last executing test programs: 2m34.93137001s ago: executing program 4 (id=2489): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x1a04410, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r0], 0x4, 0x1a3, &(0x7f00000006c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000000)=0x92b1, 0x4) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f00000000c0)=0x1, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000040)=""/7, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RWALK(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="160000006f01000100080000000000", @ANYRESDEC=r2, @ANYRES64], 0x16) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x0) r6 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000007112030000000000950000000000"], &(0x7f0000000140)='syzkaller\x00', 0x5, 0xec, &(0x7f0000000000)=""/236, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x40000011, r4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0x15, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, [@exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @jmp={0x5, 0x1, 0xb, 0xb, 0x3, 0xffffffffffffffa0, 0x4}, @map_fd={0x18, 0x3, 0x1, 0x0, r5}, @generic={0x4a, 0x0, 0x7, 0x2, 0x6}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x97}, @func={0x85, 0x0, 0x1, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x1b, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x0, 0x8, 0x0, 0x81}, 0x10, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000640)=[r5, r5], &(0x7f0000000880)=[{0x1, 0x0, 0x0, 0x4}, {0x1, 0x1, 0xb, 0xa}, {0x1, 0x1, 0x9, 0x6}, {0x3, 0x3, 0x4}, {0x0, 0x1, 0x3, 0x7}, {0x5, 0x4, 0xb, 0x9}, {0x4, 0x2, 0x9, 0xc}, {0x2, 0x1, 0x9, 0x2}], 0x10, 0x1bc, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000200000000000000000850000009e000000c30000175000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getsockname(r5, &(0x7f00000004c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, &(0x7f0000000180)=0x80) 2m31.28506412s ago: executing program 4 (id=2494): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) r4 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(r4, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @dev}, 0x10) syz_usb_connect(0x4, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000a6157920c80a10348cf8010203010902120001000010f3080490fc00"], 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000080)={r2, 0x2, 0x6}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x3, 0x0, 0x7ffc1ffb}]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) 2m27.563814427s ago: executing program 4 (id=2498): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) r5 = socket$inet6(0xa, 0x802, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000100000000000000000000000000000205", 0x18) getsockopt$inet6_opts(r5, 0x29, 0x39, 0x0, &(0x7f0000000080)=0x35) socket$inet6(0xa, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020a00021f499e99"], 0x10}}, 0x0) read(0xffffffffffffffff, 0x0, 0x0) openat$incfs(0xffffffffffffffff, 0x0, 0x8000, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m26.093214633s ago: executing program 4 (id=2499): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}]}, 0x24}}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xa41, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug}]}, 0xfe, 0x46d, &(0x7f0000000f00)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@noauto_da_alloc}, {@quota}, {@noload}, {@jqfmt_vfsold}]}, 0x2, 0x46a, &(0x7f0000000980)="$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") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r3, 0x0) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="2e5113abb96490e8baa757031fd3113d8fd231aecab2c455591d3bec0b6d42a1d9572dc5078c0de5a68dc252aeb457f345aaef1744f717c71738086a77f819bf8ec2164ad9d225996868d5440c2a1f1759386c920214f5b07fdeaa34d7cbb895ee45108d8715e8678c9e65c8b76f3f4f2a1537de01264b0f6c5a5083f49b6737a25758553b72788c48c129ab89ff000e7d0b1da439dc5e7e6cfad150a664ab7d70dd127f473015976f8f2a3603f45a042d8c3578e6eb3060b986ee9e6b4dbf79896d68301c5d9ea34afe122934", @ANYRES64, @ANYRES8=0x0, @ANYBLOB="d60a83a1f0457481edbb22ba9409462e156a7c242a", @ANYRES32, @ANYRES8, @ANYRES32], 0x0, 0x1c4, &(0x7f0000000440)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x6609, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r5, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000140)=0x9, 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, r6}, 0x10) ioctl$TIOCOUTQ(r6, 0x5411, &(0x7f00000002c0)) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 2m24.335340352s ago: executing program 4 (id=2504): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x75}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='ext4_request_blocks\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000e0ff000000181100e66f55b6edd9dada5de2298241e1890087e228afb245d9373a8c60949db7d9cf918439c1942155e4b032fad115e768b5cf2e8ddfde2ee3ba51f16519a45dc3abc910e13611e64867b2", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x57}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r5}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x1, 0x0, r1, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x5, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_free_inode\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) unlink(&(0x7f0000000140)='./cgroup\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850020000000000018100000", @ANYRES32, @ANYBLOB="1700000000215600950000000000000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x1425, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={0xffffffffffffffff, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 2m15.211097169s ago: executing program 4 (id=2514): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='clear_refs\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x3, 0x4, 0x1fff, 0x5, 0x110, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x4, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, 0x0, 0x25, 0x0, @val=@netfilter={0xa, 0x1, 0x2, 0x1}}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) readahead(r3, 0x9, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x141000) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = io_uring_setup(0x1471, &(0x7f00000000c0)={0x0, 0x0, 0x1c12}) io_uring_enter(r7, 0x1020, 0x0, 0x9, 0x0, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x48) unshare(0x64000600) 1m16.662244995s ago: executing program 3 (id=2592): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x4812, &(0x7f0000002140)=ANY=[], 0x11, 0x6aa, &(0x7f0000000fc0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, 0x0}], 0x1, 0x30, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000100)="e0b9547e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x2, 0x2, 0x0, &(0x7f0000000280)) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1m14.331351844s ago: executing program 3 (id=2596): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="f8c21f4bc6399e4abef3caa95c18e756720b0e0d2ca0dfc6a7764ee163ed5b27210966662239d539b0b8979c58453b", 0x2f}], 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x0, 0x0, 0x20}}}}}}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x81000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400c5}, 0x8804) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) 1m12.298874137s ago: executing program 3 (id=2599): r0 = socket$inet6(0xa, 0x3, 0xff) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x62880, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x200000, 0x1000, 0x0, 0x1}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010700000000000000040000000008000300", @ANYRES32=r7, @ANYRESOCT=r0], 0x1c}}, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000006c0)={0x0, @broadcast, @remote}, &(0x7f0000000700)=0xc) r9 = socket(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x101}, @TCA_FQ_PIE_BETA={0x8}]}}]}, 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f0000000980)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f00000009c0)={0x1b4, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4040}, 0x11) setresuid(0x0, 0x0, 0xee01) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r12, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r13, &(0x7f0000000040), 0x208e24b) r14 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r14, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x2, @dev}, 0x10) sendfile(r14, r13, 0x0, 0xffefffff) sendto$packet(r14, &(0x7f0000000280)="687a4b43665649388998dbefb0127f773b796fa3367fb4b9ca15cedbec60e9d14d481e96685d335d4dadae26e3ba60d45fcff88fb420f266a86649ef19cf2b0fa001e32e5cf964c811717c252b8afa8ee35a432749f0e7625379efbe5e36b5941f34424923a01b5f37d530981eb7882ec864780b3353e93165291548e67b96bac85c8388f78dc4e18bf3581f3c4511fac55f2ccc9d85a3ef2371f0cd8112c4b5b8eb6a98efd1c130d4ba3aaf3cd420c8640e4614ec05cc23f17eb1629143750ee469375abf4062d132fa16ca3c6f6c728bacf4f794fedf7501bb14ee2924b86fc38020bcd4f5c7a255529cacc464a3ce", 0xf0, 0x4010, &(0x7f0000000380)={0x11, 0x1c, 0x0, 0x1, 0x80, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 1m9.065670872s ago: executing program 3 (id=2605): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x1008810, &(0x7f0000002600)=ANY=[], 0x1, 0x5f4, &(0x7f000001f6c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ee8b4c7b167c8f3cc84c01669fcfc1994e794690f88f5c98f17ad5f23150"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) open(0x0, 0x0, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') fcntl$notify(r2, 0x402, 0x80000000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) accept4$alg(r5, 0x0, 0x0, 0x0) read$alg(0xffffffffffffffff, &(0x7f0000001e00)=""/4108, 0x210) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r6, &(0x7f0000000040)={0x1f, @fixed}, 0x8) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, 0x0, 0x80000) 1m4.769468998s ago: executing program 3 (id=2610): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@init_itable_val}, {@nolazytime}, {@grpid}, {@prjquota}, {@norecovery}, {@lazytime}, {@errors_continue}, {@auto_da_alloc}, {@test_dummy_encryption}]}, 0xff, 0x468, &(0x7f0000000780)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ffffffff"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r6 = syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r5, &(0x7f0000005780)={0x2020}, 0x1efe) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x180) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080)={[{@noauto_da_alloc}, {@i_version}]}, 0x1, 0x55e, &(0x7f0000000580)="$eJzs3c9vHFcdAPDvjH82TesEOEAFOEAhoCjreNNGVS9tLiBUVUKtOCAOqbE3lsluNmTXpTaRcP4GkEDiRP8EDkgckHriwI0jEkgIqRyQAkSgGKlIg2Z27GycNVmym9129/ORxrNv3sx837Mz+96+2cwLYGqdiYi9iJiPiLciYqncnpRLvNpZ8v3u3b21vn/31noSWfbm35MiP98WXcfkni7PuRgRb3wt4jvJw3FbO7vX1ur12s0yvdJu3Fhp7eye32qsbdY2a9er1Uurly68dPHF6tDqutz4xZ2vbr32zV//6jPv/27vKz/Ii3WyzOuuxzB1qj53GCc3GxGvPYlgYzBTrufHXA4eTxoRH4uIzxfX/1LMFP86AYBJlmVLkS11pwGASZcWY2BJWomINC07AZXOGN4nliOtN1vtc1eb29c3OmNlp2IuvbpVr104vfCH7xU7zyV5erXIK/KLdPVI+mJEnI6IHy88VaQr6836xni6PAAw9Z7ubv8j4l8LaVqp9HVoj7t6AMBHxuK4CwAAjFzZ/mfZuAsCAIzMw5//P8h0BgBgsvUx/l/e7N974mUBAEbD/X8AmD7afwCYPtp/AJgq33j99XzJ9svnX2+8vbN9rfn2+Y1a61qlsb1eWW/evFHZbDY3i2f2NB51vnqzeWP1hdh+Z6Vda7VXWju7VxrN7evtK8Vzva/U5kZSKwDgfzm9/N7vk4jYe/mpYomuuRy01TDZ0nEXABibmUEO1kGAjzSzfcH06qsJLzoJv33iZQHGo+fDvBd7vnzQT/+PIL5nBB8qZz/V//i/OZ5hshj/h+n1eOP/rwy9HMDoGf+H6ZVlydE5/+cPswCAiTTAV/iyHw6rEwKM1aMm8x7K/X8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYMCcj4ruRpJViLvA0/5lWKhHPRMSpmEuubtVrFyLi2ViOiLmFPL067kIDAANK/5qU83+dXXr+5NHc+eTfC8U6Ir7/szd/8s5au31zNd/+j4W5cvvCwfRh1fvHDTCvIAAwZEX7XS3XXR/k7929tX6wjLI8dy7Hf8qpiNf3794qlk7ObOQbIxaLvsSJfyYxWx6zGBHPRcTMEOLv3Y6IT/aqf1KMjZwqZz7tjh9l7GdGGj99IH5a5HXWeefr40MoC0yb9y5HxKu9rr80zhTr3tf/YvEONbg7lzsnO3jv2++KP1tGmukRP7/mz/Qb44XffP2hjdlSJ+92xHOzveInh/GTY+I/32f8P336sz965Zi87OcRZ6N3/O5YK+3GjZXWzu75rcbaZm2zdr1avbR66cJLF1+srhRj1PnPLOs5J/3fXj737HFly+t/4pj4iz3rP3947Bf7rP+7H7z17c/dTy4cjf/lL/T8+7/bXf+jv/+8TfxSn/HXTvzy2Om78/gbZf2Tcn0Q9VF//3N9xn//L7sbfe4KAIxAa2f32lq9Xrs50Iv8U+hx+wwUIi9ifzsfdBcHq86fYwi/jWG9mHvs6tzu2rI8hsLPHvYVu7LeuPfHiwOe+Vv5GUdcnfTBWoz7xb1RxRrfexIwGvcv+nGXBAAAAAAAAAAAAAAAOM4o/uvSuOsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA5PpvAAAA//90ldN8") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e80)={r6, 0x0, 0x97, 0x13, &(0x7f0000000d80)="65ebe86dc50508833a2061fb6fb820eb683b7d61b92eb826764fc4827d192b987d734b7be29cb015c9be974f9f4f9af4ca21ff88f6fb8fede610fb7800b8356bf8d7f0d35a65db7e85a75806004f4365b2f0f9abb9eec9b33cb4a6becbaafe21223acbf9401ab6ff0911b87150de7085af412eb6c2607cd03a13d97f0e29c8a7b87b7f625c80241a719ddc9a0e24ef9d3212856c7b5d09", &(0x7f0000000300)=""/19, 0x4, 0x0, 0x5c, 0x19, &(0x7f00000003c0)="86026d029da75bf40408627e9905914a1ea79c6ed6e0994d32d102e5cd44693b7e6fb7a2dbf20e8cd260aaf71b999f51b5e0d93d9299fa9ee898761e4afcd4eb16dc6ed4d73cd7a71d7cb05e0432ddca3cf10e384110a7c2783c081e", &(0x7f0000000e40)="2538cc99e712e79544c50d8a571cefa242a418368f72119ce8", 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000008c0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x0, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r7, 0x0, 0xe, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) 1m1.550797022s ago: executing program 3 (id=2615): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x78, 0x0, &(0x7f0000000100)="b9ff0f316844268cb89e14f008004ce0050000000000000177fbac141416e000030afe079f03b180004404050300845013f2325f009402050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31b", 0x0, 0xfe, 0x60000000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3c}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x0, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="3a10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x2a, &(0x7f0000000100)=r6, 0x4) r7 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) dup3(r7, r8, 0x0) 13.041216286s ago: executing program 0 (id=2692): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x44) r1 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=r2], 0x58) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r3, &(0x7f0000000100)=@in4={0x21, 0x400, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) rt_sigpending(0x0, 0x1000000) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f0000000040), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0]}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x184}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000b5c0)={0x8, 0x16, &(0x7f0000000140)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket(0x25, 0x1, 0x4) recvfrom$packet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, [], [], [0x0, 0x3f], [0x0, 0x0, 0x5]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000800)) close_range(r1, 0xffffffffffffffff, 0x0) 9.991830067s ago: executing program 1 (id=2694): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000003, &(0x7f0000000040), 0x41, 0x4d1, &(0x7f0000001440)="$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") ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r0 = gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2004, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) write$binfmt_elf64(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c46f7800200390000000000000002000600f37a0000ee0100000000000040000000000000002402000000000000b0030000010138000200020002000100010000000c000000299f00000000000005000000000000000100010000000000000800000000000085b1161c000000000080000000000000010000000300000000000000000000007c1b0000000000000600000000000000660000000000000001000000000000000200"/675], 0x2b0) mmap$xdp(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0x0) mlock(&(0x7f000069f000/0x2000)=nil, 0x2) read$hiddev(0xffffffffffffffff, &(0x7f0000000000)=""/13, 0xd) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x3f5, 0x10, 0x70bd2a, 0x25dfdbff, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x2001) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) 8.954886655s ago: executing program 2 (id=2695): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0xfffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_clone3(&(0x7f0000000580)={0x1090800, 0x0, &(0x7f0000000200), &(0x7f0000000180), {0x2a}, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0x0], 0x1, {r0}}, 0x58) sched_getaffinity(r1, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRES32=r2, @ANYRES32, @ANYRESDEC=r0]) read$FUSE(0xffffffffffffffff, &(0x7f0000002180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000002c0)={0xfcc1, 0x0, r3, {0x7, 0x1f, 0x0, 0x1000, 0x9, 0x0, 0x3}}, 0x50) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x2004d081}, 0x800) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24) inotify_init1(0x0) creat(&(0x7f00000007c0)='./bus\x00', 0x0) close(0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x80, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e0612"], 0x9) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="1410fe45b297daba0ea5e1a141925bf3de2483381ab150786d2c21c0c3fbd2277d215170219b21ea2c8563fa0c60c23b1a9c42e1198bf746578d5db7ceaa206f30bb7cfd797079d55a415436ce84767ccfc8b59eaabe0d87313435ff8563700869b14935e35c77d1b7892318f28a03d99726bb840dff0ce999458fde472bc68ea5603b256a338ef696591ce761fa2904c649c02841256209a0001f6a"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x90) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 8.89733911s ago: executing program 1 (id=2696): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x3a, 0x40, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000139209f422ca2f1d3568c599f830b1f821bc25fa46eaf53917fbae01ac86e06a0af31a9167ac93666cbfce317f4d89438ada20492c7e787769ae367b057e255f9fc7fcd3678acf258357e1e5a90d17a85ed2bb685014e05fe9dd53656818b650ff910557ae37262d1202049fd3e46740a84e730119514262213ed7957fbdbfb2aa975531396fdcd06430f49d3102697a185091e299fd98504173205364a390622b72d5b169249a81bc558643f18c4fe15d272375fec5f59124a968"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r2 = syz_open_procfs(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) mq_timedreceive(0xffffffffffffffff, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@secondary) keyctl$search(0xa, r3, &(0x7f0000000140)='keyring\x00', 0x0, r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) 8.327078499s ago: executing program 1 (id=2697): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000040)={@my=0x0}) syz_io_uring_setup(0x231, &(0x7f0000000180)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000100)) 7.457637803s ago: executing program 1 (id=2698): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000680001"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x5, 0xd) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xee6) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_create1(0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) ioctl$int_in(r4, 0x5421, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000001140)=0x2, 0xfffffffffffffd6c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xe}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f000000e0c0), 0x10010) sendfile(r4, r5, &(0x7f0000000100), 0x10001) 6.526544833s ago: executing program 0 (id=2699): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0/file0/file0\x00', 0x8a400, 0x0, 0xfc, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='mountinfo\x00') ppoll(&(0x7f0000000280)=[{r6}], 0x1, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB, @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) umount2(&(0x7f0000000040)='./file0\x00', 0xb) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffa) keyctl$negate(0xd, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22000406, &(0x7f0000000700)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@noblock_validity}, {@usrjquota_path={'usrjquota', 0x3d, './file0/file0/file0'}}, {@auto_da_alloc}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@dax}], [{@audit}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}], 0x2c}, 0x84, 0x485, &(0x7f0000000dc0)="$eJzs3LtvHMUfAPDvrh/55Wknv/DIA3IQEBYBO3YCpKAABFIaJCQooDSOiUKcBMVGIlFEAkKhRPwFQImEREVDBQ0CKhAt9AgpQmkSKJDR7u3ad76zcz77fAn3+Uh3ntmdvZnv7o5vdsfrAHpWJXtLIrZFxK8RMVTN1heoVH/cvH5p6q/rl6aSmJ9/+c8kL3fj+qWpsmi53dYiM5JGpB8ksa9JvbMXLp6enJmZPl/kx+bOvDU2e+Hi46fOTJ6cPjl9duLYsaNHxp96cuKJdYkzi+vG3nfP7d9z/LWPX5yaj9d/+CJr77ZifW0cVcNrrrMSlZgvLC4dzN8fXvOn316216ST/i42hFXpi4jscA3k/X8o+mLx4A3FC+93tXFAR2XfTTsblvYVP9OF7y/gvyjRx6FHld/42fVv+drI8Ue3XXs2e5/O479ZvKpr+iPNrmWHq1fsfR2qf1tEvHrl70+yVzS9DwEAsL6+ycY/jzUb/6Vxd025HcUcynBEHIqIXRHx/4jYHRF3ReRl74mIe1dZf2VJvnH88/PmtgJrUTb+e7qY26of/6VFiWQhtz2PfyB549TM9OFin4zEwKYsP75CHd8+/8tHy62r1Iz/sldWfzkWLNrxR/+m+m1OTM5NriHkOtfei9jb3yz+ZGEmINsDeyJibxufn+2zU49+vj9L79jauP7W8a9gHeaZ5j+LeKR6/K/EkvhLSbWm5eYnx/4XM9OHx8qzotGPP119qTY/UJNeGv9Gz51lx39L0/O/iL/sBuV87ezq67j624fLXtM0Hv8kWjn/B5NX8vRgseydybm58+MRg8WCuuUTi9uW+bJ8Fv/Iweb9f1fEP58W2+2LiOwkvi8i7o+IA0XbH4iIByPi4Arxf//cQ2+uvIfaPP/XQRb/iZWOf8RwUjtf30ai7/R3Xy9Xf2u//47mqZFiSSu//1pt4Fr2HQAAANwp0nwOOklHy3TNzandsSWdOTc7d6gSb589UZ2rHo6BtLzTNVRzP3S8uDdc5ieW5I9ExM78L4025/nRqXMz27sZOJA/q1PX/yNNR0er637v1B+9ALePVc051T4d+OVX698YYEN5XhN6l/4PvUv/h96l/0Pvatb/L0fc7EJTgA3m+x96l/4PvUv/h96l/0NPanwkvvx3K+086b+Y2HV8TZv3UKKvQ58ctf+0owOJSLu+69pPpLcs80x0vBkHisSmiGh1q8sdPaZLzx8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA7378BAAD//+rs4gk=") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 5.531339218s ago: executing program 0 (id=2700): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000002c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000040)={@my=0x0}) r6 = syz_io_uring_setup(0x231, &(0x7f0000000180)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}) io_uring_enter(r6, 0x75a8, 0x3f87, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) bind$rose(r8, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000000c0)=0xfffffffd) write$dsp(r0, &(0x7f0000000440)="6f3bba420b0dd345aff05a9c5991f3d43f674bf645916715cc01e6691743ae6d9fca741780ff5737541ce2369d7cea2c3f", 0x31) close(r0) 4.666649562s ago: executing program 0 (id=2701): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='\x00', 0x80, &(0x7f0000000240), 0x1, 0x50d, &(0x7f0000000980)="$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") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x3000890, &(0x7f0000000300)=ANY=[], 0x1, 0x11dc, &(0x7f0000001280)="$eJzs3MGLG1UcB/Bf19rW1N2sWqstiA+96GVo9uBFL0G2IA0obSO0gjB1JxoyJiETFiJi9eTVv0M8ehPEm1724t/gbS8eexBHTNR2l3hYdDewfD6X/OD3vuQ9BgbeMG/23/jq40Gvynr5NNbOnIm1cUR6kCLFWvzt83j19R9/euHWnbs32p3O9s2Urrdvt15LKW28+P17n37z0g/Ti+9+u/Hd+djbfH//161f9i7vXdn//fZH/Sr1qzQcTVOe7o1G0/xeWaSdfjXIUnqnLPKqSP1hVUwO9HvlaDyepXy4s94YT4qqSvlwlgbFLE1HaTqZpfzDvD9MWZal9UbwX3S/flDXdURdPx7noq7r+oloxMV4MtZjI5qxGU/F0/FMXIpn43I8F8/HlfmoVc8bAAAAAAAAAAAAAAAAAAAAThfn/wEAAAAAAAAAAAAAAAAAAGD1bt25e6Pd6WzfTOlCRPnlbne3u/hd9Nu96EcZRVyLZvwW89P/C4v6+lud7WtpbjO+KO//lb+/233sYL41/5zA0nxrkU8H8+ej8Wh+K5pxaXl+a2n+Qrzy8iP5LJrx8wcxijJ24s/sw/xnrZTefLtzKH91Pg4AAABOgyz9Y+n+Pcv+rb/IH+H5wKH99dm4ena1ayeimn0yyMuymBxbcS6O/S8UCsX/XKz6zsRJeHjRVz0TAAAAAAAAAAAAjuIkXidc9RoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/2IFjAQAAAABh/tZpdGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBVAAAA//8xgdSv") r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$RTC_AIE_OFF(r1, 0x7002) unlinkat(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) rt_sigprocmask(0x0, 0x0, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x1c0, 0x4c, 0x1a, 0x1c0, 0x73, 0x2d8, 0x258, 0x258, 0x2d8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @dev, [], [], 'wg2\x00', 'ip6gretap0\x00', {}, {}, 0x11}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@multicast2, [], @ipv6=@private2, [], @ipv4=@private, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @common=@inet=@SET2={0x30}}, {{@ipv6={@private2, @mcast2, [], [], 'ipvlan1\x00', 'pimreg1\x00'}, 0x0, 0xf8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) 3.620814891s ago: executing program 2 (id=2702): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x13) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r6, 0x5501) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e000000200002800400120005001600020000000600180000"], 0x54}}, 0x0) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xc2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) mount$afs(&(0x7f0000000680)=ANY=[@ANYBLOB='%'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) socket(0x10, 0x3, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000001980)={0xf, {"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", 0x1000}}, 0x1006) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) write$binfmt_script(r7, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '\t\n\v\xed\x14\x9e\xed\x04F\x05\x00\x00\x00\x00\x00\x00\x00C\xb6dd\x82\x85Y\xc3:B>$\xee\xdda\xae\x18\x02D\xd0H\x10\xf4L\xb2\f\xb0t\xe3j\x95\x96m+\x0f\x8c7P\x00?\x14q\x013\x90\xae\xbf\xc7\x00\x1c\xb6\xefi\xf8$k\xb4\xca\x1a\xe9\xac\xc4\x17\xd1\x86?\xf1\x7f=\xa4\f*\xfd\xe1\xe5\x98\x92q\x06\x1b^\xe1\x9ch:\xdcw9\r\xf2\xd1\x9b\xfb\xcb\xa9\x91s\xc6\xcd\x92\xd9\xc7\xd7\xd0@<\x12\xb5\xa8\x81\xf3u\x82\x15\xde\xfeP\xa1\x83l\x92\xaf\xf5\xf8\xb0U6\xf3q\x9b_\xdb\xa6d\xee\x1e\xd2\x1aa\xd1\xb0\x19\x93\xaa\xf55._\x04:\x86k\xe6\t/\x1e\xdf\xae\x1a\xad\xedJ\x14\xb8d\x8d\xb8\xe7H\xb3\xa4\xdcT\xcfF\xeb\"\x88@\x83MKT\x92Ub\x93\xf1?J\x9f\xee\xa5\xf5S\xc2\xec\xbe;m\x85\xc7\xfd!\x86\xfd.\xcf\x98\x888\xb8F-\xbf\xa59l\xc5\x1f\x00l\x0e\xe9\xd2o\x14G\x01\xa8X'}]}, 0x104) getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x8, 0x20200, 0xe5e1}, &(0x7f0000000240)=0x10) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) 3.569219005s ago: executing program 0 (id=2703): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0) sync_file_range(r8, 0x0, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$TCFLSH(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)) 2.709695159s ago: executing program 1 (id=2704): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f00000000c0)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000180)=0x207f, 0x4) shutdown(0xffffffffffffffff, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @tid=r2}, &(0x7f0000000100)) madvise(&(0x7f0000a2e000/0x3000)=nil, 0xffffffffdf5d1fff, 0x18) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086a05e500000000000001090224000100000000090400000103000000092100000001220b00090681030000000000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0xc2604110, 0x40944f9c780000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r5, 0x1) listen(r5, 0x0) listen(r5, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010004b040000", @ANYRES32=0x0, @ANYBLOB="0000000000009dd3f781701300001e001280a810eb04fd0b00010162726964676500000c0002800800080088a8ffff0a000100aaaa04"], 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$pppoe(0x18, 0x1, 0x0) 2.256236288s ago: executing program 2 (id=2705): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x3a, 0x40, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000139209f422ca2f1d3568c599f830b1f821bc25fa46eaf53917fbae01ac86e06a0af31a9167ac93666cbfce317f4d89438ada20492c7e787769ae367b057e255f9fc7fcd3678acf258357e1e5a90d17a85ed2bb685014e05fe9dd53656818b650ff910557ae37262d1202049fd3e46740a84e730119514262213ed7957fbdbfb2aa975531396fdcd06430f49d3102697a185091e299fd98504173205364a390622b72d5b169249a81bc558643f18c4fe15d272375fec5f59124a968"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r2 = syz_open_procfs(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) mq_timedreceive(0xffffffffffffffff, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@secondary) keyctl$search(0xa, r3, &(0x7f0000000140)='keyring\x00', 0x0, r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) 1.926264236s ago: executing program 2 (id=2706): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000040)={@my=0x0}) syz_io_uring_setup(0x231, &(0x7f0000000180)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000100)) 1.072557209s ago: executing program 0 (id=2707): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x62, 0x5, 0x348, 0x700, 0x250, 0xffffffff, 0x188, 0xe0, 0x308, 0x308, 0xffffffff, 0x308, 0x308, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'veth0\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x3, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x300, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00'}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@mcast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f27", 0x96, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 1.010440634s ago: executing program 2 (id=2708): socket$nl_generic(0x10, 0x3, 0x10) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0x2, 0x4, 0x388, 0xffffffff, 0x1e8, 0x0, 0x1e8, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@mcast1, @loopback, [], [], 'netdevsim0\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b667f173dfa40b58c10327e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r4 = openat$random(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0x14fe, &(0x7f0000002ac0)="$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") r5 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$RNDADDENTROPY(r4, 0x40085203, 0x0) 219.730751ms ago: executing program 1 (id=2709): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000006bb7290a0000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000040)={0x300}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000b, 0x59033, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)) sendmmsg$inet6(r2, &(0x7f0000001740)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x3f}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000001c0)='E', 0x1}], 0x1}}], 0x2, 0x0) 0s ago: executing program 2 (id=2710): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$dupfd(r1, 0x0, r0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000700)={&(0x7f0000000000)=@qipcrtr, 0x80, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) add_key$user(&(0x7f0000002800), &(0x7f0000002840)={'syz', 0x1}, &(0x7f0000002880)="bef45aa3a0cc6bd954c9941bb977e089e8685272a6a08bb61d94f0e7eb36ee", 0x1f, 0xfffffffffffffff8) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x228a075, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x0, 0x0}) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000340)=0x6e, 0x0) accept$unix(r4, &(0x7f0000000200)=@abs, &(0x7f0000000040)=0x6e) socket$phonet_pipe(0x23, 0x5, 0x2) io_setup(0x1, &(0x7f0000001740)) openat$dir(0xffffffffffffff9c, &(0x7f00000028c0)='./file0\x00', 0x2001, 0x0) add_key$user(&(0x7f0000002900), &(0x7f0000002940)={'syz', 0x1}, &(0x7f0000002980)="b1c5f76a082bf29b3f5eba11ad1bbc5bfd083f3b27b37fff14eab5af21c09890eeea1afa4dd1bb61b4e3d6cd4bef352b7f406c387211b896936429d89a2d6fb6f636a903e137d42d6225558f1995a418b721be56b38b588d97baa97348e600", 0x5f, 0xfffffffffffffffc) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000040)={0xf0f000}) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x2a100) ioctl$VIDIOC_G_SELECTION(r5, 0xc02c5625, 0x0) keyctl$unlink(0x16, 0x0, 0xfffffffffffffffd) ioctl$FS_IOC_GETFSLABEL(r3, 0x5411, &(0x7f0000000100)) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f00000001c0)='./file2\x00', 0x2000000, &(0x7f0000000000)=ANY=[], 0x7e, 0x1e8, &(0x7f0000000200)="$eJzsmL+r01AUx7/3Jua9JyK4vMHFwQc+0ZcmKUqXDhUEJxFaf01abCy1aSttBBtwKC4uujkILg7+Aw4OnRzc/BN0UEFwsKNz5Ca37W2TtlpTHDyf4fR77zn33nNO4QwBQRD/LV+//Pz89EKhchbAEexhS+5/1wDGYs2V+E8vHpx5Xrz48s3H1+/bRx8N5+8TR8JwdmN7yfs6gHclDf7kpZnT2JO/FfCJvgqO01JfB4Mp9W1wXJPaBcNNqe8puiPiTfNuw3PNOx2vJoQljC2MI0x+Pr/RgKEm12EYhkzx9/pBs+p5blcRuvSluNYSk8eau6n9G5U4ikp+oos3njweiPW4N5bSPxsctiwiD4ay3C9ga9ybuCVK/cf16f1aov7UakWocKwqcjuLHqWKYwfrHd/P8M/rB8BCl+jkhmqfEXqG5STF5d+t4tnmK/17sTsafki6vv37xDYldhA0OTK/eTqfwlcMp5T5pCvzI+e37ud6/eCg0arW3brbdpz8eYvBOufkokEU28Tcm86/nWg+HVbuP7Qg1uAGHlZ9v2vH1mBy7cRWmbjlt50ft+QxH5cAnIwXYmwaC7MBmBHH8ChWqH1tSThBEARBEARBEARBEARBEMQfcAIs+gq6AudKFP0rAAD//75JbYU=") kernel console output (not intermixed with test programs): keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 1450.778483][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1450.796947][ T4390] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1450.807832][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1450.866326][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1450.886665][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1450.919300][T15629] loop4: detected capacity change from 0 to 2048 [ 1450.929170][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1450.948123][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1450.975614][T15294] device veth0_vlan entered promiscuous mode [ 1450.994749][T15294] device veth1_vlan entered promiscuous mode [ 1451.059372][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1451.087218][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1451.106757][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1451.122313][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1451.143527][T15294] device veth0_macvtap entered promiscuous mode [ 1451.181819][T15294] device veth1_macvtap entered promiscuous mode [ 1451.222847][T15294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1451.241747][T15294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.261779][T15294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1451.291472][T15294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.311554][T15294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1451.331447][T15294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.351530][T15294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1451.371462][T15294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.385551][T15294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1451.415075][T15294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1451.446396][T15294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.461908][T15294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1451.476933][T15294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.488891][T15294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1451.521047][T15294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.541307][T15294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1451.557165][T15294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.568790][ T9897] usb 5-1: USB disconnect, device number 38 [ 1451.582347][T15294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1451.611134][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1451.622606][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1451.637056][ T9897] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1451.648495][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1451.657866][ T9897] keyspan 5-1:0.0: device disconnected [ 1451.664425][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1451.694782][T15294] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.709751][T15294] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.719166][T15294] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.736133][T15294] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.994813][T15652] loop4: detected capacity change from 0 to 512 [ 1452.034262][T15652] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1452.059912][ T5917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1452.082981][ T5917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1452.089175][T15652] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.2380: inline data xattr refers to an external xattr inode [ 1452.115410][T15652] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.2380: couldn't read orphan inode 12 (err -117) [ 1452.152907][ T5917] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1452.175326][T15652] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1452.189071][ T5917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1452.199865][ T5917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1452.213941][ T27] audit: type=1326 