyspan 1 port adapter converter now disconnected from ttyUSB1 [ 1665.444816][T20776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1665.454202][ T7899] keyspan 4-1:0.0: device disconnected [ 1665.490855][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1665.522506][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1665.577609][T20776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1665.606837][T20776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1665.635399][T20776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1665.713167][T20776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1665.753852][T20841] kernel write not supported for file /dsp (pid: 20841 comm: kworker/0:7) [ 1665.772077][T20776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1665.842813][T20776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1665.879793][T20776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1665.908561][T21000] loop3: detected capacity change from 0 to 512 [ 1665.946873][T20776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1666.003976][T21000] EXT4-fs (loop3): Ignoring removed bh option [ 1666.010066][T21000] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1666.080661][T20776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1666.107305][T20776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1666.223400][T20776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1666.234394][T21000] EXT4-fs (loop3): 1 truncate cleaned up [ 1666.240129][T21000] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,bh,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 1666.259283][ T26] audit: type=1800 audit(1726527795.000:1170): pid=20981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3777" name="file0" dev="loop2" ino=1370 res=0 errno=0 [ 1666.289128][ T26] audit: type=1804 audit(1726527795.020:1171): pid=20981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3777" name="/newroot/72/file0/bus/file0" dev="loop2" ino=1370 res=1 errno=0 [ 1666.342968][T20776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1666.538844][T20776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1666.590996][T20988] netlink: 'syz.0.3779': attribute type 10 has an invalid length. [ 1666.605364][T20988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1666.755215][T20988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1666.872720][ T1321] bond0: (slave batadv_slave_0): interface is now down [ 1666.888099][T20988] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1666.900298][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1666.913733][ T1321] bond0: (slave batadv_slave_0): interface is now down [ 1666.919160][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1666.941846][ T3731] bond0: (slave batadv_slave_0): interface is now down [ 1666.965833][T20776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1667.181896][ T1321] bond0: (slave batadv_slave_0): interface is now down [ 1667.211687][ T1321] bond0: (slave batadv_slave_0): interface is now down [ 1667.231693][ T3609] bond0: (slave batadv_slave_0): interface is now down [ 1667.252626][T20776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1667.253471][ T1321] bond0: (slave batadv_slave_0): interface is now down [ 1667.261330][T20776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1667.261379][T20776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1667.323720][ T3731] bond0: (slave batadv_slave_0): interface is now down [ 1667.362422][ T1321] bond0: (slave batadv_slave_0): interface is now down [ 1667.403078][ T3731] bond0: (slave batadv_slave_0): interface is now down [ 1667.431698][ T3731] bond0: (slave batadv_slave_0): interface is now down [ 1667.451862][ T3736] bond0: (slave batadv_slave_0): interface is now down [ 1667.471819][ T1321] bond0: (slave batadv_slave_0): interface is now down [ 1667.502801][ T1321] bond0: (slave batadv_slave_0): interface is now down [ 1667.542395][ T1321] bond0: (slave batadv_slave_0): interface is now down [ 1667.562992][ T3731] bond0: (slave batadv_slave_0): interface is now down [ 1667.581917][ T3736] bond0: (slave batadv_slave_0): interface is now down [ 1667.601702][ T3731] bond0: (slave batadv_slave_0): interface is now down [ 1667.668147][ T3731] bond0: now running without any active interface! [ 1667.790907][T21020] sp0: Synchronizing with TNC [ 1668.072692][ T7899] Bluetooth: hci6: command 0x0409 tx timeout [ 