last executing test programs: 47.221669096s ago: executing program 3 (id=575): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00') pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x65) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008000, &(0x7f0000000240)={[{@debug}, {@orlov}, {@nomblk_io_submit}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x1, 0x5ba, &(0x7f0000001bc0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r5, &(0x7f0000000280), 0x208e24b) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0) write$P9_RXATTRCREATE(r6, &(0x7f0000000400)={0x7}, 0x2000) pipe2$9p(&(0x7f0000000040), 0x184080) 44.933493956s ago: executing program 3 (id=581): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000026001811", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000500)={[{@fat=@errors_continue}, {@utf8no}, {@fat=@usefree}, {@shortname_winnt}, {@utf8}, {@uni_xlateno}, {@shortname_mixed}, {@shortname_win95}, {@uni_xlateno}]}, 0x0, 0x274, &(0x7f0000000280)="$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") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) syz_emit_ethernet(0x161, &(0x7f00000002c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x12b, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x18, 0x17, "00540200a600828dadce42ce3d02d319e0cabb0171499f7642598cf1a1d40ca51300988c260ed2c4af88bdac1fc3925f5acb8e09cece04229969a0aee0537e1cc71b3009ab18767945d27594b37cd8abb99636a90bca4c54c3ce345b74a5344d2cdda99627bb20ea64b77b50c6dd7ac0ce2c39bcfef13daaef4db59a4483f2894602231daf4f31b82654278904b95919abbb34b324bdfc5ea17efe35444c3cc8f5cb729268ea2d5032fee7123364eac506f32a93621cf58e9f"}, {0x18, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "005ff9297d00001392000100"}]}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="74010000170003020000000000000000000000000000000000000000000000000000000000000000ac141400000000000000000000000000fc020000000000000000000000000000ac1e000100"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000000000fe8000000000000000000000000000bb00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000008001f"], 0x174}}, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2100) 43.853289255s ago: executing program 3 (id=583): r0 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x400}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r1, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r4, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/88, 0x58}], 0xd}}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r0], 0x40}}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r9, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r8, 0xae78, 0x0) write$sysctl(r6, &(0x7f0000000580)='1\x00', 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r11 = openat$nvram(0xffffff9c, &(0x7f0000000040), 0x82000, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r11, 0xc06464ce, &(0x7f00000000c0)={0x0, 0x4, 0x7, 0xfff, 0x3, [], [0x8, 0x5, 0x8, 0xb], [0x2, 0x5, 0xd76d, 0x4], [0x9, 0x6, 0x1, 0x5]}) 43.316437875s ago: executing program 3 (id=588): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) epoll_create(0x802) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r6, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r6, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0xb34e980b0128e0ed) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000200)={[], [{@context={'context', 0x3d, 'unconfined_u'}}, {@pcr={'pcr', 0x3d, 0x17}}, {@flag='async'}, {@fowner_lt={'fowner<', r7}}]}, 0x1, 0x4f7, &(0x7f0000000540)="$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") syz_mount_image$ext4(&(0x7f0000000700)='ext2\x00', &(0x7f00000000c0)='./bus\x00', 0x8002, &(0x7f0000000440)={[{@dax}, {@commit={'commit', 0x3d, 0x9da}}, {@dax}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@i_version}], [{@fsname={'fsname', 0x3d, 'kfree\x04Z\x01 \xeb\xfe\xebF,}\xd3s\xf3\xd0#\xf0`\x8e*iY\x0el\x8d}\a\x1dS\x1b\x84\x16d\"\x88\xf8\x14t\xa5V\x05\t$\xcc\xba\xd3v\x91R\xe5\b\xb7\xc0\xd7rt0\f\x9b\xd0e\xd0$\xfa\xe0\xec\xe3\xafD\xedd\xa6\x8aJ\xb3\xe9\b\xf8\xbd\xeb\x92y\x803\xb1iY\x9c\xb6c\xf1\x82\xee\xef\v\x06W\x95\xd6=e\xae\x87\xd0\xe7\xf9\x99\xe8W\x81#\x17\xac\xe5\xb4\xd5\x82?k\xde\x11+)\x11\xb4\x91&F|\xe1+\xf0*|@\x05\xe78\xcd\x11n\xf1\x1a\xd2\xd4L\xd0y\xd0\xab\xd7QU\x9c\xd2\n*\xf7I\xa0\xd1\x8e\x98\xb4\r\f\xa7\xbfU\xe8\x89\xbb\x9e\xf4\x9dn\x04\x1f%'}}, {@fowner_gt={'fowner>', r7}}]}, 0x7, 0x4bd, &(0x7f0000000c40)="$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") socket$nl_route(0x10, 0x3, 0x0) r8 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r9, r8, &(0x7f0000001e80)=0x6, 0x101) 20.943317544s ago: executing program 1 (id=631): socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="040e0501460c1f00c7f641737da8c5df97e629d54f8eef8f4b4c287248623393943b5ba71f4c252077dee7cda5f191af639f6bc9ccce6307303924e47e62deed5d1bb5921eea00000c30f73971da9388b9ec29139dedf9d61d113d31eeef342c9d"], 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x2b, &(0x7f0000000040)=0x200000000005) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xf5, 0x3, 0x5, "a938a9", 0x80, 0xb1}]}}}, 0x13) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9100, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x5) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_DEV_DESTROY(r1, 0x5502) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYBLOB="010000000000000000000b00000008000300b855954aff2c2dc08a911d3413d169466806a8c4085bb6cce64dd63a5c4f25f4290f60069147657551acd9fee7e0571a943e147bd5419fa1fe54bab5676a84f159e6639728bdf1b5b08ea46c5395deb5bbbb66cb5fab3b188c2e414f4d25ee0286071b6bcba79d1092a2c195229790d96b8f037cd45b937f4c2bbb6b4c9922995c4c207c47c1aac65ec363afd32e43eefd8fd4", @ANYBLOB="050008000000000018"], 0x44}}, 0x0) userfaultfd(0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x80000}, 0x20) open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) 19.947681375s ago: executing program 4 (id=624): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='block_plug\x00'}, 0x10) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/51, 0x33}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/91, 0x5b}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000240)='./file0\x00', 0x2010002, &(0x7f0000000340)=ANY=[@ANYBLOB="90e7141c6a0a1a3f39beb2257275a2cc8486af9da8f7892a24fb57191391b56a9804ed90", @ANYBLOB="4888b16b6fcf981d08c257b226cb38dc4545e6e334da522dfe5d8f4ab532d322517c4bcf762541016f528b8c25de8ad1c5ad46f3ee0ad5e35481d8f0e9cea7a826054d027624f9da6c7cf1d7a3ad26c70797a4f6b850722299e99f7a842f0224f498eee93f428fbb55f4c61922dda1d4e0ec50bfa0fa162e42b95af586d6ec65c9efcd4a7d32aab7665a7385302cf66d0d3ea4c92d94d9f0721be9b583c68dfb7147001b73b7fe7c48d9130d8822169b4cf3fd2746ca", @ANYRESDEC, @ANYRES16=r0, @ANYBLOB="6e01688238c53d043e1b7e27fbbe96a5599b454f194a73033ff003e806cd027bbb3f7be7d8499403f58d80be60c424020d412b02c7fd", @ANYRES64=r0], 0x1, 0x1c2, &(0x7f0000001680)="$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") r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FIBMAP(r2, 0x2282, &(0x7f00000002c0)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0xb9, @none}, 0xe) sendmsg$unix(r2, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) syz_open_dev$loop(0x0, 0xfffffffffffffffd, 0x400900) openat$cgroup_ro(r2, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x26e1, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$char_usb(r5, &(0x7f0000001840)=""/4090, 0xffa) write(r4, &(0x7f00000004c0)="2cb0310c12acafa9f44abb472ab43f5b2d7f156efc5c7bdb141abb08d1e753456e86302cda82a2e2846fa2171f5047dff17bc6b8b7753edb7e6c164117b5c98a50f5db8404edf3c2be9b4f9b0e6f4914e91b23a7592258ddf74ad4f407b37c3e34e9d58bd51108d68535a583477d0dded5", 0x71) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000180)=""/128, 0x80}], 0x1, 0xffffffff, 0x0) read$char_usb(r5, &(0x7f0000000240)=""/34, 0x43) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[], &(0x7f00000005c0)=""/212, 0x40, 0xea, 0x1, 0x1, 0x0, @void, @value}, 0x1d) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) close(r6) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x20000000000000d3, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, 0x0) 19.031522659s ago: executing program 1 (id=625): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth1_virt_wifi\x00', 0x0}) setsockopt$sock_int(r2, 0x1, 0x24, &(0x7f0000000000)=0x4f8d, 0x4) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$packet(r2, &(0x7f0000000380)="fb57975e267951", 0x7, 0x0, 0x0, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000044, &(0x7f00000018c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x400004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xe, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r8, r7, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@flat=@weak_handle={0x77682a85, 0x110b}, @fd={0x66642a85, 0x0, r9}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000340), &(0x7f0000000040)=@tcp}, 0x20) 18.201959706s ago: executing program 1 (id=627): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[], 0x15) r1 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES64, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000080)) ioctl$EVIOCGABS20(r5, 0x40044591, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000480)=0x102, 0x4) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r6, &(0x7f00000000c0)="3f033608260712002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0xe90c, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000100), 0x6) ioctl$sock_bt_hci(r8, 0x400448e7, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 17.125869605s ago: executing program 1 (id=628): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000005c0)={0x0, r1}) read$eventfd(r1, &(0x7f00000001c0), 0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xa) unshare(0x2c060000) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x4, 0x0, &(0x7f00000003c0)="386d1785", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ptrace(0x10, r3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) capset(&(0x7f0000000000), &(0x7f0000000280)={0x7fffffff}) ioctl$PTP_ENABLE_PPS(r7, 0x40043d04, 0x0) r8 = dup(r6) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xf8}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f00000015c0)="6766672e65f3ad66b9800000c00f326635010000000f30c3871af30f51d466b9e108000066b80010000066ba000000000f30baf80c66b854a50e8566efbafc0c66edbaf80c66b8660afe8a66efbafc0cb006ee66b9800000c00f32baa000b0afee0f3019660f9f365e00", 0x6a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r9, 0xae9a) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e0c000714"], 0xf) 16.282506972s ago: executing program 4 (id=632): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) openat(r2, &(0x7f000000c380)='./file0\x00', 0x20942, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$LINK_DETACH(0x22, 0x0, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000180)='jfs\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) write(r1, &(0x7f00000000c0)="842a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f00000011c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) 16.113470988s ago: executing program 1 (id=634): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x3d, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000080)='binder\x00', 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) setsockopt$sock_int(r6, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r6, &(0x7f0000001140), 0x700, 0x2, 0x0) 12.752294507s ago: executing program 1 (id=636): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000080)={[{@noacl}, {@abort}, {@nouid32}, {@noacl}, {@nomblk_io_submit}, {@noquota}, {@mblk_io_submit}]}, 0x10, 0x4f0, &(0x7f0000000c00)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_CONTROL(r1, 0x80045519, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="020023031000"]) eventfd(0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3400000068006f76000000000000000000000000000000000600030000000000140002000200000000e70e1a99ef"], 0x34}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5) socket$unix(0x1, 0x1, 0x0) mremap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000500)='./file0\x00', 0x18008, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES64], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") sync() getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14) openat$dir(0xffffffffffffff9c, &(0x7f0000000800)='./file3\x00', 0x4702, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) 12.752120217s ago: executing program 4 (id=637): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000280)='./file0\x00', 0x0) 12.052572432s ago: executing program 4 (id=639): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x0, 0xff, 0x2, 0x4, 0x7f}, 0x20) socket(0x10, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, 0x0, &(0x7f0000000580)=0x1e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0/../file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x0, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r9 = fanotify_init(0x222, 0x0) fanotify_mark(r9, 0x1, 0x4800003e, r8, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x200000, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040), 0xc) fanotify_init(0x0, 0x0) 8.389208889s ago: executing program 4 (id=646): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x6d}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x4000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{}, {0x2c, 0x0, 0x3}, {0x6}]}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3014490, &(0x7f0000000100)={[{@nombcache}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@grpjquota}, {}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000200)={@empty, @multicast1, 0xffffffffffffffff, "479d90cd9391f3486429d6e01b2655533ca37734c5ffad2948657c7c7ebd4af2", 0x5, 0x6, 0x6, 0x1}, 0x3c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@filename='\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount$9p_unix(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x100000, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) mount$9p_unix(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80097, 0x0) mount(&(0x7f0000000040)=@filename='\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x24901a, 0x0) pivot_root(&(0x7f0000000680)='./file0/../file0\x00', &(0x7f0000000640)='./file0/../file0\x00') umount2(&(0x7f0000000300)='./file0\x00', 0x0) unshare(0x4a060480) mount$cgroup(0x20000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{@noprefix}, {}]}) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) ioctl$FIBMAP(r3, 0x660c, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c01624854ea3dd5a00bd6df44035f5c3ad0850f19d633a0ffad0569794acfef7d554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde5c0f4142da00000000000000014905d408cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee3480efa732100"/151], 0x1, 0x266, &(0x7f0000000340)="$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") mount$nfs(&(0x7f0000000100)='.*.', 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) 8.388258359s ago: executing program 2 (id=655): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x0, 0xff, 0x2, 0x4, 0x7f}, 0x20) socket(0x10, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, 0x0, &(0x7f0000000580)=0x1e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0/../file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0x0, 0x0) fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x222, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x200000, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040), 0xc) fanotify_init(0x0, 0x0) 7.877091796s ago: executing program 2 (id=648): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00058639aa6f0bfbe4b28434ef119376977b00fffbcec7a5fc1f5a72d4fe24156a9f971990e4f372b7"], 0x0, 0x17d, &(0x7f0000001ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000b80)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffdc) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) creat(&(0x7f0000000100)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 6.978038358s ago: executing program 4 (id=649): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000280)='./file0\x00', 0x0) 6.813361754s ago: executing program 0 (id=650): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = open(0x0, 0x2, 0x0) openat(r2, &(0x7f000000c380)='./file0\x00', 0x20942, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$LINK_DETACH(0x22, 0x0, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000180)='jfs\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) write(r1, &(0x7f00000000c0)="842a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f00000011c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) 5.643419441s ago: executing program 0 (id=651): ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x3, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000030000000800"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f000056f000/0x2000)=nil, 0x2000, 0x1) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r7, 0x0) mremap(&(0x7f0000371000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0xff00) fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 4.391284656s ago: executing program 2 (id=653): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") r4 = creat(&(0x7f0000000380)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfd14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x5c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x1}]}]}]}, 0x5c}}, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r6, &(0x7f0000000980)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_emit_ethernet(0x62, &(0x7f0000001800)={@random="42a56f9b7305", @broadcast, @val={@val={0x88a8, 0x7, 0x1}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @icmp={{0xe, 0x4, 0x1, 0x1, 0x4c, 0x65, 0x0, 0x47, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x1c, 0xbc, 0x1, 0x6, [{@remote, 0x8}, {@multicast2, 0x80}, {@remote, 0x3}]}, @timestamp_prespec={0x44, 0x4, 0x97, 0x3, 0x8}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0xfff, 0x7, 0xffffffc0, 0x5, 0xe}}}}}, &(0x7f0000000100)={0x0, 0x3, [0xb73, 