audit(1728970176.889:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15647 comm="syz.3.2379" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e42b7dff9 code=0x0 [ 1452.435285][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1452.649304][T15662] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.2380: Directory hole found for htree leaf block 0 [ 1452.880691][T15663] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.2380: Directory hole found for htree leaf block 0 [ 1453.065288][T12518] EXT4-fs (loop4): unmounting filesystem. [ 1456.935840][T14887] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1457.286660][T14887] usb 3-1: Using ep0 maxpacket: 32 [ 1457.538740][T14887] usb 3-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=44.fe [ 1457.548532][T14887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.563173][T14887] usb 3-1: config 0 descriptor?? [ 1457.602723][T14887] keyspan 3-1:0.0: Keyspan 1 port adapter converter detected [ 1457.662308][T15705] Bluetooth: MGMT ver 1.22 [ 1457.872942][T14887] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 84 [ 1458.028781][T14887] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 1458.043717][T14887] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 82 [ 1458.051822][T14887] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 1458.060374][T14887] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 1458.097970][T14887] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 1458.123704][T14887] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 1458.148036][T14887] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1458.626568][T15712] loop4: detected capacity change from 0 to 4096 [ 1458.643783][T15712] ntfs: (device loop4): parse_options(): The dmask option requires an argument. [ 1459.050427][T14787] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1459.360556][T15710] loop4: detected capacity change from 0 to 32768 [ 1459.990379][ T4390] usb 3-1: USB disconnect, device number 44 [ 1459.998962][ T4390] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1460.009177][ T4390] keyspan 3-1:0.0: device disconnected [ 1460.162373][T15721] unsupported nla_type 25944 [ 1460.505016][T14887] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1462.186847][T15731] sctp: [Deprecated]: syz.3.2398 (pid 15731) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1462.186847][T15731] Use struct sctp_sack_info instead [ 1462.203619][T14887] usb 2-1: Using ep0 maxpacket: 8 [ 1462.222000][ T9441] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1462.374764][T14887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1463.078648][T14887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1463.089423][T14887] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 1463.099104][T14887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.113045][T14887] usb 2-1: config 0 descriptor?? [ 1463.128012][T15745] loop3: detected capacity change from 0 to 512 [ 1463.142982][T15745] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1463.170439][T15745] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.2401: inline data xattr refers to an external xattr inode [ 1463.189008][T15745] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.2401: couldn't read orphan inode 12 (err -117) [ 1463.201942][ T9441] usb 3-1: Using ep0 maxpacket: 32 [ 1463.207624][T15745] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1463.259752][T14887] usb 2-1: can't set config #0, error -71 [ 1463.267955][T14887] usb 2-1: USB disconnect, device number 60 [ 1463.299098][T15749] loop4: detected capacity change from 0 to 512 [ 1463.366531][ T9441] usb 3-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=44.fe [ 1463.376941][ T9441] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.479928][T15749] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1463.493674][ T9441] usb 3-1: config 0 descriptor?? [ 1465.128120][T15758] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.2401: Directory hole found for htree leaf block 0 [ 1465.148037][T15759] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.2401: Directory hole found for htree leaf block 0 [ 1465.248425][T11438] EXT4-fs (loop3): unmounting filesystem. [ 1465.263918][T15749] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.2403: inline data xattr refers to an external xattr inode [ 1465.271564][ T9441] usb 3-1: can't set config #0, error -71 [ 1465.284882][T15749] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.2403: couldn't read orphan inode 12 (err -117) [ 1465.344992][ T9441] usb 3-1: USB disconnect, device number 45 [ 1465.353294][T15749] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1466.076564][T15773] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.2403: Directory hole found for htree leaf block 0 [ 1466.248149][T15774] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.2403: Directory hole found for htree leaf block 0 [ 1466.567035][T12518] EXT4-fs (loop4): unmounting filesystem. [ 1466.911611][ T3681] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1467.132442][ T27] audit: type=1326 audit(1728970191.519:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15778 comm="syz.2.2407" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e13d7dff9 code=0x0 [ 1467.211632][ T3681] usb 4-1: Using ep0 maxpacket: 32 [ 1467.511685][ T3681] usb 4-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=44.fe [ 1467.536454][ T3681] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1467.621304][ T3681] usb 4-1: config 0 descriptor?? [ 1467.754720][ T3681] keyspan 4-1:0.0: Keyspan 1 port adapter converter detected [ 1467.766276][ T3681] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 84 [ 1467.774785][ T3681] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 1467.801377][ T3681] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 82 [ 1467.809827][ T3681] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 1467.822733][ T3681] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 1467.830422][ T3681] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 1467.839195][ T3681] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 1467.856288][ T3681] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1468.013986][T14887] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1468.043955][T15776] loop3: detected capacity change from 0 to 2048 [ 1468.513961][T14887] usb 5-1: Using ep0 maxpacket: 16 [ 1468.737546][ T14] usb 4-1: USB disconnect, device number 52 [ 1468.761852][ T14] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1468.789998][ T14] keyspan 4-1:0.0: device disconnected [ 1469.432705][T14887] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 1469.475252][T14887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.628470][T14887] usb 5-1: Product: syz [ 1469.633667][T14887] usb 5-1: Manufacturer: syz [ 1469.638575][T14887] usb 5-1: SerialNumber: syz [ 1471.962304][T15816] binder: 15806:15816 ioctl c0306201 0 returned -14 [ 1472.690156][T14887] usb 5-1: config 0 descriptor?? [ 1474.300326][ T27] audit: type=1326 audit(1728970198.569:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15826 comm="syz.3.2420" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e42b7dff9 code=0x0 [ 1474.788022][T14887] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1474.801630][ T37] usb 5-1: Failed to submit usb control message: -71 [ 1474.826104][ T37] usb 5-1: unable to send the bmi data to the device: -71 [ 1474.883336][T15845] loop4: detected capacity change from 0 to 4096 [ 1475.156770][T14887] usb 5-1: USB disconnect, device number 39 [ 1475.563126][T15845] NILFS (loop4): invalid segment: Checksum error in segment payload [ 1475.571154][T15845] NILFS (loop4): trying rollback from an earlier position [ 1475.603953][ T37] usb 5-1: unable to get target info from device [ 1475.611021][ T37] usb 5-1: could not get target info (-71) [ 1475.617892][ T37] usb 5-1: could not probe fw (-71) [ 1476.059305][T15845] NILFS (loop4): recovery complete [ 1476.191454][T15860] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1476.701520][T14887] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1476.961533][T14887] usb 4-1: Using ep0 maxpacket: 32 [ 1477.765124][T14887] usb 4-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=44.fe [ 1477.782206][T14887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1477.816748][T14887] usb 4-1: config 0 descriptor?? [ 1478.472043][T14887] keyspan 4-1:0.0: Keyspan 1 port adapter converter detected [ 1478.479579][T14887] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 84 [ 1478.496222][T14887] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 1478.512001][T14887] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 82 [ 1478.520370][T14887] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 1478.529565][T14887] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 1478.544153][T14887] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 1478.570966][T14887] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 1478.632497][T14887] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1478.643917][T15861] loop3: detected capacity change from 0 to 2048 [ 1478.968080][T15883] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2432'. [ 1480.274118][ T4390] usb 4-1: USB disconnect, device number 53 [ 1480.295675][ T4390] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1480.341262][ T4390] keyspan 4-1:0.0: device disconnected [ 1480.904878][ T27] audit: type=1326 audit(1728970205.569:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15905 comm="syz.0.2435" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd0e377dff9 code=0x0 [ 1483.381125][T15927] overlayfs: failed to get inode (-116) [ 1483.388265][T15927] overlayfs: failed to get inode (-116) [ 1483.394123][T15927] overlayfs: failed to get inode (-116) [ 1483.399924][T15927] overlayfs: failed to get inode (-116) [ 1484.271724][ T27] audit: type=1326 audit(1728970208.889:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15919 comm="syz.3.2441" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e42b7dff9 code=0x0 [ 1486.212194][T15944] loop3: detected capacity change from 0 to 128 [ 1487.925799][T15958] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2449'. [ 1488.784536][ T5275] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1489.313578][ T5275] usb 3-1: Using ep0 maxpacket: 32 [ 1489.466658][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.512259][ T5275] usb 3-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=44.fe [ 1489.541616][ T5275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1489.592442][ T5275] usb 3-1: config 0 descriptor?? [ 1489.793435][ T5275] keyspan 3-1:0.0: Keyspan 1 port adapter converter detected [ 1489.795166][ T5275] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 84 [ 1491.093084][T15968] vhci_hcd: invalid port number 129 [ 1491.093106][T15968] vhci_hcd: default hub control req: 0200 v0000 i0081 l0 [ 1491.134883][T15966] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1491.405922][ T5275] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 1491.476135][ T5275] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 82 [ 1491.522312][ T5275] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 1491.561001][ T5275] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 1491.604367][ T5275] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 1491.641563][ T5275] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 1492.477572][ T5275] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1492.490836][ T5275] usb 3-1: USB disconnect, device number 46 [ 1492.498412][ T5275] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1492.508120][ T5275] keyspan 3-1:0.0: device disconnected [ 1492.765182][T15979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2455'. [ 1492.821894][ T27] audit: type=1326 audit(1728970217.489:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15974 comm="syz.4.2454" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb8177dff9 code=0x0 [ 1492.878677][T15979] device bond1 entered promiscuous mode [ 1492.963831][T15979] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1492.977989][T15981] netlink: 'syz.4.2454': attribute type 17 has an invalid length. [ 1493.039160][T15977] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1493.077775][ T27] audit: type=1326 audit(1728970217.749:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15978 comm="syz.2.2456" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e13d7dff9 code=0x0 [ 1493.152049][T15977] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1493.218495][T15977] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 1493.232572][ T3650] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1493.244695][ T3650] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1493.268446][ T3650] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1493.280562][ T3650] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1493.289023][ T3650] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1493.296941][ T3650] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1493.685634][T11333] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 1495.417381][T11333] Bluetooth: hci5: command tx timeout [ 1496.742950][ T27] audit: type=1326 audit(1728970221.419:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16013 comm="syz.4.2462" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb8177dff9 code=0x0 [ 1498.487286][T11333] Bluetooth: hci5: command tx timeout [ 1498.516770][T15991] chnl_net:caif_netlink_parms(): no params data found [ 1498.861798][T11267] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1498.998073][ T3728] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.141727][T11267] usb 2-1: Using ep0 maxpacket: 32 [ 1499.281735][T11267] usb 2-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=44.fe [ 1499.355616][T11267] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.434568][T11267] usb 2-1: config 0 descriptor?? [ 1499.449270][ T3728] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.482786][T11267] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected [ 1499.507855][T11267] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 84 [ 1499.531001][T11267] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 1499.538926][T11267] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 82 [ 1499.553872][T11267] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 1499.578664][T11267] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 1499.614482][T11267] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 1499.639753][T11267] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 1499.721927][ T3728] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.738537][T11267] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1500.468422][T16049] loop4: detected capacity change from 0 to 1024 [ 1500.506320][T16049] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1500.510150][T15991] bridge0: port 1(bridge_slave_0) entered blocking state [ 1500.522941][T11333] Bluetooth: hci5: command tx timeout [ 1500.571138][T15991] bridge0: port 1(bridge_slave_0) entered disabled state [ 1500.590802][T16049] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1500.592940][T15991] device bridge_slave_0 entered promiscuous mode [ 1500.619150][T15991] bridge0: port 2(bridge_slave_1) entered blocking state [ 1500.627521][T15991] bridge0: port 2(bridge_slave_1) entered disabled state [ 1500.642476][T15991] device bridge_slave_1 entered promiscuous mode [ 1500.902717][T16060] nfs: Unknown parameter '*;S]G îðÀ/Éý.žD' [ 1501.147730][ T4390] usb 2-1: USB disconnect, device number 61 [ 1501.193135][T16059] loop3: detected capacity change from 0 to 4096 [ 1501.207465][T16059] NILFS (loop3): invalid segment: Checksum error in segment payload [ 1501.215828][T16059] NILFS (loop3): trying rollback from an earlier position [ 1501.225119][ T4390] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1501.236721][T16059] NILFS (loop3): recovery complete [ 1501.255145][ T4390] keyspan 2-1:0.0: device disconnected [ 1501.357984][ T3728] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.371040][T16062] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1501.757098][T15991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1502.044454][T15991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1502.604158][T11333] Bluetooth: hci5: command tx timeout [ 1502.800931][T15991] team0: Port device team_slave_0 added [ 1502.810083][T12518] EXT4-fs (loop4): unmounting filesystem. [ 1502.857105][T15991] team0: Port device team_slave_1 added [ 1503.055075][T15991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1503.090996][T15991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1505.101784][T15991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1505.328782][T15991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1505.491028][T16101] ubi0: attaching mtd0 [ 1505.497596][T16101] ubi0: scanning is finished [ 1505.502271][T16101] ubi0: empty MTD device detected [ 1506.249025][T15991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1506.487031][T16101] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1506.597896][T15991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1506.878252][ T3650] Bluetooth: hci0: unexpected event 0x08 length: 78 > 4 [ 1506.889624][T15991] device hsr_slave_0 entered promiscuous mode [ 1506.915721][ T27] audit: type=1326 audit(1728970231.589:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16106 comm="syz.1.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d20b7dff9 code=0x7ffc0000 [ 1506.939636][T15991] device hsr_slave_1 entered promiscuous mode [ 1506.947362][ T27] audit: type=1326 audit(1728970231.609:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16106 comm="syz.1.