1668.525521][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1668.551307][T21028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3783'. [ 1668.558989][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1668.630678][ T3731] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1668.639021][ T3609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1668.673723][ T3609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1668.806046][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1668.964443][T21033] usb usb8: usbfs: process 21033 (syz.2.3784) did not claim interface 0 before use [ 1669.096271][T21038] loop1: detected capacity change from 0 to 16 [ 1669.229250][T20994] chnl_net:caif_netlink_parms(): no params data found [ 1669.236334][T21038] /dev/loop1: Can't open blockdev [ 1670.283231][T20839] Bluetooth: hci6: command 0x041b tx timeout [ 1670.353750][ T26] audit: type=1326 audit(1726527799.090:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21045 comm="syz.2.3787" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f535a920ef9 code=0x0 [ 1670.991864][T20994] bridge0: port 1(bridge_slave_0) entered blocking state [ 1670.999000][T20994] bridge0: port 1(bridge_slave_0) entered disabled state [ 1671.137040][T20994] device bridge_slave_0 entered promiscuous mode [ 1672.132048][T20994] bridge0: port 2(bridge_slave_1) entered blocking state [ 1672.173100][T20994] bridge0: port 2(bridge_slave_1) entered disabled state [ 1672.181371][T20994] device bridge_slave_1 entered promiscuous mode [ 1672.250484][T21092] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3791'. [ 1672.384720][T20839] Bluetooth: hci6: command 0x040f tx timeout [ 1672.518426][T20994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1672.593377][T20994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1672.670995][T21104] loop3: detected capacity change from 0 to 512 [ 1672.845106][T21105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3794'. [ 1672.923429][T21105] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3794'. [ 1673.122871][T20994] team0: Port device team_slave_0 added [ 1673.143552][T21104] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 1673.153568][T21104] EXT4-fs (loop3): 1 truncate cleaned up [ 1673.159292][T21104] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 1673.608834][T20992] syz.0.3779 (20992): drop_caches: 1 [ 1673.629327][T20994] team0: Port device team_slave_1 added [ 1673.784173][T20994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1673.812764][T20994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1673.897837][T21118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3796'. [ 1673.937508][T20994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1674.024987][T20994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1674.062603][T20994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1674.201832][T20994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1674.426537][T20994] device hsr_slave_0 entered promiscuous mode [ 1674.452192][T20845] Bluetooth: hci6: command 0x0419 tx timeout [ 1674.506452][T20994] device hsr_slave_1 entered promiscuous mode [ 1674.542848][T20994] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1674.606915][T20994] Cannot create hsr debugfs directory [ 1674.785166][ T1395] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.941700][T20845] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 1675.068370][T20994] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.075323][T21129] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3800'. [ 1675.141436][T21135] loop3: detected capacity change from 0 to 24 [ 1675.253491][T21132] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3801'. [ 1675.314470][T21135] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1675.354237][T20994] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.463837][T21135] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1675.651852][T20994] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.785880][T20994] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1676.102159][T20994] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1676.232773][T20994] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1676.279418][T20994] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1676.374093][T20994] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1676.523650][T21148] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1676.734265][T21149] nbd0: detected capacity