0xac8, 0x82d, 0x545]}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r9, 0xffffd000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000500), 0xc) sendfile(r0, r7, 0x0, 0x20000023896) r10 = socket$inet_udp(0x2, 0x2, 0x0) r11 = socket$inet6(0xa, 0x80000, 0x10001) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000140)={'ip6_vti0\x00'}) getsockopt$ARPT_SO_GET_INFO(r10, 0x0, 0x60, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r10, 0x8982, &(0x7f0000000100)={0x1, 'nicvf0\x00', {}, 0x81}) read$msr(r7, &(0x7f0000000180)=""/167, 0xa7) 3.742051196s ago: executing program 2 (id=654): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x0, 'dh\x00'}, 0x2c) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}}, 0x0) r6 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000140)={[{0x2b, 'cpuset'}]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x1f0, 0x194, 0x194, 0x1f0, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlabel={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7}, &(0x7f0000000340), &(0x7f0000000380)=r9}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) 3.740638276s ago: executing program 0 (id=663): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvfrom$inet_nvme(r1, &(0x7f0000000200)=""/108, 0x6c, 0x0, &(0x7f00000000c0)=@llc={0x1a, 0x30b, 0x0, 0x0, 0x0, 0x0, @random="71ef0c385bd8"}, 0x80) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) fspick(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0xef472a54935ff04f) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) lseek(r2, 0xfffffffffffffffa, 0x1) read$FUSE(r2, &(0x7f0000021500)={0x2020}, 0x2020) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@rr={0x7, 0x3, 0x8b}, @noop]}}}], 0x38}, 0x0) r4 = socket(0x10, 0x3, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008400, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x86, 0x680, &(0x7f0000000340)="$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") listxattr(&(0x7f0000000a00)='./file1\x00', 0x0, 0xfffffffffffffee6) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240), 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x211, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000100)) sendto$inet6(r1, &(0x7f0000002240)="bb6d26cc970aefa4e634b23d7b69dc5bd1e61e24734009843d99cf230376a1caadf22b5da382f2883e3e8c47a20de708010109072fb88b7400ad797047182b16f2ba0399bd0233f299bee4a1e24d27e313b0483d53381e9e8dcce3ddf9f6850b5b41244324e2c9888f4f9df5f10cbf4c248c27e4c00d3d4a6910deb9489d2cac8793c4a02d9acfea7bbc6778e58dff6b3a3c918eae960c2bb971c90617ec8855800a9a487f513d43ce107a8d6d56ae2156c68d47c9cb893516bc348b5fb03d582e0a6735e22202079200c5948f378a01687d882324a149d214539cb22b54207a9ee67e887449c323ab003e9d19fe5b", 0xef, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ec0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3}}]}}, 0x0, 0x52, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000ffffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f0000000300)={[{@barrier}, {@sysvgroups}, {@dioread_lock}, {@debug}, {@noauto_da_alloc}, {@resgid}, {@barrier}, {@nodelalloc}, {@nombcache}]}, 0x12, 0x4d4, &(0x7f0000001800)="$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") 2.765783986s ago: executing program 3 (id=589): r0 = socket$packet(0x11, 0x3, 0x300) unshare(0x2a020400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081074e81f782db4cb9040a1d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a800160020001d400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r4, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0x1, 0x0, "1ac14097b1cb0c926b36cce91131858f73a5a5eed84e9608b399620d17249186cc24ceb201b86e9d91b81646448494c59d0bb17530f92b1f2d50473f905840"}, 0x60) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/424, @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e00000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c000900000000000000000007010000440c0001022101"], 0x230}, 0x0) ioctl$sock_proto_private(r0, 0x89ee, &(0x7f00000001c0)="944b53671a56fe815931169b5777dbfba6a03d4f19cd02cc5b2514d75d0c1592d58c32772b6140b3d3b2166e67730916aa593d2e93eaeae3a34244cda6d12662b15a66cd4df35973c4d7bcdbf8bfede4d29e5af3065b2a6f3653222e6b57b8ba37bfa2be54eb47023c399728d9f251324ae5d875ab6d1f543ff21b808072d53769015ef96bc1655d3b0792328539ef9ac07b63eae55e4029edb09b64fd023daa29") r6 = socket$kcm(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) mbind(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) io_setup(0xffff, &(0x7f0000000140)=0x0) syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="04050400c80027"], 0x7) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8}]}]}, {0x4}, {0xc}, {0xfffffffffffffeba}}}]}]}, 0x98}}, 0x0) io_submit(r8, 0x7, &(0x7f0000000740)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x2, r6, &(0x7f0000000280)="1bdedcd110da9346c17d847d602e45dee630a0d4ad9b043715df65f05a26bb935938d4840cd19f23b866096fd49fecacce69253f6a77e5be25ea7512dba432cef041295ccd96344b02d73d0cd1d96b36e140aead51e21aaa5814f92031", 0x5d, 0x0, 0x0, 0x1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xb, 0x3, r1, &(0x7f0000000340)="63a3acd15a89738c2a80faa1912ffe5e1048f208645e090f1f5259013ba6d67463a80c0bd5e2e089bdc3a6f42af6", 0x2e, 0x9, 0x0, 0x2, r7}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x6, r2, &(0x7f00000003c0)="156f565faf6d454f8ba2cba9c1a228b320e91508bc305552bb1aa9286727e51a8498ffeee4fc56cfd5a54e2120438ba762d18afaf023fc20c341b4304df34051ccbb1761214e4397775d8f4590b41dfe68a01d7b0c57b76aa9be0f45a4754954dc488942a3a155d51a8b93eb5aed1763ae6fb41a9053234687b2909bcf87c197", 0x80, 0x200, 0x0, 0x2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x1ff, r7, &(0x7f0000000480)="03dd7408c9164eb9013807333f9cd29f32f788c51196f731707f1dd87ac2ceefbaf1a3ff452b4fe315d318e7ed81cb1a9d599901bedfc8936585a5627e28d439ddd5b82ddd571a090cc4c14c838d7c4bc4c331ce5866dddbfba6465ae18c0e414c1d8081b32543a362252cb8d20e0b3aee560f2c368037759dbbd5a63f2cf3b50d8d1dda2a68c1676f84bdf24c8e124786e8f0298270d799fb9d67f6ca2616f2f4985fca49a28002e1c34fbb6610ad86", 0xb0, 0x8, 0x0, 0x1, r7}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x2, r9, &(0x7f0000000580)="510189ce21d316aab3134873a4b0e29cb73a6d0042594a8eb8a3253ddc7b97bf6a7bbe2b1e91f3b225503617b31e4e05a67ac8bc136373c50cc937616eaa19a15a364c6e988883a78ffe5e4f21f6ba4c07185ba1f1ed3cdaefb7", 0x5a, 0x2, 0x0, 0x4, r7}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1a67, r3, &(0x7f0000000640)="c7b729e9935a2916770354a6c4993102463ee9c6866ba78c4d322684526cbe56e4c6b58b211d75764dcd9c0abf57dfd06319b4d481fc00b58b", 0x39, 0x7, 0x0, 0x1, r7}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x8, 0x101, r0, &(0x7f0000000880)="1c144d48be0f469f8c2f71341f17b6e79fc5d74788389eb185617d43198af01a7689dce6a55d9aeecaea048c77fb0fbafa198ec7fc397521e0d98d62379d7433bb5b47d6fec62d6637e5890b93b3306d64ba0cd8bb322951e7596970c9ff4e305364fab12f5f53f32caab5e66839c1209f92d60e2fd4048380b3ee789e1965ffb019d251949a947337f5ab98536785209f8a9d7951e695ecfe7207708546be7d21fe548b17b87c28c7dbe0df76cd8d52307dde3e685818c28c170145edf2", 0xbe, 0x3, 0x0, 0x3, r1}]) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r3) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030021000b12d25a80648c2594f90124fc60100c0b4002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f00000000c0)={0x400000, 0x54f}) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x19, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x401}}, './file0\x00'}) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) 2.641136057s ago: executing program 2 (id=657): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0, @ANYRES8=r0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x23, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000098971822c208000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x5412, &(0x7f00000000c0)=0x13) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000080)="01", 0x1) r9 = accept$alg(r8, 0x0, 0x0) r10 = dup(r9) sendmsg$alg(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="eb", 0x200000c1}], 0x1}, 0x0) read$alg(r10, &(0x7f00000021c0)=""/4096, 0x34000) sendmsg$alg(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1, &(0x7f00000004c0)=[@op={0x18}], 0x18}, 0x0) 2.447456355s ago: executing program 0 (id=658): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x0, 0xff, 0x2, 0x4, 0x7f}, 0x20) socket(0x10, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, 0x0, &(0x7f0000000580)=0x1e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0/../file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0x0, 0x0) fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x222, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x200000, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040), 0xc) fanotify_init(0x0, 0x0) 1.244076876s ago: executing program 2 (id=659): syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x7) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x10, 0xc8, 0xe8a2}}}, 0x8) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private2}}}, 0x30) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000280)='./file0\x00', 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x1011, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, "0bd517eccad1d901"}}}, 0x11) timerfd_create(0x9, 0x800) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_ifreq(r4, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xe, 0x10, 0xffffffffffffffff, 0x0) 1.157560844s ago: executing program 0 (id=660): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x40044591, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000480)=0x102, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r3, &(0x7f00000000c0)="3f033608260712002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0xe90c, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$nl_route(0x10, 0x3, 0x0) 484.553566ms ago: executing program 3 (id=661): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x1000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = gettid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f0000000240)={r4, r0, 0xffffffff}) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0/../file0/file0\x00', 0x0, 0x2879c03, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00', 0x0, 0x2885013, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1a10716, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@mblk_io_submit}, {@grpjquota_path}, {@resuid}, {@jqfmt_vfsv0}, {@usrjquota}, {@usrjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x100409e}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0xff, 0x46d, &(0x7f0000001bc0)="$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") read$FUSE(r5, &(0x7f0000004680)={0x2020}, 0x204f) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=ANY=[@ANYBLOB="200000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) r9 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000540)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc}, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) timerfd_create(0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x1c5c7e, 0x0) r11 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r11) 0s ago: executing program 0 (id=662): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000026001811", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000500)={[{@fat=@errors_continue}, {@utf8no}, {@fat=@usefree}, {@shortname_winnt}, {@utf8}, {@uni_xlateno}, {@shortname_mixed}, {@shortname_win95}, {@uni_xlateno}]}, 0x0, 0x274, &(0x7f0000000280)="$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") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) syz_emit_ethernet(0x161, &(0x7f00000002c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x12b, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x18, 0x17, "00540200a600828dadce42ce3d02d319e0cabb0171499f7642598cf1a1d40ca51300988c260ed2c4af88bdac1fc3925f5acb8e09cece04229969a0aee0537e1cc71b3009ab18767945d27594b37cd8abb99636a90bca4c54c3ce345b74a5344d2cdda99627bb20ea64b77b50c6dd7ac0ce2c39bcfef13daaef4db59a4483f2894602231daf4f31b82654278904b95919abbb34b324bdfc5ea17efe35444c3cc8f5cb729268ea2d5032fee7123364eac506f32a93621cf58e9f"}, {0x18, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "005ff9297d00001392000100"}]}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="74010000170003020000000000000000000000000000000000000000000000000000000000000000ac141400000000000000000000000000fc020000000000000000000000000000ac1e000100"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000000000fe8000000000000000000000000000bb00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000008001f"], 0x174}}, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2100) kernel console output (not intermixed with test programs): 58593][ T5915] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 285.867326][ T5915] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 285.874519][ T5915] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 285.912264][ T5929] loop3: detected capacity change from 0 to 16 [ 285.933996][ T5915] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 285.948452][ T5915] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 285.967782][ T5915] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 285.991925][ T5915] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 286.008214][ T5926] vivid-003: reconnect [ 286.019596][ T5929] erofs: (device loop3): mounted with root inode @ nid 36. [ 286.289953][ T5933] overlayfs: './file1' not a directory [ 286.864630][ T3648] Bluetooth: hci4: command 0x0406 tx timeout [ 287.239115][ T5946] xt_CT: You must specify a L4 protocol and not use inversions on it [ 287.269313][ T5948] overlayfs: missing 'lowerdir' [ 287.304488][ T5948] overlayfs: unrecognized mount option "lowerdir=" or missing value [ 287.325243][ T5948] overlayfs: missing 'lowerdir' [ 287.918703][ T3648] Bluetooth: hci3: command 0x0406 tx timeout [ 287.925153][ T3648] Bluetooth: hci5: command 0x0406 tx timeout [ 287.931228][ T3648] Bluetooth: hci2: command 0x0406 tx timeout [ 287.964995][ T3648] Bluetooth: hci0: command 0x0c1a tx timeout [ 288.046142][ T5946] netlink: 'syz.1.374': attribute type 27 has an invalid length. [ 288.060445][ T5954] loop3: detected capacity change from 0 to 128 [ 288.106183][ T3648] Bluetooth: hci3: unexpected event for opcode 0x0809 [ 288.133441][ T5946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.374'. [ 288.343281][ T3648] Bluetooth: hci3: unexpected event for opcode 0x0411 [ 288.343485][ T5939] xt_CT: No such helper "pptp" [ 288.460825][ T5960] netlink: 76 bytes leftover after parsing attributes in process `syz.3.377'. [ 288.958611][ T3648] Bluetooth: hci4: command 0x0406 tx timeout [ 288.966803][ T27] kauditd_printk_skb: 26 callbacks suppressed [ 288.966819][ T27] audit: type=1326 audit(1727901990.609:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5941 comm="syz.4.376" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d11d7dff9 code=0x0 [ 289.373724][ T3648] Bluetooth: hci3: unexpected event for opcode 0x080f [ 289.451283][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.460565][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.673520][ T5971] netlink: 'syz.0.380': attribute type 11 has an invalid length. [ 289.731727][ T5972] netlink: 'syz.0.380': attribute type 11 has an invalid length. [ 289.760455][ T5946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.794246][ T5946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.965082][ T3648] Bluetooth: hci2: command 0x0406 tx timeout [ 290.055073][ T3648] Bluetooth: hci0: command 0x0c1a tx timeout [ 290.062111][ T5946] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.071644][ T5946] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.083616][ T5946] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.092565][ T5946] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.295225][ T3940] bond0: (slave bond_slave_0): interface is now down [ 290.413994][ T3940] bond0: (slave bond_slave_1): interface is now down [ 290.739904][ T1037] block nbd4: Attempted send on invalid socket [ 290.746171][ T1037] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 290.766633][ T52] block nbd4: Attempted send on invalid socket [ 290.772817][ T52] I/O error, dev nbd4, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 290.782486][ T5978] Mount JFS Failure: -5 [ 290.788689][ T3836] bond0: (slave bond_slave_0): interface is now down [ 290.788742][ T3836] bond0: (slave bond_slave_1): interface is now down [ 290.790950][ T3836] bond0: now running without any active interface! [ 290.824904][ T5978] jfs_mount failed w/return code = -5 [ 290.888692][ T5981] overlayfs: failed to resolve './file0': -2 [ 291.932270][ T5993] loop4: detected capacity change from 0 to 128 [ 292.049044][ T3648] Bluetooth: hci2: command 0x0406 tx timeout [ 292.170130][ T5998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.386'. [ 292.966333][ T6001] netlink: 76 bytes leftover after parsing attributes in process `syz.4.388'. [ 293.326816][ T6006] overlayfs: failed to resolve './file0': -2 [ 293.465178][ T3648] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 293.473955][ T3648] Bluetooth: hci3: Injecting HCI hardware error event [ 293.483059][ T3648] Bluetooth: hci3: hardware error 0x00 [ 293.793324][ T3649] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 293.803543][ T3649] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 293.812754][ T3649] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 293.825652][ T3649] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 293.834524][ T3649] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 293.842185][ T3649] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 294.173673][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.213552][ T6011] chnl_net:caif_netlink_parms(): no params data found [ 294.378663][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.696349][ T6026] loop1: detected capacity change from 0 to 16 [ 294.707453][ T6026] erofs: (device loop1): mounted with root inode @ nid 36. [ 294.722064][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.760056][ T6011] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.767908][ T3643] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 294.971554][ T6011] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.981119][ T3643] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 294.989997][ T3643] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 295.001816][ T3643] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 295.020630][ T6031] overlayfs: './file1' not a directory [ 295.032963][ T3643] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 295.040593][ T3643] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 295.065291][ T27] audit: type=1326 audit(1727901996.679:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.0.395" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f556c37dff9 code=0x0 [ 295.195982][ T6011] device bridge_slave_0 entered promiscuous mode [ 295.237929][ T6030] netlink: 703 bytes leftover after parsing attributes in process `syz.0.395'. [ 295.266473][ T6011] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.291885][ T6011] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.322469][ T6011] device bridge_slave_1 entered promiscuous mode [ 295.715768][ T3648] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 295.886015][ T3648] Bluetooth: hci1: command tx timeout [ 296.316445][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.455787][ T6011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.512623][ T6011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.669659][ T6011] team0: Port device team_slave_0 added [ 296.702622][ T6011] team0: Port device team_slave_1 added [ 296.829736][ T6011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.851430][ T6052] netlink: 76 bytes leftover after parsing attributes in process `syz.2.400'. [ 296.858021][ T6011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.922759][ T6011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.010751][ T6051] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 297.040430][ T6011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.058030][ T6011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.084710][ T3643] Bluetooth: hci4: command tx timeout [ 297.208384][ T6011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.411347][ T1037] block nbd1: Attempted send on invalid socket [ 297.418398][ T1037] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 297.475123][ T1037] block nbd1: Attempted send on invalid socket [ 297.481570][ T1037] I/O error, dev nbd1, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 297.507568][ T6059] Mount JFS Failure: -5 [ 297.511822][ T6059] jfs_mount failed w/return code = -5 [ 297.964730][ T3643] Bluetooth: hci1: command tx timeout [ 298.021708][ T6011] device hsr_slave_0 entered promiscuous mode [ 298.038967][ T6011] device hsr_slave_1 entered promiscuous mode [ 298.094823][ T6011] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.102424][ T6011] Cannot create hsr debugfs directory [ 298.123282][ T6067] loop1: detected capacity change from 0 to 16 [ 298.197408][ T6067] erofs: (device loop1): mounted with root inode @ nid 36. [ 298.720108][ T6028] chnl_net:caif_netlink_parms(): no params data found [ 299.083075][ T6011] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.346016][ T3643] Bluetooth: hci4: command tx timeout [ 299.967703][ T6011] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.044727][ T3643] Bluetooth: hci1: command tx timeout [ 300.108754][ T6091] qnx4: no qnx4 filesystem (no root dir). [ 300.831726][ T6100] overlayfs: failed to resolve './file0': -2 [ 300.941458][ T6011] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.221615][ T6011] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.393290][ T6028] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.404262][ T6028] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.404661][ T3643] Bluetooth: hci4: command tx timeout [ 301.445192][ T6028] device bridge_slave_0 entered promiscuous mode [ 301.762487][ T6028] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.776341][ T6028] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.805829][ T6028] device bridge_slave_1 entered promiscuous mode [ 301.958510][ T6116] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 301.987342][ T6028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.026055][ T6028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.095642][ T6115] netlink: 16 bytes leftover after parsing attributes in process `syz.1.409'. [ 302.124871][ T3643] Bluetooth: hci1: command tx timeout [ 302.171177][ T3643] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 302.179242][ T11] device hsr_slave_0 left promiscuous mode [ 302.185816][ T11] device hsr_slave_1 left promiscuous mode [ 302.192410][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.200499][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.219857][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.227631][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.250652][ T11] device bridge_slave_1 left promiscuous mode [ 302.257977][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.369498][ T11] device bridge_slave_0 left promiscuous mode [ 302.384940][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.431893][ T11] device veth1_macvtap left promiscuous mode [ 302.438315][ T11] device veth0_macvtap left promiscuous mode [ 302.444426][ T11] device veth1_vlan left promiscuous mode [ 302.450326][ T11] device veth0_vlan left promiscuous mode [ 303.484755][ T3643] Bluetooth: hci4: command tx timeout [ 303.543700][ T11] team0 (unregistering): Port device team_slave_1 removed [ 303.672797][ T11] team0 (unregistering): Port device team_slave_0 removed [ 303.841521][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.993866][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.383063][ T6161] netlink: 76 bytes leftover after parsing attributes in process `syz.0.416'. [ 305.647847][ T11] bond0 (unregistering): Released all slaves [ 305.874094][ T6011] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 305.933207][ T6028] team0: Port device team_slave_0 added [ 305.950399][ T6011] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 305.970704][ T6164] loop1: detected capacity change from 0 to 16 [ 305.981870][ T6011] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 305.992933][ T6164] erofs: (device loop1): mounted with root inode @ nid 36. [ 306.000971][ T6028] team0: Port device team_slave_1 added [ 306.231151][ T6167] overlayfs: './file1' not a directory [ 306.235087][ T6011] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 306.255982][ T6028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.279292][ T6028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.307632][ T6028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.350732][ T6028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.361300][ T6028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.402568][ T6028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.420087][ T27] audit: type=1326 audit(1727902008.069:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6163 comm="syz.2.417" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa12237dff9 code=0x0 [ 306.491840][ T6169] netlink: 703 bytes leftover after parsing attributes in process `syz.2.417'. [ 306.683718][ T6028] device hsr_slave_0 entered promiscuous mode [ 306.701675][ T6028] device hsr_slave_1 entered promiscuous mode [ 306.844371][ T6011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.999674][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 307.026224][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 307.061615][ T6011] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.117595][ T6176] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 307.156192][ T3940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 307.171674][ T3940] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 307.193777][ T3940] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.201031][ T3940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.289662][ T3940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 307.306086][ T3940] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 307.321451][ T3940] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.328693][ T3940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.402489][ T3940] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 307.413683][ T3940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 307.422690][ T3940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 307.515705][ T27] audit: type=1326 audit(1727902009.129:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6184 comm="syz.1.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0861d7dff9 code=0x7ffc0000 [ 307.590968][ T3940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 307.850619][ T3940] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 307.881975][ T27] audit: type=1326 audit(1727902009.129:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6184 comm="syz.1.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0861d7dff9 code=0x7ffc0000 [ 307.961253][ T6183] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 308.062804][ T27] audit: type=1326 audit(1727902009.129:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6184 comm="syz.1.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0861d7cadf code=0x7ffc0000 [ 308.092849][ T27] audit: type=1326 audit(1727902009.129:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6184 comm="syz.1.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0861d7dff9 code=0x7ffc0000 [ 308.150748][ T6185] 9pnet_fd: Insufficient options for proto=fd [ 308.163297][ T27] audit: type=1326 audit(1727902009.129:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6184 comm="syz.1.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0861d7dff9 code=0x7ffc0000 [ 308.172822][ T6011] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 308.197765][ T27] audit: type=1326 audit(1727902009.769:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6184 comm="syz.1.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f0861d7dff9 code=0x7ffc0000 [ 308.260373][ T6011] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 308.275007][ T27] audit: type=1326 audit(1727902009.779:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6184 comm="syz.1.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0861d7dff9 code=0x7ffc0000 [ 308.365477][ T3940] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 308.385196][ T3940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 308.470329][ T27] audit: type=1326 audit(1727902009.779:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6184 comm="syz.1.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0861d7dff9 code=0x7ffc0000 [ 308.475623][ T3940] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 308.495774][ T27] audit: type=1326 audit(1727902009.799:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6184 comm="syz.1.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f0861d7dff9 code=0x7ffc0000 [ 308.609069][ T3940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 308.638631][ T3940] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 308.660865][ T3940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 308.693513][ T3940] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 308.720253][ T3940] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 309.309673][ T6217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.427'. [ 309.327587][ T3940] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 309.353558][ T3940] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 309.369158][ T6217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.427'. [ 309.394296][ T6011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.484978][ T3643] Bluetooth: hci2: command 0x0406 tx timeout [ 309.583367][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 309.729265][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 311.833385][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 311.848759][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 311.864763][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 311.873061][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 311.904845][ T6011] device veth0_vlan entered promiscuous mode [ 311.963537][ T6028] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 312.021659][ T6229] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 312.036099][ T6011] device veth1_vlan entered promiscuous mode [ 312.073044][ T6028] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 312.103008][ T6028] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 312.143564][ T6028] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 312.279680][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 312.306788][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 312.375926][ T6011] device veth0_macvtap entered promiscuous mode [ 312.451115][ T6236] netlink: 76 bytes leftover after parsing attributes in process `syz.2.430'. [ 312.505336][ T6011] device veth1_macvtap entered promiscuous mode [ 312.810086][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.830817][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.842702][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.964073][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.014720][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.034684][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.066148][ T6011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.087398][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 313.105447][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 313.116319][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 313.135689][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 313.184284][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.232055][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.262434][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.293505][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.312791][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.416328][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.458546][ T6252] overlayfs: failed to resolve './file0': -2 [ 313.463912][ T6011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.531494][ T6028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.574627][ T6028] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.657653][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 313.667766][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 313.676906][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 313.684975][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 313.702105][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 313.718881][ T6257] overlayfs: './file0' not a directory [ 313.727015][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 313.760625][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.767802][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.814515][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 313.839291][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 313.864082][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.871287][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.934907][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 313.962488][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 313.994419][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 314.022722][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 314.042017][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 314.060902][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 314.082623][ T6011] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.113167][ T6011] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.146521][ T6011] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.164904][ T6011] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.189770][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 314.203124][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 314.307200][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 314.316438][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 314.326882][ T6261] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 314.362125][ T6028] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 314.406844][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 314.432799][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 314.465633][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 315.067266][ T3940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.504593][ T3940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.585293][ T3717] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 315.655128][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.663391][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.724328][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 315.777780][ T6286] bridge0: port 3(team0) entered blocking state [ 315.801739][ T6286] bridge0: port 3(team0) entered disabled state [ 315.839007][ T6286] device team0 entered promiscuous mode [ 315.883566][ T6286] device team_slave_0 entered promiscuous mode [ 315.942801][ T6286] device team_slave_1 entered promiscuous mode [ 315.968145][ T6286] bridge0: port 3(team0) entered blocking state [ 315.974889][ T6286] bridge0: port 3(team0) entered forwarding state [ 316.650731][ T6028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.710460][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 316.736036][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 316.767028][ T6298] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 317.021416][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.049149][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.002738][ T6342] loop1: detected capacity change from 0 to 16 [ 318.052222][ T6342] erofs: (device loop1): mounted with root inode @ nid 36. [ 318.221450][ T3879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 318.271305][ T3879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 318.282922][ T6343] overlayfs: './file1' not