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d20b7dff9 code=0x7ffc0000 [ 1506.969684][ C1] vkms_vblank_simulate: vblank timer overrun [ 1506.979561][T15991] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1506.989958][ T3650] Bluetooth: hci0: unexpected event 0x31 length: 10 > 6 [ 1506.993049][T15991] Cannot create hsr debugfs directory [ 1507.039332][ T27] audit: type=1326 audit(1728970231.609:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16106 comm="syz.1.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6d20b7dff9 code=0x7ffc0000 [ 1507.074204][ T27] audit: type=1326 audit(1728970231.609:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16106 comm="syz.1.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d20b7dff9 code=0x7ffc0000 [ 1507.156275][ T27] audit: type=1326 audit(1728970231.609:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16106 comm="syz.1.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d20b7dff9 code=0x7ffc0000 [ 1507.216638][ T27] audit: type=1326 audit(1728970231.649:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16106 comm="syz.1.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d20b7dff9 code=0x7ffc0000 [ 1507.249121][ T27] audit: type=1326 audit(1728970231.649:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16106 comm="syz.1.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d20b7dff9 code=0x7ffc0000 [ 1507.272130][ T27] audit: type=1326 audit(1728970231.649:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16106 comm="syz.1.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d20b7dff9 code=0x7ffc0000 [ 1507.294794][ T27] audit: type=1326 audit(1728970231.649:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16106 comm="syz.1.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d20b7dff9 code=0x7ffc0000 [ 1507.317116][ C1] vkms_vblank_simulate: vblank timer overrun [ 1507.414588][ T27] audit: type=1326 audit(1728970231.649:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16106 comm="syz.1.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d20b7dff9 code=0x7ffc0000 [ 1507.436919][ C1] vkms_vblank_simulate: vblank timer overrun [ 1508.561627][ T5275] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1508.812690][ T5275] usb 2-1: Using ep0 maxpacket: 32 [ 1509.046553][T15991] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1509.071649][ T5275] usb 2-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=44.fe [ 1509.088504][ T5275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.188638][T16145] loop3: detected capacity change from 0 to 256 [ 1509.635823][ T5275] usb 2-1: config 0 descriptor?? [ 1509.823250][T16145] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2482'. [ 1509.852731][ T5275] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected [ 1509.860239][ T5275] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 84 [ 1509.877032][ T5275] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 1509.893493][ T5275] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 82 [ 1509.901195][ T5275] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 1509.941515][ T5275] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 1509.949161][ T5275] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 1509.967535][ T5275] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 1509.991729][ T5275] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1510.017171][T15991] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1510.188178][ T3728] device hsr_slave_0 left promiscuous mode [ 1510.218274][ T3728] device hsr_slave_1 left promiscuous mode [ 1510.242092][ T3728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1510.259998][ T3728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1510.281160][ T3728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1510.308685][ T3728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1510.317420][ T3728] device bridge_slave_1 left promiscuous mode [ 1510.426567][T16154] loop3: detected capacity change from 0 to 1024 [ 1510.451319][T16154] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1510.508150][ T3728] bridge0: port 2(bridge_slave_1) entered disabled state [ 1510.695972][ T3728] device bridge_slave_0 left promiscuous mode [ 1510.893126][ T3728] bridge0: port 1(bridge_slave_0) entered disabled state [ 1511.176247][ T3639] usb 2-1: USB disconnect, device number 62 [ 1511.194201][ T3639] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1511.238273][ T3639] keyspan 2-1:0.0: device disconnected [ 1511.259128][ T3728] device veth1_macvtap left promiscuous mode [ 1511.265884][ T3728] device veth0_macvtap left promiscuous mode [ 1511.278623][ T3728] device veth1_vlan left promiscuous mode [ 1511.284774][ T3728] device veth0_vlan left promiscuous mode [ 1513.907016][T16170] loop4: detected capacity change from 0 to 8 [ 1513.969646][T16170] Page size > filesystem block size (0). This is currently not supported! [ 1516.836125][T16186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2491'. [ 1517.932508][ T27] kauditd_printk_skb: 24 callbacks suppressed [ 1517.932798][ T27] audit: type=1326 audit(1728970242.529:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16190 comm="syz.4.2494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb8177dff9 code=0x7ffc0000 [ 1518.226208][ T27] audit: type=1326 audit(1728970242.529:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16190 comm="syz.4.2494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb8177dff9 code=0x7ffc0000 [ 1518.291352][ T27] audit: type=1326 audit(1728970242.529:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16190 comm="syz.4.2494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feb8177ff17 code=0x7ffc0000 [ 1518.314206][ C1] vkms_vblank_simulate: vblank timer overrun [ 1518.328917][ T27] audit: type=1326 audit(1728970242.529:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16190 comm="syz.4.2494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7feb8177fe8c code=0x7ffc0000 [ 1518.358843][ T27] audit: type=1326 audit(1728970242.529:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16190 comm="syz.4.2494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7feb8177fdc4 code=0x7ffc0000 [ 1518.514781][ T27] audit: type=1326 audit(1728970242.529:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16190 comm="syz.4.2494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7feb8177fdc4 code=0x7ffc0000 [ 1518.579953][ T27] audit: type=1326 audit(1728970242.529:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16190 comm="syz.4.2494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7feb8177cc8a code=0x7ffc0000 [ 1518.632739][ T27] audit: type=1326 audit(1728970242.539:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16190 comm="syz.4.2494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb8177dff9 code=0x7ffc0000 [ 1518.668139][ T27] audit: type=1326 audit(1728970242.539:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16190 comm="syz.4.2494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb8177dff9 code=0x7ffc0000 [ 1518.673069][T11333] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1518.720984][T11333] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1518.735605][T11333] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1518.785686][T11333] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1518.793537][T11333] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1518.800923][T11333] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1518.818360][ T3728] team0 (unregistering): Port device team_slave_1 removed [ 1518.897219][ T3728] team0 (unregistering): Port device team_slave_0 removed [ 1518.946999][ T3728] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1518.998201][ T3728] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1519.131548][ T3683] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1519.371579][ T3683] usb 2-1: Using ep0 maxpacket: 32 [ 1519.498130][ T3683] usb 2-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=44.fe [ 1519.513472][ T3683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1519.527408][ T3683] usb 2-1: config 0 descriptor?? [ 1519.576910][ T3683] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected [ 1519.578743][ T3728] bond0 (unregistering): Released all slaves [ 1519.590542][ T3683] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 84 [ 1519.606031][ T3683] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 1519.614258][ T3683] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 82 [ 1519.622607][ T3683] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 1519.632514][ T3683] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 1519.642402][ T3683] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 1519.650140][ T3683] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 1519.659455][ T3683] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1519.699713][T15991] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1519.709892][T15991] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1519.831852][T16193] device batadv_slave_1 entered promiscuous mode [ 1520.328557][T16212] loop3: detected capacity change from 0 to 1024 [ 1520.443992][T16212] syz.3.2496: attempt to access beyond end of device [ 1520.443992][T16212] loop3: rw=34817, sector=5778, nr_sectors = 2 limit=1024 [ 1520.469559][T16212] syz.3.2496: attempt to access beyond end of device [ 1520.469559][T16212] loop3: rw=34817, sector=0, nr_sectors = 2560 limit=1024 [ 1520.852402][T11333] Bluetooth: hci1: command tx timeout [ 1520.942552][T16194] device batadv_slave_1 left promiscuous mode [ 1521.019079][ T4390] usb 2-1: USB disconnect, device number 63 [ 1521.077772][ T4390] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1521.122212][ T4390] keyspan 2-1:0.0: device disconnected [ 1521.198306][T15991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1521.291034][T16198] chnl_net:caif_netlink_parms(): no params data found [ 1521.324765][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1521.340256][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1521.740566][T15991] 8021q: adding VLAN 0 to HW filter on device team0 [ 1522.292507][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1522.332712][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1522.351620][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 1522.358745][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1522.366908][ T27] audit: type=1326 audit(1728970246.999:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16220 comm="syz.3.2497" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e42b7dff9 code=0x0 [ 1522.410120][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1522.553975][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1522.562792][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1522.589783][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 1522.596951][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1522.606741][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1522.615675][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1522.640022][T15991] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1522.650860][T15991] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1522.691817][T16235] loop4: detected capacity change from 0 to 512 [ 1522.722211][T16235] EXT4-fs: Ignoring removed mblk_io_submit option [ 1522.732698][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1522.755574][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1522.794869][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1523.041791][ T3650] Bluetooth: hci1: command tx timeout [ 1523.050683][T16235] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1523.229914][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1523.318989][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1523.381348][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1523.419245][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1523.448423][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1523.459898][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1523.478207][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1523.533080][T16235] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 1523.541095][T16235] System zones: 1-12 [ 1523.560068][T16235] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.2499: corrupted in-inode xattr [ 1523.591594][T16248] input: syz0 as /devices/virtual/input/input28 [ 1523.616505][T16235] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.2499: couldn't read orphan inode 15 (err -117) [ 1523.699497][T16235] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1523.805500][T16198] bridge0: port 1(bridge_slave_0) entered blocking state [ 1523.847818][T16198] bridge0: port 1(bridge_slave_0) entered disabled state [ 1523.890449][T16198] device bridge_slave_0 entered promiscuous mode [ 1523.951492][T16198] bridge0: port 2(bridge_slave_1) entered blocking state [ 1523.963572][T16198] bridge0: port 2(bridge_slave_1) entered disabled state [ 1523.993419][T16198] device bridge_slave_1 entered promiscuous mode [ 1524.001882][T16235] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz.4.2499: No space for directory leaf checksum. Please run e2fsck -D. [ 1524.058208][T15991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1524.065687][T16235] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #11: comm syz.4.2499: checksumming directory block 0 [ 1524.079871][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1524.096356][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1524.214123][T12518] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5882: Out of memory [ 1524.273792][T12518] EXT4-fs error (device loop4): ext4_dirty_inode:6086: inode #2: comm syz-executor: mark_inode_dirty error [ 1524.275775][ T3728] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1524.323060][T12518] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 1524.348660][T12518] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 0 [ 1524.372159][T16198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1524.394294][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1524.407025][T12518] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 1524.412219][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1524.429066][T12518] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 1524.451834][ T27] audit: type=1800 audit(1728970249.119:490): pid=16253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2502" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1524.480246][T12518] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 1524.538107][T15991] device veth0_vlan entered promiscuous mode [ 1524.571859][T12518] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 2048 [ 1524.615496][T12518] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 1524.657107][T12518] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 3072 [ 1524.675293][T16198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1524.790655][T12518] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 1524.967817][T12518] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 4096 [ 1525.006193][ T3728] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.016686][T12518] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 1525.032541][T12518] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 5120 [ 1525.203044][ T3650] Bluetooth: hci1: command tx timeout [ 1527.231721][T12518] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 1527.287228][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1527.287834][T12518] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 6144 [ 1527.295888][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1527.319688][T15991] device veth1_vlan entered promiscuous mode [ 1527.322931][ T3650] Bluetooth: hci1: command tx timeout [ 1527.332640][T12518] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 1527.380695][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1527.405438][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1527.414249][T12518] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 1527.528524][ T3728] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1528.668527][T16198] team0: Port device team_slave_0 added [ 1528.965558][T16198] team0: Port device team_slave_1 added [ 1529.011808][T12518] EXT4-fs warning: 98 callbacks suppressed [ 1529.011825][T12518] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 1529.042697][T12518] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 1529.144766][ T3728] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.167927][T12518] EXT4-fs error: 103 callbacks suppressed [ 1529.167945][T12518] EXT4-fs error (device loop4): ext4_empty_dir:3137: inode #11: comm syz-executor: Directory block failed checksum [ 1529.192180][T12518] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 1529.208804][T12518] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 0 [ 1529.225403][T12518] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 1529.246319][T16198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1529.253987][T12518] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 1529.274216][T16198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1529.303072][T12518] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 1529.328884][T16198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1529.340129][T12518] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 2048 [ 1529.356872][T16198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1529.366328][T12518] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 1529.421470][T16198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1529.503038][T12518] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 3072 [ 1529.551477][T16198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1529.579880][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1529.581882][T12518] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 