change from 0 to 12 [ 1676.834516][ T150] block nbd0: Send control failed (result -89) [ 1676.842060][ T150] block nbd0: Request send failed, requeueing [ 1676.852961][T18139] block nbd0: Receive control failed (result -32) [ 1676.855773][ T150] block nbd0: Dead connection, failed to find a fallback [ 1676.867172][ T150] block nbd0: shutting down sockets [ 1676.872689][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1676.883564][ T150] buffer_io_error: 7 callbacks suppressed [ 1676.883577][ T150] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1676.899876][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1676.910987][ T150] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1676.919988][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1676.930882][ T150] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1676.938960][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1676.949758][ T150] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1676.957788][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1676.968657][ T150] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1676.977314][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1676.988135][ T150] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1676.997635][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1677.008916][ T150] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1677.017700][ T1271] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1677.028508][ T1271] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1677.036503][T19061] ldm_validate_partition_table(): Disk read failed. [ 1677.077026][T21152] block nbd0: NBD_DISCONNECT [ 1677.100107][ T1271] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1677.111225][ T1271] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1677.119834][ T1271] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1677.130668][ T1271] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1677.147876][T21152] block nbd0: Send disconnect failed -89 [ 1677.205428][T20994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1677.274533][T19061] Dev nbd0: unable to read RDB block 0 [ 1677.280534][T19061] nbd0: unable to read partition table [ 1677.348806][T19061] nbd0: partition table beyond EOD, truncated [ 1677.375939][T12869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1677.399667][T12869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1677.408042][T19061] ldm_validate_partition_table(): Disk read failed. [ 1677.433762][T19061] Dev nbd0: unable to read RDB block 0 [ 1677.493237][T19061] nbd0: unable to read partition table [ 1677.506390][T20994] 8021q: adding VLAN 0 to HW filter on device team0 [ 1677.569756][T19061] nbd0: partition table beyond EOD, truncated [ 1677.659741][T21156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3806'. [ 1677.708685][T21158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3807'. [ 1677.752155][T21155] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3806'. [ 1677.753305][T21158] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3807'. [ 1677.838445][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1677.891784][T20845] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1677.913198][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1677.922581][T20845] usb 3-1: can't read configurations, error -71 [ 1677.970265][ T3817] bridge0: port 1(bridge_slave_0) entered blocking state [ 1677.977429][ T3817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1678.029218][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1678.048402][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1678.059644][ T3817] bridge0: port 2(bridge_slave_1) entered blocking state [ 1678.066771][ T3817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1678.078616][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1678.125121][T21163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3807'. [ 1678.187053][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1678.213969][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1678.259006][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1678.530737][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1679.299881][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1679.358577][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1679.405329][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1679.426188][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1679.455803][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1679.521391][ T3920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1679.539004][ T3920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1679.636329][T20994] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1679.913427][T21180] kvm: emulating exchange as write [ 1680.043849][T21193] loop2: detected capacity change from 0 to 128 [ 1680.253441][T21193] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1680.271816][T21193] ext4 filesystem being mounted at /83/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 1680.389310][T20994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1680.575648][T13031] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1680.607592][T13031] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1683.128317][ T26] audit: type=1326 audit(1726527811.860:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21190 comm="syz.2.3814" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f535a920ef9 code=0x0 [ 1683.198386][T21204] loop1: detected capacity change from 0 to 4096 [ 1683.262538][T21204] /dev/loop1: Can't open blockdev [ 1684.542477][T12869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1684.578585][T12869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1684.667908][T21233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3819'. [ 1684.778629][T12869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1684.852468][T12869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1684.887517][T20994] device veth0_vlan entered promiscuous mode [ 1684.930171][T21231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3820'. [ 1684.942512][T21231] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3820'. [ 1685.033004][T21239] loop2: detected capacity change from 0 to 512 [ 1685.044500][T12869] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1685.069324][T12869] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1685.123245][T20994] device veth1_vlan entered promiscuous mode [ 1685.206099][T21239] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 1685.258604][T21239] UDF-fs: Scanning with blocksize 512 failed [ 1685.281108][T21239] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 1685.297339][T21239] UDF-fs: Scanning with blocksize 1024 failed [ 1685.307174][T21239] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 1685.314953][T21239] UDF-fs: Scanning with blocksize 2048 failed [ 1685.322115][T21239] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1685.375638][T21249] loop1: detected capacity change from 0 to 128 [ 1685.807186][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1685.956419][T21239] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1686.019709][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1686.058447][T20994] device veth0_macvtap entered promiscuous mode [ 1686.130008][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1686.149621][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1686.164442][T20994] device veth1_macvtap entered promiscuous mode [ 1686.178873][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1686.192748][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1687.088708][T20994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1687.099560][T20994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1687.110750][T20994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1687.122537][T20994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1687.213910][T20994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1687.301659][T20994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1687.391661][T20994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1687.447439][T20994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1687.651842][T20994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1687.706262][T20994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1687.766476][T20994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1687.808202][T20994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1687.886887][T20994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1687.904412][T21262] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3830'. [ 1687.928999][ T144] device hsr_slave_0 left promiscuous mode [ 1688.096511][ T144] device hsr_slave_1 left promiscuous mode [ 1688.188464][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1688.208260][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1688.233196][T21265] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3830'. [ 