a directory [ 318.305490][ T6343] overlayfs: failed to resolve './file1': -2 [ 318.352473][ T3879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 318.370164][ T3879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 318.402522][ T3879] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 318.427956][ T3879] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 318.561373][ T6028] device veth0_vlan entered promiscuous mode [ 318.603557][ T6028] device veth1_vlan entered promiscuous mode [ 318.815528][ T3879] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 318.832039][ T3879] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 318.950189][ T3879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 319.023381][ T3879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 319.038517][ T6028] device veth0_macvtap entered promiscuous mode [ 319.079459][ T6028] device veth1_macvtap entered promiscuous mode [ 319.116999][ T3643] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 319.118345][ T6357] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 319.221406][ T6028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.314664][ T6028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.345075][ T6028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.364335][ T6028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.384784][ T6028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.387151][ T6365] 9pnet_fd: Insufficient options for proto=fd [ 319.418184][ T6028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.441760][ T6028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.464676][ T6028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.478178][ T6373] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 319.509898][ T6028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.529905][ T3879] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 319.542781][ T3879] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 319.817876][ T3879] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 319.870438][ T3879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 319.888888][ T6028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.074535][ T6028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.112171][ T6028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.124243][ T6028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.140833][ T6028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.307646][ T6028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.436126][ T6028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.538806][ T6028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.647400][ T6028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.766072][ T6028] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.791702][ T6028] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.811600][ T6028] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.824229][ T6028] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.852485][ T3879] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 320.862406][ T3879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 320.871584][ T6389] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 321.102715][ T6394] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 321.149424][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.182167][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.244145][ T3879] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 321.266288][ T3836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.283078][ T6399] netlink: 76 bytes leftover after parsing attributes in process `syz.2.454'. [ 321.364542][ T3836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.445030][ T3879] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 321.458174][ T6406] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 321.568242][ T1037] block nbd2: Attempted send on invalid socket [ 321.579393][ T1037] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 321.616172][ T1037] block nbd2: Attempted send on invalid socket [ 321.624185][ T1037] I/O error, dev nbd2, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 321.635526][ T4239] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 321.658812][ T6412] Mount JFS Failure: -5 [ 321.701958][ T6412] jfs_mount failed w/return code = -5 [ 321.874809][ T4239] usb 1-1: device descriptor read/64, error -71 [ 322.154696][ T4239] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 322.189729][ T6420] loop3: detected capacity change from 0 to 16 [ 322.254972][ T6420] erofs: (device loop3): mounted with root inode @ nid 36. [ 322.476751][ T4239] usb 1-1: device descriptor read/64, error -71 [ 322.776254][ T4239] usb usb1-port1: attempt power cycle [ 323.328603][ T6434] trusted_key: encrypted_key: key user:syz not found [ 323.394641][ T4239] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 323.516004][ T4239] usb 1-1: device descriptor read/8, error -71 [ 323.617956][ T6443] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.627389][ T6443] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.636412][ T6443] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.645155][ T6443] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.661120][ T6445] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 323.752704][ T6450] loop4: detected capacity change from 0 to 2048 [ 323.786586][ T6450] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 323.794267][ T6450] UDF-fs: Scanning with blocksize 512 failed [ 323.816688][ T4239] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 323.856874][ T6450] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 129: 0x7d != 0x7e [ 323.888221][ T6455] loop3: detected capacity change from 0 to 128 [ 323.915389][ T6450] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 323.924945][ T4239] usb 1-1: device descriptor read/8, error -71 [ 324.127843][ T6455] netlink: 76 bytes leftover after parsing attributes in process `syz.3.466'. [ 324.185898][ T4239] usb usb1-port1: unable to enumerate USB device [ 326.092111][ T6458] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.139472][ T6458] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.392876][ T6458] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.416020][ T6458] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.658849][ T6458] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.704874][ T6458] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.710022][ T6479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.474'. [ 326.755644][ T6466] netlink: 16 bytes leftover after parsing attributes in process `syz.1.471'. [ 326.861645][ T6458] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.885029][ T6458] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.944849][ T3683] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 326.966095][ T6484] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 326.995813][ T3648] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 327.042702][ T3648] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 327.050959][ T3648] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 327.069467][ T3648] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 327.103208][ T3648] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 327.110742][ T6488] loop1: detected capacity change from 0 to 512 [ 327.111027][ T3648] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 327.286010][ T6488] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 327.302162][ T6488] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038 (0x7fffffff) [ 327.342634][ T3683] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.401973][ T3683] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.604664][ T3683] usb 1-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 327.613747][ T3683] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.013086][ T3683] usb 1-1: config 0 descriptor?? [ 328.060981][ T6500] netlink: 76 bytes leftover after parsing attributes in process `syz.2.477'. [ 328.698509][ T6509] binder: BINDER_SET_CONTEXT_MGR already set [ 328.704746][ T6509] binder: 6476:6509 ioctl 4018620d 200001c0 returned -16 [ 329.176341][ T3643] Bluetooth: hci1: command tx timeout [ 329.289555][ T6518] netlink: 20 bytes leftover after parsing attributes in process `syz.4.479'. [ 329.304092][ T6516] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 329.639656][ T4536] EXT4-fs (loop1): unmounting filesystem. [ 329.663220][ T6527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.480'. [ 329.783434][ T6485] chnl_net:caif_netlink_parms(): no params data found [ 329.965803][ T3683] usbhid 1-1:0.0: can't add hid device: -71 [ 329.972199][ T3683] usbhid: probe of 1-1:0.0 failed with error -71 [ 330.029202][ T3683] usb 1-1: USB disconnect, device number 7 [ 330.161643][ T1037] block nbd0: Attempted send on invalid socket [ 330.168689][ T1037] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 330.184961][ T1037] block nbd0: Attempted send on invalid socket [ 330.194610][ T1037] I/O error, dev nbd0, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 330.218912][ T6544] Mount JFS Failure: -5 [ 330.226662][ T6544] jfs_mount failed w/return code = -5 [ 330.576738][ T6541] loop4: detected capacity change from 0 to 2048 [ 330.684858][ T6541] loop4: p1 < > p4 [ 330.701738][ T6541] loop4: p4 size 8388608 extends beyond EOD, truncated [ 330.868633][ T3092] loop4: p1 < > p4 [ 330.887855][ T6485] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.905464][ T3092] loop4: p4 size 8388608 extends beyond EOD, truncated [ 330.913788][ T6485] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.926015][ T6485] device bridge_slave_0 entered promiscuous mode [ 331.022010][ T6485] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.045672][ T6485] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.069809][ T6485] device bridge_slave_1 entered promiscuous mode [ 331.190349][ T6552] device ipvlan2 entered promiscuous mode [ 331.244796][ T3648] Bluetooth: hci1: command tx timeout [ 331.458978][ T4779] udevd[4779]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 331.863519][ T4773] udevd[4773]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 333.161417][ T6561] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 333.353905][ T6570] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 333.367200][ T3648] Bluetooth: hci1: command tx timeout [ 333.450202][ T6485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.489522][ T6485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.561911][ T6576] netlink: 'syz.0.490': attribute type 1 has an invalid length. [ 333.704409][ T6485] team0: Port device team_slave_0 added [ 333.730288][ T6485] team0: Port device team_slave_1 added [ 333.792658][ T6485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.799831][ T6485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.857866][ T6485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.872012][ T6581] netlink: 76 bytes leftover after parsing attributes in process `syz.2.489'. [ 333.943991][ T6485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.967894][ T6485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.042661][ T6485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.253805][ T6485] device hsr_slave_0 entered promiscuous mode [ 334.263220][ T6485] device hsr_slave_1 entered promiscuous mode [ 334.279194][ T6485] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.302164][ T6485] Cannot create hsr debugfs directory [ 334.323075][ T6458] device hsr_slave_0 left promiscuous mode [ 334.330510][ T6458] device hsr_slave_1 left promiscuous mode [ 334.345316][ T6458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.352752][ T6458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.387152][ T6458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.399784][ T6458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.430806][ T6458] device bridge_slave_1 left promiscuous mode [ 334.440677][ T6458] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.458239][ T6458] device bridge_slave_0 left promiscuous mode [ 334.464620][ T6458] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.522169][ T6458] device veth1_macvtap left promiscuous mode [ 334.642602][ T6458] device veth0_macvtap left promiscuous mode [ 334.654085][ T6458] device veth1_vlan left promiscuous mode [ 334.660059][ T6458] device veth0_vlan left promiscuous mode [ 334.784603][ T6599] netlink: 76 bytes leftover after parsing attributes in process `syz.0.500'. [ 335.404906][ T3648] Bluetooth: hci1: command tx timeout [ 336.918523][ T1037] block nbd2: Attempted send on invalid socket [ 336.925648][ T1037] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 336.949170][ T1037] block nbd2: Attempted send on invalid socket [ 336.956739][ T1037] I/O error, dev nbd2, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 336.967995][ T6615] Mount JFS Failure: -5 [ 336.972279][ T6615] jfs_mount failed w/return code = -5 [ 337.652216][ T6458] team0 (unregistering): Port device team_slave_1 removed [ 337.677150][ T6620] netlink: 64 bytes leftover after parsing attributes in process `syz.2.495'. [ 338.195401][ T6458] team0 (unregistering): Port device team_slave_0 removed [ 338.380352][ T6458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.442380][ T6458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.146014][ T6458] bond0 (unregistering): Released all slaves [ 339.255123][ T6612] netlink: 16 bytes leftover after parsing attributes in process `syz.0.492'. [ 340.572717][ T6485] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 340.607245][ T6485] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 340.627949][ T6485] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 340.644145][ T6485] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 341.462809][ T6485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.681633][ T6485] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.700241][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 341.719334][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 341.760844][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 341.786891][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 341.805246][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.812382][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.844990][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 341.861731][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 341.885319][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.892450][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.925073][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 341.965643][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 341.988044][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 342.005608][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 342.036294][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 342.067672][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 342.090978][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 342.121648][ T6485] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 342.144424][ T6485] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 342.173382][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 342.191271][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 342.207949][ T3649] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 342.216167][ T48] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 342.231004][ T3649] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 342.240523][ T3649] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 342.250808][ T3649] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 342.260335][ T3649] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 342.265460][ T48] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 342.277320][ T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 342.285265][ T3649] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 342.303677][ T3649] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 342.314246][ T3649] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 342.322086][ T3649] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 342.343522][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 342.366936][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 342.385755][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 342.441237][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 342.606498][ T3649] Bluetooth: hci0: command 0x0c1a tx timeout [ 342.927574][ T3748] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 342.945403][ T3748] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 342.990505][ T6485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.101161][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 343.143609][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 343.183838][ T6683] chnl_net:caif_netlink_parms(): no params data found [ 343.210657][ T6685] chnl_net:caif_netlink_parms(): no params data found [ 343.281308][ T6717] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 343.303628][ T6717] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 343.336747][ T6717] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 343.488295][ T6485] device veth0_vlan entered promiscuous mode [ 343.557416][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 343.586497][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 343.615913][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 343.655572][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 343.681150][ T6485] device veth1_vlan entered promiscuous mode [ 343.807385][ T6683] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.830821][ T6683] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.850310][ T6683] device bridge_slave_0 entered promiscuous mode [ 343.862405][ T6458] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 343.875053][ T6458] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 343.893399][ T6458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 343.921064][ T6458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 343.955081][ T6485] device veth0_macvtap entered promiscuous mode [ 343.975136][ T6685] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.986798][ T6685] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.010898][ T6685] device bridge_slave_0 entered promiscuous mode [ 344.050698][ T6683] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.062331][ T6683] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.087183][ T6683] device bridge_slave_1 entered promiscuous mode [ 344.108355][ T6458] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 344.127115][ T6485] device veth1_macvtap entered promiscuous mode [ 344.141865][ T6685] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.227579][ T6685] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.247386][ T6685] device bridge_slave_1 entered promiscuous mode [ 344.325947][ T6685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.365024][ T3649] Bluetooth: hci6: command tx timeout [ 344.371375][ T3649] Bluetooth: hci5: command tx timeout [ 344.752089][ T6683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.033401][ T6683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.113889][ T6685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.242110][ T6485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.263097][ T6485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.291225][ T6485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.306582][ T6485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.319691][ T6485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.340211][ T6485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.359842][ T6485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.373262][ T6485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.391369][ T6485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.431860][ T6685] team0: Port device team_slave_0 added [ 345.442912][ T6685] team0: Port device team_slave_1 added [ 345.462017][ T6759] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 345.474270][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 345.492422][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 345.507470][ T6485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.528222][ T6485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.548924][ T6485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.569430][ T6485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.579515][ T6485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.600279][ T6485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.620539][ T6485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.641299][ T6485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.663359][ T6485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.704455][ T6683] team0: Port device team_slave_0 added [ 345.745258][ T6458] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 345.760798][ T6458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 345.785906][ T6485] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.796825][ T6485] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.806252][ T6485] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.819266][ T6485] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.835146][ T6683] team0: Port device team_slave_1 added [ 345.841938][ T6685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.853704][ T6685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.881376][ T6685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.896317][ T6685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.903460][ T6685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.932188][ T6685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.069725][ T6683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.080109][ T6683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.113109][ T6683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.153163][ T6685] device hsr_slave_0 entered promiscuous mode [ 346.173097][ T6685] device hsr_slave_1 entered promiscuous mode [ 346.184070][ T6685] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.197100][ T6685] Cannot create hsr debugfs directory [ 346.211778][ T6683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.220021][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 346.220033][ T27] audit: type=1326 audit(1727902047.879:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.0.513" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f556c37dff9 code=0x0 [ 346.220836][ T6683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.276154][ T6683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.355379][ T6458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.373487][ T6458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.406329][ T6683] device hsr_slave_0 entered promiscuous mode [ 346.417383][ T6683] device hsr_slave_1 entered promiscuous mode [ 346.424294][ T6683] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.432339][ T6683] Cannot create hsr debugfs directory [ 346.445145][ T3648] Bluetooth: hci5: command tx timeout [ 346.450623][ T3648] Bluetooth: hci6: command tx timeout [ 346.455789][ T6458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.475446][ T6458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.483201][ T6773] sp0: Synchronizing with TNC [ 346.493609][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 346.591264][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 346.708386][ T6776] loop3: detected capacity change from 0 to 16 [ 346.738709][ T6776] erofs: (device loop3): mounted with root inode @ nid 36. [ 348.357387][ T6786] netlink: 36 bytes leftover after parsing attributes in process `syz.3.515'. [ 348.384516][ T6786] dns_resolver: Unsupported content type (98) [ 348.648325][ T3648] Bluetooth: hci6: command tx timeout [ 348.648448][ T3649] Bluetooth: hci5: command tx timeout [ 349.913800][ T6683] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.996842][ T6795] netlink: 703 bytes leftover after parsing attributes in process `syz.3.516'. [ 350.017025][ T27] audit: type=1326 audit(1727902051.539:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.3.516" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b5397dff9 code=0x0 [ 350.484616][ T6683] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.685015][ T3649] Bluetooth: hci5: command tx timeout [ 350.690473][ T3649] Bluetooth: hci6: command tx timeout [ 350.715229][ T6683] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.783059][ T6803] netlink: 'syz.3.518': attribute type 3 has an invalid length. [ 351.274224][ T6683] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.460401][ T6808] loop3: detected capacity change from 0 to 16 [ 351.496202][ T6808] erofs: (device loop3): mounted with root inode @ nid 36. [ 352.003256][ T6813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.520'. [ 352.291775][ T6683] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 352.370141][ T6683] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 352.408265][ T6683] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 352.448371][ T6683] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 352.520119][ T6685] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 353.277755][ T6819] loop3: detected capacity change from 0 to 1024 [ 353.370826][ T6685] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 353.392991][ T6685] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 353.463025][ T6685] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 353.697896][ T1037] block nbd0: Attempted send on invalid socket [ 353.706748][ T6683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.706901][ T1037] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 353.752612][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 353.779945][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 353.782261][ T52] block nbd0: Attempted send on invalid socket [ 353.797190][ T6683] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.803804][ T52] I/O error, dev nbd0, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 353.813306][ T6830] Mount JFS Failure: -5 [ 353.819950][ T6830] jfs_mount failed w/return code = -5 [ 353.860050][ T6831] netlink: 60 bytes leftover after parsing attributes in process `syz.3.525'. [ 353.930265][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 354.128605][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 354.137492][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.144650][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.191227][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 354.206859][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 354.218508][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 354.252491][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.259675][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.451162][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 354.464873][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 354.478150][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 354.489412][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 355.139679][ T6685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.240482][ T6685] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.318845][ T6685] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 355.339782][ T6685] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 355.904517][ T6683] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 355.919067][ T6683] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 355.931291][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 355.939892][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 355.948173][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 355.956384][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 355.975326][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 356.005286][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.012419][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.252896][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 356.964387][ T6855] loop3: detected capacity change from 0 to 16 [ 357.248917][ T6855] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 26222) [ 357.782806][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 357.792320][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.799472][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.808244][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 357.817187][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 357.862275][ T6634] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 357.873644][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 357.897950][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 357.948682][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 357.982079][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 358.023235][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 358.063543][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 358.125668][ T3643] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 358.137687][ T3643] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 358.150018][ T3643] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 358.160207][ T3643] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 358.168458][ T3643] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 358.169234][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 358.193732][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 358.193883][ T3648] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 358.203378][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 358.218476][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 358.234812][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 358.243417][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 358.269752][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 358.287096][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 358.302574][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 358.330929][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 358.359726][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 358.393847][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 358.439217][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 358.459810][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 359.233640][ T6685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.305460][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 359.322592][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 359.370593][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 359.396493][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 359.416128][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 359.443579][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 359.471854][ T6685] device veth0_vlan entered promiscuous mode [ 359.523183][ T6685] device veth1_vlan entered promiscuous mode [ 359.549513][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 359.579815][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 359.605245][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 359.640949][ T6683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.776409][ T6685] device veth0_macvtap entered promiscuous mode [ 359.783765][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 359.802421][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 359.855508][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 359.913795][ T6685] device veth1_macvtap entered promiscuous mode [ 359.931672][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 359.946117][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 360.003997][ T6685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.036946][ T6685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.075022][ T6685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.107077][ T6685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.132042][ T6685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.162125][ T6685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.191592][ T6685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.229056][ T6685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.258761][ T6685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.270817][ T6685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.283718][ T6685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.291503][ T3649] Bluetooth: hci7: command tx timeout [ 360.333881][ T6859] chnl_net:caif_netlink_parms(): no params data found [ 360.359626][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 360.375578][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 360.408508][ T6685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.429212][ T6685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.449461][ T6685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.470195][ T6685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.490427][ T6685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.506700][ T6685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.517036][ T6685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.540262][ T6685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.560460][ T6685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.571687][ T6685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.583109][ T6685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.601348][ T6886] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 360.629095][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 360.650847][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 360.666735][ T6685] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.690917][ T6685] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.760504][ T6896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.646937][ T3649] Bluetooth: hci7: command tx timeout [ 365.334308][ T6685] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.456593][ T6685] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.571571][ T3748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 366.095408][ T3748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 366.272280][ T6683] device veth0_vlan entered promiscuous mode [ 366.304245][ T6683] device veth1_vlan entered promiscuous mode [ 366.353584][ T6683] device veth0_macvtap entered promiscuous mode [ 366.386800][ T6683] device veth1_macvtap entered promiscuous mode [ 366.412264][ T6918] netlink: 24 bytes leftover after parsing attributes in process `syz.0.538'. [ 366.467380][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 366.485644][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 366.494197][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 366.502591][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 366.612800][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 366.670557][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 366.695020][ T3649] Bluetooth: hci7: command tx timeout [ 366.735270][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 366.790567][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 366.837983][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 366.916935][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 367.092896][ T6859] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.116055][ T6859] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.124466][ T6859] device bridge_slave_0 entered promiscuous mode [ 367.179736][ T6683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.207886][ T6683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.226258][ T6683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.236948][ T6683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.247372][ T6683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.258192][ T6683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.268402][ T6683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.279844][ T6683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.292011][ T6683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.303767][ T6683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.316453][ T6683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.338152][ T6683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.359657][ T6683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.377879][ T6859] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.392680][ T6859] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.411858][ T6859] device bridge_slave_1 entered promiscuous mode [ 367.452267][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 367.461353][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 367.699793][ T6683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.125326][ T6683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.144784][ T6683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.696207][ T6683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.874785][ T3649] Bluetooth: hci7: command tx timeout [ 368.898302][ T6683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.950458][ T6683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.998788][ T6683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.052571][ T6683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.102883][ T6683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.157862][ T6683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.180409][ T6683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.190946][ T6683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.213001][ T6683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.226126][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.234343][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.306633][ T6859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.346710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 369.365662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 369.385203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 369.439234][ T6683] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.603551][ T6938] loop3: detected capacity change from 0 to 2048 [ 369.623751][ T6683] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.244685][ T6683] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.255542][ T6683] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.276563][ T6859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.341219][ T6944] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 370.388273][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.414073][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.431457][ T3836] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 370.546250][ T6859] team0: Port device team_slave_0 added [ 370.658810][ T6859] team0: Port device team_slave_1 added [ 370.672573][ T6949] netlink: 'syz.3.545': attribute type 1 has an invalid length. [ 370.831993][ T6859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.867818][ T6859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.945000][ T6859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.969102][ T6859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.976388][ T6859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.015353][ T6859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.032555][ T3649] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 374.843409][ T6972] loop1: detected capacity change from 0 to 512 [ 375.256852][ T3836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.280536][ T6859] device hsr_slave_0 entered promiscuous mode [ 375.306022][ T3836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.315666][ T6859] device hsr_slave_1 entered promiscuous mode [ 375.363911][ T6859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 375.396489][ T6972] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 375.407670][ T6972] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 375.417169][ T6972] EXT4-fs error (device loop1): ext4_acquire_dquot:6800: comm syz.1.548: Failed to acquire dquot type 0 [ 375.430360][ T6972] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 375.440930][ T6972] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 375.450429][ T6972] EXT4-fs error (device loop1): ext4_acquire_dquot:6800: comm syz.1.548: Failed to acquire dquot type 0 [ 375.467130][ T6972] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.548: bg 0: block 205: padding at end of block bitmap is not set [ 375.487397][ T6972] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 375.499602][ T6972] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 375.510684][ T6972] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 375.519650][ T6859] Cannot create hsr debugfs directory [ 375.520167][ T6972] EXT4-fs error (device loop1): ext4_acquire_dquot:6800: comm syz.1.548: Failed to acquire dquot type 0 [ 375.543324][ T6972] EXT4-fs (loop1): 1 orphan inode deleted [ 375.549220][ T6972] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 375.558269][ T6972] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038 (0x7fffffff) [ 375.623781][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 376.482556][ T6685] EXT4-fs (loop1): unmounting filesystem. [ 376.519594][ T3879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.533226][ T3879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.577930][ T3836] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 377.245035][ T3685] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 377.567392][ T6989] device veth0_vlan left promiscuous mode [ 377.629860][ T6999] loop4: detected capacity change from 0 to 512 [ 377.646087][ T6999] ext4: Unknown parameter 'appraise_type' [ 377.655233][ T3685] usb 4-1: Using ep0 maxpacket: 8 [ 377.784822][ T3685] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 31 [ 377.820009][ T3685] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 377.903228][ T3685] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 377.920256][ T3685] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 378.045362][ T3685] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 378.446195][ T3685] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 378.464045][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.470454][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.545082][ T3685] usb 4-1: SerialNumber: syz [ 378.595214][ T6996] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 378.602902][ T6996] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 378.641028][ T3685] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 378.652992][ T3649] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 378.653380][ T3685] usb-storage 4-1:1.0: USB Mass Storage device detected [ 378.693951][ T6859] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.779923][ T7006] netlink: 24 bytes leftover after parsing attributes in process `syz.0.556'. [ 378.880813][ T3685] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 379.276841][ T7024] loop3: detected capacity change from 0 to 128 [ 379.815596][ T7024] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 379.843740][ T7024] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 379.959880][ T6859] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.967488][ T7028] loop1: detected capacity change from 0 to 2048 [ 380.053247][ T7028] UDF-fs: bad mount option "d}ode=00000000000000000002004" or missing value [ 380.140139][ T6943] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 380.223205][ T7028] loop1: detected capacity change from 0 to 2048 [ 380.265754][ T6859] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.352564][ T7037] netlink: 32 bytes leftover after parsing attributes in process `syz.0.561'. [ 380.381330][ T7028] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 381.019095][ T6859] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.131970][ T3680] device hsr_slave_0 left promiscuous mode [ 381.150922][ T3680] device hsr_slave_1 left promiscuous mode [ 381.178293][ T3680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.213199][ T27] audit: type=1804 audit(1727902082.859:182): pid=7041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.559" name="/newroot/6/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 381.240353][ T3680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.266723][ T3680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.271497][ T7045] loop4: detected capacity change from 0 to 512 [ 381.329606][ T3680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.360474][ T3680] device bridge_slave_1 left promiscuous mode [ 381.380112][ T3680] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.392664][ T7045] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 381.510439][ T1037] block nbd0: Attempted send on invalid socket [ 381.525234][ T1037] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.546061][ T7045] ext4 filesystem being mounted at /3/bus supports timestamps until 2038 (0x7fffffff) [ 381.569629][ T1037] block nbd0: Attempted send on invalid socket [ 381.584974][ T1037] I/O error, dev nbd0, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.606598][ T7052] Mount JFS Failure: -5 [ 381.612336][ T3680] device bridge_slave_0 left promiscuous mode [ 381.988766][ T7052] jfs_mount failed w/return code = -5 [ 381.994445][ T3680] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.104022][ T3680] device veth1_macvtap left promiscuous mode [ 382.110421][ T3680] device veth0_macvtap left promiscuous mode [ 382.118015][ T3680] device veth1_vlan left promiscuous mode [ 382.124307][ T3680] device veth0_vlan left promiscuous mode [ 383.595749][ T6685] EXT4-fs (loop1): unmounting filesystem. [ 384.178637][ T3680] team0 (unregistering): Port device team_slave_1 removed [ 384.236789][ T3680] team0 (unregistering): Port device team_slave_0 removed [ 384.283150][ T3680] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.328487][ T3680] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.518732][ T27] audit: type=1326 audit(1727902086.169:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.0.567" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f556c37dff9 code=0x0 [ 384.981909][ T3680] bond0 (unregistering): Released all slaves [ 385.089386][ T5479] usb 4-1: USB disconnect, device number 3 [ 385.370621][ T3649] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 385.487217][ T6683] EXT4-fs (loop4): unmounting filesystem. [ 386.237474][ T6859] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 386.247915][ T6859] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 386.534082][ T6859] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 387.288934][ T7094] loop1: detected capacity change from 0 to 256 [ 387.425784][ T6859] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 387.457225][ T7094] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 387.548586][ T6859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.573931][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 387.582322][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 387.601046][ T6859] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.702263][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 387.742901][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 387.925862][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.933124][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.010631][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 388.128717][ T1037] block nbd4: Attempted send on invalid socket [ 388.215754][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 388.263180][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 388.281378][ T1037] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 388.429409][ T7106] loop3: detected capacity change from 0 to 256 [ 388.628580][ T1037] block nbd4: Attempted send on invalid socket [ 388.632837][ T3881] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.634839][ T1037] I/O error, dev nbd4, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 388.641845][ T3881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.658757][ T7100] Mount JFS Failure: -5 [ 388.662919][ T7100] jfs_mount failed w/return code = -5 [ 388.687888][ T7106] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 388.739959][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 388.795261][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 388.872185][ T6859] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 388.903377][ T6859] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 388.974761][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 389.055238][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 389.063890][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 389.075196][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 389.083788][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 389.092828][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 389.101873][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 389.118143][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 389.129066][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 389.137121][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 389.191873][ T7106] syz.3.575: attempt to access beyond end of device [ 389.191873][ T7106] loop3: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 389.210666][ T7106] syz.3.575: attempt to access beyond end of device [ 389.210666][ T7106] loop3: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 389.225009][ T7106] syz.3.575: attempt to access beyond end of device [ 389.225009][ T7106] loop3: rw=0, sector=280, nr_sectors = 8 limit=256 [ 389.248638][ T27] audit: type=1800 audit(1727902090.899:184): pid=7106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.575" name="file1" dev="loop3" ino=1048705 res=0 errno=0 [ 389.289230][ T27] audit: type=1800 audit(1727902090.899:185): pid=7124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.575" name="file1" dev="loop3" ino=1048705 res=0 errno=0 [ 389.498431][ T7130] netlink: 44246 bytes leftover after parsing attributes in process `syz.1.578'. [ 389.780720][ T7136] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19971 - 0 [ 389.804321][ T7136] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19971 - 0 [ 389.828888][ T7136] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19971 - 0 [ 389.843071][ T7136] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19971 - 0 [ 389.904863][ T7136] device geneve2 entered promiscuous mode [ 389.920436][ T3648] Bluetooth: Unexpected continuation frame (len 4) [ 389.948169][ T7136] team0: Device geneve2 is up. Set it down before adding it as a team port [ 389.997838][ T7143] loop3: detected capacity change from 0 to 128 [ 390.010708][ T7136] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 19971 - 0 [ 390.024743][ T7136] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 19971 - 0 [ 390.033849][ T7136] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 19971 - 0 [ 390.147003][ T7136] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 19971 - 0 [ 390.267595][ T7145] netlink: 76 bytes leftover after parsing attributes in process `syz.3.581'. [ 390.789103][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 390.851894][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 390.903453][ T6859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.964921][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 391.009140][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 391.226816][ T7154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.584'. [ 391.235900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 391.257555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 391.277719][ T6859] device veth0_vlan entered promiscuous mode [ 391.292287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 391.352871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 391.400938][ T6859] device veth1_vlan entered promiscuous mode [ 391.481384][ T7156] loop1: detected capacity change from 0 to 512 [ 391.555149][ T7156] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 391.584766][ T7156] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 391.589654][ T3881] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.619547][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 391.627510][ T7156] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.587: Corrupt directory, running e2fsck is recommended [ 391.667869][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 391.677396][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 391.686238][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 391.698471][ T6859] device veth0_macvtap entered promiscuous mode [ 391.709265][ T6859] device veth1_macvtap entered promiscuous mode [ 391.739981][ T7156] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 391.780242][ T3881] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.792262][ T7156] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.587: corrupted in-inode xattr [ 391.835702][ T7156] EXT4-fs (loop1): Remounting filesystem read-only [ 391.842305][ T7156] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.587: couldn't read orphan inode 15 (err -117) [ 391.842913][ T6859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.885212][ T7156] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 391.936900][ T6859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.964837][ T6859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.111215][ T6859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.131971][ T6859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.156214][ T6859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.192987][ T3649] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 392.248160][ T7169] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 392.260337][ T7169] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 392.271219][ T7169] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.587: Corrupt directory, running e2fsck is recommended [ 393.749563][ T6859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.741017][ T3649] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 