1529.598936][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1529.641473][T12518] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 4096 [ 1529.982781][T12518] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 1530.019954][T15991] device veth0_macvtap entered promiscuous mode [ 1530.313334][T12518] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 5120 [ 1530.383573][T16198] device hsr_slave_0 entered promiscuous mode [ 1530.400626][T16198] device hsr_slave_1 entered promiscuous mode [ 1530.539203][T12518] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 1530.571250][T16198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1530.601415][T12518] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 6144 [ 1530.611520][T16198] Cannot create hsr debugfs directory [ 1530.625814][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1530.638779][T16313] loop3: detected capacity change from 0 to 512 [ 1530.775451][T12518] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 1530.817362][T16313] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1530.954475][T15991] device veth1_macvtap entered promiscuous mode [ 1530.990417][T12518] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 7168 [ 1531.090910][T16313] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.2509: inline data xattr refers to an external xattr inode [ 1531.270867][T12518] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 1531.292211][T16313] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.2509: couldn't read orphan inode 12 (err -117) [ 1531.363911][T16313] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1531.641023][T15991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1531.755140][T16323] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.2509: Directory hole found for htree leaf block 0 [ 1531.778348][T16323] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.2509: Directory hole found for htree leaf block 0 [ 1531.945274][T15991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1532.044500][T15991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1532.169880][T15991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1532.225796][T15991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1532.251489][T15991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1532.278106][T15991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1532.301512][T15991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1532.334011][T15991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1532.345875][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1532.362079][T11438] EXT4-fs (loop3): unmounting filesystem. [ 1532.389859][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1532.403478][ T27] audit: type=1326 audit(1728970257.079:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16318 comm="syz.1.2511" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d20b7dff9 code=0x0 [ 1532.868849][T15991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1532.895011][T15991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1532.932876][T15991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1532.962255][T15991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1532.999873][T15991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1533.048581][T15991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1533.090828][T15991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1533.137282][T15991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1533.162336][T16350] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003 [ 1533.185191][T15991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1533.214454][T12518] EXT4-fs (loop4): unmounting filesystem. [ 1533.261787][T16334] netlink: 'syz.1.2513': attribute type 12 has an invalid length. [ 1533.501522][ T3684] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1533.521869][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1533.540926][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1533.582674][T15991] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1533.601444][T15991] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1533.610179][T15991] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1533.631455][T15991] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1533.869542][T11333] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1533.900059][ T3684] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1533.916239][T11333] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1533.925420][T11333] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1533.928627][ T3684] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1533.945549][ T8351] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1533.953892][ T8351] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1533.963614][ T8351] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1533.973444][ T3684] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1533.983251][ T3684] usb 2-1: config 0 descriptor?? [ 1534.089945][T16345] device pim6reg1 entered promiscuous mode [ 1534.117906][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1534.180284][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1534.255542][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1534.307025][ T9385] usb 2-1: USB disconnect, device number 64 [ 1534.445867][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1534.465880][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1534.532781][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1534.976449][T16198] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1534.997479][T16198] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1535.082092][T16198] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1535.110401][T16356] chnl_net:caif_netlink_parms(): no params data found [ 1535.230491][T16198] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1536.142885][T16388] hub 9-0:1.0: USB hub found [ 1536.154464][T16388] hub 9-0:1.0: 8 ports detected [ 1536.279883][ T8351] Bluetooth: hci2: command tx timeout [ 1536.416776][ T3728] device hsr_slave_0 left promiscuous mode [ 1536.472011][ T3728] device hsr_slave_1 left promiscuous mode [ 1536.652113][ T3728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1536.659574][ T3728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1536.702199][ T3728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1537.559130][ T3728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1537.898763][ T3728] device veth1_macvtap left promiscuous mode [ 1537.919752][ T3728] device veth0_macvtap left promiscuous mode [ 1537.941583][ T3728] device veth1_vlan left promiscuous mode [ 1537.959700][ T3728] device veth0_vlan left promiscuous mode [ 1538.126297][ T27] audit: type=1326 audit(1728970262.799:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16401 comm="syz.0.2521" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbdc877dff9 code=0x0 [ 1538.361533][ T8351] Bluetooth: hci2: command tx timeout [ 1538.621732][ T27] audit: type=1326 audit(1728970263.219:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16407 comm="syz.3.2522" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e42b7dff9 code=0x0 [ 1539.431532][T16428] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 1540.095785][ T3728] team0 (unregistering): Port device team_slave_1 removed [ 1540.201490][ T3728] team0 (unregistering): Port device team_slave_0 removed [ 1540.261001][ T3728] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1540.321281][ T3728] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1540.444807][ T8351] Bluetooth: hci2: command tx timeout [ 1540.918269][ T3728] bond0 (unregistering): Released all slaves [ 1540.953784][T16356] bridge0: port 1(bridge_slave_0) entered blocking state [ 1540.960904][T16356] bridge0: port 1(bridge_slave_0) entered disabled state [ 1540.969158][T16356] device bridge_slave_0 entered promiscuous mode [ 1540.981542][T16356] bridge0: port 2(bridge_slave_1) entered blocking state [ 1540.988627][T16356] bridge0: port 2(bridge_slave_1) entered disabled state [ 1541.008687][T16356] device bridge_slave_1 entered promiscuous mode [ 1541.171284][T16356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1541.292128][T16356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1541.311611][T16439] Option '[¢ yò$ [ 1541.311611][T16439] ÿø>ÖÚŽœáTkõ­­SÆ@SœV•ÿfhJ' to dns_resolver key: bad/missing value [ 1541.327747][T16198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1542.134158][T16439] fuse: Bad value for 'fd' [ 1542.391272][T16356] team0: Port device team_slave_0 added [ 1542.400903][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1542.416855][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1542.544648][T11333] Bluetooth: hci2: command tx timeout [ 1542.691788][ T3650] Bluetooth: hci0: command 0x0406 tx timeout [ 1542.904938][T16198] 8021q: adding VLAN 0 to HW filter on device team0 [ 1543.073282][T16356] team0: Port device team_slave_1 added [ 1543.081202][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1543.093504][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1543.131922][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 1543.139056][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1543.343101][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1543.352943][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1543.367053][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1543.399242][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 1543.406415][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1543.417389][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1543.432881][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1543.469428][T16356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1543.481136][T16356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1543.509296][T16356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1543.522200][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1543.538078][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1543.552942][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1543.597463][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1543.625055][T16458] mkiss: ax0: crc mode is auto. [ 1543.625270][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1543.640097][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1543.648926][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1543.659310][T16356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1543.670931][T16356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1543.701459][T16356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1543.731155][ T5917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1543.745290][ T5917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1543.756736][T16198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1543.880826][T16356] device hsr_slave_0 entered promiscuous mode [ 1543.907845][T16356] device hsr_slave_1 entered promiscuous mode [ 1544.409609][T16466] vhci_hcd: invalid port number 129 [ 1544.415490][T16466] vhci_hcd: default hub control req: 0200 v0000 i0081 l0 [ 1544.879579][ T3728] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.819879][T16476] loop3: detected capacity change from 0 to 512 [ 1546.125798][T16476] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1546.135357][T16476] ext4 filesystem being mounted at /211/bus supports timestamps until 2038 (0x7fffffff) [ 1547.567503][T16487] overlayfs: conflicting lowerdir path [ 1548.022538][T11438] EXT4-fs (loop3): unmounting filesystem. [ 1548.157191][ T8351] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1548.205513][ T8351] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1548.214864][ T8351] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1548.283669][ T3728] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1548.295168][ T8351] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1548.306759][ T8351] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1548.314492][ T8351] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1548.381616][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1548.389113][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1549.169895][ T3728] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.188057][T16198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1549.350344][ T3728] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.493770][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1549.505933][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1549.515454][T16489] chnl_net:caif_netlink_parms(): no params data found [ 1549.661743][T16506] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1550.266431][T16198] device veth0_vlan entered promiscuous mode [ 1550.306369][ T5917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1550.327825][ T5917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1550.344136][ T5917] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1550.361886][T16512] loop3: detected capacity change from 0 to 256 [ 1550.369862][ T8351] Bluetooth: hci0: command tx timeout [ 1550.387673][ T5917] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1550.432610][T14787] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1550.597969][T16198] device veth1_vlan entered promiscuous mode [ 1550.856936][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 1550.922872][T16519] nfs4: Unexpected value for 'rdma' [ 1551.274279][T16198] device veth0_macvtap entered promiscuous mode [ 1551.338499][T16489] bridge0: port 1(bridge_slave_0) entered blocking state [ 1551.361942][T16489] bridge0: port 1(bridge_slave_0) entered disabled state [ 1551.421113][T16489] device bridge_slave_0 entered promiscuous mode [ 1551.455681][T16526] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2539'. [ 1551.521535][T16526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2539'. [ 1551.536719][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1551.572204][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1551.583289][T16198] device veth1_macvtap entered promiscuous mode [ 1551.590816][T16489] bridge0: port 2(bridge_slave_1) entered blocking state [ 1551.611638][T16528] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2539'. [ 1551.622836][T16489] bridge0: port 2(bridge_slave_1) entered disabled state [ 1551.629996][T16526] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2539'. [ 1551.640775][T16489] device bridge_slave_1 entered promiscuous mode [ 1551.684329][T16526] netlink: 'syz.0.2539': attribute type 1 has an invalid length. [ 1551.725957][T16526] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2539'. [ 1552.441733][ T8351] Bluetooth: hci0: command tx timeout [ 1552.600100][T16545] loop3: detected capacity change from 0 to 256 [ 1552.657597][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1552.938806][T16198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1552.965431][T16198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1553.078797][T16198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1553.198534][T16198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1553.343295][T16198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1553.611441][T16198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1553.661456][T16198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1553.691569][T16198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1553.783092][T16198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1553.884011][T16489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1553.907590][T16489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1554.030291][T15940] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1554.039873][T15940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1554.066230][T16198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1554.224342][T16198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1554.323498][T16198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1554.420731][T16198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1554.509411][T16198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1554.553573][ T8351] Bluetooth: hci0: command tx timeout [ 1554.616760][T16198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1554.727747][T16198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1554.741501][T16198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1554.753911][T16198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1554.889870][T16489] team0: Port device team_slave_0 added [ 1554.897340][T15940] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1554.906578][T15940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1555.630721][T16489] team0: Port device team_slave_1 added [ 1555.663471][T16198] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.680498][T16198] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.689385][T16198] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.699017][T16198] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.781451][T16572] loop3: detected capacity change from 0 to 512 [ 1555.876114][T16489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1555.908838][T16489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1555.935049][T16572] EXT4-fs (loop3): 1 truncate cleaned up [ 1555.940821][T16572] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1555.951454][T16489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1556.109037][T16489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1556.318405][T16489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1556.397159][T16572] EXT4-fs error (device loop3): ext4_lookup:1860: inode #2: comm syz.3.2546: deleted inode referenced: 15 [ 1556.411884][T16489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1556.500096][T16572] EXT4-fs