1688.238615][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1688.311030][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1688.373937][ T144] device bridge_slave_1 left promiscuous mode [ 1688.374047][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1688.397568][ T144] device bridge_slave_0 left promiscuous mode [ 1688.397672][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1688.401854][ T144] device veth1_macvtap left promiscuous mode [ 1688.401897][ T144] device veth0_macvtap left promiscuous mode [ 1688.401973][ T144] device veth1_vlan left promiscuous mode [ 1688.402026][ T144] device veth0_vlan left promiscuous mode [ 1690.212469][ T144] team0 (unregistering): Port device team_slave_1 removed [ 1690.248813][ T144] team0 (unregistering): Port device team_slave_0 removed [ 1690.284650][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1690.332286][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1690.551341][ T144] bond0 (unregistering): Released all slaves [ 1690.654711][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1690.687630][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1690.714959][T21305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3835'. [ 1690.734650][T21305] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3835'. [ 1690.801971][T20994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1690.832213][T20994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1690.858321][T21308] loop1: detected capacity change from 0 to 1024 [ 1690.869717][T20994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1690.880751][T20994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1690.891515][T20994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1690.947223][T20994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1690.971791][T20994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1690.997946][T20994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1691.016950][T20994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1691.034018][T20994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1691.061604][T20994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1691.101786][T20994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1691.192371][T20994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1691.220110][T20994] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1691.233771][T20994] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1692.351819][T20994] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1692.380983][T20994] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1692.441658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1692.539936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1692.654723][T21328] tipc: Trying to set illegal importance in message [ 1692.990804][T21335] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1693.132631][T12869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1693.170615][T12869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1693.218967][T21333] overlayfs: missing 'lowerdir' [ 1693.284305][T12869] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1693.629194][T12869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1693.708558][T12869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1693.788611][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1694.228542][T21351] loop2: detected capacity change from 0 to 2048 [ 1694.920716][T21354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3848'. [ 1695.003695][T21354] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3848'. [ 1695.031097][T21362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3848'. [ 1695.053433][T21345] loop1: detected capacity change from 0 to 8192 [ 1695.210137][T21345] loop1: p2 p3 p4 [ 1696.222314][T21345] loop1: p2 start 452985600 is beyond EOD, truncated [ 1696.231319][T21345] loop1: p3 start 4177527808 is beyond EOD, truncated [ 1696.247631][T21345] loop1: p4 size 3599499392 extends beyond EOD, truncated [ 1697.587876][T21396] loop2: detected capacity change from 0 to 256 [ 1697.781027][T21396] exfat: Unknown parameter 'exfat' [ 1697.840201][T21399] binder: BINDER_SET_CONTEXT_MGR already set [ 1697.880094][T21399] binder: 21397:21399 ioctl 4018620d 20000000 returned -16 [ 1698.106573][T21409] loop3: detected capacity change from 0 to 2048 [ 