394.748788][ T48] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 394.752655][ T3649] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 394.811171][ T48] Bluetooth: hci6: Injecting HCI hardware error event [ 394.818939][ T48] Bluetooth: hci6: hardware error 0x00 [ 394.839179][ T3649] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 394.847106][ T3649] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 394.859427][ T3649] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 394.874818][ T6859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.886579][ T6859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.897465][ T6859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.907881][ T6859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.918765][ T6859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.933166][ T6859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.959114][ T7163] ip6gretap0 speed is unknown, defaulting to 1000 [ 394.970284][ T7163] ip6gretap0 speed is unknown, defaulting to 1000 [ 396.276922][ T6685] EXT4-fs (loop1): unmounting filesystem. [ 396.303679][ T7087] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 396.312310][ T7087] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 396.320746][ T7087] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 396.339682][ T7087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 396.383785][ T7163] ip6gretap0 speed is unknown, defaulting to 1000 [ 396.422008][ T7163] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 396.432785][ T3881] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.454391][ T7163] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 396.764834][ T3649] Bluetooth: hci0: command 0x0c1a tx timeout [ 396.829405][ T6859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.855771][ T6859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.922411][ T6859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.936546][ T6859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.966240][ T6859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.002578][ T6859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.012688][ T3649] Bluetooth: hci1: command tx timeout [ 397.018355][ T48] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 397.032642][ T6859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.043421][ T6859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.054857][ T6859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.094713][ T6859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.104708][ T6859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.115616][ T6859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.127620][ T6859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.140571][ T6859] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.149414][ T6859] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.158246][ T6859] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.162550][ T7180] loop1: detected capacity change from 0 to 2048 [ 397.167650][ T6859] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.204270][ T7087] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 397.207720][ T7180] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 397.214063][ T7087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 397.337314][ T3881] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.364059][ T7163] ip6gretap0 speed is unknown, defaulting to 1000 [ 397.422036][ T7163] ip6gretap0 speed is unknown, defaulting to 1000 [ 397.453418][ T7163] ip6gretap0 speed is unknown, defaulting to 1000 [ 397.506387][ T7167] ip6gretap0 speed is unknown, defaulting to 1000 [ 397.527262][ T7163] ip6gretap0 speed is unknown, defaulting to 1000 [ 397.537353][ T3718] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.555527][ T7163] ip6gretap0 speed is unknown, defaulting to 1000 [ 397.563021][ T7163] ip6gretap0 speed is unknown, defaulting to 1000 [ 397.777329][ T7185] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 397.794237][ T7185] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 10 with max blocks 1 with error 28 [ 397.806943][ T7185] EXT4-fs (loop1): This should not happen!! Data will be lost [ 397.806943][ T7185] [ 397.816681][ T7185] EXT4-fs (loop1): Total free blocks count 0 [ 397.822751][ T7185] EXT4-fs (loop1): Free/Dirty block details [ 397.828859][ T7185] EXT4-fs (loop1): free_blocks=2415919104 [ 397.834735][ T7185] EXT4-fs (loop1): dirty_blocks=16 [ 397.839929][ T7185] EXT4-fs (loop1): Block reservation details [ 397.845980][ T7185] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 397.968349][ T7163] ip6gretap0 speed is unknown, defaulting to 1000 [ 398.145788][ T3718] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.166864][ T3680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.210028][ T7163] ip6gretap0 speed is unknown, defaulting to 1000 [ 398.218091][ T3680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.234007][ T6685] EXT4-fs (loop1): unmounting filesystem. [ 398.255716][ T7163] ip6gretap0 speed is unknown, defaulting to 1000 [ 398.255850][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 398.357620][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 398.442194][ T7187] loop1: detected capacity change from 0 to 512 [ 398.527209][ T7187] EXT4-fs (loop1): 1 truncate cleaned up [ 398.532932][ T7187] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 398.552219][ T7187] EXT4-fs (loop1): shut down requested (2) [ 399.124830][ T48] Bluetooth: hci1: command tx timeout [ 399.509526][ T7167] chnl_net:caif_netlink_parms(): no params data found [ 399.830169][ T6685] EXT4-fs (loop1): unmounting filesystem. [ 400.734769][ T7205] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 400.994122][ T7225] netlink: 12 bytes leftover after parsing attributes in process `syz.1.598'. [ 401.175190][ T48] Bluetooth: hci1: command tx timeout [ 401.510202][ T7231] loop4: detected capacity change from 0 to 1024 [ 401.754430][ T7231] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 402.001169][ T7262] loop1: detected capacity change from 0 to 164 [ 402.009943][ T7167] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.022390][ T7167] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.535729][ T48] Bluetooth: hci1: command tx timeout [ 405.591932][ T7265] mmap: syz.0.603 (7265): VmData 176009216 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 405.628057][ T7167] device bridge_slave_0 entered promiscuous mode [ 405.754206][ T6683] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2808: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 405.781648][ T7167] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.804849][ T7167] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.812583][ T7167] device bridge_slave_1 entered promiscuous mode [ 405.827940][ T6683] EXT4-fs (loop4): unmounting filesystem. [ 405.831733][ T7267] loop1: detected capacity change from 0 to 256 [ 405.900563][ T7267] exfat: Deprecated parameter 'namecase' [ 405.956770][ T7267] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 406.056853][ T7167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.092701][ T7167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.760843][ T7280] netlink: 36 bytes leftover after parsing attributes in process `syz.0.606'. [ 407.112215][ T7280] xt_CT: You must specify a L4 protocol and not use inversions on it [ 407.891677][ T7167] team0: Port device team_slave_0 added [ 407.923503][ T7290] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 408.002631][ T7167] team0: Port device team_slave_1 added [ 408.015002][ T7296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.610'. [ 408.093824][ T7167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.114148][ T7167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.144837][ T3649] Bluetooth: hci5: command tx timeout [ 408.198920][ T7307] loop4: detected capacity change from 0 to 128 [ 408.218336][ T7306] netlink: 24 bytes leftover after parsing attributes in process `syz.1.610'. [ 408.233156][ T7307] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 408.337570][ T7167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.360028][ T7296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.610'. [ 408.387314][ T7307] FAT-fs (loop4): bogus number of FAT sectors [ 408.425556][ T7307] FAT-fs (loop4): Can't find a valid FAT filesystem [ 408.466755][ T7310] netlink: 76 bytes leftover after parsing attributes in process `syz.0.613'. [ 409.320725][ T7167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.336072][ T7167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.611062][ T7167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.642269][ T7300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.610'. [ 409.670667][ T27] audit: type=1326 audit(1727902111.319:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7297 comm="syz.4.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7457dff9 code=0x7fc00000 [ 410.148581][ T7300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.610'. [ 410.180287][ T7300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.610'. [ 410.553440][ T7316] netlink: 28 bytes leftover after parsing attributes in process `syz.0.614'. [ 410.637674][ T7300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.610'. [ 410.689544][ T7167] device hsr_slave_0 entered promiscuous mode [ 410.710532][ T7167] device hsr_slave_1 entered promiscuous mode [ 410.717769][ T7167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 410.725759][ T7167] Cannot create hsr debugfs directory [ 410.889020][ T7335] overlayfs: failed to resolve './file0': -2 [ 410.934899][ T3682] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 411.639448][ T7347] loop1: detected capacity change from 0 to 16 [ 411.675467][ T7347] erofs: (device loop1): mounted with root inode @ nid 36. [ 411.704779][ T3682] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 411.763645][ T3682] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 411.914964][ T3682] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 411.945078][ T3682] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 411.974663][ T3682] usb 5-1: SerialNumber: syz [ 412.082834][ T3881] device hsr_slave_0 left promiscuous mode [ 412.117974][ T7353] overlayfs: './file1' not a directory [ 412.145021][ T3881] device hsr_slave_1 left promiscuous mode [ 412.197870][ T7356] overlayfs: failed to resolve './file1': -2 [ 412.200505][ T3881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.237013][ T3881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.253281][ T3881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.261022][ T3881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.281966][ T3881] device bridge_slave_1 left promiscuous mode [ 412.301689][ T3881] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.324252][ T3881] device bridge_slave_0 left promiscuous mode [ 412.337041][ T3881] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.465619][ T3881] device veth1_macvtap left promiscuous mode [ 412.476189][ T3881] device veth0_macvtap left promiscuous mode [ 412.484692][ T3881] device veth1_vlan left promiscuous mode [ 412.490573][ T3881] device veth0_vlan left promiscuous mode [ 413.638281][ T3682] usb 5-1: 0:2 : does not exist [ 413.698820][ T3682] usb 5-1: USB disconnect, device number 4 [ 414.389270][ T7374] input: syz0 as /devices/virtual/input/input9 [ 414.807003][ T7380] __nla_validate_parse: 15 callbacks suppressed [ 414.807040][ T7380] netlink: 76 bytes leftover after parsing attributes in process `syz.2.623'. [ 415.500041][ T7382] loop4: detected capacity change from 0 to 128 [ 415.508440][ T7382] FAT-fs (loop4): Unrecognized mount option "j [ 415.508440][ T7382] ?9%rū*$WjHkoϘW&8EE4R-]J2"Q|Kv%AoR%ފŭF [ 415.508440][ T7382] TΧ&Mv$l|ף&Pr"z/$?BU"ݡP.BZeJ}2fZs0" or missing value [ 415.577622][ T6943] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 415.671066][ T3881] team0 (unregistering): Port device team_slave_1 removed [ 415.905318][ T3881] team0 (unregistering): Port device team_slave_0 removed [ 416.281720][ T3881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.743577][ T3881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.209836][ T3881] bond0 (unregistering): Released all slaves [ 418.291324][ T7368] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 418.733704][ T7421] fuse: Bad value for 'user_id' [ 422.201471][ T7433] loop1: detected capacity change from 0 to 512 [ 422.381685][ T7433] ext4: Unknown parameter 'noacl' [ 422.574812][ T7433] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 422.722981][ T7438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.638'. [ 422.938666][ T7440] loop1: detected capacity change from 0 to 128 [ 422.956578][ T7440] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 423.139674][ T27] audit: type=1800 audit(1727902124.789:187): pid=7440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.636" name="file3" dev="loop1" ino=95 res=0 errno=0 [ 423.152485][ T7446] netlink: 24 bytes leftover after parsing attributes in process `syz.0.640'. [ 423.599836][ T7466] xt_CT: You must specify a L4 protocol and not use inversions on it [ 424.178410][ T7463] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 424.201668][ T7167] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 424.266364][ T7167] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 424.295083][ T7463] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 424.301152][ T7463] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 424.342791][ T7167] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 424.351443][ T7463] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 424.371468][ T7167] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 424.378424][ T7463] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 424.405159][ T7463] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 424.437091][ T7473] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 424.447275][ T7463] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 424.491856][ T7463] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 424.506555][ T7463] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 424.539914][ T7463] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 424.580365][ T7463] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 424.606252][ T7463] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 424.634331][ T7463] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 424.634461][ T7167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.650678][ T7463] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 424.663456][ T7463] Bluetooth: hci7: Suspend notifier action (1) failed: -4 [ 424.694064][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 424.705386][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 424.710980][ T7463] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 424.728057][ T7463] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 424.756162][ T7167] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.794482][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 424.803236][ T7463] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 424.817474][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 424.835317][ T3734] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.842440][ T3734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.121099][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 425.758603][ T7485] trusted_key: encrypted_key: master key parameter 'ecryptf' is invalid [ 425.872158][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 426.129336][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 426.175193][ T52] block nbd2: Attempted send on invalid socket [ 426.181404][ T52] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 426.191049][ T52] block nbd2: Attempted send on invalid socket [ 426.191414][ T3734] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.197264][ T52] I/O error, dev nbd2, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 426.204356][ T3734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.213512][ T7483] Mount JFS Failure: -5 [ 426.224909][ T7483] jfs_mount failed w/return code = -5 [ 426.233274][ T3649] Bluetooth: hci2: command 0x0406 tx timeout [ 426.283884][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 426.302864][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 426.312339][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 426.337986][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 426.347028][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 426.356495][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 426.366049][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 426.384740][ T3649] Bluetooth: hci0: command 0x0c1a tx timeout [ 426.402831][ T27] audit: type=1326 audit(1727902128.049:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.4.646" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea7457dff9 code=0x0 [ 426.524839][ T48] Bluetooth: hci4: command 0x0c1a tx timeout [ 426.596110][ T7494] loop4: detected capacity change from 0 to 2048 [ 426.603139][ T7494] EXT4-fs: Ignoring removed mblk_io_submit option [ 426.609762][ T48] Bluetooth: hci5: command 0x0c1a tx timeout [ 426.621018][ T3836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 426.630885][ T3836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 426.645116][ T3836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 426.655625][ T3836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 426.677925][ T7167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 426.685354][ T3649] Bluetooth: hci7: command 0x0c1a tx timeout [ 426.697374][ T7494] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 426.774873][ T3649] Bluetooth: hci1: command 0x0c1a tx timeout [ 426.876155][ T7503] overlayfs: failed to resolve './file0': -2 [ 426.883751][ T7494] ip6gretap0 speed is unknown, defaulting to 1000 [ 426.956285][ T7505] cgroup: noprefix used incorrectly [ 427.075528][ T7506] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.646: bg 0: block 234: padding at end of block bitmap is not set [ 427.100006][ T7506] EXT4-fs (loop4): Remounting filesystem read-only [ 427.716797][ T6683] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /21/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 427.895173][ T6683] EXT4-fs error (device loop4): ext4_lookup:1856: inode #14: comm syz-executor: iget: bad extra_isize 1056 (inode size 256) [ 427.919960][ T6683] EXT4-fs error (device loop4): ext4_lookup:1856: inode #14: comm syz-executor: iget: bad extra_isize 1056 (inode size 256) [ 428.109398][ T7018] EXT4-fs (loop4): unmounting filesystem. [ 428.217874][ T3717] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 428.285553][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 428.292273][ T1037] block nbd0: Attempted send on invalid socket [ 428.308889][ T1037] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.310611][ T3717] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 428.329965][ T1037] block nbd0: Attempted send on invalid socket [ 428.336204][ T1037] I/O error, dev nbd0, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.348030][ T7524] Mount JFS Failure: -5 [ 428.352711][ T7524] jfs_mount failed w/return code = -5 [ 428.444629][ T48] Bluetooth: hci0: command 0x0c1a tx timeout [ 428.614718][ T48] Bluetooth: hci4: command 0x0c1a tx timeout [ 428.667317][ T7167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.764889][ T48] Bluetooth: hci7: command 0x0c1a tx timeout [ 428.799754][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 428.824043][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 428.844650][ T48] Bluetooth: hci1: command 0x0c1a tx timeout [ 428.893093][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 428.905629][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 428.942520][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 428.950639][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 428.966702][ T7167] device veth0_vlan entered promiscuous mode [ 428.991002][ T7167] device veth1_vlan entered promiscuous mode [ 429.055968][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 429.065118][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 429.075943][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 429.095687][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 429.133805][ T7167] device veth0_macvtap entered promiscuous mode [ 429.286000][ T7167] device veth1_macvtap entered promiscuous mode [ 429.940202][ T3717] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 429.969282][ T3717] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 430.034142][ T7167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.129966][ T7167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.164739][ T7167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.214101][ T7167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.243034][ T7167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.263822][ T7167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.274013][ T7167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.306487][ T7167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.329771][ T7167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.345685][ T3649] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 430.348925][ T7167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.367835][ T3649] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 430.368224][ T7167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.388890][ T7167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.398882][ T3649] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 430.407869][ T7167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.430154][ T7167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.440731][ T7167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.451912][ T7167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.465375][ T3649] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 430.475012][ T3649] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 430.482394][ T3649] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 430.489659][ T7167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.499687][ T7167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.510267][ T7167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.520312][ T7167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.531048][ T7167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.540997][ T7167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.551485][ T7167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.563201][ T7167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.573728][ T7167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.588811][ T7167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.598124][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 430.615928][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 430.645395][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 430.660160][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 430.682116][ T7167] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.691970][ T7167] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.701344][ T7167] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.711289][ T7167] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.779356][ T7546] ip6gretap0 speed is unknown, defaulting to 1000 [ 430.872616][ T3717] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.893573][ T3717] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.009172][ T3836] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.061298][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 431.137646][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.203134][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.216500][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 431.302015][ T7568] netlink: 36 bytes leftover after parsing attributes in process `syz.2.654'. [ 431.314147][ T7568] xt_CT: You must specify a L4 protocol and not use inversions on it [ 431.955355][ T3836] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.755050][ T3649] Bluetooth: hci5: command tx timeout [ 432.845116][ T7588] "syz.2.657" (7588) uses obsolete ecb(arc4) skcipher [ 433.401859][ T3836] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.568074][ T7578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.589'. [ 433.633836][ T7578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.589'. [ 433.711437][ T7596] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 433.789875][ T3836] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.832192][ T3649] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 433.847477][ T3649] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 433.855629][ T3649] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 433.864703][ T3649] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 433.873485][ T3649] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 433.880889][ T3649] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 434.007399][ T7603] ip6gretap0 speed is unknown, defaulting to 1000 [ 434.026145][ T7546] chnl_net:caif_netlink_parms(): no params data found [ 434.321387][ T7619] loop3: detected capacity change from 0 to 512 [ 434.380167][ T7619] EXT4-fs: Ignoring removed mblk_io_submit option [ 434.427405][ T7546] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.444369][ T7546] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.471916][ T7619] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.661: inline data xattr refers to an external xattr inode [ 434.508707][ T7546] device bridge_slave_0 entered promiscuous mode [ 434.549367][ T7619] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.661: couldn't read orphan inode 12 (err -117) [ 434.625028][ T7619] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 434.734300][ T7546] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.752826][ T7546] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.774330][ T3649] Bluetooth: hci5: command tx timeout [ 434.783852][ T7546] device bridge_slave_1 entered promiscuous mode [ 434.816868][ T3714] ip6gretap0 speed is unknown, defaulting to 1000 [ 434.833412][ T7546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.881817][ T3714] ================================================================== [ 434.889916][ T3714] BUG: KASAN: use-after-free in siw_query_port+0x342/0x430 [ 434.897125][ T3714] Read of size 4 at addr ffff88807a7d20e0 by task kworker/0:7/3714 [ 434.905016][ T3714] [ 434.907356][ T3714] CPU: 0 PID: 3714 Comm: kworker/0:7 Not tainted 6.1.112-syzkaller #0 [ 434.915509][ T3714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 434.925560][ T3714] Workqueue: infiniband ib_cache_event_task [ 434.931472][ T3714] Call Trace: [ 434.934752][ T3714] [ 434.937683][ T3714] dump_stack_lvl+0x1e3/0x2cb [ 434.942372][ T3714] ? nf_tcp_handle_invalid+0x642/0x642 [ 434.947836][ T3714] ? panic+0x764/0x764 [ 434.951908][ T3714] ? _printk+0xd1/0x111 [ 434.956061][ T3714] ? __virt_addr_valid+0x17f/0x530 [ 434.961174][ T3714] ? __virt_addr_valid+0x17f/0x530 [ 434.966292][ T3714] print_report+0x15f/0x4f0 [ 434.970795][ T3714] ? __virt_addr_valid+0x17f/0x530 [ 434.975911][ T3714] ? __virt_addr_valid+0x17f/0x530 [ 434.981022][ T3714] ? __virt_addr_valid+0x45b/0x530 [ 434.986134][ T3714] ? __phys_addr+0xb6/0x170 [ 434.990639][ T3714] ? siw_query_port+0x342/0x430 [ 434.995488][ T3714] kasan_report+0x136/0x160 [ 434.999993][ T3714] ? siw_query_port+0x342/0x430 [ 435.004848][ T3714] siw_query_port+0x342/0x430 [ 435.009522][ T3714] ? ib_query_port+0x344/0x7c0 [ 435.014293][ T3714] ib_cache_update+0x1a8/0xaf0 [ 435.019067][ T3714] ? ib_cache_setup_one+0x5a0/0x5a0 [ 435.024271][ T3714] ? read_lock_is_recursive+0x10/0x10 [ 435.029654][ T3714] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 435.035091][ T7546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.035634][ T3714] ? print_irqtrace_events+0x210/0x210 [ 435.050091][ T3714] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 435.055998][ T3714] ib_cache_event_task+0xef/0x1e0 [ 435.061034][ T3714] ? process_one_work+0x7a9/0x11d0 [ 435.066156][ T3714] process_one_work+0x8a9/0x11d0 [ 435.071101][ T3714] ? worker_detach_from_pool+0x260/0x260 [ 435.076719][ T3714] ? _raw_spin_lock_irqsave+0x120/0x120 [ 435.082245][ T3714] ? kthread_data+0x4e/0xc0 [ 435.086743][ T3714] ? wq_worker_running+0x97/0x190 [ 435.091761][ T3714] worker_thread+0xa47/0x1200 [ 435.096433][ T3714] kthread+0x28d/0x320 [ 435.100494][ T3714] ? worker_clr_flags+0x190/0x190 [ 435.105498][ T3714] ? kthread_blkcg+0xd0/0xd0 [ 435.110069][ T3714] ret_from_fork+0x1f/0x30 [ 435.114470][ T3714] [ 435.117475][ T3714] [ 435.119779][ T3714] Allocated by task 6683: [ 435.124088][ T3714] kasan_set_track+0x4b/0x70 [ 435.128666][ T3714] __kasan_kmalloc+0x97/0xb0 [ 435.133236][ T3714] __kmalloc_node+0xb3/0x230 [ 435.137816][ T3714] kvmalloc_node+0x6e/0x180 [ 435.142317][ T3714] alloc_netdev_mqs+0x85/0xeb0 [ 435.147064][ T3714] rtnl_create_link+0x2e9/0xa30 [ 435.151899][ T3714] rtnl_newlink+0x1403/0x2050 [ 435.156557][ T3714] rtnetlink_rcv_msg+0x818/0xff0 [ 435.161472][ T3714] netlink_rcv_skb+0x1cd/0x410 [ 435.166220][ T3714] netlink_unicast+0x7d8/0x970 [ 435.170967][ T3714] netlink_sendmsg+0xa26/0xd60 [ 435.175714][ T3714] __sys_sendto+0x480/0x600 [ 435.180200][ T3714] __x64_sys_sendto+0xda/0xf0 [ 435.184865][ T3714] do_syscall_64+0x3b/0xb0 [ 435.189273][ T3714] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 435.195147][ T3714] [ 435.197451][ T3714] Freed by task 3836: [ 435.201407][ T3714] kasan_set_track+0x4b/0x70 [ 435.205979][ T3714] kasan_save_free_info+0x27/0x40 [ 435.210982][ T3714] ____kasan_slab_free+0xd6/0x120 [ 435.215986][ T3714] __kmem_cache_free+0x25c/0x3c0 [ 435.220902][ T3714] device_release+0x91/0x1c0 [ 435.225560][ T3714] kobject_put+0x224/0x460 [ 435.229955][ T3714] netdev_run_todo+0xe56/0xf40 [ 435.234707][ T3714] ip6gre_exit_batch_net+0x41a/0x460 [ 435.239986][ T3714] cleanup_net+0x763/0xb60 [ 435.244389][ T3714] process_one_work+0x8a9/0x11d0 [ 435.249314][ T3714] worker_thread+0xa47/0x1200 [ 435.253969][ T3714] kthread+0x28d/0x320 [ 435.258015][ T3714] ret_from_fork+0x1f/0x30 [ 435.262416][ T3714] [ 435.264716][ T3714] The buggy address belongs to the object at ffff88807a7d2000 [ 435.264716][ T3714] which belongs to the cache kmalloc-cg-4k of size 4096 [ 435.279029][ T3714] The buggy address is located 224 bytes inside of [ 435.279029][ T3714] 4096-byte region [ffff88807a7d2000, ffff88807a7d3000) [ 435.292373][ T3714] [ 435.294686][ T3714] The buggy address belongs to the physical page: [ 435.301082][ T3714] page:ffffea0001e9f400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7a7d0 [ 435.311208][ T3714] head:ffffea0001e9f400 order:3 compound_mapcount:0 compound_pincount:0 [ 435.319510][ T3714] memcg:ffff88802d671a01 [ 435.323727][ T3714] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 435.331700][ T3714] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017c4c280 [ 435.340265][ T3714] raw: 0000000000000000 0000000000040004 00000001ffffffff ffff88802d671a01 [ 435.348822][ T3714] page dumped because: kasan: bad access detected [ 435.355220][ T3714] page_owner tracks the page as allocated [ 435.360909][ T3714] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3635, tgid 3635 (syz-executor), ts 54153095883, free_ts 54135286368 [ 435.383997][ T3714] post_alloc_hook+0x18d/0x1b0 [ 435.388755][ T3714] get_page_from_freelist+0x322e/0x33b0 [ 435.394291][ T3714] __alloc_pages+0x28d/0x770 [ 435.398862][ T3714] alloc_slab_page+0x6a/0x150 [ 435.403522][ T3714] new_slab+0x84/0x2d0 [ 435.407572][ T3714] ___slab_alloc+0xc20/0x1270 [ 435.412230][ T3714] __kmem_cache_alloc_node+0x19f/0x260 [ 435.417767][ T3714] __kmalloc_node+0xa2/0x230 [ 435.422335][ T3714] kvmalloc_node+0x6e/0x180 [ 435.426821][ T3714] alloc_netdev_mqs+0x85/0xeb0 [ 435.431576][ T3714] __ip_tunnel_create+0x205/0x370 [ 435.436611][ T3714] ip_tunnel_init_net+0x21f/0x700 [ 435.441644][ T3714] vti_init_net+0x2a/0xf0 [ 435.445963][ T3714] ops_init+0x35d/0x610 [ 435.450108][ T3714] setup_net+0x4b5/0xb90 [ 435.454380][ T3714] copy_net_ns+0x392/0x5d0 [ 435.458784][ T3714] page last free stack trace: [ 435.463438][ T3714] free_unref_page_prepare+0xf63/0x1120 [ 435.468964][ T3714] free_unref_page+0x33/0x3e0 [ 435.473619][ T3714] __unfreeze_partials+0x1b7/0x210 [ 435.478717][ T3714] put_cpu_partial+0x17b/0x250 [ 435.483474][ T3714] qlist_free_all+0x76/0xe0 [ 435.487979][ T3714] kasan_quarantine_reduce+0x156/0x170 [ 435.493420][ T3714] __kasan_slab_alloc+0x1f/0x70 [ 435.498248][ T3714] slab_post_alloc_hook+0x52/0x3a0 [ 435.503346][ T3714] __kmem_cache_alloc_node+0x137/0x260 [ 435.508788][ T3714] kmalloc_trace+0x26/0xe0 [ 435.513186][ T3714] ref_tracker_alloc+0x13c/0x470 [ 435.518105][ T3714] register_netdevice+0x11d5/0x1720 [ 435.523285][ T3714] __ip_tunnel_create+0x2b0/0x370 [ 435.528289][ T3714] ip_tunnel_init_net+0x21f/0x700 [ 435.533293][ T3714] ops_init+0x35d/0x610 [ 435.537445][ T3714] setup_net+0x4b5/0xb90 [ 435.541689][ T3714] [ 435.543993][ T3714] Memory state around the buggy address: [ 435.549601][ T3714] ffff88807a7d1f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 435.557640][ T3714] ffff88807a7d2000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 435.565680][ T3714] >ffff88807a7d2080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 435.573720][ T3714] ^ [ 435.580898][ T3714] ffff88807a7d2100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 435.588955][ T3714] ffff88807a7d2180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 435.597008][ T3714] ================================================================== [ 435.610374][ T3714] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 435.617596][ T3714] CPU: 0 PID: 3714 Comm: kworker/0:7 Not tainted 6.1.112-syzkaller #0 [ 435.625743][ T3714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 435.635787][ T3714] Workqueue: infiniband ib_cache_event_task [ 435.641674][ T3714] Call Trace: [ 435.645025][ T3714] [ 435.647942][ T3714] dump_stack_lvl+0x1e3/0x2cb [ 435.652614][ T3714] ? nf_tcp_handle_invalid+0x642/0x642 [ 435.658060][ T3714] ? panic+0x764/0x764 [ 435.662116][ T3714] ? preempt_schedule_common+0xa6/0xd0 [ 435.667561][ T3714] ? vscnprintf+0x59/0x80 [ 435.671880][ T3714] panic+0x318/0x764 [ 435.675763][ T3714] ? check_panic_on_warn+0x1d/0xa0 [ 435.680866][ T3714] ? memcpy_page_flushcache+0xfc/0xfc [ 435.686319][ T3714] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 435.692633][ T3714] ? _raw_spin_unlock+0x40/0x40 [ 435.697470][ T3714] ? print_report+0x4a3/0x4f0 [ 435.702141][ T3714] check_panic_on_warn+0x7e/0xa0 [ 435.707065][ T3714] ? siw_query_port+0x342/0x430 [ 435.711907][ T3714] end_report+0x66/0x110 [ 435.716133][ T3714] kasan_report+0x143/0x160 [ 435.720621][ T3714] ? siw_query_port+0x342/0x430 [ 435.725460][ T3714] siw_query_port+0x342/0x430 [ 435.730124][ T3714] ? ib_query_port+0x344/0x7c0 [ 435.734873][ T3714] ib_cache_update+0x1a8/0xaf0 [ 435.739627][ T3714] ? ib_cache_setup_one+0x5a0/0x5a0 [ 435.744812][ T3714] ? read_lock_is_recursive+0x10/0x10 [ 435.750175][ T3714] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 435.756144][ T3714] ? print_irqtrace_events+0x210/0x210 [ 435.761598][ T3714] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 435.767480][ T3714] ib_cache_event_task+0xef/0x1e0 [ 435.772491][ T3714] ? process_one_work+0x7a9/0x11d0 [ 435.777588][ T3714] process_one_work+0x8a9/0x11d0 [ 435.782517][ T3714] ? worker_detach_from_pool+0x260/0x260 [ 435.788137][ T3714] ? _raw_spin_lock_irqsave+0x120/0x120 [ 435.793669][ T3714] ? kthread_data+0x4e/0xc0 [ 435.798162][ T3714] ? wq_worker_running+0x97/0x190 [ 435.803170][ T3714] worker_thread+0xa47/0x1200 [ 435.807839][ T3714] kthread+0x28d/0x320 [ 435.811891][ T3714] ? worker_clr_flags+0x190/0x190 [ 435.816899][ T3714] ? kthread_blkcg+0xd0/0xd0 [ 435.821473][ T3714] ret_from_fork+0x1f/0x30 [ 435.825883][ T3714] [ 435.829130][ T3714] Kernel Offset: disabled [ 435.833445][ T3714] Rebooting in 86400 seconds..