error (device loop3): ext4_lookup:1860: inode #2: comm syz.3.2546: deleted inode referenced: 15 [ 1556.525441][T16489] device hsr_slave_0 entered promiscuous mode [ 1556.540959][T16489] device hsr_slave_1 entered promiscuous mode [ 1556.548253][T16489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1556.581607][T16489] Cannot create hsr debugfs directory [ 1556.602146][ T3650] Bluetooth: hci0: command tx timeout [ 1556.774909][T11438] EXT4-fs (loop3): unmounting filesystem. [ 1560.226099][ T3796] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1560.273353][ T3796] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1560.310117][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1560.364081][T16356] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1560.381481][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1560.389752][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1560.599599][T15940] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1560.612691][T16356] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1560.837041][T16489] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1561.010476][T16608] raw_sendmsg: syz.2.2493 forgot to set AF_INET. Fix it! [ 1561.159578][T16356] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1561.393241][T16610] loop3: detected capacity change from 0 to 512 [ 1561.446054][T16610] EXT4-fs error (device loop3): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1561.488644][T16610] EXT4-fs (loop3): 1 truncate cleaned up [ 1561.499756][T16610] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1561.500511][T16356] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1561.560609][T16489] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1561.656175][ T3728] device hsr_slave_0 left promiscuous mode [ 1561.669687][ T3728] device hsr_slave_1 left promiscuous mode [ 1561.680093][ T3728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1561.697375][ T3728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1561.709135][ T3728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1561.721239][ T3728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1561.770686][ T3728] device veth1_macvtap left promiscuous mode [ 1561.791627][ T3728] device veth0_macvtap left promiscuous mode [ 1561.797767][ T3728] device veth1_vlan left promiscuous mode [ 1561.812487][ T3728] device veth0_vlan left promiscuous mode [ 1561.912150][ T3684] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1562.393618][ T3684] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1562.431862][ T3684] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1562.451491][ T3684] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1562.841585][ T3684] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1562.858193][ T3684] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.866659][ T3684] usb 4-1: Product: syz [ 1562.880782][ T3684] usb 4-1: Manufacturer: syz [ 1562.886079][ T3684] usb 4-1: SerialNumber: syz [ 1563.206181][ T3728] team0 (unregistering): Port device team_slave_1 removed [ 1563.337639][ T3728] team0 (unregistering): Port device team_slave_0 removed [ 1563.461652][ T3728] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1563.759701][ T3728] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1563.778350][ T3684] usb 4-1: USB disconnect, device number 54 [ 1564.482227][T16630] udevd[16630]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1565.056741][T11438] EXT4-fs (loop3): unmounting filesystem. [ 1565.531674][T16638] loop3: detected capacity change from 0 to 512 [ 1565.558066][T16638] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1566.327725][T16638] EXT4-fs (loop3): 1 truncate cleaned up [ 1567.821585][T16638] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1568.033984][T16638] EXT4-fs (loop3): unmounting filesystem. [ 1569.834412][T16656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1569.863509][T16638] loop3: detected capacity change from 0 to 512 [ 1570.461276][T16638] EXT4-fs warning (device loop3): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop3. [ 1571.121610][ T27] audit: type=1326 audit(1728970295.789:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16659 comm="syz.2.2561" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff87e17dff9 code=0x0 [ 1571.243871][ T3684] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1571.355888][ T3728] bond0 (unregistering): Released all slaves [ 1571.463113][T16489] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1571.567478][ T3684] usb 4-1: Using ep0 maxpacket: 32 [ 1571.664646][T16489] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1571.772342][T16356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1571.815470][ T3684] usb 4-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=44.fe [ 1571.824722][ T3684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1571.835006][ T3684] usb 4-1: config 0 descriptor?? [ 1571.850798][T15940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1571.859264][T15940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1571.873855][T16356] 8021q: adding VLAN 0 to HW filter on device team0 [ 1571.890834][ T3684] keyspan 4-1:0.0: Keyspan 1 port adapter converter detected [ 1571.912896][ T3684] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 84 [ 1572.182301][ T3684] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 1572.281063][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1572.331442][ T3684] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 82 [ 1572.347336][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1572.447176][ T3684] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 1572.501939][ T3796] bridge0: port 1(bridge_slave_0) entered blocking state [ 1572.509121][ T3796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1572.533886][T16669] loop3: detected capacity change from 0 to 2048 [ 1572.540424][ T3684] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 1572.561529][ T3684] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 1572.628755][ T3684] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 1572.638436][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1572.687089][ T3684] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1572.696024][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1572.743287][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1572.762538][ T3796] bridge0: port 2(bridge_slave_1) entered blocking state [ 1572.769698][ T3796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1572.822212][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1572.837809][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1572.862295][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1572.884881][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1572.902147][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1572.929199][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1572.947051][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1572.965948][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1572.982130][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1573.082354][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1573.100972][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1573.117272][T16356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1573.319993][T10346] usb 4-1: USB disconnect, device number 55 [ 1573.570050][T10346] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1573.799905][T10346] keyspan 4-1:0.0: device disconnected [ 1574.176089][T16489] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1574.225391][T16489] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1574.272322][T16489] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1574.343503][T16489] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1575.377053][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1575.391134][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1575.439633][T16356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1575.449611][T16705] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2569'. [ 1575.574043][T16489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1575.680290][T16710] binder: 16701:16710 ioctl c0306201 20000680 returned -14 [ 1576.212776][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1576.230580][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1576.254653][T16489] 8021q: adding VLAN 0 to HW filter on device team0 [ 1576.449267][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1576.466379][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1576.485551][T16715] loop3: detected capacity change from 0 to 2048 [ 1576.495820][ T3697] bridge0: port 1(bridge_slave_0) entered blocking state [ 1576.502956][ T3697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1576.735169][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1576.744404][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1576.772917][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1576.784233][ T3697] bridge0: port 2(bridge_slave_1) entered blocking state [ 1576.791380][ T3697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1577.081587][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1577.220220][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1577.405941][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1577.457750][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1577.511164][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1577.538886][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1577.545953][T16722] loop3: detected capacity change from 0 to 512 [ 1577.559112][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1577.587220][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1577.590059][T16722] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1577.604257][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1577.616754][T16722] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.2573: inline data xattr refers to an external xattr inode [ 1577.618725][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1577.638634][T16722] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.2573: couldn't read orphan inode 12 (err -117) [ 1577.643477][T16489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1577.658859][T16722] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1577.927251][T16731] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1577.949141][T16731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2574'. [ 1578.046237][T16730] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.2573: Directory hole found for htree leaf block 0 [ 1578.075182][T16730] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.2573: Directory hole found for htree leaf block 0 [ 1578.381015][T16716] device veth1_to_team entered promiscuous mode [ 1578.678662][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1578.926096][T15940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1578.945401][T15940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1579.031057][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1579.049399][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1579.118395][T16489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1579.132955][T16356] device veth0_vlan entered promiscuous mode [ 1579.140042][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1579.149915][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1579.199542][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1579.208333][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1579.237565][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1579.247826][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1579.306049][T16356] device veth1_vlan entered promiscuous mode [ 1579.318912][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1579.345556][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1579.359577][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1579.376327][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1579.396561][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1579.415860][T16489] device veth0_vlan entered promiscuous mode [ 1579.469758][T16489] device veth1_vlan entered promiscuous mode [ 1579.504433][T15940] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1579.519239][T15940] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1579.529531][T15940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1579.546511][T15940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1579.565100][T11438] EXT4-fs (loop3): unmounting filesystem. [ 1579.707152][T16356] device veth0_macvtap entered promiscuous mode [ 1579.722018][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1579.734492][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1579.783563][T16489] device veth0_macvtap entered promiscuous mode [ 1579.807865][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1579.819482][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1579.838900][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1579.853062][T16356] device veth1_macvtap entered promiscuous mode [ 1579.887305][T16746] loop3: detected capacity change from 0 to 1024 [ 1579.894523][T16746] hfsplus: unable to parse mount options [ 1579.959980][T14787] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1579.992878][T16489] device veth1_macvtap entered promiscuous mode [ 1580.008393][T16356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1580.141298][T16356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1580.158245][T16356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1580.169832][T16356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1580.190085][T16356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1580.221537][T16356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1580.836899][T16356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1580.871518][T16356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1580.909337][T16356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1580.957470][T16489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1580.988483][T16489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1581.025846][T16489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1581.078514][T16489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1581.088809][T16489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1581.099928][T16489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1581.110033][T16489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1581.120909][T16489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1581.130990][T16489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1581.142655][T16489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1581.213964][T16489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1581.310560][T16753] block device autoloading is deprecated and will be removed. [ 1581.960562][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1581.975166][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1582.012416][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1583.634279][T16762] Bluetooth: MGMT ver 1.22 [ 1583.841956][T16764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2581'. [ 1584.572032][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1584.593366][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1584.628795][T16356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1584.660033][T16356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1584.670403][T16356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1584.694453][T16356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1584.711136][T16356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1584.728769][T16356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1584.738949][T16356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1584.756669][T16356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1584.771299][T16356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1584.787916][T16489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1584.809951][T16489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1584.827297][T16489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1584.838273][T16489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1584.855971][T16489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1584.869032][T16489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1584.885984][T16489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1584.898154][T16489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1584.917470][T16489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1584.931073][T16489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1584.949553][T16489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1584.961162][T16489] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.977362][T16489] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.986501][T16489] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.069175][T16489] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.538562][ T3728] device hsr_slave_0 left promiscuous mode [ 1585.545123][ T3728] device hsr_slave_1 left promiscuous mode [ 1585.553603][ T3728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1585.561037][ T3728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1585.569390][ T3728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1585.577002][ T3728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1585.591242][ T3728] device bridge_slave_1 left promiscuous mode [ 1585.600850][T16766] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2583'. [ 1585.602444][ T3728] bridge0: port 2(bridge_slave_1) entered disabled state [ 1585.629812][ T3728] device bridge_slave_0 left promiscuous mode [ 1585.637867][ T3728] bridge0: port 1(bridge_slave_0) entered disabled state [ 