1698.265981][T21409] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1698.301913][ T5469] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1698.312690][T21415] loop4: detected capacity change from 0 to 512 [ 1698.525699][T21415] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1698.648202][T21418] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1698.666383][T21418] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 1698.679525][T21418] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1698.679525][T21418] [ 1698.689288][T21418] EXT4-fs (loop3): Total free blocks count 0 [ 1698.696174][T21418] EXT4-fs (loop3): Free/Dirty block details [ 1698.702272][T21418] EXT4-fs (loop3): free_blocks=2415919104 [ 1698.708160][T21418] EXT4-fs (loop3): dirty_blocks=16 [ 1698.713348][T21418] EXT4-fs (loop3): Block reservation details [ 1698.719378][T21418] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 1698.827886][T21418] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 1698.840253][T21418] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1698.840253][T21418] [ 1699.292033][T21415] EXT4-fs (loop4): 1 truncate cleaned up [ 1699.331808][T21415] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1700.300468][T20839] Bluetooth: hci6: command 0x0411 tx timeout [ 1700.307142][ T5469] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1700.342258][ T5469] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1700.515395][ T5469] usb 3-1: Product: syz [ 1700.532368][ T5469] usb 3-1: Manufacturer: syz [ 1700.995646][T21434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3859'. [ 1701.093985][ T5469] usb 3-1: SerialNumber: syz [ 1701.131843][T21434] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3859'. [ 1701.146724][ T5469] usb 3-1: config 0 descriptor?? [ 1701.184923][T21435] [ 1701.187259][T21435] ====================================================== [ 1701.194272][T21435] WARNING: possible circular locking dependency detected [ 1701.201273][T21435] 5.15.167-syzkaller #0 Not tainted [ 1701.206472][T21435] ------------------------------------------------------ [ 1701.213502][T21435] syz.0.3860/21435 is trying to acquire lock: [ 1701.219548][T21435] ffff888147838918 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x14d/0xa50 [ 1701.229111][T21435] [ 1701.229111][T21435] but task is already holding lock: [ 1701.236547][T21435] ffffffff8c7d8788 (system_transition_mutex/1){+.+.}-{3:3}, at: software_resume+0x7c/0x3c0 [ 1701.246566][T21435] [ 1701.246566][T21435] which lock already depends on the new lock. [ 1701.246566][T21435] [ 1701.257040][T21435] [ 1701.257040][T21435] the existing dependency chain (in reverse order) is: [ 1701.266030][T21435] [ 1701.266030][T21435] -> #7 (system_transition_mutex/1){+.+.}-{3:3}: [ 1701.274533][T21435] lock_acquire+0x1db/0x4f0 [ 1701.279583][T21435] __mutex_lock_common+0x1da/0x25a0 [ 1701.285311][T21435] mutex_lock_nested+0x17/0x20 [ 1701.290590][T21435] software_resume+0x7c/0x3c0 [ 1701.295791][T21435] resume_store+0xe3/0x130 [ 1701.300723][T21435] kernfs_fop_write_iter+0x3a2/0x4f0 [ 1701.306519][T21435] vfs_write+0xacd/0xe50 [ 1701.311270][T21435] ksys_write+0x1a2/0x2c0 [ 1701.316115][T21435] do_syscall_64+0x3b/0xb0 [ 1701.321040][T21435] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1701.327537][T21435] [ 1701.327537][T21435] -> #6 (&of->mutex){+.+.}-{3:3}: [ 1701.334735][T21435] lock_acquire+0x1db/0x4f0 [ 1701.339747][T21435] __mutex_lock_common+0x1da/0x25a0 [ 1701.345462][T21435] mutex_lock_nested+0x17/0x20 [ 1701.350749][T21435] kernfs_seq_start+0x50/0x3b0 [ 1701.356024][T21435] seq_read_iter+0x3d0/0xd10 [ 1701.361127][T21435] vfs_read+0xa93/0xe10 [ 1701.365794][T21435] ksys_read+0x1a2/0x2c0 [ 1701.370631][T21435] do_syscall_64+0x3b/0xb0 [ 1701.375557][T21435] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1701.381963][T21435] [ 1701.381963][T21435] -> #5 (&p->lock){+.+.}-{3:3}: [ 1701.388991][T21435] lock_acquire+0x1db/0x4f0 [ 1701.394003][T21435] __mutex_lock_common+0x1da/0x25a0 [ 1701.399711][T21435] mutex_lock_nested+0x17/0x20 [ 1701.404992][T21435] seq_read_iter+0xae/0xd10 [ 1701.410016][T21435] generic_file_splice_read+0x4ad/0x790 [ 1701.416078][T21435] splice_direct_to_actor+0x448/0xc10 [ 1701.421970][T21435] do_splice_direct+0x285/0x3d0 [ 1701.427350][T21435] do_sendfile+0x622/0x1000 [ 1701.432372][T21435] __se_sys_sendfile64+0x178/0x1e0 [ 1701.437993][T21435] do_syscall_64+0x3b/0xb0 [ 1701.442924][T21435] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1701.449339][T21435] [ 1701.449339][T21435] -> #4 (sb_writers#3){.+.+}-{0:0}: [ 1701.456721][T21435] lock_acquire+0x1db/0x4f0 [ 1701.461732][T21435] lo_write_bvec+0x1a3/0x740 [ 1701.466844][T21435] loop_process_work+0x2309/0x2af0 [ 1701.472461][T21435] process_one_work+0x8a1/0x10c0 [ 1701.477919][T21435] worker_thread+0xaca/0x1280 [ 1701.483102][T21435] kthread+0x3f6/0x4f0 [ 1701.487682][T21435] ret_from_fork+0x1f/0x30 [ 1701.492607][T21435] [ 1701.492607][T21435] -> #3 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 1701.501711][T21435] lock_acquire+0x1db/0x4f0 [ 1701.506733][T21435] process_one_work+0x7f1/0x10c0 [ 1701.512178][T21435] worker_thread+0xaca/0x1280 [ 1701.517386][T21435] kthread+0x3f6/0x4f0 [ 1701.521977][T21435] ret_from_fork+0x1f/0x30 [ 1701.526900][T21435] [ 1701.526900][T21435] -> #2 ((wq_completion)loop3){+.+.}-{0:0}: [ 1701.534962][T21435] lock_acquire+0x1db/0x4f0 [ 1701.539975][T21435] flush_workqueue+0x170/0x1610 [ 1701.545336][T21435] drain_workqueue+0xc5/0x390 [ 1701.550609][T21435] destroy_workqueue+0x7b/0xae0 [ 1701.555967][T21435] __loop_clr_fd+0x241/0xbe0 [ 1701.561068][T21435] blkdev_put+0x455/0x790 [ 1701.565907][T21435] deactivate_locked_super+0xa0/0x110 [ 1701.571789][T21435] cleanup_mnt+0x44e/0x500 [ 1701.576711][T21435] task_work_run+0x129/0x1a0 [ 1701.581809][T21435] exit_to_user_mode_loop+0x106/0x130 [ 1701.587692][T21435] exit_to_user_mode_prepare+0xb1/0x140 [ 1701.593742][T21435] syscall_exit_to_user_mode+0x5d/0x240 [ 1701.599793][T21435] do_syscall_64+0x47/0xb0 [ 1701.604715][T21435] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1701.611123][T21435] [ 1701.611123][T21435] -> #1 (&lo->lo_mutex){+.+.}-{3:3}: [ 1701.618580][T21435] lock_acquire+0x1db/0x4f0 [ 1701.623596][T21435] __mutex_lock_common+0x1da/0x25a0 [ 1701.629304][T21435] mutex_lock_killable_nested+0x17/0x20 [ 1701.635376][T21435] lo_open+0x68/0x100 [ 1701.639885][T21435] blkdev_get_whole+0x94/0x390 [ 1701.645158][T21435] blkdev_get_by_dev+0x2bc/0xa50 [ 1701.650605][T21435] blkdev_open+0x138/0x2d0 [ 1701.655544][T21435] do_dentry_open+0x807/0xfb0 [ 1701.660734][T21435] path_openat+0x2705/0x2f20 [ 1701.665848][T21435] do_filp_open+0x21c/0x460 [ 1701.670865][T21435] do_sys_openat2+0x13b/0x4f0 [ 1701.676083][T21435] __x64_sys_openat+0x243/0x290 [ 1701.681446][T21435] do_syscall_64+0x3b/0xb0 [ 1701.686371][T21435] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1701.692884][T21435] [ 1701.692884][T21435] -> #0 (&disk->open_mutex){+.+.}-{3:3}: [ 1701.700691][T21435] validate_chain+0x1649/0x5930 [ 1701.706156][T21435] __lock_acquire+0x1295/0x1ff0 [ 1701.711512][T21435] lock_acquire+0x1db/0x4f0 [ 1701.716523][T21435] __mutex_lock_common+0x1da/0x25a0 [ 1701.722232][T21435] mutex_lock_nested+0x17/0x20 [ 1701.727507][T21435] blkdev_get_by_dev+0x14d/0xa50 [ 1701.732951][T21435] swsusp_check+0xb1/0x2c0 [ 1701.737876][T21435] software_resume+0xc6/0x3c0 [ 1701.743064][T21435] resume_store+0xe3/0x130 [ 1701.748024][T21435] kernfs_fop_write_iter+0x3a2/0x4f0 [ 1701.753823][T21435] vfs_write+0xacd/0xe50 [ 1701.758578][T21435] ksys_write+0x1a2/0x2c0 [ 1701.763420][T21435] do_syscall_64+0x3b/0xb0 [ 1701.768472][T21435] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1701.774898][T21435] [ 1701.774898][T21435] other info that might help us debug this: [ 1701.774898][T21435] [ 1701.785113][T21435] Chain exists of: [ 1701.785113][T21435] &disk->open_mutex --> &of->mutex --> system_transition_mutex/1 [ 1701.785113][T21435] [ 1701.798744][T21435] Possible unsafe locking scenario: [ 1701.798744][T21435] [ 1701.806179][T21435] CPU0 CPU1 [ 1701.811530][T21435] ---- ---- [ 1701.816895][T21435] lock(system_transition_mutex/1); [ 1701.822172][T21435] lock(&of->mutex); [ 1701.828657][T21435] lock(system_transition_mutex/1); [ 1701.836453][T21435] lock(&disk->open_mutex); [ 1701.841036][T21435] [ 1701.841036][T21435] *** DEADLOCK *** [ 1701.841036][T21435] [ 1701.849164][T21435] 5 locks held by syz.0.3860/21435: [ 1701.854345][T21435] #0: ffff888022a84370 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2cb/0x380 [ 1701.863564][T21435] #1: ffff88807e80e460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x29a/0xe50 [ 1701.872434][T21435] #2: ffff888063f64088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x4f0 [ 1701.882441][T21435] #3: ffff88801bff1830 (kn->active#685){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20b/0x4f0 [ 1701.892532][T21435] #4: ffffffff8c7d8788 (system_transition_mutex/1){+.