1585.817784][T16776] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2584'. [ 1585.835215][ T3728] device veth1_macvtap left promiscuous mode [ 1585.841282][ T3728] device veth0_macvtap left promiscuous mode [ 1585.848296][ T3728] device veth1_vlan left promiscuous mode [ 1585.922111][ T3728] device veth0_vlan left promiscuous mode [ 1586.275989][ T27] audit: type=1326 audit(1728970310.949:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16779 comm="syz.3.2585" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e42b7dff9 code=0x0 [ 1587.042350][ T3728] bond1 (unregistering): Released all slaves [ 1587.538608][ T3728] team0 (unregistering): Port device team_slave_1 removed [ 1587.595851][ T3728] team0 (unregistering): Port device team_slave_0 removed [ 1587.647519][ T3728] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1587.708102][ T3728] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1588.305600][ T3728] bond0 (unregistering): Released all slaves [ 1588.388213][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1588.398853][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1588.407580][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1588.416736][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1588.428327][T16356] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.443291][T16356] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.452865][T16356] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.461898][T16356] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1590.971527][ T3759] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1591.005958][ T3759] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1591.071189][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1591.684088][ T27] audit: type=1326 audit(1728970316.359:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16800 comm="syz.2.2591" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff87e17dff9 code=0x0 [ 1591.747056][T16012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1591.987900][ T5917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1592.013962][T16012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1592.084130][ T5917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1592.124912][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1592.141649][ T5950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1592.162680][ T5950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1592.196215][T16012] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1592.238646][T16809] loop3: detected capacity change from 0 to 1024 [ 1592.259032][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1595.436884][ T8351] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1595.451785][ T8351] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1595.460486][ T8351] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1595.470424][T11333] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1595.480731][T11333] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1595.488693][T11333] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1596.033580][T16841] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1597.059267][ T3728] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1597.204748][T16843] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2599'. [ 1597.694508][T11333] Bluetooth: hci2: command tx timeout [ 1597.813839][ T3728] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1598.054524][ T3728] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1598.725046][T10346] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1598.864956][ T3728] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1598.928467][T16836] chnl_net:caif_netlink_parms(): no params data found [ 1599.131761][T10346] usb 2-1: Using ep0 maxpacket: 32 [ 1599.238286][T16836] bridge0: port 1(bridge_slave_0) entered blocking state [ 1599.271144][T16836] bridge0: port 1(bridge_slave_0) entered disabled state [ 1599.289181][T16836] device bridge_slave_0 entered promiscuous mode [ 1599.312859][T10346] usb 2-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=44.fe [ 1599.329156][T10346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1599.424470][T16836] bridge0: port 2(bridge_slave_1) entered blocking state [ 1599.462025][T16877] usb usb8: usbfs: process 16877 (syz.0.2604) did not claim interface 5 before use [ 1599.518184][T16836] bridge0: port 2(bridge_slave_1) entered disabled state [ 1599.674628][T16836] device bridge_slave_1 entered promiscuous mode [ 1599.733455][ T3650] Bluetooth: hci2: command tx timeout [ 1600.836988][T10346] usb 2-1: config 0 descriptor?? [ 1601.332613][T10346] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected [ 1601.481892][T10346] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 84 [ 1601.490387][T10346] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 1601.498910][T10346] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 82 [ 1601.506971][T10346] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 1601.514972][T10346] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 1601.522884][T10346] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 1601.530659][T10346] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 1601.549499][T10346] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1601.575424][T16885] loop3: detected capacity change from 0 to 1024 [ 1601.607762][T10346] usb 2-1: USB disconnect, device number 65 [ 1601.808178][T10346] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1601.818441][T10346] keyspan 2-1:0.0: device disconnected [ 1601.831476][ T3650] Bluetooth: hci2: command tx timeout [ 1603.873203][T16836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1603.887417][ T3650] Bluetooth: hci2: command tx timeout [ 1604.024210][T16836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1604.196686][T16836] team0: Port device team_slave_0 added [ 1604.211210][T16836] team0: Port device team_slave_1 added [ 1604.397271][T16909] loop3: detected capacity change from 0 to 512 [ 1604.631504][T16909] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1605.344377][T16909] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.2610: inline data xattr refers to an external xattr inode [ 1605.417498][T16909] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.2610: couldn't read orphan inode 12 (err -117) [ 1605.478200][T16909] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1605.726338][T16836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1605.735725][T16836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1605.907083][T16924] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.2610: Directory hole found for htree leaf block 0 [ 1605.962217][ T3650] Bluetooth: hci2: command tx timeout [ 1606.841473][T16926] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.2610: Directory hole found for htree leaf block 0 [ 1607.024059][T11438] EXT4-fs (loop3): unmounting filesystem. [ 1607.377150][T16836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1607.954152][T16836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1607.999827][T16836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1608.160952][T16836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1608.731306][T16958] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2607'. [ 1608.779178][ T27] audit: type=1326 audit(1728970333.449:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16942 comm="syz.2.2617" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff87e17dff9 code=0x0 [ 1608.851927][ T3650] Bluetooth: hci0: command 0x0406 tx timeout [ 1608.952292][T16836] device hsr_slave_0 entered promiscuous mode [ 1608.971605][T16883] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1609.066334][T16836] device hsr_slave_1 entered promiscuous mode [ 1609.098990][T16836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1609.117046][T16836] Cannot create hsr debugfs directory [ 1609.189117][T16958] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1609.205283][T16958] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1609.271978][T16883] usb 2-1: Using ep0 maxpacket: 32 [ 1609.403968][T16883] usb 2-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=44.fe [ 1609.432774][T16883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1609.471692][T16883] usb 2-1: config 0 descriptor?? [ 1609.515227][T16883] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected [ 1609.687681][T16883] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 84 [ 1609.699037][T16883] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 1609.707075][T16883] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 82 [ 1609.717816][T16883] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 1609.741445][T16883] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 1609.749195][T16883] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 1609.806030][T16883] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 1610.214863][T16883] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1610.693031][T16976] xt_hashlimit: invalid rate [ 1611.612240][ T153] usb 2-1: USB disconnect, device number 66 [ 1611.666184][ T153] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1611.725211][ T153] keyspan 2-1:0.0: device disconnected [ 1612.871998][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 1617.097994][T17025] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 48668 - 0 [ 1617.111571][T17025] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 48668 - 0 [ 1617.141535][T17025] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 48668 - 0 [ 1617.150360][T17025] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 48668 - 0 [ 1617.202059][T17025] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 44885 - 0 [ 1617.211091][T17025] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 44885 - 0 [ 1617.227788][ T27] audit: type=1800 audit(1728970341.899:498): pid=17038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2631" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1617.281451][T17025] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 44885 - 0 [ 1617.290283][T17025] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 44885 - 0 [ 1617.307928][T17025] device geneve2 entered promiscuous mode [ 1617.371438][T16883] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1617.621399][T16883] usb 3-1: Using ep0 maxpacket: 16 [ 1617.641215][ T3728] device hsr_slave_0 left promiscuous mode [ 1617.659283][ T3728] device hsr_slave_1 left promiscuous mode [ 1617.669671][ T3728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1617.691454][ T3728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1617.722135][ T3728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1617.736103][ T3728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1617.743853][T16883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1617.755488][T16883] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1617.765858][T16883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1617.780731][ T3728] device bridge_slave_1 left promiscuous mode [ 1617.790966][T16883] usb 3-1: config 0 descriptor?? [ 1617.796200][ T3728] bridge0: port 2(bridge_slave_1) entered disabled state [ 1617.846469][ T3728] device bridge_slave_0 left promiscuous mode [ 1617.864424][ T3728] bridge0: port 1(bridge_slave_0) entered disabled state [ 1617.940883][ T3728] device veth1_macvtap left promiscuous mode [ 1617.955884][ T3728] device veth0_macvtap left promiscuous mode [ 1617.965552][ T3728] device veth1_vlan left promiscuous mode [ 1617.978123][T17046] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1617.990880][ T3728] device veth0_vlan left promiscuous mode [ 1618.021568][T17046] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1618.031973][ T8351] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1618.055579][ T8351] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1618.063484][ T8351] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1618.072392][ T8351] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1618.159371][ T27] audit: type=1326 audit(1728970342.829:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17044 comm="syz.1.2633" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14e357dff9 code=0x0 [ 1618.287712][T17022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1618.528041][T17022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1618.633092][T16883] hid (null): report_id 2838798905 is invalid [ 1618.649430][T16883] hid (null): unknown global tag 0xc [ 1618.655921][T16883] hid (null): unknown global tag 0xa5 [ 1618.672296][T16883] hid (null): unknown global tag 0xd [ 1618.677718][T16883] hid (null): unknown global tag 0xc [ 1618.834170][T16883] hid-generic 0003:0158:0100.0006: unknown main item tag 0x1 [ 1618.841946][T16883] hid-generic 0003:0158:0100.0006: unexpected long global item [ 1618.850535][T16883] hid-generic: probe of 0003:0158:0100.0006 failed with error -22 [ 1618.860740][T16883] usb 3-1: USB disconnect, device number 47 [ 1619.638062][ T8351] Bluetooth: hci5: command 0x0406 tx timeout [ 1619.777430][T17060] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 1619.784367][T17060] PKCS7: Only support pkcs7_signedData type [ 1620.298780][ T8351] Bluetooth: hci3: command tx timeout [ 1621.097404][ T3728] team0 (unregistering): Port device team_slave_1 removed [ 1621.658074][ T3728] team0 (unregistering): Port device team_slave_0 removed [ 1621.720535][ T3728] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1621.795218][ T3728] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1622.361731][ T3650] Bluetooth: hci3: command tx timeout [ 1623.814972][ T27] audit: type=1326 audit(1728970348.489:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17081 comm="syz.0.2642" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbdc877dff9 code=0x0 [ 1623.839152][ T3728] bond0 (unregistering): Released all slaves [ 1624.107743][T16836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1624.176139][T16836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1624.196823][T16836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1624.246695][T16836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1624.363154][ T27] audit: type=1326 audit(1728970349.039:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17085 comm="syz.1.2643" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14e357dff9 code=0x0 [ 1624.451515][ T3650] Bluetooth: hci3: command tx timeout [ 1626.521752][ T8351] Bluetooth: hci3: command tx timeout [ 1626.773655][T16836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1627.005363][T16806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1627.077770][T16806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1627.259751][T16836] 8021q: adding VLAN 0 to HW filter on device team0 [ 1627.307255][T17043] chnl_net:caif_netlink_parms(): no params data found [ 1627.533619][T16806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1627.543421][T16806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1627.578586][T16806] bridge0: port 1(bridge_slave_0) entered blocking state [ 1627.585753][T16806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1627.658096][T16806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1627.745568][T16806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1627.828668][T16806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1627.869341][T16806] bridge0: port 2(bridge_slave_1) entered blocking state [ 1627.876541][T16806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1628.962233][T16836] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1628.983157][T16836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1629.084471][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1629.094982][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1629.113303][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1629.170707][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1629.578161][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1629.771458][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1629.917664][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1629.926273][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1629.991906][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1630.000433][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1630.001169][T17138] netlink: 'syz.0.2651': attribute type 28 has an invalid length. [ 1630.357603][T16931] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1630.628313][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1630.680230][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1631.095831][T17138] device wlan0 entered promiscuous mode [ 1631.191383][ T27] audit: type=1326 audit(1728970355.859:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17151 comm="syz.2.2653" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff87e17dff9 code=0x0 [ 1631.238702][T17153] tipc: Started in network mode [ 1631.243709][T17153] tipc: Node identity ac1414aa, cluster identity 4711 [ 1631.252527][T17153] tipc: Enabled bearer , priority 10 [ 1631.670877][T16931] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.799037][T17043] bridge0: port 1(bridge_slave_0) entered blocking state [ 1631.806405][T17043] bridge0: port 1(bridge_slave_0) entered disabled state [ 1631.821046][T17043] device bridge_slave_0 entered promiscuous mode [ 1631.998071][T17043] bridge0: port 2(bridge_slave_1) entered blocking state [ 1632.012140][T17043] bridge0: port 2(bridge_slave_1) entered disabled state [ 1632.025171][T17043] device bridge_slave_1 entered promiscuous mode [ 1632.139568][T17176] tmpfs: Bad value for 'nr_blocks' [ 1632.746834][T16931] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1632.758054][ T4390] tipc: Node number set to 2886997162 [ 1632.869287][ T27] audit: type=1326 