+.}-{3:3}, at: software_resume+0x7c/0x3c0 [ 1701.902985][T21435] [ 1701.902985][T21435] stack backtrace: [ 1701.908867][T21435] CPU: 1 PID: 21435 Comm: syz.0.3860 Not tainted 5.15.167-syzkaller #0 [ 1701.917097][T21435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1701.927159][T21435] Call Trace: [ 1701.930434][T21435] [ 1701.933357][T21435] dump_stack_lvl+0x1e3/0x2d0 [ 1701.938036][T21435] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 1701.943664][T21435] ? print_circular_bug+0x12b/0x1a0 [ 1701.948853][T21435] check_noncircular+0x2f8/0x3b0 [ 1701.953782][T21435] ? add_chain_block+0x850/0x850 [ 1701.958709][T21435] ? lockdep_lock+0x11f/0x2a0 [ 1701.963376][T21435] validate_chain+0x1649/0x5930 [ 1701.968231][T21435] ? print_irqtrace_events+0x210/0x210 [ 1701.973678][T21435] ? reacquire_held_locks+0x660/0x660 [ 1701.979039][T21435] ? do_raw_spin_unlock+0x137/0x8b0 [ 1701.984240][T21435] ? finish_lock_switch+0x8f/0x100 [ 1701.989340][T21435] ? lockdep_hardirqs_on+0x94/0x130 [ 1701.994527][T21435] ? finish_lock_switch+0x8f/0x100 [ 1701.999626][T21435] ? finish_task_switch+0x134/0x630 [ 1702.005250][T21435] ? __switch_to_asm+0x34/0x60 [ 1702.010024][T21435] ? __schedule+0x12cc/0x45b0 [ 1702.014689][T21435] ? mark_lock+0x98/0x340 [ 1702.019012][T21435] __lock_acquire+0x1295/0x1ff0 [ 1702.023858][T21435] lock_acquire+0x1db/0x4f0 [ 1702.028351][T21435] ? blkdev_get_by_dev+0x14d/0xa50 [ 1702.033453][T21435] ? read_lock_is_recursive+0x10/0x10 [ 1702.038813][T21435] ? preempt_schedule_common+0xa6/0xd0 [ 1702.044262][T21435] ? __might_sleep+0xc0/0xc0 [ 1702.048852][T21435] ? do_raw_spin_lock+0x14a/0x370 [ 1702.053870][T21435] ? preempt_schedule_thunk+0x16/0x18 [ 1702.059234][T21435] __mutex_lock_common+0x1da/0x25a0 [ 1702.064423][T21435] ? blkdev_get_by_dev+0x14d/0xa50 [ 1702.069532][T21435] ? blkdev_get_by_dev+0x14d/0xa50 [ 1702.074635][T21435] ? mutex_lock_io_nested+0x60/0x60 [ 1702.079823][T21435] ? _atomic_dec_and_lock+0x96/0x130 [ 1702.085110][T21435] ? iput+0x371/0x8b0 [ 1702.089084][T21435] ? ilookup+0x1d6/0x210 [ 1702.093325][T21435] mutex_lock_nested+0x17/0x20 [ 1702.098079][T21435] blkdev_get_by_dev+0x14d/0xa50 [ 1702.103013][T21435] ? lockdep_hardirqs_on+0x94/0x130 [ 1702.108215][T21435] swsusp_check+0xb1/0x2c0 [ 1702.112640][T21435] ? swap_read_page+0x320/0x320 [ 1702.117488][T21435] ? __pm_pr_dbg+0xbc/0x1b0 [ 1702.121995][T21435] software_resume+0xc6/0x3c0 [ 1702.126678][T21435] resume_store+0xe3/0x130 [ 1702.131093][T21435] ? sysfs_kf_read+0x300/0x300 [ 1702.135851][T21435] kernfs_fop_write_iter+0x3a2/0x4f0 [ 1702.141136][T21435] vfs_write+0xacd/0xe50 [ 1702.145376][T21435] ? file_end_write+0x250/0x250 [ 1702.150225][T21435] ? __fget_files+0x413/0x480 [ 1702.154914][T21435] ? mutex_lock_nested+0x17/0x20 [ 1702.159860][T21435] ? __fdget_pos+0x2cb/0x380 [ 1702.164456][T21435] ? ksys_write+0x77/0x2c0 [ 1702.168859][T21435] ksys_write+0x1a2/0x2c0 [ 1702.173196][T21435] ? print_irqtrace_events+0x210/0x210 [ 1702.178667][T21435] ? __ia32_sys_read+0x80/0x80 [ 1702.183421][T21435] ? syscall_enter_from_user_mode+0x2e/0x240 [ 1702.189394][T21435] ? lockdep_hardirqs_on+0x94/0x130 [ 1702.194587][T21435] ? syscall_enter_from_user_mode+0x2e/0x240 [ 1702.200559][T21435] do_syscall_64+0x3b/0xb0 [ 1702.204970][T21435] ? clear_bhb_loop+0x15/0x70 [ 1702.209637][T21435] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1702.215523][T21435] RIP: 0033:0x7f9effd9cef9 [ 1702.219930][T21435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1702.239528][T21435] RSP: 002b:00007f9efe1f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1702.247936][T21435] RAX: ffffffffffffffda RBX: 00007f9efff55058 RCX: 00007f9effd9cef9 [ 1702.255901][T21435] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000007 [ 1702.263856][T21435] RBP: 00007f9effe0fb76 R08: 0000000000000000 R09: 0000000000000000 [ 1702.271816][T21435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1702.279777][T21435] R13: 0000000000000000 R14: 00007f9efff55058 R15: 00007ffc4f703448 [ 1702.287758][T21435] [ 1702.303694][ T5469] usb 3-1: can't set config #0, error -71 [ 1702.312769][ T150] block nbd0: Attempted send on invalid socket [ 1702.319057][ T150] print_req_error: 25 callbacks suppressed [ 1702.319067][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 1702.338573][T21435] PM: Image not found (code -5) [ 1702.408721][ T5469] usb 3-1: USB disconnect, device number 63