audit(1728970357.539:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17178 comm="syz.2.2657" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff87e17dff9 code=0x0 [ 1632.940613][T17043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1633.492133][T17043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1633.616139][T16931] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1633.728282][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1633.747545][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1633.795158][T16836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1633.895886][ T8351] Bluetooth: hci3: command tx timeout [ 1634.633141][T17043] team0: Port device team_slave_0 added [ 1634.692500][T17043] team0: Port device team_slave_1 added [ 1634.940061][T17043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1635.515106][T17211] random: crng reseeded on system resumption [ 1636.132881][T17043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1636.312138][T17043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1636.438162][T17043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1636.458289][T17043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1636.531207][T17043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1636.720189][T17043] device hsr_slave_0 entered promiscuous mode [ 1636.736128][T17043] device hsr_slave_1 entered promiscuous mode [ 1637.965964][ T27] audit: type=1326 audit(1728970362.539:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17234 comm="syz.2.2664" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff87e17dff9 code=0x0 [ 1640.100931][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1640.117512][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1640.410900][T17257] binder: 17250:17257 ioctl c0306201 200003c0 returned -14 [ 1641.459485][T16836] device veth0_vlan entered promiscuous mode [ 1642.686722][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1642.697331][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1642.717156][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1642.736619][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1642.887901][T16836] device veth1_vlan entered promiscuous mode [ 1643.027924][ T27] audit: type=1326 audit(1728970367.699:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17274 comm="syz.1.2671" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14e357dff9 code=0x0 [ 1643.636701][ T5950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1643.656215][ T5950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1644.990423][T16836] device veth0_macvtap entered promiscuous mode [ 1645.091667][ T8351] Bluetooth: hci1: command 0x0406 tx timeout [ 1645.440021][T16836] device veth1_macvtap entered promiscuous mode [ 1645.633228][T16931] bridge0: port 3(erspan0) entered disabled state [ 1645.671151][T16931] device erspan0 left promiscuous mode [ 1645.687094][T16931] bridge0: port 3(erspan0) entered disabled state [ 1645.721171][T16836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1645.723182][T17306] binder: 17305:17306 ioctl c0046209 0 returned -22 [ 1645.926876][T16836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1645.937019][T16836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1645.947718][T16836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1645.957707][T16836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1647.612131][T16836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1647.921434][T16836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1647.943488][T16836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1647.968479][T16836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1648.019863][T16836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1648.030850][T16836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.041093][T16836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1648.052126][T16836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.065224][T16836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1648.075982][T16836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.085876][T16836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1648.096606][T16836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.108121][T16836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1648.161837][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1648.767266][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1648.938971][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1649.033479][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1649.322527][T17329] syz.2.2681[17329] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1649.322969][T17329] syz.2.2681[17329] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1650.030692][T16836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.083289][T16836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.096646][T16836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.222559][T16836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.149078][T17320] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2682'. [ 1654.698075][ T8351] Bluetooth: hci1: command 0x0406 tx timeout [ 1655.203071][T17365] overlayfs: failed to clone lowerpath [ 1656.683877][ T8351] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1656.695361][ T8351] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1656.704470][ T8351] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1656.717691][ T8351] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1656.726612][ T8351] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1656.734316][ T8351] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1657.060843][T16931] device hsr_slave_0 left promiscuous mode [ 1657.070029][T16931] device hsr_slave_1 left promiscuous mode [ 1657.079698][T16931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1657.119404][T16931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1657.158498][T16931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1657.200227][T16931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1657.259442][T16931] device bridge_slave_1 left promiscuous mode [ 1657.299311][T16931] bridge0: port 2(bridge_slave_1) entered disabled state [ 1657.377035][T16931] device bridge_slave_0 left promiscuous mode [ 1657.405790][T16931] bridge0: port 1(bridge_slave_0) entered disabled state [ 1657.629436][T16931] device veth1_macvtap left promiscuous mode [ 1658.550909][T16931] device veth0_macvtap left promiscuous mode [ 1658.567647][T16931] device veth1_vlan left promiscuous mode [ 1658.591534][T16931] device veth0_vlan left promiscuous mode [ 1658.848354][ T3650] Bluetooth: hci2: command tx timeout [ 1660.933367][ T8351] Bluetooth: hci2: command tx timeout [ 1662.005411][T16931] team0 (unregistering): Port device team_slave_1 removed [ 1662.128833][T16931] team0 (unregistering): Port device team_slave_0 removed [ 1662.230969][T16931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1662.719848][T16931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1663.011637][ T8351] Bluetooth: hci2: command tx timeout [ 1664.292080][T16931] bond0 (unregistering): Released all slaves [ 1664.393498][T17447] Cannot find add_set index 0 as target [ 1664.837091][T17419] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2695'. [ 1664.856125][T17428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2698'. [ 1665.081599][ T8351] Bluetooth: hci2: command tx timeout [ 1665.110393][T17043] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1665.651097][T17043] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1665.675233][ T51] Bluetooth: Error in BCSP hdr checksum [ 1665.728603][T17043] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1665.753869][T17453] input: syz0 as /devices/virtual/input/input29 [ 1665.840865][T17453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2702'. [ 1665.865814][T17456] kAFS: unparsable volume name [ 1665.945009][T17043] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1666.123579][T17394] chnl_net:caif_netlink_parms(): no params data found [ 1666.157008][T17043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1666.171618][ T3680] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1666.266947][T16931] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.310897][T17043] 8021q: adding VLAN 0 to HW filter on device team0 [ 1666.458155][ T5917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1666.467333][ T5917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1666.477495][ T5917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1666.486318][ T5917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1666.495381][ T5917] bridge0: port 1(bridge_slave_0) entered blocking state [ 1666.502549][ T5917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1666.533474][T16931] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.553932][T17394] bridge0: port 1(bridge_slave_0) entered blocking state [ 1666.561278][T17394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1666.569999][T17394] device bridge_slave_0 entered promiscuous mode [ 1666.579236][T17394] bridge0: port 2(bridge_slave_1) entered blocking state [ 1666.586661][T17394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1666.595314][T17394] device bridge_slave_1 entered promiscuous mode [ 1666.621982][ T3680] usb 2-1: Using ep0 maxpacket: 8 [ 1666.636538][T17394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1666.646819][ T5917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1666.675651][T17394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1666.696972][ T5917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1666.706121][ T5917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1666.717022][ T5917] bridge0: port 2(bridge_slave_1) entered blocking state [ 1666.724183][ T5917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1666.735960][ T5917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1666.874807][T16931] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1667.202258][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1667.321756][ T8351] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1667.327206][ T3680] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1667.344007][ T3680] usb 2-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.00 [ 1667.353292][ T3680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1667.363219][ T3680] usb 2-1: config 0 descriptor?? [ 1667.376964][T17394] team0: Port device team_slave_0 added [ 1667.400400][T17394] team0: Port device team_slave_1 added [ 1667.414659][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1667.427326][ T3680] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1667.479878][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1667.488983][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1667.540569][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1667.561982][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1667.647918][T16931] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1667.725148][T17394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1667.751475][T17394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1667.777625][T17394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1667.793933][T17458] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2704'. [ 1667.804326][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1667.814320][ T3898] usb 2-1: USB disconnect, device number 67 [ 1667.823494][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1667.842127][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1667.859903][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1667.889131][T17478] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1667.992531][T17394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1668.125075][T17394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1668.373584][T17394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1668.554547][T17043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1668.602824][ T8351] ------------[ cut here ]------------ [ 1668.608780][ T8351] WARNING: CPU: 0 PID: 8351 at net/bluetooth/hci_conn.c:617 hci_conn_timeout+0xf8/0x1e0 [ 1668.618599][ T8351] Modules linked in: [ 1668.622584][ T8351] CPU: 0 PID: 8351 Comm: kworker/u5:0 Not tainted 6.1.112-syzkaller #0 [ 1668.630846][ T8351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1668.640959][ T8351] Workqueue: hci0 hci_conn_timeout [ 1668.646182][ T8351] RIP: 0010:hci_conn_timeout+0xf8/0x1e0 [ 1668.651876][ T8351] Code: 89 f7 e8 eb 3e 0a 00 eb 07 e8 a4 61 de f7 b0 13 0f b6 f0 4c 89 f7 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3d a3 ff ff e8 88 61 de f7 <0f> 0b eb 8f 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 38 ff ff ff 48 89 [ 1668.671583][ T8351] RSP: 0018:ffffc900021cfc28 EFLAGS: 00010293 [ 1668.677676][ T8351] RAX: ffffffff89ac4db8 RBX: ffff888075d34330 RCX: ffff88802c633b80 [ 1668.685726][ T8351] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 1668.693759][ T8351] RBP: 00000000ffffffff R08: ffffffff89ac4d21 R09: ffffed100eba6803 [ 1668.701792][ T8351] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 1668.709776][ T8351] R13: 1ffff11003a574c3 R14: ffff888075d34000 R15: ffffffff815ae9e9 [ 1668.717817][ T8351] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1668.726785][ T8351] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1668.733427][ T8351] CR2: 00007ff87e337a8c CR3: 00000000663ce000 CR4: 00000000003506f0 [ 1668.741459][ T8351] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1668.749438][ T8351] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1668.757540][ T8351] Call Trace: [ 1668.760825][ T8351] [ 1668.763809][ T8351] ? __warn+0x15a/0x520 [ 1668.767988][ T8351] ? hci_conn_timeout+0xf8/0x1e0 [ 1668.773004][ T8351] ? report_bug+0x2af/0x500 [ 1668.777589][ T8351] ? hci_conn_timeout+0xf8/0x1e0 [ 1668.782592][ T8351] ? handle_bug+0x3d/0x70 [ 1668.786931][ T8351] ? exc_invalid_op+0x16/0x40 [ 1668.791685][ T8351] ? asm_exc_invalid_op+0x16/0x20 [ 1668.796725][ T8351] ? process_one_work+0x7a9/0x11d0 [ 1668.801914][ T8351] ? hci_conn_timeout+0x61/0x1e0 [ 1668.806952][ T8351] ? hci_conn_timeout+0xf8/0x1e0 [ 1668.811953][ T8351] ? hci_conn_timeout+0xf8/0x1e0 [ 1668.816915][ T8351] ? hci_conn_timeout+0xf8/0x1e0 [ 1668.821926][ T8351] ? process_one_work+0x7a9/0x11d0 [ 1668.827064][ T8351] process_one_work+0x8a9/0x11d0 [ 1668.832096][ T8351] ? worker_detach_from_pool+0x260/0x260 [ 1668.837773][ T8351] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1668.843361][ T8351] ? kthread_data+0x4e/0xc0 [ 1668.847880][ T8351] ? wq_worker_running+0x97/0x190 [ 1668.852973][ T8351] worker_thread+0xa47/0x1200 [ 1668.857685][ T8351] ? release_firmware_map_entry+0x186/0x186 [ 1668.863672][ T8351] kthread+0x28d/0x320 [ 1668.867752][ T8351] ? worker_clr_flags+0x190/0x190 [ 1668.872842][ T8351] ? kthread_blkcg+0xd0/0xd0 [ 1668.877441][ T8351] ret_from_fork+0x1f/0x30 [ 1668.881926][ T8351] [ 1668.884969][ T8351] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1668.892258][ T8351] CPU: 0 PID: 8351 Comm: kworker/u5:0 Not tainted 6.1.112-syzkaller #0 [ 1668.900505][ T8351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1668.910548][ T8351] Workqueue: hci0 hci_conn_timeout [ 1668.915654][ T8351] Call Trace: [ 1668.918927][ T8351] [ 1668.921868][ T8351] dump_stack_lvl+0x1e3/0x2cb [ 1668.926562][ T8351] ? nf_tcp_handle_invalid+0x642/0x642 [ 1668.932014][ T8351] ? panic+0x764/0x764 [ 1668.936075][ T8351] ? 0xffffffffa00038c0 [ 1668.940222][ T8351] ? vscnprintf+0x59/0x80 [ 1668.944551][ T8351] panic+0x318/0x764 [ 1668.948448][ T8351] ? __warn+0x169/0x520 [ 1668.952593][ T8351] ? memcpy_page_flushcache+0xfc/0xfc [ 1668.957965][ T8351] ? ret_from_fork+0x1f/0x30 [ 1668.962553][ T8351] __warn+0x348/0x520 [ 1668.966528][ T8351] ? hci_conn_timeout+0xf8/0x1e0 [ 1668.971463][ T8351] report_bug+0x2af/0x500 [ 1668.975783][ T8351] ? hci_conn_timeout+0xf8/0x1e0 [ 1668.980716][ T8351] handle_bug+0x3d/0x70 [ 1668.984858][ T8351] exc_invalid_op+0x16/0x40 [ 1668.989350][ T8351] asm_exc_invalid_op+0x16/0x20 [ 1668.994198][ T8351] RIP: 0010:hci_conn_timeout+0xf8/0x1e0 [ 1668.999734][ T8351] Code: 89 f7 e8 eb 3e 0a 00 eb 07 e8 a4 61 de f7 b0 13 0f b6 f0 4c 89 f7 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3d a3 ff ff e8 88 61 de f7 <0f> 0b eb 8f 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 38 ff ff ff 48 89 [ 1669.019329][ T8351] RSP: 0018:ffffc900021cfc28 EFLAGS: 00010293 [ 1669.025389][ T8351] RAX: ffffffff89ac4db8 RBX: ffff888075d34330 RCX: ffff88802c633b80 [ 1669.033439][ T8351] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 1669.041424][ T8351] RBP: 00000000ffffffff R08: ffffffff89ac4d21 R09: ffffed100eba6803 [ 1669.049389][ T8351] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 1669.057347][ T8351] R13: 1ffff11003a574c3 R14: ffff888075d34000 R15: ffffffff815ae9e9 [ 1669.065308][ T8351] ? process_one_work+0x7a9/0x11d0 [ 1669.070418][ T8351] ? hci_conn_timeout+0x61/0x1e0 [ 1669.075342][ T8351] ? hci_conn_timeout+0xf8/0x1e0 [ 1669.080275][ T8351] ? hci_conn_timeout+0xf8/0x1e0 [ 1669.085207][ T8351] ? process_one_work+0x7a9/0x11d0 [ 1669.090308][ T8351] process_one_work+0x8a9/0x11d0 [ 1669.095249][ T8351] ? worker_detach_from_pool+0x260/0x260 [ 1669.100880][ T8351] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1669.106429][ T8351] ? kthread_data+0x4e/0xc0 [ 1669.110942][ T8351] ? wq_worker_running+0x97/0x190 [ 1669.115965][ T8351] worker_thread+0xa47/0x1200 [ 1669.120647][ T8351] ? release_firmware_map_entry+0x186/0x186 [ 1669.126551][ T8351] kthread+0x28d/0x320 [ 1669.130617][ T8351] ? worker_clr_flags+0x190/0x190 [ 1669.135633][ T8351] ? kthread_blkcg+0xd0/0xd0 [ 1669.140217][ T8351] ret_from_fork+0x1f/0x30 [ 1669.144639][ T8351] [ 1669.147877][ T8351] Kernel Offset: disabled [ 1669.152300][ T8351] Rebooting in 86400 seconds..